Dependency Bumps
- solo-io/skv2 has been upgraded to v0.15.2.
Helm Changes
- Update the version of Istio used by the Istio sidecar in the gateway-proxy pod for mTLS cert generation when the helm value global.istioSDS.enabled is set to true. New Istio version is 1.8.1. (#3967)
New Features
- Adding case sensitivity option on the path matcher. (#3976)
- Allows Jwt authentication to be compatible with other auth mechanisms in enterprise authentication. (#3207)
- Introduce an API to support a passthrough grpc ext auth service. This service authorizes requests by delegating to an external service which implements the envoy external auth API: https://github.com/envoyproxy/envoy/blob/ae1ed1fa74f096dabe8dd5b19fc70333621b0309/api/envoy/service/auth/v3/external_auth.proto#L29
This enables GlooE users to use custom external auth services in addition to GlooE out of the box features, without requiring users to write and maintain extauth go plugins (#3645)
Fixes
- Update
glooctl cluster registerandglooctl cluster deregistercommands to use the default Kubernetes config when registering and deregistering clusters. (#3972)