Skip to content

Commit 1e9f2a3

Browse files
guydcarkodgzhaohuabingmathetakemarkwinter
authored
[release/v1.3] Release v1.3.2 cherry-pick (#5576)
* load BackendTLSPolicy in standalone mode (#5431) Signed-off-by: Arko Dasgupta <[email protected]> (cherry picked from commit 4d914ae) Signed-off-by: Guy Daich <[email protected]> * Wasm: cache Wasm OCI image permission check results (#5358) * add TTL for wasm permission check Signed-off-by: Huabing (Robin) Zhao <[email protected]> * fix test Signed-off-by: Huabing (Robin) Zhao <[email protected]> * change Signed-off-by: Huabing (Robin) Zhao <[email protected]> * refresh the cache Signed-off-by: Huabing (Robin) Zhao <[email protected]> * purge the cache Signed-off-by: Huabing (Robin) Zhao <[email protected]> * refactor Signed-off-by: Huabing (Robin) Zhao <[email protected]> * on retry on retriable errors Signed-off-by: Huabing (Robin) Zhao <[email protected]> * add release note Signed-off-by: Huabing (Robin) Zhao <[email protected]> --------- Signed-off-by: Huabing (Robin) Zhao <[email protected]> (cherry picked from commit 672de8a) Signed-off-by: Guy Daich <[email protected]> * Load EnvoyExtensionPolicy in standalone mode (#5460) * load EnvoyExtensionPolicy in standalone mode Signed-off-by: Takeshi Yoneda <[email protected]> * more Signed-off-by: Takeshi Yoneda <[email protected]> * release note Signed-off-by: Takeshi Yoneda <[email protected]> * review: use a valid target name instead of myapp Signed-off-by: Takeshi Yoneda <[email protected]> * gen Signed-off-by: Takeshi Yoneda <[email protected]> --------- Signed-off-by: Takeshi Yoneda <[email protected]> (cherry picked from commit 4be098d) Signed-off-by: Guy Daich <[email protected]> * fix: check for mirror backendRef in httproute index (#5497) * check for mirror backendRef Signed-off-by: mark winter <[email protected]> (cherry picked from commit 72b72c4) Signed-off-by: Guy Daich <[email protected]> * fix: dont return an err when gatewayclass is not accepted (#5524) * bug: dont return an err when gatewayclass is not accepted this is a user generated error, we shouldnt log it as a system error, and return with an error Signed-off-by: Arko Dasgupta <[email protected]> * release notes Signed-off-by: Arko Dasgupta <[email protected]> --------- Signed-off-by: Arko Dasgupta <[email protected]> (cherry picked from commit 51e87ca) Signed-off-by: Guy Daich <[email protected]> * fix: host header should not be allowed to modify (#5533) * host header is not allowed to be modified Signed-off-by: Huabing (Robin) Zhao <[email protected]> * address comment Signed-off-by: Huabing (Robin) Zhao <[email protected]> --------- Signed-off-by: Huabing (Robin) Zhao <[email protected]> (cherry picked from commit 54efa34) Signed-off-by: Guy Daich <[email protected]> * fix: retrigger reconciliation when backendRef of type ServiceImport is updated (#5461) * fix: retrigger reconilation when backendRef of type ServiceImport is updated Signed-off-by: Teju Nareddy <[email protected]> (cherry picked from commit e2f8978) Signed-off-by: Guy Daich <[email protected]> * pin envoy and ratelimit Signed-off-by: Guy Daich <[email protected]> * fix: otel sink json access logging without text field (#5498) * fix otel sink json access logging without text field Signed-off-by: Tomi Juntunen <[email protected]> * use json format as default when format or type is not set Signed-off-by: Tomi Juntunen <[email protected]> * set formatters only if the slice of formatters is not empty Signed-off-by: Tomi Juntunen <[email protected]> --------- Signed-off-by: Tomi Juntunen <[email protected]> Co-authored-by: Arko Dasgupta <[email protected]> (cherry picked from commit cb3ffd2) Signed-off-by: Guy Daich <[email protected]> * [release/v1.3] v1.3.2 release notes (#5584) v1.3.2 release notes Signed-off-by: Guy Daich <[email protected]> --------- Signed-off-by: Arko Dasgupta <[email protected]> Signed-off-by: Guy Daich <[email protected]> Signed-off-by: Huabing (Robin) Zhao <[email protected]> Signed-off-by: Takeshi Yoneda <[email protected]> Signed-off-by: mark winter <[email protected]> Signed-off-by: Teju Nareddy <[email protected]> Signed-off-by: Tomi Juntunen <[email protected]> Co-authored-by: Arko Dasgupta <[email protected]> Co-authored-by: Huabing (Robin) Zhao <[email protected]> Co-authored-by: Takeshi Yoneda <[email protected]> Co-authored-by: Mark Winter <[email protected]> Co-authored-by: Teju Nareddy <[email protected]> Co-authored-by: Tomi Juntunen <[email protected]>
1 parent 5847250 commit 1e9f2a3

