envoyproxy · Xunzhuo · Jul 9, 2024
@@ -0,0 +1,216 @@
+---
+title: "v1.1.0-rc.1"
+publishdate: 2024-07-08
+---
+
+Date: July 8, 2024
+
+## Documentation
+- Added Performance Benchmarking Document
+- Added User Guide for Zipkin Tracing
+- Added User Guide for Customizing Ordering of Filters
+- Added User Guide for External Processing Filter in EnvoyExtensionPolicy
+- Added User Guide for installation of egctl with brew
+- Added User Guide for Client Buffer Size Limit
+- Added User Guide for Client Idle Timeout
+- Added Chinese translation for release notes, roadmap, installation, development, contribution and several User Guides
+- Added User Guide for Backend resource
+- Added GA Blog Post
+- Added Threat Model
+- Added Adopters section to docs
+- Added User Guide and Dashboards for Control Plane and Resource Observability
+- Added User Guide for Connection Limits in ClientTrafficPolicy
+- Added User Guide on using Private Key Provider
+- Added Design Doc for Authorization
+- Added Design Doc for XDS Metadata
+- Added Design Doc for Backend resource
+- Added Design Doc for Control Plane Observability
+- Added Design Doc for EnvoyExtensionPolicy
+- Added Design Doc for External Processing in EnvoyExtensionPolicy
+- Updated Access Logging User Guide to include filtering with CEL Expression
+- Updated Access Logging User Guide to include Metadata
+- Updated Development Guide to require Golang 1.22
+- Updated Quickstart User Guide to fetch GATEWAY_HOST from Gateway resource
+- Updated Site to reflect GA status
+- Updated HTTP Redirect User Guide to not set a redirect port or require a BackendRef
+- Updated Observability User Guides to use gateway-addons-helm
+- Updated Gateway-API User Guide to reflect support for BackendRef filters
+- Updated HTTP Timeouts User Guide to highlight default Envoy timeouts
+- Updated Installation Guide to use server-side apply
+- Updated Installation Guide to refer to values.yaml docs
+- Updated BackendTLSPolicy User Guide to GW-API v1.1.0
+- Updated User Guides to use tabs when applying yaml from file or stdin
+- Updated OIDC User Guide to use HTTPS redirect URLs
+- Updated Order of versions in Site
+- Updated Extensbility User Gudie to use yaml-format patches
+- Updated Quickstart Guide to include next steps
+- Updated CRD docs to include enum values
+- Updated Extensibility User Guide with Envoy Patch Policy examples
+- Updated structure of docs: rename Guides to Tasks, move Contribution
+- Updated Support Matrix
+- Updated egctl x status docs for xRoute and xPolicy
+- Updated egctl User Guide with Install and Uninstall commands
+- Updated GRPCRoute docs to use v1 instead of v1alpha2
+- Fixed Rate Limiting User Guide to use correct CIDR matcher type names
+- Fixed User Guide for JWT-based routing
+- Fixed JSON Access Log Example
+- Use linkinator to detect dead links in docs
+- Use helm-docs to generate chart docs
+- Support Not-Implemented-Hide marker in API docs
+
+## Installation
+- Added new gateway-addons-helm chart for Observability
+- Added support for global image settings for all images in Envoy Gateway helm chart
+- Added Support for PodDistruptionBudget for Envoy Gateway
+- Added Support for TopologySpreadConstraints for Envoy Gateway
+- Added Support for Tolerations for Envoy Gateway
+- Added Support for Ratelimit image pull secrets and pull policy
+- Updated ttlSecondsAfterFinished on certgen job to 30 by default
+- Updated Envoy Gateway ImagePullPolicy to IfNotPresent released charts
+- Remove envoy-gateway-metrics-service and merge its contents into envoy-gateway service
+
+## API
+- Added Support for Gateway-API v1.1.0
+- Added new Backend CRD
+- Added new EnvoyExtensionPolicy CRD
+- Added Support for Plural Target Refs and Target Selectors in xPolicy CRDs
+- Added Support for Backend CRD BackendRefs in HTTPRoute, GRPCRoute and EnvoyExtensionPolicy CRDs
+- Added Support for Custom Extension Server Policy CRDs in EnvoyGateway Config
+- Added Support for Custom ShutDownManager Image in EnvoyGateway Config
