v1.1.2

What's Changed

• [release/v1.1] Cherry-Pick #4279, #4296, #4230 by @guydc in #4315
• [release/v1.1] Bump EnvoyProxy to v1.32.2 by @arkodg in #4294
• [release/v1.1] Release v1.1.2 by @guydc in #4323

Full Changelog: v1.1.1...v1.1.2

v1.1.1

Release Announcement

Check out the v1.1.1 release notes to learn more about the release.

What's Changed

• [release/v1.1] fix: change the wasm download URL to point to the envoy examples repo… by @arkodg in #4151
• [release/v1.1] Pin ratelimit image to 26f28d78 by @arkodg in #4088
• [release/v1.1] Cherry-pick commits for v1.1.1 by @arkodg in #4173
• [release-1.1] fix: allow empty slowStart when using LeastRequest by @zirain in #4211
• [release/v1.1] fix: reject invalid backends in route validation (#4209) by @guydc in #4212
• [release/v1.1] cherry pick #4219 by @guydc in #4220
• [release/v1.1] release: v1.1.1 by @guydc in #4221

Full Changelog: v1.1.0...v1.1.1

v1.1.0

Release Announcement

Check out the v1.1 release announcement to learn more about the release.

What's Changed

• ci: update cherry-pick v1.0.0 by @Xunzhuo in #2784
• fix: add missing release notes details and re organize it by @Xunzhuo in #2785
• e2e: backend upgrade test by @guydc in #2725
• chore: add testdata to passive health checks by @deszhou in #2788
• promote: guydc as maintainer by @Xunzhuo in #2794
• fix: Delete unused status keys from watchable by @uniglot in #2782
• docs: fix commands in basic auth example by @arkodg in #2791
• feat: Support WellKnownSystemCerts in BackendTLSPolicy by @liorokman in #2804
• docs: refactor user guides by @Xunzhuo in #2797
• Fix gen check by @Xunzhuo in #2814
• refactor: set instead of map for mergeGateways by @deszhou in #2803
• remove: support for hostnetwork by @Xunzhuo in #2815
• feat(egctl): add support for egctl to translate from gateway-api resources to IR by @liorokman in #2799
• docs: basic auth example use https by @phantooom in #2806
• chore: group go.opentelemetry.io dependabot by @zirain in #2821
• Add referenced BackendRefs for ExtAuth to Resource Tree by @zhaohuabing in #2795
• fix bootstrap merge by @zirain in #2801
• fix: skip the ReasonTargetNotFound for all policies by @shawnh2 in #2802
• docs: update EnvoyProxy logs by @zirain in #2822
• fix: omit default replicas on Kubernetes Deployment by @ardikabs in #2816
• bug: compute endpointType for all protocol types by @arkodg in #2833
• docs: Routing outside k8s by @arkodg in #2831
• build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0 by @dependabot in #2825
• build(deps): bump golang.org/x/net from 0.21.0 to 0.22.0 by @dependabot in #2826
• build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in #2827
• Fix: failed to create envoy-oidc-hmac secret when upgrading EG by @zhaohuabing in #2835
• build(deps): bump google.golang.org/grpc from 1.62.0 to 1.62.1 by @dependabot in #2829
• Ext auth e2e tests by @zhaohuabing in #2830
• fix existing secret check by @zirain in #2838
• ci: update k8s matrix by @zirain in #2836
• e2e: try to fix client timeout flakes by @zirain in #2812
• feat: Support Upstream TLS to multiple Backends by @liorokman in #2818
• e2e: move drain settings into shutdown settings by @arkodg in #2850
• docs: mtls to the gateway by @arkodg in #2851
• ignore finalizers when comparing envoy proxy svc by @arkodg in #2856
• Chore: remove the uncessary allAssociatedRefGrants from resourceMappings by @zhaohuabing in #2843
• docs: allow users to configure custom certs for control plane auth by @zirain in #2847