File tree

79 files changed

+1672
-437
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

79 files changed

+1672
-437
lines changed

‎VERSION

+1-1
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
v1.3.1
1+
v1.3.2

‎api/v1alpha1/shared_types.go

+2-2
Original file line numberDiff line numberDiff line change
@@ -22,15 +22,15 @@ const (
2222
// DefaultDeploymentMemoryResourceRequests for deployment memory resource
2323
DefaultDeploymentMemoryResourceRequests = "512Mi"
2424
// DefaultEnvoyProxyImage is the default image used by envoyproxy
25-
DefaultEnvoyProxyImage = "docker.io/envoyproxy/envoy:distroless-v1.33.0"
25+
DefaultEnvoyProxyImage = "docker.io/envoyproxy/envoy:distroless-v1.33.1"
2626
// DefaultShutdownManagerCPUResourceRequests for shutdown manager cpu resource
2727
DefaultShutdownManagerCPUResourceRequests = "10m"
2828
// DefaultShutdownManagerMemoryResourceRequests for shutdown manager memory resource
2929
DefaultShutdownManagerMemoryResourceRequests = "32Mi"
3030
// DefaultShutdownManagerImage is the default image used for the shutdown manager.
3131
DefaultShutdownManagerImage = "docker.io/envoyproxy/gateway-dev:latest"
3232
// DefaultRateLimitImage is the default image used by ratelimit.
33-
DefaultRateLimitImage = "docker.io/envoyproxy/ratelimit:ae4cee11"
33+
DefaultRateLimitImage = "docker.io/envoyproxy/ratelimit:0141a24f"
3434
// HTTPProtocol is the common-used http protocol.
3535
HTTPProtocol = "http"
3636
// GRPCProtocol is the common-used grpc protocol.

‎charts/gateway-helm/README.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -102,7 +102,7 @@ To uninstall the chart:
102102
| global.images.envoyGateway.image | string | `nil` | |
103103
| global.images.envoyGateway.pullPolicy | string | `nil` | |
104104
| global.images.envoyGateway.pullSecrets | list | `[]` | |
105-
| global.images.ratelimit.image | string | `"docker.io/envoyproxy/ratelimit:ae4cee11"` | |
105+
| global.images.ratelimit.image | string | `"docker.io/envoyproxy/ratelimit:0141a24f"` | |
106106
| global.images.ratelimit.pullPolicy | string | `"IfNotPresent"` | |
107107
| global.images.ratelimit.pullSecrets | list | `[]` | |
108108
| kubernetesClusterDomain | string | `"cluster.local"` | |

‎charts/gateway-helm/values.tmpl.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ global:
1212
pullSecrets: []
1313
ratelimit:
1414
# This is the full image name including the hub, repo, and tag.
15-
image: "docker.io/envoyproxy/ratelimit:ae4cee11"
15+
image: "docker.io/envoyproxy/ratelimit:0141a24f"
1616
# Specify image pull policy if default behavior isn't desired.
1717
# Default behavior: latest images will be Always else IfNotPresent.
1818
pullPolicy: IfNotPresent

‎go.mod

+1
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,7 @@ require (
99
fortio.org/log v1.17.1
1010
github.com/Masterminds/semver/v3 v3.3.1
1111
github.com/andybalholm/brotli v1.1.1
12+
github.com/avast/retry-go v3.0.0+incompatible
1213
github.com/cenkalti/backoff/v4 v4.3.0
1314
github.com/cncf/xds/go v0.0.0-20240905190251-b4127c9b8d78
1415
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc

