🎉 Welcome to the v2.3.0-beta.7 release of the kgateway project!
Release Notes
Changes since v2.3.0-beta.6
New Features
- Implement Gateway API BackendTLSPolicy core conformance semantics, including Gateway ancestor status reporting, ResolvedRefs conditions, and deterministic conflict handling. (#13801)
Bug Fixes
- Add support for Gateway backend client certificates via Gateway.spec.tls.backend.clientCertificateRef. (#13705)
- Fix a reconnect-time xDS race where Envoy could briefly receive routes and listeners before all referenced backend clusters were present, causing transient NC/500 responses during controller restart. (#13868)
- fix: PathPrefix now ignores trailing slash (#13893)
- SDS updates now retries reading a secret until tls.X509KeyPair() confirms the cert and private key match, and the fsnotify loop now debounces bursts of file events for 500ms before attempting a reload. (#13932)
- fix: PathPrefix path match now ignores trailing slash (#13938)
Contributors
Thanks to all the contributors who made this release possible:
Installation
The kgateway project is available as a Helm chart and docker images.
Helm Charts
The Helm charts are available at:
- cr.kgateway.dev/kgateway-dev/charts/kgateway.
Docker Images
The docker images are available at:
- cr.kgateway.dev/kgateway-dev/kgateway:v2.3.0-beta.7
- cr.kgateway.dev/kgateway-dev/sds:v2.3.0-beta.7
- cr.kgateway.dev/kgateway-dev/envoy-wrapper:v2.3.0-beta.7
Quickstart
Try installing this release:
helm install kgateway-crds oci://cr.kgateway.dev/kgateway-dev/charts/kgateway-crds --version v2.3.0-beta.7 --namespace kgateway-system --create-namespace
helm install kgateway oci://cr.kgateway.dev/kgateway-dev/charts/kgateway --version v2.3.0-beta.7 --namespace kgateway-system --create-namespace
For detailed installation instructions and next steps, please visit our quickstart guide.