kgateway-dev/kgateway v2.5.1

on GitHub

🎉 Welcome to the v2.5.1 release of the kgateway project!

Release Notes

Changes since v2.5.0

Bug Fixes

• Fixed proxy pods logging an envoy_bug error on startup about the removed runtime guard envoy.restart_features.use_eds_cache_for_ads, and moved the Istio SDS cluster off the deprecated http2_protocol_options field. (#14971)

• Fixed proxy pods logging an envoy_bug error on startup about the removed runtime guard envoy.restart_features.use_eds_cache_for_ads, and moved the Istio SDS cluster off the deprecated http2_protocol_options field. (#14972)

• Gateway proxies now pick up a rotated xDS CA certificate without restarting. (#14986)

• Gateway proxies now pick up a rotated xDS CA certificate without restarting. (#14989)

• Proxy pods now restart automatically when their Envoy bootstrap config changes (for example, from a GatewayParameters update). (#14991)

• CRD integer fields now have explicit minimum and maximum bounds, so out-of-range values are rejected at admission instead of breaking the controller's watch.

  Fields passed to Envoy now reject values that Envoy refuses. Newly rejected values:

  • BackendConfigPolicy: connectTimeout, healthCheck.timeout or healthCheck.interval of 0s; dns.refreshRate of 1ms or less; maxHeadersCount 0; leastRequest.choiceCount below 2; ring hash sizes outside 1 to 8388608, or a minimum above the maximum.
  • Backend: static host port 0 or above 65535; aws.ec2.port above 65535.
  • ListenerPolicy: local reply statusCode below 200; gRPC retry baseInterval of 0s.
  • GatewayExtension: an extAuth.statusOnError code that Envoy does not define (for example 418); extProc message timeouts above 1h.

  Existing objects with these values are kept, but cannot be created again.
  (#14992)

Contributors

Thanks to all the contributors who made this release possible:

Installation

The kgateway project is available as a Helm chart and docker images.

Helm Charts

The Helm charts are available at:

• oci://cr.kgateway.dev/kgateway-dev/charts/kgateway
• oci://cr.kgateway.dev/kgateway-dev/charts/kgateway-crds

Docker Images

The docker images are available at:

• cr.kgateway.dev/kgateway-dev/kgateway:v2.5.1
• cr.kgateway.dev/kgateway-dev/sds:v2.5.1
• cr.kgateway.dev/kgateway-dev/envoy-wrapper:v2.5.1

Quickstart

Try installing this release:

helm install kgateway-crds oci://cr.kgateway.dev/kgateway-dev/charts/kgateway-crds --version v2.5.1 --namespace kgateway-system --create-namespace
helm install kgateway oci://cr.kgateway.dev/kgateway-dev/charts/kgateway --version v2.5.1 --namespace kgateway-system --create-namespace

For detailed installation instructions and next steps, please visit our quickstart guide.