• add e2e tests for ext auth with grpc auth service by @zhaohuabing in #2841
• fix: Address race condition disrupting graceful shutdown process by @davidalger in #2864
• docs: move Design docs under "Get Involved" by @arkodg in #2857
• e2e: backend TLS policy by @guydc in #2853
• Update the user doc for OIDC by @zhaohuabing in #2778
• add ADOPTERS.md by @zhaohuabing in #2865
• build(deps): bump softprops/action-gh-release from 1 to 2 by @dependabot in #2867
• build(deps): bump github.com/bufbuild/buf from 1.29.0 to 1.30.0 in /tools/src/buf by @dependabot in #2870
• build(deps): bump github.com/prometheus/common from 0.49.0 to 0.50.0 by @dependabot in #2871
• build(deps): bump fortio.org/fortio from 1.63.3 to 1.63.4 by @dependabot in #2873
• Add tetrate to adopters by @zhaohuabing in #2874
• fix: Don't override the ALPN array if HTTP/3 is enabled. by @liorokman in #2876
• [e2e] eg release upgrade test by @alexwo in #2862
• Docs for ext auth by @zhaohuabing in #2868
• Remove the uncessary \ by @zhaohuabing in #2883
• docs: backend tls policy by @guydc in #2884
• feat: add PolicyStatus for BackendTrafficPolicy by @shawnh2 in #2846
• Change the Merge behavior to Replace for SecurityPolicy by @zhaohuabing in #2885
• e2e: add weighted backend by @ShyunnY in #2863
• http3: use service port in alt-svc header by @arkodg in #2886
• bug: add h3 alpn by default if http3 is enabled by @arkodg in #2887
• fix: prevent policies targeting non-TLS listeners on the same port from conflicting by @liorokman in #2786
• chore: remove ProcessBackendTLSPoliciesAncestorRef by @zhaohuabing in #2845
• Change the Merge behavior to Replace for BackendTrafficPolicy by @zhaohuabing in #2888
• shutdown drainTimeout should also affect envoy drain time by @arkodg in #2898
• skip publishing empty status for policies by @arkodg in #2902
• docs: multiple gatewayclass and merge gateways deployment mode by @cnvergence in #2881
• feat: add PolicyStatus for ClientTrafficPolicy by @shawnh2 in #2895
• Use gwapiv1a2.PolicyStatus for SecurityPolicy Status by @zhaohuabing in #2848
• Fix oidc doc by @zhaohuabing in #2905
• Release v1.0 by @Xunzhuo in #2909
• fix: deployment-mode doc markdown links by @cnvergence in #2912
• fix: QUIC listeners should only advertise HTTP/3 over ALPN, and not HTTP/2 and HTTP/1.1 by @liorokman in #2907
• e2e: graceful envoy shutdown by @guydc in #2839
• feat: add PolicyStatus for EnvoyPatchPolicy by @shawnh2 in #2910
• chore: improve docs-serve by @zirain in #2920
• api: increase rate-limit global rules limit by @ShyunnY in #2906
• docs: add Envoy Gateway threat model by @edurra in #2915
• Remove duplicated http filters for ExtAuth by @zhaohuabing in #2893
• feat: expose prom port in rl svc by @ShyunnY in #2914
• blog post for v1.0 by @arkodg in #2923
• rm extra "that" from blog by @arkodg in #2928
• docs: %s/Application/API/g by @arkodg in #2929
• Pin version to v1.0.0 in 1.0.0 docs by @zhaohuabing in #2933
• Run certgen when upgrading by @zhaohuabing in #2934
• chore: use v1.0.0 as default for upgrade test by @guydc in #2938
• api: connection limits by @guydc in #2709
• docs: fix name spelling in threat model by @mrcdb in #2936
• api: support failOpen in ext auth by @deszhou in #2908
• API: EnvoyExtensionPolicy by @guydc in #2570
• chore: add helm template test by @zirain in #2935
• fix: install-egctl doc dead link by @deszhou in #2916
• chore: fix helm-template by @zirain in #2943
• e2e: use default shut...

