solo-io/gloo v1.5.0-beta14

on GitHub

Helm Changes

• Support a Kubernetes preStop hook to enable a "graceful shutdown" when relying on external loadbalancers. This will allow envoy to fail external facing healthchecks while still processing existing requests. This feature is controlled via a helm value, specifically the gatewayProxies.gatewayProxy.podTemplate.gracefulShutdown object. You can enable the hook via gatewayProxies.gatewayProxy.podTemplate.gracefulShutdown.enabled and control the actual time of the grace period via gatewayProxies.gatewayProxy.podTemplate.gracefulShutdownsleepTimeSeconds (#3308)
• Surface customPorts field in gatewayProxy to allow abritrary port mangement. (#3301)
• Add Extra ServiceAccount annotations to helm chart for Gloo, Discovery, and Proxy pods. (#2698)

New Features

• Gateway validation API (the API that backs the validating webhook) now handles lists of gateway resources. (#3261)
• The gateway validation API now handles yaml admission requests if sent with the application/x-yaml header. (#3256)
• Validation API now returns proxies in the webhook response. The proxy returned may be useful to perform diffs between proxies before and after proposed changes to gateway resources (virtual services, route tables, gateways). (#3257)

Fixes

• Support temporary AWS credentials for aws lambda discovery and invocation. AWS secrets now support a 3rd optional piece of data which is the AWS_SESSION_TOKEN. The credentials can also be supplied via the Default Credentials Provider. (#2373)
• Fix glooctl demo federation command for linux. (https://github.com/solo-io/gloo-fed/issues/239)
• Fix for panic when inspecting no-auth virtual services in glooctl check. (#3391)
• Correct validation webhook to respect readGatewaysFromAllNamespaces when examining gateway changes. (#3336)
• URL-encoded data can now be extracted verbatim by path and header extractors. (#3344)
• The gateway validation API now honors dry-run requests. Previously, any dry-run requests could still modify the internal resource cache, making future gateway validation results incorrect. (#3437)