v1.18.8

This release contained no user-facing changes.

v1.17.24

This release contained no user-facing changes.

v1.19.0-beta8

Fixes

• Added the ability to control if resource status metrics are no longer reported after deletion.
  If a resource was invalid and deleted, a status metric indicating a problem was left behind.
  This could lead to confusion and false alarms.

Setting .Values.gloo.clearStatusMetrics to true will result in metrics
for deleted resources no longer being reported.
This may cause metric scraping to infrequently not see status metrics. (kgateway-dev#6938)

v1.17.23

Dependency Bumps

• solo-io/solo-kit has been upgraded to v0.35.6.

v1.19.0-beta7

Dependency Bumps

• solo-io/envoy-gloo has been upgraded to v1.32.3-patch2.

Breaking Changes

• The default configuration of Envoy will continue to trust internal addresses while in the future it will not trust them by default. If you have tooling such as probes on your private network which need to be treated as trusted (e.g. changing arbitrary x-envoy headers) please explicitly include those addresses or CIDR ranges into internal_address_config. You can turn up or test the upcoming internal address defaults by setting runtime guard envoy.reloadable_features.explicit_internal_address_config to true.
  For more information, see: envoyproxy/envoy#36221 (solo-io/solo-projects#7608)

Fixes

• Fixes the gateway params image to respect the fips and distroless variants specified by global.image.variant. This only applies to the kubernetes gateway proxy. (https://github.com/solo-io/gloo/issues/10602)

v1.18.7

Dependency Bumps

• solo-io/solo-kit has been upgraded to v0.36.4.

Fixes

• Fixes a bug where we translate Gateways that do not belong to us. (solo-io/solo-projects#7768)
• Fixes the gateway params image to respect the fips and distroless variants specified by global.image.variant. This only applies to the kubernetes gateway proxy. (https://github.com/solo-io/gloo/issues/10602)
• Add support for xDS over mTLS for communication between the Gloo pod and the Kubernetes Gateway proxies. This can be enabled by setting the 'global.glooMtls.enabled' helm value to true. (solo-io/solo-projects#6210)
• Pull in solo-kit fix to reduce log level of snapshot cache watches. (kgateway-dev#8626)

v1.17.22

Fixes

• Fixes the gateway params image to respect the fips and distroless variants specified by global.image.variant. This only applies to the kubernetes gateway proxy. (https://github.com/solo-io/gloo/issues/10602)

v1.19.0-beta6

Dependency Bumps

• solo-io/solo-kit has been upgraded to v0.36.4.

Fixes

• Fixes a bug where we translate Gateways that do not belong to us. (solo-io/solo-projects#7768)
• Pull in solo-kit fix to reduce log level of snapshot cache watches. (kgateway-dev#8626)

v1.19.0-beta5

New Features

• Add support for xDS over mTLS for communication between the Gloo pod and the Kubernetes Gateway proxies. This can be enabled by setting the 'global.glooMtls.enabled' helm value to true. (solo-io/solo-projects#6210)
• Add support for setting the authority field on gRPC requests made to OTEL Collectors during tracing.
  When the authority field is set, the gRPC client will use the specified value as the :authority header
  when making requests to the collector. This is useful when the collector is behind a reverse proxy that
  requires a specific authority to be set on incoming requests. (solo-io/solo-projects#7740)

v1.19.0-beta4

Fixes

• When a workload has the label security.istio.io/tlsMode: disabled
  we will no longer attempt to send mTLS to that workload. (#10575)