v1.1.0-rc.1

What's Changed

• ci: update cherry-pick v1.0.0 by @Xunzhuo in #2784
• fix: add missing release notes details and re organize it by @Xunzhuo in #2785
• e2e: backend upgrade test by @guydc in #2725
• chore: add testdata to passive health checks by @deszhou in #2788
• promote: guydc as maintainer by @Xunzhuo in #2794
• fix: Delete unused status keys from watchable by @uniglot in #2782
• docs: fix commands in basic auth example by @arkodg in #2791
• feat: Support WellKnownSystemCerts in BackendTLSPolicy by @liorokman in #2804
• docs: refactor user guides by @Xunzhuo in #2797
• Fix gen check by @Xunzhuo in #2814
• refactor: set instead of map for mergeGateways by @deszhou in #2803
• remove: support for hostnetwork by @Xunzhuo in #2815
• feat(egctl): add support for egctl to translate from gateway-api resources to IR by @liorokman in #2799
• docs: basic auth example use https by @phantooom in #2806
• chore: group go.opentelemetry.io dependabot by @zirain in #2821
• Add referenced BackendRefs for ExtAuth to Resource Tree by @zhaohuabing in #2795
• fix bootstrap merge by @zirain in #2801
• fix: skip the ReasonTargetNotFound for all policies by @shawnh2 in #2802
• docs: update EnvoyProxy logs by @zirain in #2822
• fix: omit default replicas on Kubernetes Deployment by @ardikabs in #2816
• bug: compute endpointType for all protocol types by @arkodg in #2833
• docs: Routing outside k8s by @arkodg in #2831
• build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0 by @dependabot in #2825
• build(deps): bump golang.org/x/net from 0.21.0 to 0.22.0 by @dependabot in #2826
• build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in #2827
• Fix: failed to create envoy-oidc-hmac secret when upgrading EG by @zhaohuabing in #2835
• build(deps): bump google.golang.org/grpc from 1.62.0 to 1.62.1 by @dependabot in #2829
• Ext auth e2e tests by @zhaohuabing in #2830
• fix existing secret check by @zirain in #2838
• ci: update k8s matrix by @zirain in #2836
• e2e: try to fix client timeout flakes by @zirain in #2812
• feat: Support Upstream TLS to multiple Backends by @liorokman in #2818
• e2e: move drain settings into shutdown settings by @arkodg in #2850
• docs: mtls to the gateway by @arkodg in #2851
• ignore finalizers when comparing envoy proxy svc by @arkodg in #2856
• Chore: remove the uncessary allAssociatedRefGrants from resourceMappings by @zhaohuabing in #2843
• docs: allow users to configure custom certs for control plane auth by @zirain in #2847
• add e2e tests for ext auth with grpc auth service by @zhaohuabing in #2841
• fix: Address race condition disrupting graceful shutdown process by @davidalger in #2864
• docs: move Design docs under "Get Involved" by @arkodg in #2857
• e2e: backend TLS policy by @guydc in #2853
• Update the user doc for OIDC by @zhaohuabing in #2778
• add ADOPTERS.md by @zhaohuabing in #2865
• build(deps): bump softprops/action-gh-release from 1 to 2 by @dependabot in #2867
• build(deps): bump github.com/bufbuild/buf from 1.29.0 to 1.30.0 in /tools/src/buf by @dependabot in #2870
• build(deps): bump github.com/prometheus/common from 0.49.0 to 0.50.0 by @dependabot in #2871
• build(deps): bump fortio.org/fortio from 1.63.3 to 1.63.4 by @dependabot in #2873
• Add tetrate to adopters by @zhaohuabing in #2874
• fix: Don't override the ALPN array if HTTP/3 is enabled. by @liorokman in #2876
• [e2e] eg release upgrade test by @alexwo in #2862
• Docs for ext auth by @zhaohuabing in #2868
