Dependency Bumps
- envoyproxy/envoy has been upgraded to v1.16-rc2.
- solo-io/skv2 has been upgraded to v0.8.1.
New Features
- Added improvements to the user experience for using gloo with Istio. Added helper commands for glooctl, so that users can simply perform
glooctl istio injectandglooctl istio enable-mtls --upstream fooin order to have Gloo and Istio up and running and communicating together over mTLS. (#3532) - Allow secrets to be added to request headers by referencing a k8s secret resource via its namespace and name. (#2751)
- Change the
glooctl cluster unregistercommand toglooctl cluster deregister. The deregister command now deletes the service account, cluster role, and cluster role binding created on the remote cluster during the cluster registration process. Example usage isglooctl cluster deregister --cluster-name kind-remote --remote-context kind-remote. (#3369)
Fixes
- Virtual Services with overlapping SNI domains in the same gateway are invalid. This change fixes our matching rules to consider cases where the sni domain is unset, and not allow multiple configs with an unset sni domain. (#3459)
- Fix the default clustername in sds to match the name given in the docs. (#3573)
- Expose Envoy's cluster configuration
common_http_protocol_optionsparameters in the Gloo API. (#3560)