We are delighted to present version 1.16.0 of Contour, our layer 7 HTTP reverse proxy for Kubernetes clusters.
A big thank you to everyone who contributed to the release.
Major Changes
Gateway API
Added Initial Support for TLSRoute
PR #3627 added support for TLSRoute to enable Passthrough TCP Proxying to pods via SNI. See #3440 for additional information on TLSRoute feature requirements.
GatewayClass Support
PR #3659 added GatewayClass support through the gateway.controllerName configuration parameter. The gateway.namespace and gateway.name parameters are required when setting gateway.controllerName. When the cluster contains Gateway API CRDs and this parameter is set, Contour will reconcile GatewayClass resources with the spec.controller field that matches gateway.controllerName. ControllerName should take the form of projectcontour.io/<namespace>/contour, where <namespace> is the namespace that Contour runs in.
CA is No Longer Ignored when Downstream "Skip Verify" is True
With PR #3661, Contour will no longer ignore a certificate under the following conditions:
- If no CA is set and "skip verify" is true, client certs are not required by Envoy.
- If CA set and "skip verify" is true, client certs are required by Envoy.
- CA is still required if "skip verify" is false.
caCertis now optional since skipClientCertValidation can be true. PR #3658 added anomitemptyJSON tag to omit thecaCertfield when serializing to JSON and it hasn't been specified.
Website Update
PR #3704 revamps the Contour website based on Hugo. Check out the fresh new look and tell us what you think.
Deprecation & Removal Notices
- PR #3642 removed the
experimental-service-apisflag has been removed. The gateway.name & gateway.namespace in the Contour configuration file should be used for configuring Gateway API (formerly Service APIs). - PR #3645 removed support for Ingress v1beta1. Ingress v1 resources should be used with Contour.
Upgrading
Please consult the upgrade documentation.
Community Thanks!
We’re immensely grateful for all the community contributions that help make Contour even better! For this release, special thanks go out to the following contributors:
Are you a Contour user? We would love to know!
If you're using Contour and want to add your organization to our adopters list, please visit this page. If you prefer to keep your organization name anonymous but still give us feedback into your usage and scenarios for Contour, please post on this GitHub thread.