• Remove the uncessary \ by @zhaohuabing in #2883
• docs: backend tls policy by @guydc in #2884
• feat: add PolicyStatus for BackendTrafficPolicy by @shawnh2 in #2846
• Change the Merge behavior to Replace for SecurityPolicy by @zhaohuabing in #2885
• e2e: add weighted backend by @ShyunnY in #2863
• http3: use service port in alt-svc header by @arkodg in #2886
• bug: add h3 alpn by default if http3 is enabled by @arkodg in #2887
• fix: prevent policies targeting non-TLS listeners on the same port from conflicting by @liorokman in #2786
• chore: remove ProcessBackendTLSPoliciesAncestorRef by @zhaohuabing in #2845
• Change the Merge behavior to Replace for BackendTrafficPolicy by @zhaohuabing in #2888
• shutdown drainTimeout should also affect envoy drain time by @arkodg in #2898
• skip publishing empty status for policies by @arkodg in #2902
• docs: multiple gatewayclass and merge gateways deployment mode by @cnvergence in #2881
• feat: add PolicyStatus for ClientTrafficPolicy by @shawnh2 in #2895
• Use gwapiv1a2.PolicyStatus for SecurityPolicy Status by @zhaohuabing in #2848
• Fix oidc doc by @zhaohuabing in #2905
• Release v1.0 by @Xunzhuo in #2909
• fix: deployment-mode doc markdown links by @cnvergence in #2912
• fix: QUIC listeners should only advertise HTTP/3 over ALPN, and not HTTP/2 and HTTP/1.1 by @liorokman in #2907
• e2e: graceful envoy shutdown by @guydc in #2839
• feat: add PolicyStatus for EnvoyPatchPolicy by @shawnh2 in #2910
• chore: improve docs-serve by @zirain in #2920
• api: increase rate-limit global rules limit by @ShyunnY in #2906
• docs: add Envoy Gateway threat model by @edurra in #2915
• Remove duplicated http filters for ExtAuth by @zhaohuabing in #2893
• feat: expose prom port in rl svc by @ShyunnY in #2914
• blog post for v1.0 by @arkodg in #2923
• rm extra "that" from blog by @arkodg in #2928
• docs: %s/Application/API/g by @arkodg in #2929
• Pin version to v1.0.0 in 1.0.0 docs by @zhaohuabing in #2933
• Run certgen when upgrading by @zhaohuabing in #2934
• chore: use v1.0.0 as default for upgrade test by @guydc in #2938
• api: connection limits by @guydc in #2709
• docs: fix name spelling in threat model by @mrcdb in #2936
• api: support failOpen in ext auth by @deszhou in #2908
• API: EnvoyExtensionPolicy by @guydc in #2570
• chore: add helm template test by @zirain in #2935
• fix: install-egctl doc dead link by @deszhou in #2916
• chore: fix helm-template by @zirain in #2943
• e2e: use default shutdown mgr settings in upgrade test suite by @guydc in #2946
• refactor: collapse eg-metrics-svc into eg-svc by @...

v1.0.2

Date: June 12, 2024

Installation

• Updated EnvoyProxy to 1.29.5
• Use Patch API for infra-client
• Use ServerSideApply instead of CreateOrUpdate for infra-client

Testing

• Fixed failures due to an expired certificate in one of the translator tests

Translator

• Use - for naming service and container ports
• Added proxy protocol always as first listenerFilter
• Set ignoreCase for header matchers in extAuth
• Added backend TLS SAN validation
• Fixed ReplaceFullPath not working for root path (/)

Providers

• Fixed duplicated xroutes are added to gatewayapi Resources
• Fixed security policy reference grant from field type
• Fixed Route extension filters with different types but the same name and namespace aren't correctly cached
• Fixed secrets/configmap updates to trigger a controller reconcile by removing the generationChanged predicate
• Removed namespace restriction for EnvoyProxy parametersRef