‎go.sum

+2
Original file line numberDiff line numberDiff line change
@@ -99,6 +99,8 @@ github.com/asaskevich/govalidator v0.0.0-20180720115003-f9ffefc3facf/go.mod h1:l
9999
github.com/asaskevich/govalidator v0.0.0-20190424111038-f61b66f89f4a/go.mod h1:lB+ZfQJz7igIIfQNfa7Ml4HSf2uFQQRzpGGRXenZAgY=
100100
github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 h1:DklsrG3dyBCFEj5IhUbnKptjxatkF07cF2ak3yi77so=
101101
github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2/go.mod h1:WaHUgvxTVq04UNunO+XhnAqY/wQc+bxr74GqbsZ/Jqw=
102+
github.com/avast/retry-go v3.0.0+incompatible h1:4SOWQ7Qs+oroOTQOYnAHqelpCO0biHSxpiH9JdtuBj0=
103+
github.com/avast/retry-go v3.0.0+incompatible/go.mod h1:XtSnn+n/sHqQIpZ10K1qAevBhOOCWBLXXy3hyiqqBrY=
102104
github.com/beorn7/perks v0.0.0-20180321164747-3a771d992973/go.mod h1:Dwedo/Wpr24TaqPxmxbtue+5NUziq4I4S80YR8gNf3Q=
103105
github.com/beorn7/perks v1.0.0/go.mod h1:KWe93zE9D1o94FZ5RNwFwVgaQK1VOXiVxmqh+CedLV8=
104106
github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM=

‎internal/cmd/egctl/testdata/translate/in/backend-endpoint.yaml

+31
Original file line numberDiff line numberDiff line change
@@ -44,3 +44,34 @@ spec:
4444
- ip:
4545
address: 0.0.0.0
4646
port: 3000
47+
---
48+
apiVersion: gateway.networking.k8s.io/v1alpha3
49+
kind: BackendTLSPolicy
50+
metadata:
51+
name: example-com-tls-policy
52+
spec:
53+
targetRefs:
54+
- group: 'gateway.envoyproxy.io'
55+
kind: Backend
56+
name: backend
57+
validation:
58+
wellKnownCACertificates: "System"
59+
hostname: www.example.com
60+
---
61+
apiVersion: gateway.envoyproxy.io/v1alpha1
62+
kind: EnvoyExtensionPolicy
63+
metadata:
64+
name: ext-proc-example
65+
spec:
66+
targetRefs:
67+
- group: gateway.networking.k8s.io
68+
kind: HTTPRoute
69+
name: backend
70+
extProc:
71+
- backendRefs:
72+
- name: grpc-ext-proc
73+
port: 9002
74+
processingMode:
75+
request: {}
76+
response:
77+
body: Streamed

‎internal/cmd/egctl/testdata/translate/out/backend-endpoint.all.yaml

+64
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,30 @@
1+
backendTLSPolicies:
2+
- kind: BackendTLSPolicy
3+
metadata:
4+
creationTimestamp: null
5+
name: example-com-tls-policy
6+
namespace: envoy-gateway-system
7+
spec:
8+
targetRefs:
9+
- group: gateway.envoyproxy.io
10+
kind: Backend
11+
name: backend
12+
validation:
13+
hostname: www.example.com
14+
wellKnownCACertificates: System
15+
status:
16+
ancestors:
17+
- ancestorRef:
18+
group: gateway.networking.k8s.io
19+
kind: Gateway
20+
name: eg
21+
conditions:
22+
- lastTransitionTime: null
23+
message: Policy has been accepted.
24+
reason: Accepted
25+
status: "True"
26+
type: Accepted
27+
controllerName: gateway.envoyproxy.io/gatewayclass-controller
128
backends:
229
- kind: Backend
330
metadata:
@@ -16,6 +43,43 @@ backends:
1643
reason: Accepted
1744
status: "True"
1845
type: Accepted
46+
envoyExtensionPolicies:
47+
- kind: EnvoyExtensionPolicy
48+
metadata:
49+
creationTimestamp: null
50+
name: ext-proc-example
51+
namespace: envoy-gateway-system
52+
spec:
53+
extProc:
54+
- backendRefs:
55+
- group: ""
56+
kind: Service
57+
name: grpc-ext-proc
58+
port: 9002
59+
processingMode:
60+
request: {}
61+
response:
62+
body: Streamed
63+
targetRefs:
64+
- group: gateway.networking.k8s.io
65+
kind: HTTPRoute
66+
name: backend
67+
status:
68+
ancestors:
69+
- ancestorRef:
70+
group: gateway.networking.k8s.io
71+
kind: Gateway
72+
name: eg
73+
namespace: envoy-gateway-system
74+
conditions:
75+
- lastTransitionTime: null
76+
message: |-
77+
Wasm: wasm cache is not initialized
78+
ExtProc: service envoy-gateway-system/grpc-ext-proc not found.
79+
reason: Invalid
80+
status: "False"
81+
type: Accepted
82+
controllerName: gateway.envoyproxy.io/gatewayclass-controller
1983
gatewayClass:
2084
kind: GatewayClass
2185
metadata:

0 commit comments

Comments
 (0)