+- Added Support for Leader Election in EnvoyGateway Config
+- Added Support for Connecting to Extension Server over Unix Domain Socket in EnvoyGateway Config
+- Added Support for Proxy PodDisruptionBudget in EnvoyProxy CRD
+- Added Support for Running Envoy Proxy as a Daemonset in EnvoyProxy CRD
+- Added Support for Proxy Loadbalancer Source Ranges in EnvoyProxy CRD
+- Added Support for Proxy Prometheus Metrics Compression in EnvoyProxy CRD
+- Added Support for BackendRefs in Access Log, Metric and Trace Sinks in EnvoyProxy CRD
+- Added Support for Rate Limiting Tracing in EnvoyProxy CRD
+- Added Support for Routing to Service IP in EnvoyProxy CRD
+- Added Support for Access Log CEL filters in EnvoyProxy CRD
+- Added Support for Access Log Formatters for File and OpenTelemetry in EnvoyProxy CRD
+- Added Support for Zipkin Tracing in EnvoyProxy CRD
+- Added Support for using the Listener port as a the Container port in EnvoyProxy CRD
+- Added Support for OpenTelemtry Sink Export Settings in EnvoyProxy CRD
+- Added Support for Backend Client Certificate Authentication in EnvoyProxy CRD
+- Added Support for Backend TLS Settings in EnvoyProxy CRD
+- Added Support for HTTP Filter Ordering in EnvoyProxy CRD
+- Added Support for gRPC Access Log Service (ALS) Sink in EnvoyProxy CRD
+- Added Support for OpenTelelemetry Sinks as a BackendRef in EnvoyProxy CRD
+- Added Support for User-Provided name for generate Kubernetes resources in EnvoyProxy CRD
+- Added Support for Per-Endpoint stats in EnvoyProxy CRD
+- Added Support for Targeting SectionNames in ClientTrafficPolicy CRD
+- Added Support for Preserving X-Request-ID header in ClientTrafficPolicy CRD
+- Added Support for Using Downstream Protocol in Upstream connections in ClientTrafficPolicy CRD
+- Added Support for HTTP/2 settings in ClientTrafficPolicy CRD
+- Added Support for Connection Buffer Size Limit in ClientTrafficPolicy CRD
+- Added Support for HTTP Health Check in ClientTrafficPolicy CRD
+- Added Support for Optionally requiring a Client Certificate in ClientTrafficPolicy CRD
+- Added Support for Headers with Underscores CRD in ClientTrafficPolicy CRD
+- Added Support for XFCC header processing in ClientTrafficPolicy CRD
+- Added Support for TCP Listener Idle Timeout in ClientTrafficPolicy CRD
+- Added Support for IdleTimeout in ClientTrafficPolicy CRD
+- Added Support for Connection Limits in ClientTrafficPolicy CRD
+- Added Support for additional OIDC settings related to Resource, Token and Cookie in SecurityPolicy CRD
+- Added Support for Optionally requiring a JWT in SecurityPolicy CRD
+- Added Support for BackendRefs for Ext-Auth in SecurityPolicy CRD
+- Added Support for Authorization in SecurityPolicy CRD
+- Added Support for Ext-Auth failOpen in SecurityPolicy CRD
+- Added Support for Loadbalancer Cookie Consistent Hashing in BackendTrafficPolicy CRD
+- Added Support for Disabling X-RateLimit headers in BackendTrafficPolicy CRD
+- Added Support for Connection Buffer Size Limit in BackendTrafficPolicy CRD
+- Added Support for Loadbalancing Consistent Hash Table Size in BackendTrafficPolicy CRD
+- Added Support for Loadbalancing Header Hash Policy in BackendTrafficPolicy CRD
+- Added Support for Cluster Connection Buffer Size Limit in BackendTrafficPolicy
+- Added Support for more Rate Limit Rules in BackendTrafficPolicy CRD
+- Added Support for WASM extension in EnvoyExtensionPolicy CRD
+- Added Support for External Processing extension in EnvoyExtensionPolicy CRD
+- Removed Status Print Column from xPolicy CRDs
+
+### Breaking Changes
+- Gateway-API BackendTLSPolicy v1alpha3 is incompatible with previous versions of the CRD
+
+## Conformance
+- Added Supported Features to Gateway Class
+
+## Testing
+- Added performance benchmarking test
+- Added e2e test for Zipking Tracing
+- Added e2e test for HTTP Health Checks
+- Added e2e test for CEL Access Log Filter
+- Added e2e test for GRPC Access Log Service Sink