v1.0.1

Release Announcement

Check out the v1.0.1 release note to learn more about this patch release 🎉

v1.0.0

Release Announcement

Check out the v1.0 release announcement to learn more about the GA release 🎉

What's Changed

• Fix TestE2E/RateLimitBasedJwtClaims test by @zhaohuabing in #2097
• add a newer PR reference in rc release docs by @arkodg in #2101
• fix: panic when using nil xdsRouteAction by @Xunzhuo in #2104
• remove cors, jwt, rl assignment from route translator by @arkodg in #2105
• fix: use lowercases of eg admin config fields by @Xunzhuo in #2107
• fix: testGatewayClassWithParamRef e2e test flaky by @Xunzhuo in #2114
• build(deps): bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 by @dependabot in #2118
• build(deps): bump github.com/bufbuild/buf from 1.27.1 to 1.27.2 in /tools/src/buf by @dependabot in #2121
• build(deps): bump github.com/go-logr/logr from 1.2.4 to 1.3.0 by @dependabot in #2117
• build(deps): bump envoyproxy/toolshed from actions-v0.0.25 to 0.1.2 by @dependabot in #2116
• build(deps): bump actions/setup-node from 3 to 4 by @dependabot in #2115
• chore: add more EnvoyProxy cases by @zirain in #2120
• build(deps): bump github.com/golangci/golangci-lint from 1.55.0 to 1.55.1 in /tools/src/golangci-lint by @dependabot in #2119
• feat: CEL Validation in BackendTrafficPolicy by @slayer321 in #2110
• e2e: eg controlplane metrics by @zirain in #2106
• chore: fix http2_protocol_options warning message by @tmsnan in #2048
• fix Failed to update SecurityPolicy status by @zhaohuabing in #2128
• fix: add missing status equal for SecurityPolicy by @Xunzhuo in #2134
• fix jwt doc by @zhaohuabing in #2135
• Bump Gateway API to v1.0.0 by @arkodg in #2142
• Enable HTTPRouteRewritePath test by @arkodg in #2112
• helm: remove kube-rbac-proxy and update metrics service by @Xunzhuo in #2108
• doc: user doc for CORS by @zhaohuabing in #2137
• fix(ci): bump go version to 1.21 by @Xunzhuo in #2144
• conformance: Enable HTTPRouteBackendProtocolH2C conformance test by @zirain in #2136
• Fix attachedRoutes computation by @arkodg in #2085
• fix comments in loadbalancer api by @tmsnan in #2145
• fix(docs): incorrect quickstart links by @Xunzhuo in #2146
• fix: null pointer when CORS maxAge is not specified by @zhaohuabing in #2133
• Prep v0.6 release by @arkodg in #2152
• fix: matrix link in release note by @Xunzhuo in #2157
• docs: move announcements on top by @Xunzhuo in #2158
• chore: refactor string match by @zhaohuabing in #2102
• build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 by @dependabot in #2161
• build(deps): bump github.com/go-logr/zapr from 1.2.4 to 1.3.0 by @dependabot in #2162
• docs: fix invalid title in cors by @shawnh2 in #2173
• test: add e2e test for CORS by @ardikabs in #2169
• docs: fix typo in bootstrap example by @akhenakh in #2171
• build(deps): bump github.com/golangci/golangci-lint from 1.55.1 to 1.55.2 in /tools/src/golangci-lint by @dependabot in #2164
• build(deps): bump envoyproxy/toolshed from actions-v0.1.2 to 0.1.15 by @dependabot in #2163
• opt: move gateway namespace mode to common helper by @Xunzhuo in #2129
• build(deps): bump github.com/bufbuild/buf from 1.27.2 to 1.28.0 in /tools/src/buf by @dependabot in #2184
• build(deps): bump yamllint from 1.32.0 to 1.33.0 in /tools/src/yamllint by @dependabot in #2183
• build(deps): bump envoyproxy/toolshed from actions-v0.1.15 to 0.1.39 by @dependabot in #2182
• build(deps): bump go.opentelemetry.io/otel/metric from 1.19.0 to 1.20.0 by @dependabot in #2181
• build(deps): bump go.opentelemetry.io/otel from 1.19.0 to 1.20.0 by @dependabot in #2179
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from 0.42.0 to 0.43.0 by @dependabot in #2177
• build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.42.0 to 0.43.0 by @dependabot in #2180
• feat: add CEL validation for EnvoyProxy telemetry by @shawnh2 in #2050
• docs: http to https redirect user guide by @ionutvilie in #2167
• feat: OIDC Gateway API by @zhaohuabing in #2122
• Default ctrl plane cert expiry time to 5 years by @arkodg in #2175
• Fix weighted route by @zhaohuabing in #2187
• Add E2E Tests for UDPRoute by @cnvergence in #2140
• api: add proxyProtocol in BackendTrafficPolicy by @arkodg in #2189
• doc: small patch cert-manager doc better experience by @tanujd11 in #2197
• docs: update gatewayapi resources version and fix dead link by @shawnh2 in #2190
• api: tcpKeepAlive in BackendTrafficPolicy by @arkodg in #2194
• e2e: tests for TCPRoute by @slayer321 in #2109
• api: enableProxyProtocol in ClientTrafficPolicy by @arkodg in #2188
• OIDC xds translation by @zhaohuabing in #2191
• feat: basic auth API by @zhaohuabing in #2199
• fix: xds translation return early, should be done in a best-effort manner by @zhaohuabing in #2202
• chore: update egctl install cmd by @Xunzhuo in #2218
• build(deps): bump the k8s-io group with 3 updates by @dependabot in #2212
• build(deps): bump github.com/bufbuild/buf from 1.28.0 to 1.28.1 in /tools/src/buf by @dependabot in #2217
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 0.42.0 to 0.44.0 by @dependabot in #2216
• build(deps): bump envoyproxy/toolshed from actions-v0.1.39 to 0.1.54 by @dependabot in #2211
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from 0.43.0 to 0.44.0 by @dependabot in #2214
• build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.43.0 to 0.44.0 by @dependabot in #2213
• feat: proxy protocol in ClientTrafficPolicy by @arkodg in #2203
• fix: trim hyphen suffix in resource name by @cnvergence in #2222
• refactor: simplify filter patching with an unified interface by @zhaohuabing in #2210
• feat: add support to extract from different identifier on JWT by @ardikabs in #2206
• feat: proxyProtocol in BackendTrafficPolicy by @arkodg in #2192
• feat:support slow start mode by @tmsnan in #2219
• docs: fix broken format on JWT by @ardikabs in #2240
• docs: update version matrix by @Xunzhuo in #2237
• build(deps): bump github.com/miekg/dns from 1.1.46 to 1.1.57 by @dependabot in #2243
• build(deps): bump envoyproxy/toolshed from actions-v0.1.54 to 0.1.65 by @dependabot in #2242
• chore: add helm lint by @misstick86 in #2174
• feat: basic auth impl by @zhaohuabing in #2224
• update k8s version in compatibility matrix by @arkodg in #2245
• user docs for basic auth by @zhaohuabing in https://github.com/envoyproxy/gate...

