🎉 Welcome to the v2.3.2 release of the kgateway project!
Release Notes
Changes since v2.3.1
New Features
- Added stripHostPortMode to ListenerPolicy HTTPSettings, providing the option to strip ports
from Host/authority headers before forwarding to upstream backends.
(#14116)
Bug Fixes
- Fixed HTTPRoute RequestRedirect handling so redirect Location headers no longer include default ports (:80 for HTTP, :443 for HTTPS). (#14098)
- Fix global rate limit descriptor translation: multiple descriptors now correctly produce separate Envoy RateLimit actions instead of being merged into a single combined action. (#14160)
Dependency Updates
- upgraded envoy to 1.37.3 fixes CVE-2026-47774 ((#14168)
Contributors
Thanks to all the contributors who made this release possible:
Installation
The kgateway project is available as a Helm chart and docker images.
Helm Charts
The Helm charts are available at:
- cr.kgateway.dev/kgateway-dev/charts/kgateway.
Docker Images
The docker images are available at:
- cr.kgateway.dev/kgateway-dev/kgateway:v2.3.2
- cr.kgateway.dev/kgateway-dev/sds:v2.3.2
- cr.kgateway.dev/kgateway-dev/envoy-wrapper:v2.3.2
Quickstart
Try installing this release:
helm install kgateway-crds oci://cr.kgateway.dev/kgateway-dev/charts/kgateway-crds --version v2.3.2 --namespace kgateway-system --create-namespace
helm install kgateway oci://cr.kgateway.dev/kgateway-dev/charts/kgateway --version v2.3.2 --namespace kgateway-system --create-namespace
For detailed installation instructions and next steps, please visit our quickstart guide.