+- Added e2e test for XDS Metadata
+- Added e2e test for WASM from OCI Images and HTTP Source
+- Added e2e test for Service IP Routing
+- Added e2e test for Multiple GatewayClasses
+- Added e2e test for HTTP Full Path rewrite
+- Added e2e test for Backend API
+- Added e2e test for Backend TLS Settings
+- Added e2e test for disabling X-RateLimit Headers
+- Added e2e test for Authorization
+- Added e2e test for BackendRefs in Ext-Auth
+- Added e2e test for Using Client Protocol in Upstream Connection
+- Added e2e test for Backend Client Cert Authentication
+- Added e2e test for External Processing Filter
+- Added e2e test for Merge Gateways Feature
+- Added e2e test for Option JWT authentication
+- Added e2e test for Infrastructure using Server-Side Apply
+- Added e2e test for Connection Limits
+- Added e2e test for Envoy Graceful Shutdown
+- Updated e2e test for Limit to cover multiple listeners
+- Updated e2e test for CORS to not require access-control-expose-headers
+- Run CEL tests on all supported K8s versions
+- Added OSV Scanner for Golang Vulnerabilities and Licenses
+- Added Trivy scanner for Docker images
+
+## Translator
+- Added Support for BackendRef HTTP Filters
+- Added Support for attaching EnvoyProxy to Gateways
+- Added Support for cross-namespace EnvoyProxy reference from GatewayClass
+- Added Support for Backend Traffic Policy for UDPRoute and TCPRoute
+- Added Support for ClientTrafficPolicy for UDPRoute and TCPRoute
+- Added Support for multiple BackendRefs in TCPRoute and UDPRoute
+- Added Metrics related to XDS Server, Infra Manager and Controller
+- Added Support for PolicyStatus in EnvoyPatchPolicy
+- Added Support for Websocket upgrades in HTTP/1 Routes
+- Added Support for custom controller name in egctl
+- Added Support for BackendTLSPoplicy CA Certificate reference to Secret
+- Added names to Filter Chains
+- Added Support extension server hooks for TCP and UDP listeners
+- Added Support for attaching EnvoyProxy resource to Gateways
+- Added Support for Exposing Prometheus Port in Rate Limiter Service
+- Added Support for Optional Rate Limit Backend Redis
+- Updated OAuth2 filter to preserve Authorization header if OIDC token forwarding is enabled
+- Updated Default Filter Order to have Fault filter first in the HTTP Filter Chain
+- Updated Ext-Auth Per-Route config to use filter-specific Config Type
+- Updated Overload Manager configuration according to Envoy recommendations by default
+- Updated Infrastructure resource management to user Server-Side Apply
+- Updated Reflection of Errors in Gateway Status when too many addresses are assigned
+- Fixed enforcement of same-namespace for BackendTLSPolicy and target
+- Fixed processing all listeners before returning with an error
+- Fixed creation of infrastructure resources if there are no listeners
+- Fixed use GatewayClass Name for Observability if Merge Gateways is enabled
+- Fixed CORS to not forward Not-Matching Preflights to Backends
+- Fixed BackendTLSPolicy status to fully conform with PolicyStatus
+- Fixed duplication of Ext-Auth, OIDC and Basic Auth Filters
+- Fixed Proxy Protocol Filter to always be the first Listener Filter
+- Fixed Translation Consistency by sorting Gateways
+- Fixed QUIC Listener to only Advertise HTTP/3 over ALPN
+- Fixed SNI matching for TCP Routes with TLS termination
+- Fixed Reconciliation when EnvoyProxy backendRefs changes
+- Fixed Reconciliation when a referenced Secret or ConfigMap changes
+- Fixed ReplaceFullPath not working for root path
+- Fixed Default Application Protocol to TCP for Zipkin Tracing
+- Fixed not appending well-known ports (80, 443) in rediret Location header
+
+## Providers
+- Bumped K8s Client to v0.30.0
+
+## xDS
+- Bumped go-control-plane to v0.12.1
+
+## Cli
+- Added Support for Install and Uninstall Commands to egctl
+- Added Support for xRoute and xPolicy in egctl x status
+- Added Golang version to Envoy Gateway version command
+- Fixed egctl x status gatewayclass example message
+