v1.0.0-rc.1

What's Changed

• Fix TestE2E/RateLimitBasedJwtClaims test by @zhaohuabing in #2097
• add a newer PR reference in rc release docs by @arkodg in #2101
• fix: panic when using nil xdsRouteAction by @Xunzhuo in #2104
• remove cors, jwt, rl assignment from route translator by @arkodg in #2105
• fix: use lowercases of eg admin config fields by @Xunzhuo in #2107
• fix: testGatewayClassWithParamRef e2e test flaky by @Xunzhuo in #2114
• build(deps): bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 by @dependabot in #2118
• build(deps): bump github.com/bufbuild/buf from 1.27.1 to 1.27.2 in /tools/src/buf by @dependabot in #2121
• build(deps): bump github.com/go-logr/logr from 1.2.4 to 1.3.0 by @dependabot in #2117
• build(deps): bump envoyproxy/toolshed from actions-v0.0.25 to 0.1.2 by @dependabot in #2116
• build(deps): bump actions/setup-node from 3 to 4 by @dependabot in #2115
• chore: add more EnvoyProxy cases by @zirain in #2120
• build(deps): bump github.com/golangci/golangci-lint from 1.55.0 to 1.55.1 in /tools/src/golangci-lint by @dependabot in #2119
• feat: CEL Validation in BackendTrafficPolicy by @slayer321 in #2110
• e2e: eg controlplane metrics by @zirain in #2106
• chore: fix http2_protocol_options warning message by @tmsnan in #2048
• fix Failed to update SecurityPolicy status by @zhaohuabing in #2128
• fix: add missing status equal for SecurityPolicy by @Xunzhuo in #2134
• fix jwt doc by @zhaohuabing in #2135
• Bump Gateway API to v1.0.0 by @arkodg in #2142
• Enable HTTPRouteRewritePath test by @arkodg in #2112
• helm: remove kube-rbac-proxy and update metrics service by @Xunzhuo in #2108
• doc: user doc for CORS by @zhaohuabing in #2137
• fix(ci): bump go version to 1.21 by @Xunzhuo in #2144
• conformance: Enable HTTPRouteBackendProtocolH2C conformance test by @zirain in #2136
• Fix attachedRoutes computation by @arkodg in #2085
• fix comments in loadbalancer api by @tmsnan in #2145
• fix(docs): incorrect quickstart links by @Xunzhuo in #2146
• fix: null pointer when CORS maxAge is not specified by @zhaohuabing in #2133
• Prep v0.6 release by @arkodg in #2152
• fix: matrix link in release note by @Xunzhuo in #2157
• docs: move announcements on top by @Xunzhuo in #2158
• chore: refactor string match by @zhaohuabing in #2102
• build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 by @dependabot in #2161
• build(deps): bump github.com/go-logr/zapr from 1.2.4 to 1.3.0 by @dependabot in #2162
• docs: fix invalid title in cors by @shawnh2 in #2173
• test: add e2e test for CORS by @ardikabs in #2169
• docs: fix typo in bootstrap example by @akhenakh in #2171
• build(deps): bump github.com/golangci/golangci-lint from 1.55.1 to 1.55.2 in /tools/src/golangci-lint by @dependabot in #2164
• build(deps): bump envoyproxy/toolshed from actions-v0.1.2 to 0.1.15 by @dependabot in #2163
• opt: move gateway namespace mode to common helper by @Xunzhuo in #2129
• build(deps): bump github.com/bufbuild/buf from 1.27.2 to 1.28.0 in /tools/src/buf by @dependabot in #2184
• build(deps): bump yamllint from 1.32.0 to 1.33.0 in /tools/src/yamllint by @dependabot in #2183
• build(deps): bump envoyproxy/toolshed from actions-v0.1.15 to 0.1.39 by @dependabot in #2182
• build(deps): bump go.opentelemetry.io/otel/metric from 1.19.0 to 1.20.0 by @dependabot in #2181
• build(deps): bump go.opentelemetry.io/otel from 1.19.0 to 1.20.0 by @dependabot in #2179
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from 0.42.0 to 0.43.0 by @dependabot in #2177
• build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.42.0 to 0.43.0 by @dependabot in #2180
• feat: add CEL validation for EnvoyProxy telemetry by @shawnh2 in #2050
• docs: http to https redirect user guide by @ionutvilie in #2167
• feat: OIDC Gateway API by @zhaohuabing in #2122
• Default ctrl plane cert expiry time to 5 years by @arkodg in #2175
• Fix weighted route by @zhaohuabing in #2187
• Add E2E Tests for UDPRoute by @cnvergence in #2140
• api: add proxyProtocol in BackendTrafficPolicy by @arkodg in #2189
• doc: small patch cert-manager doc better experience by @tanujd11 in #2197
• docs: update gatewayapi resources version and fix dead link by @shawnh2 in #2190
• api: tcpKeepAlive in BackendTrafficPolicy by @arkodg in #2194
• e2e: tests for TCPRoute by @slayer321 in #2109
• api: enableProxyProtocol in ClientTrafficPolicy by @arkodg in #2188
• OIDC xds translation by @zhaohuabing in #2191
• feat: basic auth API by @zhaohuabing in #2199
• fix: xds translation return early, should be done in a best-effort manner by @zhaohuabing in #2202
• chore: update egctl install cmd by @Xunzhuo in #2218
• build(deps): bump the k8s-io group with 3 updates by @dependabot in #2212
• build(deps): bump github.com/bufbuild/buf from 1.28.0 to 1.28.1 in /tools/src/buf by @dependabot in #2217
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 0.42.0 to 0.44.0 by @dependabot in #2216
• build(deps): bump envoyproxy/toolshed from actions-v0.1.39 to 0.1.54 by @dependabot in #2211
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from 0.43.0 to 0.44.0 by @dependabot in #2214
• build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.43.0 to 0.44.0 by @dependabot in #2213
• feat: proxy protocol in ClientTrafficPolicy by @arkodg in #2203
• fix: trim hyphen suffix in resource name by @cnvergence in #2222
• refactor: simplify filter patching with an unified interface by @zhaohuabing in #2210
• feat: add support to extract from different identifier on JWT by @ardikabs in #2206
• feat: proxyProtocol in BackendTrafficPolicy by @arkodg in #2192
• feat:support slow start mode by @tmsnan in #2219
• docs: fix broken format on JWT by @ardikabs in #2240
• docs: update version matrix by @Xunzhuo in #2237
• build(deps): bump github.com/miekg/dns from 1.1.46 to 1.1.57 by @dependabot in #2243
• build(deps): bump envoyproxy/toolshed from actions-v0.1.54 to 0.1.65 by @dependabot in #2242
• chore: add helm lint by @misstick86 in #2174
• feat: basic auth impl by @zhaohuabing in #2224
• update k8s version in compatibility matrix by @arkodg in #2245
• user docs for basic auth by @zhaohuabing in #2246
• chore: update otel collector chart version by @zirain in #2254
• fix flaky test by @zhaohuabing in...

