We are delighted to present version v1.33.8 of Contour, our layer 7 HTTP reverse proxy for Kubernetes clusters.
- All Changes
- Installing/Upgrading
- Compatible Kubernetes Versions
All Changes
Security fix for GHSA-899w-6852-7fr3
Crash loop when an Ingress has a resource backend.
Security fix for GHSA-9x3c-68m7-f3x4
HTTPProxy JWKS settings can be replaced by another HTTPProxy that uses the same JWKS host.
Security fix for GHSA-g6qh-g3pq-5cpm
Included HTTPProxy can receive requests outside its prefix by using regex.
Other Changes
- Updates Envoy to v1.38.9. See the Envoy release notes for more information about the content of the release.
- Bumps Go to 1.26.10.
- Updated dependencies to fix CVEs.
Installing and Upgrading
For a fresh install of Contour, consult the getting started documentation.
To upgrade an existing Contour installation, please consult the upgrade documentation.
Compatible Kubernetes Versions
Contour v1.33.8 is tested against Kubernetes 1.35 through 1.37.
Are you a Contour user? We would love to know!
If you're using Contour and want to add your organization to our adopters list, please visit this page. If you prefer to keep your organization name anonymous but still give us feedback into your usage and scenarios for Contour, please post on this GitHub thread.