Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.25.9-patch1.
- solo-io/k8s-utils has been upgraded to v0.3.2.
Fixes
- Pulls in upstream Envoy v1.25.9-patch1, which resolves CVE-2023-35941, CVE-2023-35942, CVE-2023-35944, and CVE-2023-35945 (https://github.com/solo-io/solo-projects/issues/5138)
- Fix typo in helm template when rendering multiple Gateways. (#8404)
- Add an environment variable "HEADER_SECRET_REF_NS_MATCHES_US" that when set in the gloo pod requires that secrets sent in headers to an upstream are in the same namespace as that upstream. This defaults to false and when it is not set, resources can be in any namespaces watched by Gloo. (https://github.com/solo-io/solo-projects/issues/5007)