v0.6.0

What's Changed

• update cherry-pick GHA for v0.5 by @arkodg in #1714
• refactor: set defaults in Deployment, else k8s sets them for you, creating infinite reconciliation loop by @qicz in #1594
• docs: update extending-envoy-gateway.md to match the API Reference by @rinswind in #1725
• feat: Set --cpuset-threads in EnvoyProxy cmdline arg by @arkodg in #1727
• build(deps): bump github.com/prometheus/common from 0.42.0 to 0.44.0 by @dependabot in #1732
• build(deps): bump google.golang.org/grpc from 1.56.2 to 1.57.0 by @dependabot in #1731
• build(deps): bump sphinx from 6.2.1 to 7.1.1 in /tools/src/sphinx-build by @dependabot in #1730
• observability: add container port for metrics by @zirain in #1736
• DeepCopy resources that require status updates by @arkodg in #1723
• test: add setvalue unit tests coverage by @Xunzhuo in #1735
• Add request mirroring doc by @AliceProxy in #1737
• docs: Add user docs for EnvoyPatchPolicy by @arkodg in #1733
• fix: egctl add support for translations using RateLimitFilter by @slayer321 in #1729
• e2e & misc fixes for EnvoyPatchPolicy by @arkodg in #1738
• docs: fix tracing doc and example by @zirain in #1741
• Release v0.5.0 docs by @arkodg in #1750
• Fix typo in docs url by @arkodg in #1751
• feat: support timeout and failOpen/failClose knobs for Global RateLimiting by @tmsnan in #1704
• Remove youngnick from maintainers by @youngnick in #1744
• docs: update v0.5 release details by @arkodg in #1756
• rm deprecated SourceIP field by @arkodg in #1757
• chore: Validate before adding Xds resource by @Ronnie-personal in #1662
• feat: support AuthenticationFilter in GRPCRoute by @cnvergence in #1720
• helm: apply Role and RoleBinding for envoy gateway in namespaced mode by @shawnh2 in #1656
• feat(proxy): introduce Concurrency under EnvoyProxy resource by @ardikabs in #1719
• feat: add ratelimitfilter support for grpcroute by @shawnh2 in #1762
• Update codecov patch coverage threshold to 60% by @arkodg in #1763
• docs: using GRPCRoute with AuthenticationFilter by @cnvergence in #1767
• Add ClusterIP to the services in the egctl test data by @Ronnie-personal in #1758
• docs: add proxy observability doc by @zirain in #1745
• refactor: split api helpers to envoygateway,envoyproxy and kubernetes helpers. by @qicz in #1545
• build(deps): bump sphinx from 7.1.1 to 7.1.2 in /tools/src/sphinx-build by @dependabot in #1771
• build(deps): bump go.uber.org/zap from 1.24.0 to 1.25.0 by @dependabot in #1769
• build(deps): bump sigs.k8s.io/controller-runtime from 0.15.0 to 0.15.1 by @dependabot in #1770
• api: bump gwapi to v0.8.0-rc1 by @Xunzhuo in #1778
• follow-up(doc, fix): support for grpcroute ratelimitfilter by @shawnh2 in #1766
• build(deps): bump kube-rbac-proxy from v0.11.0 to v0.14.1 by @arukiidou in #1781
• Add XDS keepalives by @jackkleeman in #1747
• move skriss to emeritus maintainers by @skriss in #1782
• Roadmap for v0.6.0 by @arkodg in #1783
• owner: add qicz to maintainers and move youngnick to emeritus by @Xunzhuo in #1779
• conformance: enable HTTPRouteRedirectPortAndScheme by @shawnh2 in #1601
• Make jwt fetch more reliable by @jackkleeman in #1784
• build(deps): bump actions/deploy-pages from 2.0.3 to 2.0.4 by @dependabot in #1790
• build(deps): bump github.com/golangci/golangci-lint from 1.53.3 to 1.54.1 in /tools/src/golangci-lint by @dependabot in #1789
• fix: implement comparable interface for ir.Xds to skip unnecessary updates by @dboslee in #1795
• rm make target helm-release by @arkodg in #1796
• fix: Ignore ports in host headers when matching against HTTPRoute hostnames by @jackkleeman in #1702
• fix: ensure all updates are processed in xds ir update test by @dboslee in #1799
• feat: support merging user and default bootstrap configurations by @zhaohuabing in #1791
• Add a Name field to a IR Route Destination by @arkodg in #1788
• fix: enqueue a single request for all resources by @dboslee in #1813
• build(deps): bump envoyproxy/toolshed from actions-v0.0.10 to 0.0.15 by @dependabot in #1802
• fix: can't show debug level logging message by @zhaohuabing in #1808
• build(deps): bump sphinx from 7.1.2 to 7.2.2 in /tools/src/sphinx-build by @dependabot in #1801
• Feat/service import backend support by @tanujd11 in #1705
• api: add stats_matcher for envoy's stats by @tmsnan in #1761
• bump k8s version used in e2e to v1.28 by @arkodg in #1816
• fix: enable ratelimit server start without initial config and add readiness probe for it by @shawnh2 in #1815
• build(deps): bump sphinx from 7.2.2 to 7.2.4 in /tools/src/sphinx-build by @dependabot in #1831
• build(deps): bump envoyproxy/toolshed from actions-v0.0.15 to 0.0.17 by @dependabot in #1832
• chore: bump gateway-api to v0.8.0-rc2 by @arkodg in #1817
• use / instead of - in IR Route Name by @arkodg in #1814
• feat: load balancer class support by @wondersd in #1840
• fix a typo: disabled -> disable by @rootsongjc in #1843
• add the missing required field type by @rootsongjc in #1848
• feat: bump gwapi to v0.8.0 by @Xunzhuo in #1847
• Add a key to the access default log text format by @arkodg in #1800
• add unmarshal error to EnvoyPatchPolicy status by @zhaohuabing in #1859
• fix: allow to set imagePullPolicy for kube-rbac-proxy container by @ElenaHenderson in #1858
• fix: prevent nil pointer panic because of nonexist attribute of Access Log by @ardikabs in #1838
• build(deps): bump sphinx from 7.2.4 to 7.2.5 in /tools/src/sphinx-build by @dependabot in #1865
• build(deps): bump sigs.k8s.io/controller-runtime from 0.16.0 to 0.16.1 by @dependabot in #1864
• build(deps): bump envoyproxy/toolshed from actions-v0.0.17 to 0.0.18 by @dependabot in #1863
• doc: fix incorrect item number in accesslog design doc by @shawnh2 in #1854
• docs: add note in quickstart to ensure LB exists by @arkodg in #1849
• fix docs string for access logs by @arkodg in #1850
• chore: use stable OS by @zirain in #1862
• docs: clean-up readme by @Xunzhuo in #1866
• Added docs and fix for ref grant in service import case by @tanujd11 in #1852
• 🐛 Fix: follow-up of #1852 by @Xunzhuo in #1869
• build(deps): bump actions/checkout from 3 to 4 by @dependabot in #1876
• chore: fix unicode error by @zirain in #1877
• fix: ensure the xds grpc server is properly stopped by @shawnh2 in #1860
• fix: skip the not found filters in grpc routes by @shawnh2 in #1873
• docs...

v0.6.0-rc.1

What's Changed

• update cherry-pick GHA for v0.5 by @arkodg in #1714
• refactor: set defaults in Deployment, else k8s sets them for you, creating infinite reconciliation loop by @qicz in #1594
• docs: update extending-envoy-gateway.md to match the API Reference by @rinswind in #1725
• feat: Set --cpuset-threads in EnvoyProxy cmdline arg by @arkodg in #1727
• build(deps): bump github.com/prometheus/common from 0.42.0 to 0.44.0 by @dependabot in #1732
• build(deps): bump google.golang.org/grpc from 1.56.2 to 1.57.0 by @dependabot in #1731
• build(deps): bump sphinx from 6.2.1 to 7.1.1 in /tools/src/sphinx-build by @dependabot in #1730
• observability: add container port for metrics by @zirain in #1736
• DeepCopy resources that require status updates by @arkodg in #1723
• test: add setvalue unit tests coverage by @Xunzhuo in #1735
• Add request mirroring doc by @AliceProxy in #1737
• docs: Add user docs for EnvoyPatchPolicy by @arkodg in #1733
• fix: egctl add support for translations using RateLimitFilter by @slayer321 in #1729
• e2e & misc fixes for EnvoyPatchPolicy by @arkodg in #1738
• docs: fix tracing doc and example by @zirain in #1741
• Release v0.5.0 docs by @arkodg in #1750
• Fix typo in docs url by @arkodg in #1751
• feat: support timeout and failOpen/failClose knobs for Global RateLimiting by @tmsnan in #1704
• Remove youngnick from maintainers by @youngnick in #1744
• docs: update v0.5 release details by @arkodg in #1756
• rm deprecated SourceIP field by @arkodg in #1757
• chore: Validate before adding Xds resource by @Ronnie-personal in #1662
• feat: support AuthenticationFilter in GRPCRoute by @cnvergence in #1720
• helm: apply Role and RoleBinding for envoy gateway in namespaced mode by @shawnh2 in #1656
• feat(proxy): introduce Concurrency under EnvoyProxy resource by @ardikabs in #1719
• feat: add ratelimitfilter support for grpcroute by @shawnh2 in #1762
• Update codecov patch coverage threshold to 60% by @arkodg in #1763
• docs: using GRPCRoute with AuthenticationFilter by @cnvergence in #1767
• Add ClusterIP to the services in the egctl test data by @Ronnie-personal in #1758
• docs: add proxy observability doc by @zirain in #1745
• refactor: split api helpers to envoygateway,envoyproxy and kubernetes helpers. by @qicz in #1545
• build(deps): bump sphinx from 7.1.1 to 7.1.2 in /tools/src/sphinx-build by @dependabot in #1771
• build(deps): bump go.uber.org/zap from 1.24.0 to 1.25.0 by @dependabot in #1769
• build(deps): bump sigs.k8s.io/controller-runtime from 0.15.0 to 0.15.1 by @dependabot in #1770
• api: bump gwapi to v0.8.0-rc1 by @Xunzhuo in #1778
• follow-up(doc, fix): support for grpcroute ratelimitfilter by @shawnh2 in #1766
• build(deps): bump kube-rbac-proxy from v0.11.0 to v0.14.1 by @arukiidou in #1781
• Add XDS keepalives by @jackkleeman in #1747
• move skriss to emeritus maintainers by @skriss in #1782
• Roadmap for v0.6.0 by @arkodg in #1783
• owner: add qicz to maintainers and move youngnick to emeritus by @Xunzhuo in #1779
• conformance: enable HTTPRouteRedirectPortAndScheme by @shawnh2 in #1601
• Make jwt fetch more reliable by @jackkleeman in #1784
• build(deps): bump actions/deploy-pages from 2.0.3 to 2.0.4 by @dependabot in #1790
• build(deps): bump github.com/golangci/golangci-lint from 1.53.3 to 1.54.1 in /tools/src/golangci-lint by @dependabot in #1789
• fix: implement comparable interface for ir.Xds to skip unnecessary updates by @dboslee in #1795
• rm make target helm-release by @arkodg in #1796
• fix: Ignore ports in host headers when matching against HTTPRoute hostnames by @jackkleeman in #1702
• fix: ensure all updates are processed in xds ir update test by @dboslee in #1799
• feat: support merging user and default bootstrap configurations by @zhaohuabing in #1791
• Add a Name field to a IR Route Destination by @arkodg in #1788
• fix: enqueue a single request for all resources by @dboslee in #1813
• build(deps): bump envoyproxy/toolshed from actions-v0.0.10 to 0.0.15 by @dependabot in #1802
• fix: can't show debug level logging message by @zhaohuabing in #1808
• build(deps): bump sphinx from 7.1.2 to 7.2.2 in /tools/src/sphinx-build by @dependabot in #1801
• Feat/service import backend support by @tanujd11 in #1705
• api: add stats_matcher for envoy's stats by @tmsnan in #1761
• bump k8s version used in e2e to v1.28 by @arkodg in #1816
• fix: enable ratelimit server start without initial config and add readiness probe for it by @shawnh2 in #1815
• build(deps): bump sphinx from 7.2.2 to 7.2.4 in /tools/src/sphinx-build by @dependabot in #1831
• build(deps): bump envoyproxy/toolshed from actions-v0.0.15 to 0.0.17 by @dependabot in #1832
• chore: bump gateway-api to v0.8.0-rc2 by @arkodg in #1817
• use / instead of - in IR Route Name by @arkodg in #1814
• feat: load balancer class support by @wondersd in #1840
• fix a typo: disabled -> disable by @rootsongjc in #1843
• add the missing required field type by @rootsongjc in #1848
• feat: bump gwapi to v0.8.0 by @Xunzhuo in #1847
• Add a key to the access default log text format by @arkodg in #1800
• add unmarshal error to EnvoyPatchPolicy status by @zhaohuabing in #1859
• fix: allow to set imagePullPolicy for kube-rbac-proxy container by @ElenaHenderson in #1858
• fix: prevent nil pointer panic because of nonexist attribute of Access Log by @ardikabs in #1838
• build(deps): bump sphinx from 7.2.4 to 7.2.5 in /tools/src/sphinx-build by @dependabot in #1865
• build(deps): bump sigs.k8s.io/controller-runtime from 0.16.0 to 0.16.1 by @dependabot in #1864
• build(deps): bump envoyproxy/toolshed from actions-v0.0.17 to 0.0.18 by @dependabot in #1863
• doc: fix incorrect item number in accesslog design doc by @shawnh2 in #1854
• docs: add note in quickstart to ensure LB exists by @arkodg in #1849
• fix docs string for access logs by @arkodg in #1850
• chore: use stable OS by @zirain in #1862
• docs: clean-up readme by @Xunzhuo in #1866
• Added docs and fix for ref grant in service import case by @tanujd11 in #1852
• 🐛 Fix: follow-up of #1852 by @Xunzhuo in #1869
• build(deps): bump actions/checkout from 3 to 4 by @dependabot in #1876
• chore: fix unicode error by @zirain in #1877
• fix: ensure the xds grpc server is properly stopped by @shawnh2 in #1860
• fix: skip the not found filters in grpc routes by @shawnh2 in #1873
• docs...