diff --git a/CHANGELOG.md b/CHANGELOG.md index e9e062b4bc97..5f6c28f864dd 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,8 +1,48 @@ # Changelog +## 2.9.3 +> Released on 2025/01/21 + +* chore(deps): bump coredns from v1.11.3 to v1.12.0 [#12473](https://github.com/kumahq/kuma/pull/12473) @bartsmykla +* chore(deps): bump golang from 1.23.3 to 1.23.5 [#12581](https://github.com/kumahq/kuma/pull/12581) @Icarus9913 +* chore(deps): security update [#12249](https://github.com/kumahq/kuma/pull/12249) [#12327](https://github.com/kumahq/kuma/pull/12327) @kumahq +* chore(deps): upgrade envoy from 1.30.7 to v1.30.9 [#12461](https://github.com/kumahq/kuma/pull/12461) @lukidzi +* fix(cni): support bound service account token by reloading periodically (backport of #12592) [#12623](https://github.com/kumahq/kuma/pull/12623) @jijiechen +* fix(kds): remove context from map on stream close (backport of #12243) [#12262](https://github.com/kumahq/kuma/pull/12262) @lukidzi +* fix(policy): use new compute for rules and fix rules intersect (backport of #12340) [#12515](https://github.com/kumahq/kuma/pull/12515) @Icarus9913 + + +## 2.7.11 +> Released on 2025/01/21 + +* chore(deps): bump coredns from v1.11.3 to v1.12.0 [#12475](https://github.com/kumahq/kuma/pull/12475) @bartsmykla +* chore(deps): bump envoy from v1.29.10 to v1.29.12 [#12217](https://github.com/kumahq/kuma/pull/12217) [#12455](https://github.com/kumahq/kuma/pull/12455) @lukidzi +* chore(deps): bump golang from 1.22.9 to 1.22.11 [#12222](https://github.com/kumahq/kuma/pull/12222) [#12579](https://github.com/kumahq/kuma/pull/12579) @Icarus9913,@lukidzi +* chore(deps): security update [#12246](https://github.com/kumahq/kuma/pull/12246) [#12324](https://github.com/kumahq/kuma/pull/12324) @kumahq +* fix(cni): support bound service account token by reloading periodically (backport of #12592) [#12625](https://github.com/kumahq/kuma/pull/12625) @jijiechen +* fix(k8s): always authenticate with latest service account token (backport #11399) [#12587](https://github.com/kumahq/kuma/pull/12587) @bartsmykla +* fix(k8s): clone annotations before modyfing (backport of #12338) [#12342](https://github.com/kumahq/kuma/pull/12342) @kumahq +* fix(kds): remove context from map on stream close (backport of #12243) [#12264](https://github.com/kumahq/kuma/pull/12264) @lukidzi +* fix(policy): use new compute for rules and fix rules intersect (backport of #12340) [#12517](https://github.com/kumahq/kuma/pull/12517) @Icarus9913 + + +## 2.6.15 +> Released on 2025/01/17 + +* chore(deps): bump coredns from v1.11.3 to v1.12.0 [#12476](https://github.com/kumahq/kuma/pull/12476) @bartsmykla +* chore(deps): bump envoy from v1.29.10 to v1.29.12 [#12216](https://github.com/kumahq/kuma/pull/12216) [#12454](https://github.com/kumahq/kuma/pull/12454) @lukidzi +* chore(deps): bump golang from 1.22.9 to 1.22.11 [#12221](https://github.com/kumahq/kuma/pull/12221) [#12578](https://github.com/kumahq/kuma/pull/12578) @Icarus9913,@lukidzi +* chore(deps): security update [#12247](https://github.com/kumahq/kuma/pull/12247) [#12325](https://github.com/kumahq/kuma/pull/12325) @kumahq +* chore(deps): upgrade actions/cache from v4.0.0 to v4.2.0 (backport of #12485) [#12488](https://github.com/kumahq/kuma/pull/12488) @kumahq +* fix(k8s): always authenticate with latest service account token (backport #11399) [#12588](https://github.com/kumahq/kuma/pull/12588) @bartsmykla +* fix(k8s): clone annotations before modyfing (backport of #12338) [#12341](https://github.com/kumahq/kuma/pull/12341) @kumahq +* fix(kds): remove context from map on stream close (backport of #12243) [#12265](https://github.com/kumahq/kuma/pull/12265) @lukidzi +* fix(policy): use new compute for rules and fix rules intersect (backport of #12340) [#12518](https://github.com/kumahq/kuma/pull/12518) @Icarus9913 + + ## 2.9.2 -> Released on 2024/12/10 +> Released on 2024/12/04 * chore(deps): bump golang from 1.23.2 to 1.23.3 [#12084](https://github.com/kumahq/kuma/pull/12084) @lukidzi * fix(meshpassthrough): Refactor MeshPassthrough implementation to generate correct route [#12157](https://github.com/kumahq/kuma/pull/12157) @kumahq @@ -10,21 +50,21 @@ ## 2.6.14 -> Released on 2024/12/10 +> Released on 2024/12/02 * chore(deps): upgrade go from 1.22.8 to 1.22.9 [#12087](https://github.com/kumahq/kuma/pull/12087) @lukidzi * fix(kds): clone resource on update meta (backport of #10460) [#12121](https://github.com/kumahq/kuma/pull/12121) @kumahq ## 2.7.10 -> Released on 2024/12/09 +> Released on 2024/11/28 * chore(deps): upgrade go from 1.22.8 to 1.22.9 [#12086](https://github.com/kumahq/kuma/pull/12086) @lukidzi * fix(kds): clone resource on update meta (backport of #10460) [#12122](https://github.com/kumahq/kuma/pull/12122) @kumahq ## 2.9.1 -> Released on 2024/11/15 +> Released on 2024/11/14 * chore(deps): algin forked go-control-plane version with upstream [#12029](https://github.com/kumahq/kuma/pull/12029) @kumahq * chore(deps): bump envoy from 1.30.6 to 1.30.7 [#11958](https://github.com/kumahq/kuma/pull/11958) @lukidzi @@ -36,8 +76,18 @@ * fix(meshtimeout): don't set default timeouts on inbound cluster and listener (backport of #12043) [#12049](https://github.com/kumahq/kuma/pull/12049) @kumahq +## 2.6.13 +> Released on 2024/11/13 + +* chore(deps): bump envoy from 1.28.7 to 1.29.10 [#11960](https://github.com/kumahq/kuma/pull/11960) @lukidzi +* chore(deps): security update [#11975](https://github.com/kumahq/kuma/pull/11975) @kumahq +* fix(k8s): set annotation kuma.io/display-name for Secrets and Configs (backport of #11923) [#11940](https://github.com/kumahq/kuma/pull/11940) @kumahq +* fix(kuma-cp): avoid concurrent access on resource meta (backport of #11997) [#12021](https://github.com/kumahq/kuma/pull/12021) @kumahq +* fix(store): preserve existing labels when update [#11953](https://github.com/kumahq/kuma/pull/11953) @kumahq + + ## 2.8.5 -> Released on 2024/11/15 +> Released on 2024/11/12 * chore(deps): bump envoy from 1.30.6 to 1.30.7 [#11957](https://github.com/kumahq/kuma/pull/11957) @lukidzi * chore(deps): security update [#11973](https://github.com/kumahq/kuma/pull/11973) @kumahq @@ -46,7 +96,7 @@ ## 2.7.9 -> Released on 2024/11/15 +> Released on 2024/11/12 * chore(deps): bump envoy from 1.29.9 to 1.29.10 [#11956](https://github.com/kumahq/kuma/pull/11956) @lukidzi * chore(deps): security update [#11972](https://github.com/kumahq/kuma/pull/11972) @kumahq @@ -55,18 +105,8 @@ * fix(store): preserve existing labels when update [#11954](https://github.com/kumahq/kuma/pull/11954) @kumahq -## 2.6.13 -> Released on 2024/11/15 - -* chore(deps): bump envoy from 1.28.7 to 1.29.10 [#11960](https://github.com/kumahq/kuma/pull/11960) @lukidzi -* chore(deps): security update [#11975](https://github.com/kumahq/kuma/pull/11975) @kumahq -* fix(k8s): set annotation kuma.io/display-name for Secrets and Configs (backport of #11923) [#11940](https://github.com/kumahq/kuma/pull/11940) @kumahq -* fix(kuma-cp): avoid concurrent access on resource meta (backport of #11997) [#12021](https://github.com/kumahq/kuma/pull/12021) @kumahq -* fix(store): preserve existing labels when update [#11953](https://github.com/kumahq/kuma/pull/11953) @kumahq - - ## 2.9.0 -> Released on 2024/10/22 +> Released on 2024/10/18 * chore(deps): bump Kong/public-shared-actions from 2.3.0 to 2.7.3 [#11139](https://github.com/kumahq/kuma/pull/11139) [#11218](https://github.com/kumahq/kuma/pull/11218) [#11263](https://github.com/kumahq/kuma/pull/11263) [#11310](https://github.com/kumahq/kuma/pull/11310) [#11518](https://github.com/kumahq/kuma/pull/11518) [#11598](https://github.com/kumahq/kuma/pull/11598) [#11696](https://github.com/kumahq/kuma/pull/11696) @dependabot * chore(deps): bump coredns from v1.11.1 to v1.11.3 [#11568](https://github.com/kumahq/kuma/pull/11568) @michaelbeaumont @@ -291,7 +331,7 @@ ## 2.8.4 -> Released on 2024/10/08 +> Released on 2024/10/07 * chore(deps): bump coredns from v1.11.1 to v1.11.3 [#11574](https://github.com/kumahq/kuma/pull/11574) @kumahq * chore(deps): bump golang from 1.22.7 to 1.22.8 [#11630](https://github.com/kumahq/kuma/pull/11630) @Icarus9913 @@ -305,7 +345,7 @@ ## 2.7.8 -> Released on 2024/10/08 +> Released on 2024/10/07 * chore(deps): bump coredns from v1.11.1 to v1.11.3 [#11575](https://github.com/kumahq/kuma/pull/11575) @kumahq * chore(deps): bump golang from 1.22.7 to 1.22.8 [#11629](https://github.com/kumahq/kuma/pull/11629) @Icarus9913 @@ -319,7 +359,7 @@ ## 2.6.12 -> Released on 2024/10/08 +> Released on 2024/10/06 * chore(deps): bump coredns from v1.11.1 to v1.11.3 [#11576](https://github.com/kumahq/kuma/pull/11576) @kumahq * chore(deps): bump golang from 1.22.7 to 1.22.8 [#11628](https://github.com/kumahq/kuma/pull/11628) @Icarus9913 @@ -333,7 +373,7 @@ ## 2.5.11 -> Released on 2024/10/08 +> Released on 2024/10/06 * chore(deps): bump coredns from v1.11.1 to v1.11.3 [#11573](https://github.com/kumahq/kuma/pull/11573) @kumahq * chore(deps): bump golang from 1.22.7 to 1.22.8 [#11627](https://github.com/kumahq/kuma/pull/11627) @Icarus9913 @@ -345,7 +385,7 @@ ## 2.8.3 -> Released on 2024/09/03 +> Released on 2024/08/30 * chore(deps): bump Kong/public-shared-actions from 2.3.0 to 2.4.0 [#11147](https://github.com/kumahq/kuma/pull/11147) @kumahq * chore(deps): bump github.com/testcontainers/testcontainers-go from 0.31.0 to 0.32.0 [#11158](https://github.com/kumahq/kuma/pull/11158) @kumahq @@ -358,7 +398,7 @@ ## 2.7.7 -> Released on 2024/09/03 +> Released on 2024/08/30 * chore(deps): bump Kong/public-shared-actions from 2.3.0 to 2.4.0 [#11150](https://github.com/kumahq/kuma/pull/11150) @kumahq * chore(deps): bump github.com/testcontainers/testcontainers-go from 0.31.0 to 0.32.0 [#11156](https://github.com/kumahq/kuma/pull/11156) @kumahq @@ -371,7 +411,7 @@ ## 2.6.11 -> Released on 2024/09/03 +> Released on 2024/08/30 * chore(deps): security update [#11200](https://github.com/kumahq/kuma/pull/11200) @kumahq * feat(kuma-dp): respond probes of kuma-sidecar from kuma-dp process instead of Envoy [#11241](https://github.com/kumahq/kuma/pull/11241) @kumahq @@ -382,7 +422,7 @@ ## 2.5.10 -> Released on 2024/09/03 +> Released on 2024/08/30 * chore(deps): security update [#11196](https://github.com/kumahq/kuma/pull/11196) @kumahq * feat(kuma-dp): respond probes of kuma-sidecar from kuma-dp process instead of Envoy [#11239](https://github.com/kumahq/kuma/pull/11239) @kumahq @@ -390,60 +430,71 @@ * fix(xds): explicitly set initial fetch timeout to zero to keep Envoy wait for xds resources (backport of #11024) [#11029](https://github.com/kumahq/kuma/pull/11029) @kumahq -## 2.7.6 -> Released on 2024/07/24 - -* chore(deps): update go to 1.22.5 (backport of #10096) [#10857](https://github.com/kumahq/kuma/pull/10857) @kumahq -* chore(deps): upgrade envoy with DNS fix [#10933](https://github.com/kumahq/kuma/pull/10933) @michaelbeaumont -* fix(transparent-proxy): allow iptables executables without mode [#10792](https://github.com/kumahq/kuma/pull/10792) @bartsmykla - - -## 2.6.10 -> Released on 2024/07/24 +## 2.4.10 +> Released on 2024/07/23 -* chore(deps): update go to 1.22.5 (backport of #10096) [#10853](https://github.com/kumahq/kuma/pull/10853) @kumahq -* chore(deps): upgrade envoy with DNS fix [#10932](https://github.com/kumahq/kuma/pull/10932) @michaelbeaumont -* fix(transparent-proxy): allow iptables executables without mode [#10793](https://github.com/kumahq/kuma/pull/10793) @bartsmykla +* chore(deps): update go to 1.22.5 (backport of #10096) [#10855](https://github.com/kumahq/kuma/pull/10855) @kumahq +* chore(deps): upgrade envoy with DNS fix [#10930](https://github.com/kumahq/kuma/pull/10930) @michaelbeaumont ## 2.5.9 -> Released on 2024/07/24 +> Released on 2024/07/22 * chore(deps): update go to 1.22.5 and kube controller-tools to v0.14.0 (backport of #10096) [#10854](https://github.com/kumahq/kuma/pull/10854) @kumahq * chore(deps): upgrade envoy with DNS fix [#10931](https://github.com/kumahq/kuma/pull/10931) @michaelbeaumont * fix(transparent-proxy): allow iptables executable without mode [#10794](https://github.com/kumahq/kuma/pull/10794) @bartsmykla -## 2.4.10 -> Released on 2024/07/24 - -* chore(deps): update go to 1.22.5 (backport of #10096) [#10855](https://github.com/kumahq/kuma/pull/10855) @kumahq -* chore(deps): upgrade envoy with DNS fix [#10930](https://github.com/kumahq/kuma/pull/10930) @michaelbeaumont - - ## 2.8.2 -> Released on 2024/07/23 +> Released on 2024/07/18 * chore(deps): update go to 1.22.5 (backport of #10096) [#10856](https://github.com/kumahq/kuma/pull/10856) @kumahq * chore(deps): upgrade envoy with DNS fix [#10934](https://github.com/kumahq/kuma/pull/10934) @michaelbeaumont * fix(k8s): avoid nil TargetRef pointer dereference (backport of #10746) [#10763](https://github.com/kumahq/kuma/pull/10763) @kumahq +## 2.7.6 +> Released on 2024/07/18 + +* chore(deps): update go to 1.22.5 (backport of #10096) [#10857](https://github.com/kumahq/kuma/pull/10857) @kumahq +* chore(deps): upgrade envoy with DNS fix [#10933](https://github.com/kumahq/kuma/pull/10933) @michaelbeaumont +* fix(transparent-proxy): allow iptables executables without mode [#10792](https://github.com/kumahq/kuma/pull/10792) @bartsmykla + + +## 2.6.10 +> Released on 2024/07/18 + +* chore(deps): update go to 1.22.5 (backport of #10096) [#10853](https://github.com/kumahq/kuma/pull/10853) @kumahq +* chore(deps): upgrade envoy with DNS fix [#10932](https://github.com/kumahq/kuma/pull/10932) @michaelbeaumont +* fix(transparent-proxy): allow iptables executables without mode [#10793](https://github.com/kumahq/kuma/pull/10793) @bartsmykla + + +## 2.8.1 +> Released on 2024/07/03 + +* chore(deps): upgrade envoy to 1.30.3 [#10645](https://github.com/kumahq/kuma/pull/10645) @lukidzi +* chore(deps): upgrade envoy to 1.30.4 [#10692](https://github.com/kumahq/kuma/pull/10692) @lukidzi +* chore(deps): use latest kumahq/kuma-gui [#10647](https://github.com/kumahq/kuma/pull/10647) @kumahq +* fix(cni): set proper namespace for the taint controller (backport of #10651) [#10662](https://github.com/kumahq/kuma/pull/10662) @kumahq +* fix(hostnamegenerator): selectors validation and matching [#10688](https://github.com/kumahq/kuma/pull/10688) @jakubdyszkiewicz +* fix(meshservice): do not wipe out identities of synced service [#10655](https://github.com/kumahq/kuma/pull/10655) @jakubdyszkiewicz + + ## 2.7.5 -> Released on 2024/07/04 +> Released on 2024/07/03 * chore(deps): bump envoy from 1.29.5 to 1.29.7 [#10641](https://github.com/kumahq/kuma/pull/10641) [#10691](https://github.com/kumahq/kuma/pull/10691) @lukidzi * fix(cni): set proper namespace for the taint controller (backport of #10651) [#10661](https://github.com/kumahq/kuma/pull/10661) @kumahq ## 2.6.9 -> Released on 2024/07/04 +> Released on 2024/07/02 * chore(deps): upgrade envoy to 1.28.5 [#10685](https://github.com/kumahq/kuma/pull/10685) @lukidzi * fix(cni): set proper namespace for the taint controller (backport of #10651) [#10659](https://github.com/kumahq/kuma/pull/10659) @kumahq ## 2.5.8 -> Released on 2024/07/04 +> Released on 2024/07/02 * chore(deps): upgrade envoy to 1.28.5 [#10686](https://github.com/kumahq/kuma/pull/10686) @lukidzi * chore(deps): upgrade go to 1.21.11 (backport of #10401) [#10406](https://github.com/kumahq/kuma/pull/10406) @kumahq @@ -458,7 +509,7 @@ ## 2.4.9 -> Released on 2024/07/04 +> Released on 2024/07/02 * chore(deps): upgrade envoy to 1.27.7 [#10690](https://github.com/kumahq/kuma/pull/10690) @lukidzi * chore(deps): upgrade go from 1.21.10 to 1.21.11 (backport of #10401) [#10407](https://github.com/kumahq/kuma/pull/10407) @kumahq @@ -467,17 +518,6 @@ * fix(kuma-cp): consistently check for expiring ZoneIngress/ZoneEgress certs (backport of #10160, #10162, #10161) [#10170](https://github.com/kumahq/kuma/pull/10170) @kumahq * fix(jobs): jobs termination after CP restart (backport of https://github.com/kumahq/kuma/pull/10085) https://github.com/kumahq/kuma/pull/10087 @kumahq -## 2.8.1 -> Released on 2024/07/03 - -* chore(deps): upgrade envoy to 1.30.3 [#10645](https://github.com/kumahq/kuma/pull/10645) @lukidzi -* chore(deps): upgrade envoy to 1.30.4 [#10692](https://github.com/kumahq/kuma/pull/10692) @lukidzi -* chore(deps): use latest kumahq/kuma-gui [#10647](https://github.com/kumahq/kuma/pull/10647) @kumahq -* fix(cni): set proper namespace for the taint controller (backport of #10651) [#10662](https://github.com/kumahq/kuma/pull/10662) @kumahq -* fix(hostnamegenerator): selectors validation and matching [#10688](https://github.com/kumahq/kuma/pull/10688) @jakubdyszkiewicz -* fix(meshservice): do not wipe out identities of synced service [#10655](https://github.com/kumahq/kuma/pull/10655) @jakubdyszkiewicz - - ## 2.8.0 > Released on 2024/06/24 @@ -610,7 +650,7 @@ ## 2.7.4 -> Released on 2024/06/20 +> Released on 2024/06/19 * chore(deps): bump envoy version from 1.29.4 to 1.29.5 [#10390](https://github.com/kumahq/kuma/pull/10390) @lukidzi * chore(deps): ignore go-control-plane updates by dependabot (backport of #10412) [#10416](https://github.com/kumahq/kuma/pull/10416) @kumahq @@ -623,7 +663,7 @@ ## 2.6.8 -> Released on 2024/06/20 +> Released on 2024/06/19 * chore(deps): bump envoy version from 1.28.3 to 1.28.4 [#10386](https://github.com/kumahq/kuma/pull/10386) @lukidzi * chore(deps): ignore go-control-plane updates by dependabot (backport of #10412) [#10418](https://github.com/kumahq/kuma/pull/10418) @kumahq @@ -635,14 +675,14 @@ ## 2.6.7 -> Released on 2024/05/30 +> Released on 2024/05/29 * fix(MeshRoute): properly map listener TLS certs to DownstreamTlsContext (backport of #10272) [#10344](https://github.com/kumahq/kuma/pull/10344) @kumahq * fix(kds): fix the case when webhook/db reject resource (backport of #10315) [#10351](https://github.com/kumahq/kuma/pull/10351) @kumahq ## 2.7.3 -> Released on 2024/05/20 +> Released on 2024/05/17 * chore(deps): bump go to 1.21.10 (backport of #10209) [#10258](https://github.com/kumahq/kuma/pull/10258) @kumahq * chore(deps): use latest kumahq/kuma-gui [#10092](https://github.com/kumahq/kuma/pull/10092) [#10199](https://github.com/kumahq/kuma/pull/10199) @kumahq @@ -665,7 +705,7 @@ ## 2.7.2 -> Released on 2024/04/30 +> Released on 2024/04/25 * fix(jobs): jobs termination after CP restart (#10085) * fix(gatewayapi): validate presence of all required Gateway API resources (backport of #10079) (#10082) @@ -681,7 +721,7 @@ ## 2.7.0 -> Released on 2024/04/19 +> Released on 2024/04/17 * chore(deps): bump Envoy from 1.28.0 to 1.29.3 [#9134](https://github.com/kumahq/kuma/pull/9134) [#9222](https://github.com/kumahq/kuma/pull/9222) [#9600](https://github.com/kumahq/kuma/pull/9600) [#9853](https://github.com/kumahq/kuma/pull/9853) @lukidzi * chore(deps): bump Kong/public-shared-actions from 2.0.2 to 2.1.0 [#9556](https://github.com/kumahq/kuma/pull/9556) [#9711](https://github.com/kumahq/kuma/pull/9711) @dependabot @@ -838,21 +878,21 @@ ## 2.6.5 -> Released on 2024/04/09 +> Released on 2024/04/07 * chore(deps): security update [#9820](https://github.com/kumahq/kuma/pull/9820) @kumahq * chore(deps): update Envoy to v1.28.2 [#9843](https://github.com/kumahq/kuma/pull/9843) [#9848](https://github.com/kumahq/kuma/pull/9848) @michaelbeaumont ## 2.5.7 -> Released on 2024/04/09 +> Released on 2024/04/07 * chore(deps): security update [#9818](https://github.com/kumahq/kuma/pull/9818) @kumahq * chore(deps): update Envoy to v1.28.2 [#9845](https://github.com/kumahq/kuma/pull/9845) [#9847](https://github.com/kumahq/kuma/pull/9847) @michaelbeaumont ## 2.4.8 -> Released on 2024/04/09 +> Released on 2024/04/05 * Revert "feat(images/kuma-init): use iptables-wrapper to use correct iptables version (backport of #9701) (#9726)" [#9757](https://github.com/kumahq/kuma/pull/9757) @bartsmykla * chore(deps): security update [#9684](https://github.com/kumahq/kuma/pull/9684) [#9696](https://github.com/kumahq/kuma/pull/9696) [#9815](https://github.com/kumahq/kuma/pull/9815) @kumahq @@ -860,7 +900,7 @@ ## 2.3.7 -> Released on 2024/04/09 +> Released on 2024/04/05 * Revert "feat(images/kuma-init): use iptables-wrapper to use correct iptables version (backport of #9701) (#9725)" [#9758](https://github.com/kumahq/kuma/pull/9758) @bartsmykla * chore(deps): security update [#9683](https://github.com/kumahq/kuma/pull/9683) [#9694](https://github.com/kumahq/kuma/pull/9694) [#9817](https://github.com/kumahq/kuma/pull/9817) @kumahq @@ -868,7 +908,7 @@ ## 2.2.9 -> Released on 2024/04/09 +> Released on 2024/04/05 * Revert "feat(images/kuma-init): use iptables-wrapper to use correct iptables version (backport of #9701) (#9727)" [#9759](https://github.com/kumahq/kuma/pull/9759) @bartsmykla * chore(deps): security update [#9680](https://github.com/kumahq/kuma/pull/9680) [#9695](https://github.com/kumahq/kuma/pull/9695) [#9816](https://github.com/kumahq/kuma/pull/9816) @kumahq @@ -902,40 +942,40 @@ * feat(transparent-proxy): add automatic iptables type detection (backport of #9750) [#9764](https://github.com/kumahq/kuma/pull/9764) @kumahq -## 2.6.2 -> Released on 2024/03/19 - -* chore(deps): security update [#9368](https://github.com/kumahq/kuma/pull/9368) [#9514](https://github.com/kumahq/kuma/pull/9514) [#9621](https://github.com/kumahq/kuma/pull/9621) @kumahq -* fix(kuma-cp): clone outbound tags (backport of #9592) [#9599](https://github.com/kumahq/kuma/pull/9599) @kumahq -* fix(xds): duplicated listeners (backport of #9542) [#9552](https://github.com/kumahq/kuma/pull/9552) @kumahq - - ## 2.5.4 -> Released on 2024/03/19 +> Released on 2024/03/15 * chore(deps): security update [#9366](https://github.com/kumahq/kuma/pull/9366) [#9512](https://github.com/kumahq/kuma/pull/9512) [#9619](https://github.com/kumahq/kuma/pull/9619) @kumahq ## 2.4.7 -> Released on 2024/03/19 +> Released on 2024/03/15 * chore(deps): security update [#9513](https://github.com/kumahq/kuma/pull/9513) [#9620](https://github.com/kumahq/kuma/pull/9620) @kumahq * chore(deps): use latest kumahq/kuma-gui [#9409](https://github.com/kumahq/kuma/pull/9409) @kumahq ## 2.3.6 -> Released on 2024/03/19 +> Released on 2024/03/15 * chore(deps): security update [#9515](https://github.com/kumahq/kuma/pull/9515) [#9618](https://github.com/kumahq/kuma/pull/9618) @kumahq ## 2.2.8 -> Released on 2024/03/19 +> Released on 2024/03/15 * chore(deps): manual security update release-2.2 [#9523](https://github.com/kumahq/kuma/pull/9523) @lobkovilya * chore(deps): security update [#9537](https://github.com/kumahq/kuma/pull/9537) [#9617](https://github.com/kumahq/kuma/pull/9617) @kumahq +## 2.6.2 +> Released on 2024/03/13 + +* chore(deps): security update [#9368](https://github.com/kumahq/kuma/pull/9368) [#9514](https://github.com/kumahq/kuma/pull/9514) [#9621](https://github.com/kumahq/kuma/pull/9621) @kumahq +* fix(kuma-cp): clone outbound tags (backport of #9592) [#9599](https://github.com/kumahq/kuma/pull/9599) @kumahq +* fix(xds): duplicated listeners (backport of #9542) [#9552](https://github.com/kumahq/kuma/pull/9552) @kumahq + + ## 2.5.3 > Released on 2024/02/20 @@ -967,7 +1007,7 @@ ## 2.6.1 -> Released on 2024/02/19 +> Released on 2024/02/16 * chore(deps): downgrade go-control-plane to v0.11.2-0.20231010133108-1dfbe83bcebc (backport of #9163) [#9285](https://github.com/kumahq/kuma/pull/9285) @kumahq * chore(deps): security update [#9288](https://github.com/kumahq/kuma/pull/9288) @kumahq @@ -984,19 +1024,8 @@ * fix(kuma-cp): prevent violating kubernetes label limit (backport of #9191) [#9233](https://github.com/kumahq/kuma/pull/9233) @kumahq -## 2.5.2 -> Released on 2024/02/06 - -* chore(deps): security update [#8678](https://github.com/kumahq/kuma/pull/8678) [#8694](https://github.com/kumahq/kuma/pull/8694) [#9103](https://github.com/kumahq/kuma/pull/9103) @kumahq -* chore(deps): update go from 1.21.5 to 1.21.6 (backport of #8944) [#8962](https://github.com/kumahq/kuma/pull/8962) @kumahq -* chore(deps): update go to 1.21.5 (backport of #8616) [#8627](https://github.com/kumahq/kuma/pull/8627) @kumahq -* fix(kds): race condition on fill metadata (backport of #8872) [#8999](https://github.com/kumahq/kuma/pull/8999) @kumahq -* fix(kuma-cp): assign `extensions` in `ZoneInsightSink` constructor (backport of #8940) [#8956](https://github.com/kumahq/kuma/pull/8956) @kumahq -* fix(vips): skip ignored listeners (backport of #8937) [#8982](https://github.com/kumahq/kuma/pull/8982) @kumahq - - ## 2.4.5 -> Released on 2024/02/06 +> Released on 2024/02/02 * chore(deps): bump the go-opentelemetry-io group with 3 updates (backport of #8347) [#8352](https://github.com/kumahq/kuma/pull/8352) @kumahq * chore(deps): security update [#8672](https://github.com/kumahq/kuma/pull/8672) [#8699](https://github.com/kumahq/kuma/pull/8699) [#9100](https://github.com/kumahq/kuma/pull/9100) @kumahq @@ -1009,7 +1038,7 @@ ## 2.3.4 -> Released on 2024/02/06 +> Released on 2024/02/02 * chore(deps): security update [#8204](https://github.com/kumahq/kuma/pull/8204) [#8674](https://github.com/kumahq/kuma/pull/8674) [#8697](https://github.com/kumahq/kuma/pull/8697) [#9099](https://github.com/kumahq/kuma/pull/9099) @kumahq * chore(deps): update go from 1.21.5 to 1.21.6 (backport of #8944) [#8958](https://github.com/kumahq/kuma/pull/8958) @kumahq @@ -1022,19 +1051,6 @@ * fix(kds): race condition on fill metadata (backport of #8872) [#8997](https://github.com/kumahq/kuma/pull/8997) @kumahq -## 2.2.6 -> Released on 2024/02/06 - -* chore(deps): security update [#8202](https://github.com/kumahq/kuma/pull/8202) [#8673](https://github.com/kumahq/kuma/pull/8673) [#8698](https://github.com/kumahq/kuma/pull/8698) [#9105](https://github.com/kumahq/kuma/pull/9105) @kumahq -* chore(deps): update go from 1.21.5 to 1.21.6 (backport of #8944) [#8960](https://github.com/kumahq/kuma/pull/8960) @kumahq -* chore(deps): update go to 1.21.4 (backport of #8341) [#8346](https://github.com/kumahq/kuma/pull/8346) @kumahq -* chore(deps): update go to 1.21.5 (backport of #8616) [#8623](https://github.com/kumahq/kuma/pull/8623) @kumahq -* chore(deps): upgrade envoy to 1.25.11 [#8163](https://github.com/kumahq/kuma/pull/8163) @lukidzi -* fix(MeshTrafficPermission): support permissive mtls (backport of #8171) [#8178](https://github.com/kumahq/kuma/pull/8178) @kumahq -* fix(k8s): don't temporarily remove all AvailableServices on ZoneIngress Pod reconciliations (backport of #8301) [#8305](https://github.com/kumahq/kuma/pull/8305) @kumahq -* fix(k8s): fix VIPs configmap entries with invalid keys for ExternalName services (backport of #8168) [#8195](https://github.com/kumahq/kuma/pull/8195) @kumahq - - ## 2.6.0 > Released on 2024/02/01 @@ -1206,8 +1222,32 @@ * fix(vips): skip ignored listeners [#8937](https://github.com/kumahq/kuma/pull/8937) @jakubdyszkiewicz +## 2.5.2 +> Released on 2024/02/01 + +* chore(deps): security update [#8678](https://github.com/kumahq/kuma/pull/8678) [#8694](https://github.com/kumahq/kuma/pull/8694) [#9103](https://github.com/kumahq/kuma/pull/9103) @kumahq +* chore(deps): update go from 1.21.5 to 1.21.6 (backport of #8944) [#8962](https://github.com/kumahq/kuma/pull/8962) @kumahq +* chore(deps): update go to 1.21.5 (backport of #8616) [#8627](https://github.com/kumahq/kuma/pull/8627) @kumahq +* fix(kds): race condition on fill metadata (backport of #8872) [#8999](https://github.com/kumahq/kuma/pull/8999) @kumahq +* fix(kuma-cp): assign `extensions` in `ZoneInsightSink` constructor (backport of #8940) [#8956](https://github.com/kumahq/kuma/pull/8956) @kumahq +* fix(vips): skip ignored listeners (backport of #8937) [#8982](https://github.com/kumahq/kuma/pull/8982) @kumahq + + +## 2.2.6 +> Released on 2024/02/01 + +* chore(deps): security update [#8202](https://github.com/kumahq/kuma/pull/8202) [#8673](https://github.com/kumahq/kuma/pull/8673) [#8698](https://github.com/kumahq/kuma/pull/8698) [#9105](https://github.com/kumahq/kuma/pull/9105) @kumahq +* chore(deps): update go from 1.21.5 to 1.21.6 (backport of #8944) [#8960](https://github.com/kumahq/kuma/pull/8960) @kumahq +* chore(deps): update go to 1.21.4 (backport of #8341) [#8346](https://github.com/kumahq/kuma/pull/8346) @kumahq +* chore(deps): update go to 1.21.5 (backport of #8616) [#8623](https://github.com/kumahq/kuma/pull/8623) @kumahq +* chore(deps): upgrade envoy to 1.25.11 [#8163](https://github.com/kumahq/kuma/pull/8163) @lukidzi +* fix(MeshTrafficPermission): support permissive mtls (backport of #8171) [#8178](https://github.com/kumahq/kuma/pull/8178) @kumahq +* fix(k8s): don't temporarily remove all AvailableServices on ZoneIngress Pod reconciliations (backport of #8301) [#8305](https://github.com/kumahq/kuma/pull/8305) @kumahq +* fix(k8s): fix VIPs configmap entries with invalid keys for ExternalName services (backport of #8168) [#8195](https://github.com/kumahq/kuma/pull/8195) @kumahq + + ## 2.5.1 -> Released on 2023/12/12 +> Released on 2023/12/05 * feat(dataplane): ignored listeners with ignored labels in selector (backport of #8463) [#8544](https://github.com/kumahq/kuma/pull/8544) @kumahq * fix(ZoneIngress): subset routing when tag is present on all subsets (backport of #8443) [#8475](https://github.com/kumahq/kuma/pull/8475) @kumahq @@ -1394,7 +1434,7 @@ ## 2.4.3 -> Released on 2023/10/12 +> Released on 2023/10/11 * chore(deps): bump envoy from 1.27.0 to 1.27.1 [#8025](https://github.com/kumahq/kuma/pull/8025) @lahabana * chore(deps): bump go version to 1.21.3 (backport of #8001) [#8012](https://github.com/kumahq/kuma/pull/8012) @kumahq @@ -1402,7 +1442,7 @@ ## 2.3.3 -> Released on 2023/10/12 +> Released on 2023/10/11 * chore(deps): bump envoy from 1.26.4 to 1.26.5 [#8024](https://github.com/kumahq/kuma/pull/8024) @lahabana * chore(deps): bump go from 1.20.7 to 1.21.1 [#7825](https://github.com/kumahq/kuma/pull/7825) @kumahq @@ -1417,7 +1457,7 @@ ## 2.2.5 -> Released on 2023/10/12 +> Released on 2023/10/11 * chore(deps): bump envoy from 1.25.9 to 1.25.10 [#8026](https://github.com/kumahq/kuma/pull/8026) @lahabana * chore(deps): bump go from 1.20.7 to 1.21.1 [#7827](https://github.com/kumahq/kuma/pull/7827) @kumahq @@ -1432,7 +1472,7 @@ ## 2.1.7 -> Released on 2023/10/12 +> Released on 2023/10/11 * chore(deps): bump envoy from 1.24.10 to 1.24.11 [#8027](https://github.com/kumahq/kuma/pull/8027) @lahabana * chore(deps): bump go from 1.20.7 to 1.21.1 [#7829](https://github.com/kumahq/kuma/pull/7829) @kumahq @@ -1446,7 +1486,7 @@ ## 2.0.8 -> Released on 2023/10/12 +> Released on 2023/10/11 * chore(deps): bump envoy from 1.24.10 to 1.24.11 [#8028](https://github.com/kumahq/kuma/pull/8028) @lahabana * chore(deps): bump go from 1.18 to 1.21.1 [#7533](https://github.com/kumahq/kuma/pull/7533) [#7828](https://github.com/kumahq/kuma/pull/7828) @kumahq,@michaelbeaumont @@ -1488,7 +1528,7 @@ ## 2.4.0 -> Released on 2023/08/29 +> Released on 2023/08/28 * chore(deps): bump CoreDNS from v1.10.1 to v1.11.1 [#7493](https://github.com/kumahq/kuma/pull/7493) [#7523](https://github.com/kumahq/kuma/pull/7523) @michaelbeaumont * chore(deps): bump cirello.io/pglock from 1.13.0 to 1.14.0 [#7554](https://github.com/kumahq/kuma/pull/7554) @dependabot @@ -1591,7 +1631,7 @@ ## 2.1.6 -> Released on 2023/08/14 +> Released on 2023/08/09 * chore(deps): bump go from 1.18 to 1.20.7 [#7446](https://github.com/kumahq/kuma/pull/7446) [#7489](https://github.com/kumahq/kuma/pull/7489) @michaelbeaumont * chore(deps): security update [#7405](https://github.com/kumahq/kuma/pull/7405) [#7442](https://github.com/kumahq/kuma/pull/7442) @kumahq @@ -1599,7 +1639,7 @@ ## 2.2.4 -> Released on 2023/08/05 +> Released on 2023/08/04 * chore(deps): security update [#7454](https://github.com/kumahq/kuma/pull/7454) @kumahq * chore(deps): update go from 1.20.5 to 1.20.6 (backport of #7414) [#7417](https://github.com/kumahq/kuma/pull/7417) @kumahq @@ -1612,7 +1652,7 @@ ## 2.3.2 -> Released on 2023/08/04 +> Released on 2023/08/03 * chore(deps): security update [#7443](https://github.com/kumahq/kuma/pull/7443) @kumahq * chore(deps): update go from 1.20.5 to 1.20.6 (backport of #7414) [#7419](https://github.com/kumahq/kuma/pull/7419) @kumahq @@ -1625,7 +1665,7 @@ ## 2.1.5 -> Released on 2023/07/28 +> Released on 2023/07/27 * chore(deps): upgrade envoy to 1.24.10 [#7363](https://github.com/kumahq/kuma/pull/7363) @lukidzi * fix(kuma-cp): don't leak goroutine on every tick in SimpleWatchdog (backport of #7348) [#7352](https://github.com/kumahq/kuma/pull/7352) @kumahq @@ -1633,14 +1673,14 @@ ## 2.0.7 -> Released on 2023/07/28 +> Released on 2023/07/27 * chore(deps): upgrade envoy to 1.24.10 [#7364](https://github.com/kumahq/kuma/pull/7364) @lukidzi * fix(kuma-cp): order resources for building VIPs (backport of #7333) [#7358](https://github.com/kumahq/kuma/pull/7358) @kumahq ## 1.8.8 -> Released on 2023/07/28 +> Released on 2023/07/27 * chore(deps): upgrade envoy to 1.24.10 [#7365](https://github.com/kumahq/kuma/pull/7365) @lukidzi * fix(kuma-cp): order resources for building VIPs (backport of #7333) [#7360](https://github.com/kumahq/kuma/pull/7360) @kumahq @@ -1673,7 +1713,7 @@ ## 2.1.4 -> Released on 2023/07/21 +> Released on 2023/07/19 * chore(deps): bump envoy to 1.24.9 which fix [CVE-2023-35945](https://github.com/envoyproxy/envoy/security/advisories/GHSA-jfxv-29pc-x22r) [#7264](https://github.com/kumahq/kuma/pull/7264) @lukidzi * fix(kuma-cp): cancel OnTick when watchdog stopped (backport of #7221) [#7240](https://github.com/kumahq/kuma/pull/7240) @kumahq @@ -1684,7 +1724,7 @@ ## 2.0.6 -> Released on 2023/07/21 +> Released on 2023/07/19 * chore(deps): bump envoy to 1.24.9 which fix [CVE-2023-35945](https://github.com/envoyproxy/envoy/security/advisories/GHSA-jfxv-29pc-x22r) [#7263](https://github.com/kumahq/kuma/pull/7263) @lukidzi * fix(kuma-cp): don't fail when 2 headless services pointing to the same service (backport of #7282) [#7293](https://github.com/kumahq/kuma/pull/7293) @kumahq @@ -1692,14 +1732,14 @@ ## 1.8.7 -> Released on 2023/07/21 +> Released on 2023/07/19 * chore(deps): bump envoy to 1.24.9 which fix [CVE-2023-35945](https://github.com/envoyproxy/envoy/security/advisories/GHSA-jfxv-29pc-x22r) [#7262](https://github.com/kumahq/kuma/pull/7262) @lukidzi * fix(kuma-cp): don't fail when 2 headless services pointing to the same service (backport of #7282) [#7292](https://github.com/kumahq/kuma/pull/7292) @kumahq ## 2.3.0 -> Released on 2023/06/23 +> Released on 2023/06/22 * chore(deps): bump Envoy from v1.25.4 to v1.26.2 [#6638](https://github.com/kumahq/kuma/pull/6638) [#6938](https://github.com/kumahq/kuma/pull/6938) @lukidzi,@michaelbeaumont * chore(deps): bump cirello.io/pglock from 1.11.0 to 1.13.0 [#6817](https://github.com/kumahq/kuma/pull/6817) [#6927](https://github.com/kumahq/kuma/pull/6927) @dependabot @@ -1865,7 +1905,7 @@ ## 2.2.1 -> Released on 2023/05/11 +> Released on 2023/05/03 * chore(deps): bump golang from 1.20.2 to 1.20.3 [#6597](https://github.com/kumahq/kuma/pull/6597) @mergify * chore(deps): use latest kumahq/kuma-gui [#6574](https://github.com/kumahq/kuma/pull/6574) @kumahq @@ -1990,19 +2030,6 @@ * fix(tproxy): allow disabling ipv6 for tproxy [#5923](https://github.com/kumahq/kuma/pull/5923) @bartsmykla -## 2.1.2 -> Released on 2023/04/07 - -* chore(deps): bump coredns from 1.10.0 to 1.10.1 [#6237](https://github.com/kumahq/kuma/pull/6237) @mergify -* chore(deps): remove dependency on github.com/prometheus/prometheus (backport #6204) [#6205](https://github.com/kumahq/kuma/pull/6205) @mergify -* chore(deps): security update [#6062](https://github.com/kumahq/kuma/pull/6062) [#6392](https://github.com/kumahq/kuma/pull/6392) [#6471](https://github.com/kumahq/kuma/pull/6471) @kumahq -* chore(deps): upgrade envoy to v1.22.10 [#6483](https://github.com/kumahq/kuma/pull/6483) @michaelbeaumont -* fix(kuma-cni): ipv6 iptables with provided gateway and CNI V2 (backport #6374) [#6376](https://github.com/kumahq/kuma/pull/6376) @mergify -* fix(kuma-cp): add components in runtime (backport #6350) [#6381](https://github.com/kumahq/kuma/pull/6381) @mergify -* fix(kuma-cp): don't let CA requests for other meshes block generation (backport #6282) [#6284](https://github.com/kumahq/kuma/pull/6284) @mergify -* fix(policy): matcher with same key not the same value (backport #6460) [#6466](https://github.com/kumahq/kuma/pull/6466) @mergify - - ## 2.0.4 > Released on 2023/04/07 @@ -2015,8 +2042,21 @@ * fix(policy): matcher with same key not the same value (backport #6460) [#6467](https://github.com/kumahq/kuma/pull/6467) @mergify +## 2.1.2 +> Released on 2023/04/06 + +* chore(deps): bump coredns from 1.10.0 to 1.10.1 [#6237](https://github.com/kumahq/kuma/pull/6237) @mergify +* chore(deps): remove dependency on github.com/prometheus/prometheus (backport #6204) [#6205](https://github.com/kumahq/kuma/pull/6205) @mergify +* chore(deps): security update [#6062](https://github.com/kumahq/kuma/pull/6062) [#6392](https://github.com/kumahq/kuma/pull/6392) [#6471](https://github.com/kumahq/kuma/pull/6471) @kumahq +* chore(deps): upgrade envoy to v1.22.10 [#6483](https://github.com/kumahq/kuma/pull/6483) @michaelbeaumont +* fix(kuma-cni): ipv6 iptables with provided gateway and CNI V2 (backport #6374) [#6376](https://github.com/kumahq/kuma/pull/6376) @mergify +* fix(kuma-cp): add components in runtime (backport #6350) [#6381](https://github.com/kumahq/kuma/pull/6381) @mergify +* fix(kuma-cp): don't let CA requests for other meshes block generation (backport #6282) [#6284](https://github.com/kumahq/kuma/pull/6284) @mergify +* fix(policy): matcher with same key not the same value (backport #6460) [#6466](https://github.com/kumahq/kuma/pull/6466) @mergify + + ## 1.8.5 -> Released on 2023/04/07 +> Released on 2023/04/06 * chore(deps): bump coredns from 1.10.0 to 1.10.1 [#6239](https://github.com/kumahq/kuma/pull/6239) @mergify * chore(deps): bump gorestful and jwt [#6203](https://github.com/kumahq/kuma/pull/6203) @lahabana @@ -2026,7 +2066,7 @@ ## 1.7.6 -> Released on 2023/04/07 +> Released on 2023/04/06 * chore(deps): bump coredns from 1.10.0 to 1.10.1 [#6240](https://github.com/kumahq/kuma/pull/6240) @mergify * chore(deps): bump gorestful and jwt (backport #6203) [#6212](https://github.com/kumahq/kuma/pull/6212) @mergify @@ -2035,7 +2075,7 @@ ## 2.1.1 -> Released on 2023/02/16 +> Released on 2023/02/14 * chore(deps): bump Envoy from 1.22.2 to 1.22.7 [#5985](https://github.com/kumahq/kuma/pull/5985) @mergify * chore(deps): security update [#5965](https://github.com/kumahq/kuma/pull/5965) @kumahq @@ -2046,1261 +2086,23 @@ ## 2.0.3 -> Released on 2023/02/16 +> Released on 2023/02/14 * chore(deps): bump Envoy from 1.22.2 to 1.22.7 [#5986](https://github.com/kumahq/kuma/pull/5986) @mergify * chore(deps): security update [#5762](https://github.com/kumahq/kuma/pull/5762) [#5969](https://github.com/kumahq/kuma/pull/5969) @kumahq * fix(tproxy): fix disabling ipv6 for tproxy (backport #5923) [#5954](https://github.com/kumahq/kuma/pull/5954) @mergify -## 1.8.4 -> Released on 2023/02/16 - -* chore(deps): bump Envoy from 1.22.2 to 1.22.7 [#5987](https://github.com/kumahq/kuma/pull/5987) @mergify -* chore(deps): security update [#5763](https://github.com/kumahq/kuma/pull/5763) [#5963](https://github.com/kumahq/kuma/pull/5963) @kumahq -* fix(tproxy): fix disabling ipv6 for tproxy (backport #5923) [#5955](https://github.com/kumahq/kuma/pull/5955) @mergify - - ## 1.7.5 -> Released on 2023/02/16 +> Released on 2023/02/14 * chore(deps): bump Envoy from 1.22.2 to 1.22.7 [#5988](https://github.com/kumahq/kuma/pull/5988) @mergify * chore(deps): security update [#5766](https://github.com/kumahq/kuma/pull/5766) [#5966](https://github.com/kumahq/kuma/pull/5966) @kumahq ## 1.6.5 -> Released on 2023/02/16 +> Released on 2023/02/14 * chore(deps): bump Envoy from 1.22.2 to 1.22.7 [#5989](https://github.com/kumahq/kuma/pull/5989) @mergify * chore(deps): security update [#5764](https://github.com/kumahq/kuma/pull/5764) [#5964](https://github.com/kumahq/kuma/pull/5964) @kumahq - -## 2.1.0 -> Released on 2023/02/01 - -* chore(deps): bump alpine from 3.16.2 to 3.17.0 [#5308](https://github.com/kumahq/kuma/pull/5308) [#5375](https://github.com/kumahq/kuma/pull/5375) @dependabot -* chore(deps): bump github.com/Masterminds/semver/v3 from 3.1.1 to 3.2.0 [#5377](https://github.com/kumahq/kuma/pull/5377) @dependabot -* chore(deps): bump github.com/Masterminds/sprig/v3 from 3.2.2 to 3.2.3 [#5457](https://github.com/kumahq/kuma/pull/5457) @dependabot -* chore(deps): bump github.com/containerd/containerd from 1.6.8 to 1.6.12 [#5600](https://github.com/kumahq/kuma/pull/5600) @dependabot -* chore(deps): bump github.com/containernetworking/plugins from 1.1.1 to 1.2.0 [#5733](https://github.com/kumahq/kuma/pull/5733) @dependabot -* chore(deps): bump github.com/envoyproxy/protoc-gen-validate from 0.6.13 to 0.9.1 [#5277](https://github.com/kumahq/kuma/pull/5277) [#5311](https://github.com/kumahq/kuma/pull/5311) [#5460](https://github.com/kumahq/kuma/pull/5460) @dependabot -* chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.4.3 [#5428](https://github.com/kumahq/kuma/pull/5428) @dependabot -* chore(deps): bump github.com/gruntwork-io/terratest from 0.40.24 to 0.41.8 [#5310](https://github.com/kumahq/kuma/pull/5310) [#5354](https://github.com/kumahq/kuma/pull/5354) [#5426](https://github.com/kumahq/kuma/pull/5426) [#5542](https://github.com/kumahq/kuma/pull/5542) [#5688](https://github.com/kumahq/kuma/pull/5688) @dependabot,@lahabana -* chore(deps): bump github.com/kumahq/kuma-net from 0.8.7 to 0.8.10 [#5298](https://github.com/kumahq/kuma/pull/5298) [#5513](https://github.com/kumahq/kuma/pull/5513) @lukidzi -* chore(deps): bump github.com/onsi/ginkgo/v2 from 2.4.0 to 2.7.0 [#5319](https://github.com/kumahq/kuma/pull/5319) [#5351](https://github.com/kumahq/kuma/pull/5351) [#5687](https://github.com/kumahq/kuma/pull/5687) @dependabot -* chore(deps): bump github.com/onsi/gomega from 1.23.0 to 1.25.0 [#5275](https://github.com/kumahq/kuma/pull/5275) [#5313](https://github.com/kumahq/kuma/pull/5313) [#5539](https://github.com/kumahq/kuma/pull/5539) [#5789](https://github.com/kumahq/kuma/pull/5789) @dependabot -* chore(deps): bump github.com/prometheus/client_golang from 1.13.0 to 1.14.0 [#5274](https://github.com/kumahq/kuma/pull/5274) [#5323](https://github.com/kumahq/kuma/pull/5323) @dependabot -* chore(deps): bump github.com/prometheus/common from 0.37.0 to 0.39.0 [#5483](https://github.com/kumahq/kuma/pull/5483) [#5523](https://github.com/kumahq/kuma/pull/5523) @dependabot -* chore(deps): bump github.com/prometheus/prometheus from 0.39.1 to 0.41.0 [#5320](https://github.com/kumahq/kuma/pull/5320) [#5353](https://github.com/kumahq/kuma/pull/5353) [#5376](https://github.com/kumahq/kuma/pull/5376) [#5456](https://github.com/kumahq/kuma/pull/5456) [#5526](https://github.com/kumahq/kuma/pull/5526) [#5546](https://github.com/kumahq/kuma/pull/5546) @dependabot -* chore(deps): bump github.com/sethvargo/go-retry from 0.2.3 to 0.2.4 [#5524](https://github.com/kumahq/kuma/pull/5524) @dependabot -* chore(deps): bump github.com/shopspring/decimal from 1.2.0 to 1.3.1 [#5790](https://github.com/kumahq/kuma/pull/5790) @dependabot -* chore(deps): bump github.com/spf13/viper from 1.13.0 to 1.15.0 [#5273](https://github.com/kumahq/kuma/pull/5273) [#5788](https://github.com/kumahq/kuma/pull/5788) @dependabot -* chore(deps): bump go.uber.org/multierr from 1.8.0 to 1.9.0 [#5525](https://github.com/kumahq/kuma/pull/5525) @dependabot -* chore(deps): bump go.uber.org/zap from 1.23.0 to 1.24.0 [#5427](https://github.com/kumahq/kuma/pull/5427) @dependabot -* chore(deps): bump golang.org/x/net from 0.1.0 to 0.5.0 [#5315](https://github.com/kumahq/kuma/pull/5315) [#5459](https://github.com/kumahq/kuma/pull/5459) [#5623](https://github.com/kumahq/kuma/pull/5623) @dependabot -* chore(deps): bump golang.org/x/sys from 0.1.0 to 0.4.0 [#5312](https://github.com/kumahq/kuma/pull/5312) [#5430](https://github.com/kumahq/kuma/pull/5430) [#5621](https://github.com/kumahq/kuma/pull/5621) @dependabot -* chore(deps): bump golang.org/x/text from 0.4.0 to 0.6.0 [#5458](https://github.com/kumahq/kuma/pull/5458) [#5624](https://github.com/kumahq/kuma/pull/5624) @dependabot -* chore(deps): bump golang.org/x/time from 0.1.0 to 0.3.0 [#5325](https://github.com/kumahq/kuma/pull/5325) [#5429](https://github.com/kumahq/kuma/pull/5429) @dependabot -* chore(deps): bump google.golang.org/grpc from 1.50.1 to 1.52.0 [#5352](https://github.com/kumahq/kuma/pull/5352) [#5686](https://github.com/kumahq/kuma/pull/5686) @dependabot -* chore(deps): bump helm.sh/helm/v3 from 3.8.1 to 3.11.0 [#5592](https://github.com/kumahq/kuma/pull/5592) [#5791](https://github.com/kumahq/kuma/pull/5791) @dependabot -* chore(deps): bump istio.io/pkg from v0.0.0-20201202160453-b7f8c8c88ca3 to v0.0.0-20221115183735-2aabb09bf0bb [#5330](https://github.com/kumahq/kuma/pull/5330) @mmorel-35 -* chore(deps): bump k8s.io/apiextensions-apiserver from 0.25.3 to 0.25.4 [#5328](https://github.com/kumahq/kuma/pull/5328) @mmorel-35 -* chore(deps): bump k8s.io/client-go from 0.25.3 to 0.25.4 [#5316](https://github.com/kumahq/kuma/pull/5316) @dependabot -* chore(deps): bump k8s.io/klog/v2 from 2.80.1 to 2.90.0 [#5812](https://github.com/kumahq/kuma/pull/5812) @dependabot -* chore(deps): bump sigs.k8s.io/controller-runtime from 0.13.0 to 0.13.1 [#5276](https://github.com/kumahq/kuma/pull/5276) @dependabot -* chore(deps): bump sigs.k8s.io/controller-tools from 0.10.0 to 0.11.1, [#5541](https://github.com/kumahq/kuma/pull/5541) @dependabot -* chore(deps): bump tibdex/github-app-token from 1.6.0 to 1.8.0 [#5434](https://github.com/kumahq/kuma/pull/5434) [#5879](https://github.com/kumahq/kuma/pull/5879) @dependabot -* chore(deps): install dev tools and split if more repos [#5528](https://github.com/kumahq/kuma/pull/5528) @lukidzi -* chore(deps): security update [#5761](https://github.com/kumahq/kuma/pull/5761) @kumahq -* chore(deps): update coreDNS to 1.10.0 [#5626](https://github.com/kumahq/kuma/pull/5626) @lahabana -* chore(deps): update to emicklei/go-restful/v3 v3.10.1 and remove `/tokens` [#5324](https://github.com/kumahq/kuma/pull/5324) @dependabot -* chore(deps): upgrade k3d [#5518](https://github.com/kumahq/kuma/pull/5518) @lukidzi -* chore(deps): use latest kumahq/kuma-gui [#5265](https://github.com/kumahq/kuma/pull/5265) [#5272](https://github.com/kumahq/kuma/pull/5272) [#5281](https://github.com/kumahq/kuma/pull/5281) [#5307](https://github.com/kumahq/kuma/pull/5307) [#5321](https://github.com/kumahq/kuma/pull/5321) [#5332](https://github.com/kumahq/kuma/pull/5332) [#5346](https://github.com/kumahq/kuma/pull/5346) [#5371](https://github.com/kumahq/kuma/pull/5371) [#5388](https://github.com/kumahq/kuma/pull/5388) [#5405](https://github.com/kumahq/kuma/pull/5405) [#5484](https://github.com/kumahq/kuma/pull/5484) [#5486](https://github.com/kumahq/kuma/pull/5486) [#5509](https://github.com/kumahq/kuma/pull/5509) [#5572](https://github.com/kumahq/kuma/pull/5572) [#5589](https://github.com/kumahq/kuma/pull/5589) [#5619](https://github.com/kumahq/kuma/pull/5619) [#5628](https://github.com/kumahq/kuma/pull/5628) [#5675](https://github.com/kumahq/kuma/pull/5675) [#5685](https://github.com/kumahq/kuma/pull/5685) [#5700](https://github.com/kumahq/kuma/pull/5700) [#5724](https://github.com/kumahq/kuma/pull/5724) [#5732](https://github.com/kumahq/kuma/pull/5732) [#5737](https://github.com/kumahq/kuma/pull/5737) [#5772](https://github.com/kumahq/kuma/pull/5772) [#5800](https://github.com/kumahq/kuma/pull/5800) [#5805](https://github.com/kumahq/kuma/pull/5805) [#5823](https://github.com/kumahq/kuma/pull/5823) [#5826](https://github.com/kumahq/kuma/pull/5826) [#5843](https://github.com/kumahq/kuma/pull/5843) [#5851](https://github.com/kumahq/kuma/pull/5851) [#5863](https://github.com/kumahq/kuma/pull/5863) [#5866](https://github.com/kumahq/kuma/pull/5866) [#5883](https://github.com/kumahq/kuma/pull/5883) @kumahq -* chore(deps): use sigs.k8s.io/yaml [#5215](https://github.com/kumahq/kuma/pull/5215) @mmorel-35 -* feat(MeshAccessLog): add OmitEmptyValues to MeshAccessLog format [#5302](https://github.com/kumahq/kuma/pull/5302) @mmorel-35 -* feat(MeshGatewayInstance): respect `kuma.io/mesh` label [#5256](https://github.com/kumahq/kuma/pull/5256) @michaelbeaumont -* feat(MeshGatewayRoute): response header filter [#5334](https://github.com/kumahq/kuma/pull/5334) @michaelbeaumont -* feat(api-server): ability to set rootUrl for GUI and API [#5295](https://github.com/kumahq/kuma/pull/5295) @lahabana -* feat(api-server): add name search to dataplane overview [#5340](https://github.com/kumahq/kuma/pull/5340) @lahabana -* feat(api-server): contain matches on name and tags [#5606](https://github.com/kumahq/kuma/pull/5606) @lahabana -* feat(build): consistent docker images [#5343](https://github.com/kumahq/kuma/pull/5343) @slonka -* feat(build): idempotent build [#5291](https://github.com/kumahq/kuma/pull/5291) [#5358](https://github.com/kumahq/kuma/pull/5358) [#5403](https://github.com/kumahq/kuma/pull/5403) [#5404](https://github.com/kumahq/kuma/pull/5404) [#5407](https://github.com/kumahq/kuma/pull/5407) [#5440](https://github.com/kumahq/kuma/pull/5440) @slonka -* feat(gateway): add support for match header PRESENT and ABSENT [#5739](https://github.com/kumahq/kuma/pull/5739) @lahabana -* feat(gui): serve index from all paths without extension [#5357](https://github.com/kumahq/kuma/pull/5357) @lahabana -* feat(helm): add tolerations to Helm chart [#5549](https://github.com/kumahq/kuma/pull/5549) @KrustyHack -* feat(helm): allow injecting env from parent projects [#5677](https://github.com/kumahq/kuma/pull/5677) @slonka -* feat(helm): use object instead of list for plugins.policies [#5735](https://github.com/kumahq/kuma/pull/5735) @michaelbeaumont -* feat(kuma-cp): add possibility to run diagnostics on TLS [#5344](https://github.com/kumahq/kuma/pull/5344) @mmorel-35 -* feat(kuma-cp): added configuration of plugins and its order [#5472](https://github.com/kumahq/kuma/pull/5472) @lukidzi -* feat(kuma-cp): intOrString as decimal in the API [#5768](https://github.com/kumahq/kuma/pull/5768) @jakubdyszkiewicz -* feat(kuma-cp): intercp communication protocol [#5445](https://github.com/kumahq/kuma/pull/5445) [#5492](https://github.com/kumahq/kuma/pull/5492) @jakubdyszkiewicz -* feat(kuma-cp): recover from watchdog panics [#5581](https://github.com/kumahq/kuma/pull/5581) @jakubdyszkiewicz -* feat(kuma-cp): remove value of secret when logging Secret Resources [#5384](https://github.com/kumahq/kuma/pull/5384) @Automaat -* feat(kumactl): added option to install transparent proxy with docker [#5284](https://github.com/kumahq/kuma/pull/5284) @lukidzi -* feat(policy): allow merging by a complex key [#5650](https://github.com/kumahq/kuma/pull/5650) @michaelbeaumont -* feat(policy): append policy slices [#5515](https://github.com/kumahq/kuma/pull/5515) @jakubdyszkiewicz -* feat(policy): don't use protobuf for DataSource in policies [#5668](https://github.com/kumahq/kuma/pull/5668) [#5756](https://github.com/kumahq/kuma/pull/5756) @Automaat -* feat(policy): implement MeshCircuitBreaker policy [#5454](https://github.com/kumahq/kuma/pull/5454) [#5493](https://github.com/kumahq/kuma/pull/5493) [#5651](https://github.com/kumahq/kuma/pull/5651) @bartsmykla,@lobkovilya -* feat(policy): implement MeshFaultInjection policy [#5723](https://github.com/kumahq/kuma/pull/5723) [#5773](https://github.com/kumahq/kuma/pull/5773) @lukidzi -* feat(policy): implement MeshHTTPRoute policy [#5530](https://github.com/kumahq/kuma/pull/5530) [#5625](https://github.com/kumahq/kuma/pull/5625) [#5653](https://github.com/kumahq/kuma/pull/5653) [#5746](https://github.com/kumahq/kuma/pull/5746) @michaelbeaumont,@slonka -* feat(policy): implement MeshHealthCheck policy [#5369](https://github.com/kumahq/kuma/pull/5369) [#5415](https://github.com/kumahq/kuma/pull/5415) [#5503](https://github.com/kumahq/kuma/pull/5503) [#5654](https://github.com/kumahq/kuma/pull/5654) [#5713](https://github.com/kumahq/kuma/pull/5713) [#5722](https://github.com/kumahq/kuma/pull/5722) @lahabana,@lobkovilya,@michaelbeaumont,@slonka -* feat(policy): implement MeshProxyPatch policy [#5578](https://github.com/kumahq/kuma/pull/5578) [#5604](https://github.com/kumahq/kuma/pull/5604) @jakubdyszkiewicz -* feat(policy): implement MeshRateLimit policy [#5362](https://github.com/kumahq/kuma/pull/5362) [#5463](https://github.com/kumahq/kuma/pull/5463) [#5710](https://github.com/kumahq/kuma/pull/5710) [#5742](https://github.com/kumahq/kuma/pull/5742) @lobkovilya,@lukidzi -* feat(policy): implement MeshRetry policy [#5478](https://github.com/kumahq/kuma/pull/5478) [#5522](https://github.com/kumahq/kuma/pull/5522) [#5583](https://github.com/kumahq/kuma/pull/5583) [#5749](https://github.com/kumahq/kuma/pull/5749) [#5808](https://github.com/kumahq/kuma/pull/5808) @lobkovilya,@slonka -* feat(policy): implement MeshTimeout policy [#5294](https://github.com/kumahq/kuma/pull/5294) [#5364](https://github.com/kumahq/kuma/pull/5364) [#5568](https://github.com/kumahq/kuma/pull/5568) @Automaat,@michaelbeaumont -* feat(policy): improve rules api [#5785](https://github.com/kumahq/kuma/pull/5785) @lahabana -* feat(policy): validate schema only during the user's input unmarshal [#5566](https://github.com/kumahq/kuma/pull/5566) @lobkovilya -* feat(security): add dependabot security updates to release branches [#5731](https://github.com/kumahq/kuma/pull/5731) [#5734](https://github.com/kumahq/kuma/pull/5734) [#5758](https://github.com/kumahq/kuma/pull/5758) [#5767](https://github.com/kumahq/kuma/pull/5767) [#5778](https://github.com/kumahq/kuma/pull/5778) [#5783](https://github.com/kumahq/kuma/pull/5783) @slonka -* fix(MeshAccessLog): update API to align with the memo [#5580](https://github.com/kumahq/kuma/pull/5580) @lobkovilya -* fix(MeshGateway): properly apply Service template annotations to existing Service [#5674](https://github.com/kumahq/kuma/pull/5674) @michaelbeaumont -* fix(MeshTrace): adjust MeshTrace to follow the memo [#5743](https://github.com/kumahq/kuma/pull/5743) @lobkovilya -* fix(api-server): fix tags filter value with `:` [#5339](https://github.com/kumahq/kuma/pull/5339) @lahabana -* fix(api-server): remove spec from inspect policy output [#5491](https://github.com/kumahq/kuma/pull/5491) @lahabana -* fix(api-server): return 400 on invalid resource name [#5719](https://github.com/kumahq/kuma/pull/5719) @lahabana -* fix(gateway): be more lenient with prefix paths trailing slashes [#5299](https://github.com/kumahq/kuma/pull/5299) @michaelbeaumont -* fix(gui): add version and basedOnKuma to index.html [#5448](https://github.com/kumahq/kuma/pull/5448) @lahabana -* fix(kuma-cp): add option to disable `sslsni` in universal [#5318](https://github.com/kumahq/kuma/pull/5318) @michaelbeaumont -* fix(kuma-cp): allow to set policies order from others projects [#5535](https://github.com/kumahq/kuma/pull/5535) @lukidzi -* fix(kuma-cp): change way of setting if resource is read only [#5345](https://github.com/kumahq/kuma/pull/5345) @lukidzi -* fix(kuma-cp): concurrent mesh cache map write [#5282](https://github.com/kumahq/kuma/pull/5282) @michaelbeaumont -* fix(kuma-cp): don't cache filtered data [#5574](https://github.com/kumahq/kuma/pull/5574) @lukidzi -* fix(kuma-cp): filtering of name prefix on K8S [#5517](https://github.com/kumahq/kuma/pull/5517) @jakubdyszkiewicz -* fix(kuma-cp): fix appending of pointer to slice in policies config [#5784](https://github.com/kumahq/kuma/pull/5784) @Automaat -* fix(kuma-cp): fix kafka_type tag creation regex [#5507](https://github.com/kumahq/kuma/pull/5507) @Automaat -* fix(kuma-cp): fixed error when logging ExternalServiceResourceList and MeshResourceList [#5423](https://github.com/kumahq/kuma/pull/5423) @Automaat -* fix(kuma-cp): forward envoy admin operations to proper instance [#5466](https://github.com/kumahq/kuma/pull/5466) @jakubdyszkiewicz -* fix(kuma-cp): increase kuma-init memory limit when using ebpf [#5579](https://github.com/kumahq/kuma/pull/5579) @lukidzi -* fix(kuma-cp): kds deadlock [#5373](https://github.com/kumahq/kuma/pull/5373) @jakubdyszkiewicz -* fix(kuma-cp): make validate list aware of the mesh [#5280](https://github.com/kumahq/kuma/pull/5280) @slonka -* fix(kuma-cp): memory store keeps children after owner update [#5372](https://github.com/kumahq/kuma/pull/5372) @jakubdyszkiewicz -* fix(kuma-cp): only put policies in MeshInsight [#5577](https://github.com/kumahq/kuma/pull/5577) @lahabana -* fix(kuma-cp): retrieve name from owner not parsing pod name for Deployments/CronJob [#5569](https://github.com/kumahq/kuma/pull/5569) @lukidzi -* fix(kuma-cp): use sni to verify upstream certificate san when specified instead of address [#5347](https://github.com/kumahq/kuma/pull/5347) @jamesdbloom -* fix(kuma-cp): warn when using deprecated token id [#5520](https://github.com/kumahq/kuma/pull/5520) @lahabana -* fix(kuma-dp): allow to configure address of application to scrape [#5326](https://github.com/kumahq/kuma/pull/5326) @lukidzi -* fix(kuma-dp): tolerate endline in token file [#5591](https://github.com/kumahq/kuma/pull/5591) @lahabana -* fix(kumactl): remove PodSecurityPolicy from install observability [#5382](https://github.com/kumahq/kuma/pull/5382) @michaelbeaumont -* fix(kumactl): set klog to avoid logs from k8s [#5590](https://github.com/kumahq/kuma/pull/5590) @lahabana -* fix(kumactl): use the same client in `kumactl apply` [#5327](https://github.com/kumahq/kuma/pull/5327) @lahabana -* fix(policy): change percentage field from int to intOrString [#5810](https://github.com/kumahq/kuma/pull/5810) @lukidzi -* fix(policy): fix schema.yaml to have correct metadata [#5349](https://github.com/kumahq/kuma/pull/5349) @lahabana -* fix(policy): make targetRef required [#5593](https://github.com/kumahq/kuma/pull/5593) @AyushSenapati -* fix(policy): remove superfluous var usage [#5627](https://github.com/kumahq/kuma/pull/5627) @AyushSenapati -* fix(policy): use GatewayAPI style header modifier in all policies [#5757](https://github.com/kumahq/kuma/pull/5757) @lahabana -* fix(policy): use PascalCase for all constants [#5747](https://github.com/kumahq/kuma/pull/5747) @lahabana -* fix(universal): don't set sslsni option if not disabled (backport #5419) [#5439](https://github.com/kumahq/kuma/pull/5439) @mergify -* fix(xds): don't read metadata in ProxyBuilders [#5414](https://github.com/kumahq/kuma/pull/5414) @lahabana -* fix(xds): sort resources when building MeshContext [#5391](https://github.com/kumahq/kuma/pull/5391) @lobkovilya - -## 2.0.2 -> Released on 2023/01/13 - -* chore(deps): bump helm.sh/helm/v3 from 3.8.1 to 3.10.3 [#5597](https://github.com/kumahq/kuma/pull/5597) @mergify -* chore(deps): update coreDNS to 1.10.0 (backport #5626) [#5655](https://github.com/kumahq/kuma/pull/5655) @mergify -* chore: remove Apache license header from generated files (backport #5565) [#5616](https://github.com/kumahq/kuma/pull/5616) @mergify -* chore: upgrade golang to 1.18.9 (backport #5607) [#5609](https://github.com/kumahq/kuma/pull/5609) @mergify -* fix(kuma-cp): don't cache filtered data (backport #5574) [#5632](https://github.com/kumahq/kuma/pull/5632) @mergify - -## 1.8.3 -> Released on 2023/01/13 - -* chore(deps): bump helm.sh/helm/v3 from 3.8.1 to 3.10.3 [#5598](https://github.com/kumahq/kuma/pull/5598) @mergify -* chore(deps): update coreDNS to 1.10.0 (backport #5626) [#5656](https://github.com/kumahq/kuma/pull/5656) @mergify -* chore: remove Apache license header from generated files (backport #5565) [#5617](https://github.com/kumahq/kuma/pull/5617) @mergify -* chore: upgrade golang to 1.18.9 (backport #5607) [#5610](https://github.com/kumahq/kuma/pull/5610) @mergify -* fix(kuma-cp): don't cache filtered data (backport #5574) [#5633](https://github.com/kumahq/kuma/pull/5633) @mergify - -## 1.7.4 -> Released on 2023/01/13 - -* chore(deps): bump helm.sh/helm/v3 from 3.8.1 to 3.10.3 [#5599](https://github.com/kumahq/kuma/pull/5599) @mergify -* chore(deps): update coreDNS to 1.10.0 (backport #5626) [#5657](https://github.com/kumahq/kuma/pull/5657) @mergify -* chore(helm): remove duplicate keys in resources (backport #4681) [#5640](https://github.com/kumahq/kuma/pull/5640) @mergify -* chore: remove Apache license header from generated files (backport #5565) [#5618](https://github.com/kumahq/kuma/pull/5618) @mergify -* chore: upgrade golang to 1.18.9 (backport #5607) [#5611](https://github.com/kumahq/kuma/pull/5611) @mergify -* fix(kuma-cp): don't cache filtered data (backport #5574) [#5634](https://github.com/kumahq/kuma/pull/5634) @mergify - -## 1.6.4 -> Released on 2023/01/13 - -* chore(deps): bump helm.sh/helm/v3 from 3.8.1 to 3.10.3 [#5601](https://github.com/kumahq/kuma/pull/5601) @mergify -* chore(deps): update coreDNS to 1.10.0 (backport #5626) [#5658](https://github.com/kumahq/kuma/pull/5658) @mergify -* chore(helm): remove duplicate keys in resources (backport #4681) [#5641](https://github.com/kumahq/kuma/pull/5641) @mergify -* chore: remove Apache license header from generated files (backport #5565) [#5620](https://github.com/kumahq/kuma/pull/5620) @mergify -* chore: upgrade golang to 1.18.9 (backport #5607) [#5612](https://github.com/kumahq/kuma/pull/5612) @mergify -* fix(kuma-cp): don't cache filtered data (backport #5574) [#5635](https://github.com/kumahq/kuma/pull/5635) @mergify - -## 1.5.4 -> Released on 2023/01/13 - -* chore(deps): bump helm.sh/helm/v3 from 3.8.1 to 3.10.3 [#5602](https://github.com/kumahq/kuma/pull/5602) @mergify -* chore(deps): update coreDNS to 1.10.0 (backport #5626) [#5659](https://github.com/kumahq/kuma/pull/5659) @mergify -* chore(helm): remove duplicate keys in resources (backport #4681) [#5642](https://github.com/kumahq/kuma/pull/5642) @mergify -* chore: remove Apache license header from generated files (backport #5565) [#5622](https://github.com/kumahq/kuma/pull/5622) @mergify -* chore: upgrade golang to 1.18.9 (backport #5607) [#5613](https://github.com/kumahq/kuma/pull/5613) @mergify -* fix(kuma-cp): don't cache filtered data (backport #5574) [#5636](https://github.com/kumahq/kuma/pull/5636) @mergify - -## 1.8.2 -> Released on 2022/12/06 - -* feat(kuma-cp): remove value of secret when logging Secret Resources (backport #5384) [#5393](https://github.com/kumahq/kuma/pull/5393) @mergify -* fix(kuma-cp): kds deadlock (backport #5373) [#5398](https://github.com/kumahq/kuma/pull/5398) @mergify -* fix: sort resources when building MeshContext (backport #5391) [#5410](https://github.com/kumahq/kuma/pull/5410) @mergify - -## 2.0.1 -> Released on 2022/12/05 - -* chore: back-ports api base path fix [#5341](https://github.com/kumahq/kuma/pull/5341) @kleinfreund -* feat(kuma-cp): remove value of secret when logging Secret Resources (backport #5384) [#5392](https://github.com/kumahq/kuma/pull/5392) @mergify -* fix(kuma-cp): add option to disable `sslsni` in universal (backport #5318) [#5322](https://github.com/kumahq/kuma/pull/5322) @mergify -* fix(kuma-cp): change way of setting if resource is read only (backport #5345) [#5348](https://github.com/kumahq/kuma/pull/5348) @mergify -* fix(kuma-cp): kds deadlock (backport #5373) [#5397](https://github.com/kumahq/kuma/pull/5397) @mergify -* fix(kuma-cp): use sni to verify upstream certificate san when specified along with address (backport #5347) [#5378](https://github.com/kumahq/kuma/pull/5378) @mergify -* fix(xds): don't read metadata in ProxyBuilders (backport #5414) [#5416](https://github.com/kumahq/kuma/pull/5416) @mergify -* fix: sort resources when building MeshContext (backport #5391) [#5409](https://github.com/kumahq/kuma/pull/5409) @mergify - -## 2.0.0 -> Released on 2022/11/04 -* chore(.github): remove old release workflow [#4836](https://github.com/kumahq/kuma/pull/4836) @lobkovilya -* chore(api): remove DENY_WITH_SHADOW_ALLOW [#5220](https://github.com/kumahq/kuma/pull/5220) @lobkovilya -* chore(api): remove unused method and types [#5148](https://github.com/kumahq/kuma/pull/5148) @lobkovilya -* chore(api): remove unused timestamp.proto import [#4906](https://github.com/kumahq/kuma/pull/4906) @michaelbeaumont -* chore(api): skip Compute when building inbound access logs [#5181](https://github.com/kumahq/kuma/pull/5181) @jakubdyszkiewicz -* chore(bootstrap): improve validator policy bootstrap [#5014](https://github.com/kumahq/kuma/pull/5014) @lahabana -* chore(deps): bump actions/setup-go from 2 to 3 [#5024](https://github.com/kumahq/kuma/pull/5024) @dependabot -* chore(deps): bump cirello.io/pglock from 1.9.0 to 1.10.0 [#5239](https://github.com/kumahq/kuma/pull/5239) @dependabot -* chore(deps): bump github.com/Masterminds/sprig to 3.2.2 [#5190](https://github.com/kumahq/kuma/pull/5190) @mmorel-35 -* chore(deps): bump github.com/envoyproxy/protoc-gen-validate from 0.6.7 to 0.6.13 [#5023](https://github.com/kumahq/kuma/pull/5023) [#5067](https://github.com/kumahq/kuma/pull/5067) [#5131](https://github.com/kumahq/kuma/pull/5131) @dependabot -* chore(deps): bump github.com/google/go-cmp from 0.5.8 to 0.5.9 [#4996](https://github.com/kumahq/kuma/pull/4996) @dependabot -* chore(deps): bump github.com/gruntwork-io/terratest from 0.40.20 to 0.40.24 [#4969](https://github.com/kumahq/kuma/pull/4969) [#4993](https://github.com/kumahq/kuma/pull/4993) [#5162](https://github.com/kumahq/kuma/pull/5162) @dependabot -* chore(deps): bump github.com/kumahq/kuma-net from 0.8.1 to 0.8.2 [#5188](https://github.com/kumahq/kuma/pull/5188) @dependabot -* chore(deps): bump github.com/lib/pq from 1.10.6 to 1.10.7 [#4995](https://github.com/kumahq/kuma/pull/4995) @dependabot -* chore(deps): bump github.com/onsi/ginkgo/v2 from 2.1.4 to 2.4.0 [#4939](https://github.com/kumahq/kuma/pull/4939) [#4949](https://github.com/kumahq/kuma/pull/4949) [#5021](https://github.com/kumahq/kuma/pull/5021) [#5145](https://github.com/kumahq/kuma/pull/5145) [#5204](https://github.com/kumahq/kuma/pull/5204) @dependabot -* chore(deps): bump github.com/onsi/gomega from 1.20.0 to 1.23.0 [#4933](https://github.com/kumahq/kuma/pull/4933) [#4970](https://github.com/kumahq/kuma/pull/4970) [#5133](https://github.com/kumahq/kuma/pull/5133) [#5146](https://github.com/kumahq/kuma/pull/5146) [#5240](https://github.com/kumahq/kuma/pull/5240) @dependabot -* chore(deps): bump github.com/prometheus/client_model from 0.2.0 to 0.3.0 [#5203](https://github.com/kumahq/kuma/pull/5203) @dependabot -* chore(deps): bump github.com/prometheus/prometheus from 0.37.0 to 0.39.1 [#4887](https://github.com/kumahq/kuma/pull/4887) [#5134](https://github.com/kumahq/kuma/pull/5134) @dependabot -* chore(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.1 [#5155](https://github.com/kumahq/kuma/pull/5155) [#5241](https://github.com/kumahq/kuma/pull/5241) @dependabot -* chore(deps): bump github.com/spf13/viper from 1.12.0 to 1.13.0 [#4994](https://github.com/kumahq/kuma/pull/4994) @dependabot -* chore(deps): bump github.com/testcontainers/testcontainers-go from 0.13.0 to 0.15.0 [#5020](https://github.com/kumahq/kuma/pull/5020) [#5205](https://github.com/kumahq/kuma/pull/5205) @dependabot -* chore(deps): bump go.uber.org/zap from 1.22.0 to 1.23.0 [#4930](https://github.com/kumahq/kuma/pull/4930) @dependabot -* chore(deps): bump golang.org/x/text from 0.3.7 to 0.4.0 [#5147](https://github.com/kumahq/kuma/pull/5147) [#5163](https://github.com/kumahq/kuma/pull/5163) @dependabot -* chore(deps): bump google.golang.org/grpc from 1.48.0 to 1.50.1 [#4927](https://github.com/kumahq/kuma/pull/4927) [#5132](https://github.com/kumahq/kuma/pull/5132) [#5156](https://github.com/kumahq/kuma/pull/5156) @dependabot -* chore(deps): bump k8s.io dependencies from 0.24.3 to 0.25.3 [#4934](https://github.com/kumahq/kuma/pull/4934) [#5026](https://github.com/kumahq/kuma/pull/5026) [#5153](https://github.com/kumahq/kuma/pull/5153) @michaelbeaumont -* chore(deps): bump k8s.io/client-go from 0.25.1 to 0.25.2 [#5062](https://github.com/kumahq/kuma/pull/5062) @dependabot -* chore(deps): bump kumahq/kuma-gui to f3dba73d4c264b094b6b351a8b44f2d5a0dc4ecb [#4842](https://github.com/kumahq/kuma/pull/4842) [#4925](https://github.com/kumahq/kuma/pull/4925) [#5092](https://github.com/kumahq/kuma/pull/5092) [#5106](https://github.com/kumahq/kuma/pull/5106) [#5109](https://github.com/kumahq/kuma/pull/5109) [#5139](https://github.com/kumahq/kuma/pull/5139) [#5141](https://github.com/kumahq/kuma/pull/5141) [#5167](https://github.com/kumahq/kuma/pull/5167) [#5179](https://github.com/kumahq/kuma/pull/5179) [#5197](https://github.com/kumahq/kuma/pull/5197) [#5214](https://github.com/kumahq/kuma/pull/5214) [#5232](https://github.com/kumahq/kuma/pull/5232) [#5234](https://github.com/kumahq/kuma/pull/5234) [#5248](https://github.com/kumahq/kuma/pull/5248) [#5251](https://github.com/kumahq/kuma/pull/5251) @kleinfreund,@kumahq -* chore(deps): bump sigs.k8s.io/controller-runtime from 0.12.3 to 0.13.0 [#4968](https://github.com/kumahq/kuma/pull/4968) @dependabot -* chore(deps): bump sigs.k8s.io/controller-tools from 0.9.2 to 0.10.0 [#5059](https://github.com/kumahq/kuma/pull/5059) @dependabot -* chore(deps): update kuma-grafana-datasource [#4856](https://github.com/kumahq/kuma/pull/4856) @bartsmykla -* chore(gateway): remove invalid options for MeshGatewayRoute [#4890](https://github.com/kumahq/kuma/pull/4890) @michaelbeaumont -* chore(gui): removes update/gui command [#4954](https://github.com/kumahq/kuma/pull/4954) @kleinfreund -* chore(helm): remove unused `critical-pod` annotation [#4952](https://github.com/kumahq/kuma/pull/4952) @michaelbeaumont -* chore(helm): switch merbridge image registry to upstream [#4838](https://github.com/kumahq/kuma/pull/4838) @bartsmykla -* chore(kuma-cp): adjust timeout in cp probes [#4983](https://github.com/kumahq/kuma/pull/4983) @jakubdyszkiewicz -* chore(kuma-cp): config cleanup [#4855](https://github.com/kumahq/kuma/pull/4855) @jakubdyszkiewicz -* chore(kuma-cp): improve logging in K8S controllers [#4982](https://github.com/kumahq/kuma/pull/4982) @jakubdyszkiewicz -* chore(kuma-cp): improve test xds client [#4976](https://github.com/kumahq/kuma/pull/4976) @jakubdyszkiewicz -* chore(kuma-cp): remove disabling metrics from kuma-cp.defaults [#4894](https://github.com/kumahq/kuma/pull/4894) @lahabana -* chore(kuma-cp): resource manager wrapper [#5057](https://github.com/kumahq/kuma/pull/5057) @jakubdyszkiewicz -* chore(kuma-init): use iptables-legacy in kuma-init [#5040](https://github.com/kumahq/kuma/pull/5040) @bartsmykla -* chore(pkg/gc): don't rely on core.Now var for time [#4918](https://github.com/kumahq/kuma/pull/4918) @lahabana -* chore(plugins): remove some unecessary interfaces and methods [#4997](https://github.com/kumahq/kuma/pull/4997) @lahabana -* chore(proto): remove protos for new policies [#5218](https://github.com/kumahq/kuma/pull/5218) @lobkovilya -* chore(test): added resource builder [#5123](https://github.com/kumahq/kuma/pull/5123) [#5195](https://github.com/kumahq/kuma/pull/5195) @jakubdyszkiewicz -* chore(test): added support for GRPC to test-server [#4904](https://github.com/kumahq/kuma/pull/4904) @lobkovilya -* chore(test): make unit test compatible with IPV6 host [#5198](https://github.com/kumahq/kuma/pull/5198) @jakubdyszkiewicz -* chore(xds): drop deprecated envoy.config.route.v3.HeaderMatcher.exact_match [#4953](https://github.com/kumahq/kuma/pull/4953) @michaelbeaumont -* docs(MADR): new tracing policy proposal [#4938](https://github.com/kumahq/kuma/pull/4938) @michaelbeaumont -* docs(MADR): update MADR 007 [#5129](https://github.com/kumahq/kuma/pull/5129) @lobkovilya -* docs(gateway): explain the semantics of a PREFIX match [#5013](https://github.com/kumahq/kuma/pull/5013) @michaelbeaumont -* docs(gateway): explain the semantics of a prefix rewrite to / [#5016](https://github.com/kumahq/kuma/pull/5016) @michaelbeaumont -* docs(proto): fixed default serviceAddress and upgrade docs [#5236](https://github.com/kumahq/kuma/pull/5236) @lukidzi -* docs(proto): rewrite dataplane proto docs [#5219](https://github.com/kumahq/kuma/pull/5219) @jakubdyszkiewicz -* feat(ebpf): CNI uses libbpf CO:RE [#5233](https://github.com/kumahq/kuma/pull/5233) @lukidzi -* feat(ebpf): refactor merbridge using libbpf with CO:RE [#5034](https://github.com/kumahq/kuma/pull/5034) @bartsmykla -* feat(ebpf): transparent proxy with eBPF in init containers [#4919](https://github.com/kumahq/kuma/pull/4919) [#5046](https://github.com/kumahq/kuma/pull/5046) [#5066](https://github.com/kumahq/kuma/pull/5066) [#5095](https://github.com/kumahq/kuma/pull/5095) @bartsmykla -* feat(gateway): add MeshGateway support to MeshAccessLog [#5101](https://github.com/kumahq/kuma/pull/5101) @michaelbeaumont -* feat(gateway): add `crossMesh` to `MeshGatewayConfig` [#5183](https://github.com/kumahq/kuma/pull/5183) @michaelbeaumont -* feat(gateway): add service-upstream annotation for delegated nginx [#4913](https://github.com/kumahq/kuma/pull/4913) @michaelbeaumont -* feat(gateway): install `kuma` `GatewayClass` if gateway API CRDs present [#5001](https://github.com/kumahq/kuma/pull/5001) @michaelbeaumont -* feat(gateway): match new policies to MeshGateways [#5110](https://github.com/kumahq/kuma/pull/5110) @michaelbeaumont -* feat(inspect): implement rule-based view for new policies [#5000](https://github.com/kumahq/kuma/pull/5000) [#5184](https://github.com/kumahq/kuma/pull/5184) [#5189](https://github.com/kumahq/kuma/pull/5189) [#5202](https://github.com/kumahq/kuma/pull/5202) @jakubdyszkiewicz,@lobkovilya -* feat(kuma-cp): add flag to disable taint controller [#4852](https://github.com/kumahq/kuma/pull/4852) @jakubdyszkiewicz -* feat(kuma-cp): add possibility to restrict TLS version and ciphers [#5186](https://github.com/kumahq/kuma/pull/5186) @lahabana -* feat(kuma-cp): add possibility to run MADS on TLS [#5210](https://github.com/kumahq/kuma/pull/5210) @lahabana -* feat(kuma-cp): add possibility to split datadog services based on traffic direction and destination [#5063](https://github.com/kumahq/kuma/pull/5063) @Automaat -* feat(kuma-cp): added validation for backend name [#5081](https://github.com/kumahq/kuma/pull/5081) @Automaat -* feat(kuma-cp): created default control plane user [#5064](https://github.com/kumahq/kuma/pull/5064) @jakubdyszkiewicz -* feat(kuma-cp): extensible token issuers [#5083](https://github.com/kumahq/kuma/pull/5083) @jakubdyszkiewicz -* feat(kuma-cp): move Mesh Cache to runtime [#5140](https://github.com/kumahq/kuma/pull/5140) @Automaat -* feat(kuma-cp): universal resources schema validation [#5107](https://github.com/kumahq/kuma/pull/5107) @slonka -* feat(kuma-cp): use zone token to auth zone ingress [#5103](https://github.com/kumahq/kuma/pull/5103) @jakubdyszkiewicz -* feat(kuma-dp): publish metrics with text_readouts from envoy [#5159](https://github.com/kumahq/kuma/pull/5159) @Automaat -* feat(kumactl): add option to install with experimental transparent proxy [#4958](https://github.com/kumahq/kuma/pull/4958) @michaelbeaumont -* feat(kumactl): use exclude ports for uids from kuma-net [#4975](https://github.com/kumahq/kuma/pull/4975) @slonka -* feat(policy): Add MeshAccessLog policy [#4908](https://github.com/kumahq/kuma/pull/4908) [#4998](https://github.com/kumahq/kuma/pull/4998) [#5035](https://github.com/kumahq/kuma/pull/5035) [#5168](https://github.com/kumahq/kuma/pull/5168) [#5177](https://github.com/kumahq/kuma/pull/5177) @michaelbeaumont,@slonka -* feat(policy): Add MeshTrace policy [#5069](https://github.com/kumahq/kuma/pull/5069) [#5085](https://github.com/kumahq/kuma/pull/5085) [#5243](https://github.com/kumahq/kuma/pull/5243) @michaelbeaumont,@slonka -* feat(policy): Add MeshTrafficPermission policy [#4835](https://github.com/kumahq/kuma/pull/4835) [#5009](https://github.com/kumahq/kuma/pull/5009) [#5075](https://github.com/kumahq/kuma/pull/5075) @lobkovilya -* feat(policy): add interfaces for policy plugins [#4909](https://github.com/kumahq/kuma/pull/4909) @lahabana -* feat(policy): reimplemented matching for new policies [#4780](https://github.com/kumahq/kuma/pull/4780) [#4950](https://github.com/kumahq/kuma/pull/4950) [#4957](https://github.com/kumahq/kuma/pull/4957) [#4977](https://github.com/kumahq/kuma/pull/4977) [#5068](https://github.com/kumahq/kuma/pull/5068) [#5084](https://github.com/kumahq/kuma/pull/5084) [#5166](https://github.com/kumahq/kuma/pull/5166) [#5172](https://github.com/kumahq/kuma/pull/5172) [#5174](https://github.com/kumahq/kuma/pull/5174) @lahabana,@lobkovilya -* feat(service-insights): add external service in api [#5119](https://github.com/kumahq/kuma/pull/5119) @lahabana -* fix(.github): links in PR template [#4905](https://github.com/kumahq/kuma/pull/4905) @michaelbeaumont -* fix(.github): use github app in pr-comment action [#5164](https://github.com/kumahq/kuma/pull/5164) @lahabana -* fix(api): nil dereference in MeshAccessLog configurer [#5258](https://github.com/kumahq/kuma/pull/5258) @lobkovilya -* fix(cni): add empty registry to experimental cni [#4847](https://github.com/kumahq/kuma/pull/4847) @slonka -* fix(cni): hook up log level to cni [#4849](https://github.com/kumahq/kuma/pull/4849) @slonka -* fix(cni): make cni logs available via kubectl logs [#4845](https://github.com/kumahq/kuma/pull/4845) @slonka -* fix(cni): retry loading images [#4860](https://github.com/kumahq/kuma/pull/4860) @slonka -* fix(docs): fixed location of developer tools in DEVELOPER.md docs [#4988](https://github.com/kumahq/kuma/pull/4988) @Automaat -* fix(gateway): add support for retryOn [#5091](https://github.com/kumahq/kuma/pull/5091) @lahabana -* fix(gateway): cross-mesh gateways with same service [#5247](https://github.com/kumahq/kuma/pull/5247) @michaelbeaumont -* fix(gateway): don't create invalid envoy config when routes and listeners don't match [#4837](https://github.com/kumahq/kuma/pull/4837) @michaelbeaumont -* fix(gateway): route URL prefix rewriting [#5006](https://github.com/kumahq/kuma/pull/5006) @michaelbeaumont -* fix(gateway): skip ExternalService if none match [#5207](https://github.com/kumahq/kuma/pull/5207) @michaelbeaumont -* fix(gateway): sort routes [#5007](https://github.com/kumahq/kuma/pull/5007) @michaelbeaumont -* fix(gatewayapi): don't NPE if the `GatewayClass` ref doesn't exist [#5187](https://github.com/kumahq/kuma/pull/5187) @michaelbeaumont -* fix(gatewayapi): reconcile Gateways and HTTPRoutes on ReferenceGrant changes [#4944](https://github.com/kumahq/kuma/pull/4944) @michaelbeaumont -* fix(gatewayapi): update gateway-api and fix failing RouteKind tests [#5175](https://github.com/kumahq/kuma/pull/5175) @michaelbeaumont -* fix(helm): customize location of kuma-init repository for ebpf cleanup [#5230](https://github.com/kumahq/kuma/pull/5230) @lukidzi -* fix(helm): use `podAnnotations` everywhere possible [#4991](https://github.com/kumahq/kuma/pull/4991) @lahabana -* fix(kuma-cp): collapsed grafana dashboards [#4839](https://github.com/kumahq/kuma/pull/4839) @jakubdyszkiewicz -* fix(kuma-cp): deep copy tags when gen. outbounds [#5070](https://github.com/kumahq/kuma/pull/5070) @bartsmykla -* fix(kuma-cp): disable statsForAllMethods in grpc stats [#5226](https://github.com/kumahq/kuma/pull/5226) @jakubdyszkiewicz -* fix(kuma-cp): do not override source address when TP is not enabled [#4951](https://github.com/kumahq/kuma/pull/4951) @lukidzi -* fix(kuma-cp): multiple external services pointing to same address [#5185](https://github.com/kumahq/kuma/pull/5185) @slonka -* fix(kuma-cp): override grafana plugin files by default [#5208](https://github.com/kumahq/kuma/pull/5208) @slonka -* fix(kuma-cp): reissue admin tls cert on dp address change [#5222](https://github.com/kumahq/kuma/pull/5222) @jakubdyszkiewicz -* fix(kuma-cp): remove Dataplane for Pod without IP [#4964](https://github.com/kumahq/kuma/pull/4964) @jakubdyszkiewicz -* fix(kuma-cp): return content type of inspect endpoints [#4965](https://github.com/kumahq/kuma/pull/4965) @jakubdyszkiewicz -* fix(kuma-dp): resilient TCP access log streamer [#4862](https://github.com/kumahq/kuma/pull/4862) @jakubdyszkiewicz -* fix(kumactl): get APIVersions from k8s server [#5182](https://github.com/kumahq/kuma/pull/5182) @michaelbeaumont -* fix(tools): add 'v' prefix to preview version format [#5004](https://github.com/kumahq/kuma/pull/5004) @michaelbeaumont -* fix(tools): support both GitHub app tokens and PATs [#4869](https://github.com/kumahq/kuma/pull/4869) @michaelbeaumont -* perf(kuma-cp): avoid rebuilding endpoint map [#4974](https://github.com/kumahq/kuma/pull/4974) @jakubdyszkiewicz -* refactor(kuma-dp): add xds authentication customization [#4990](https://github.com/kumahq/kuma/pull/4990) @michaelbeaumont - -## 1.8.1 -> Released on 2022/10/10 -* fix(tools): support both GitHub app tokens and PATs (backport #4869) by @mergify in https://github.com/kumahq/kuma/pull/4872 -* fix(kuma-cp): remove Dataplane for Pod without IP (backport #4964) by @mergify in https://github.com/kumahq/kuma/pull/4980 -* fix(*): do not override source address when TP is not enabled (backport #4951) by @mergify in https://github.com/kumahq/kuma/pull/4961 -* fix(kuma-cp): deep copy tags when gen. outbounds (backport #5070) by @mergify in https://github.com/kumahq/kuma/pull/5071 -* fix(gateway): add support for retryOn (backport #5091) by @mergify in https://github.com/kumahq/kuma/pull/5098 - -## 1.7.2 -> Released on 2022/10/06 -* fix(helm): always run Helm version update by @michaelbeaumont in https://github.com/kumahq/kuma/pull/4604 -* chore(helm): update to 1.7.1 by @michaelbeaumont in https://github.com/kumahq/kuma/pull/4603 -* Revert "fix(helm): always run Helm version update (#4604)" by @michaelbeaumont in https://github.com/kumahq/kuma/pull/4609 -* fix(kuma-cp): deep copy tags when gen. outbounds (backport #5070) by @mergify in https://github.com/kumahq/kuma/pull/5072 -* fix(kuma-cp): remove Dataplane for Pod without IP (backport #4964) by @mergify in https://github.com/kumahq/kuma/pull/5096 - - -## 1.6.2 -> Released on 2022/10/06 -* fix(core): validate both old and new objects on Update (backport #4589) by @michaelbeaumont in https://github.com/kumahq/kuma/pull/4593 -* fix(kuma-cp): deep copy tags when gen. outbounds (backport #5070) by @mergify in https://github.com/kumahq/kuma/pull/5090 -* fix(kuma-cp): remove Dataplane for Pod without IP (backport #4964) by @mergify in https://github.com/kumahq/kuma/pull/5097 - - -## 1.8.0 -> Released on 2022/08/24 - -### New features: - -CNI v2 with lots of improvements: - -* taint controller to prevent race condition [#4650](https://github.com/kumahq/kuma/pull/4650) @slonka -* all logs are easily accessible via `kubectl logs` command which greatly simplifies observability [#4845](https://github.com/kumahq/kuma/pull/4845) @slonka -* it uses new transparent engine implemented in kuma-net [#4481](https://github.com/kumahq/kuma/pull/4481) @slonka - -URL rewrite in Builtin Gateway: - -* support URL rewriting [#4638](https://github.com/kumahq/kuma/pull/4638) @michaelbeaumont - -Stats and Clusters in the GUI: - -* execute stats and clusters from the control plane [#4557](https://github.com/kumahq/kuma/pull/4557) [#333](https://github.com/kumahq/kuma-gui/pull/333) @jakubdyszkiewicz - -Extra `retryOn` options for Retry: - -* add extra http retryOn options [#4744](https://github.com/kumahq/kuma/pull/4744) @johnharris85 - -Better support for TCP logging: - -* resilient tcp TCP access log streamer [#4511](https://github.com/kumahq/kuma/pull/4511) @parkanzky [#4862](https://github.com/kumahq/kuma/pull/4862) @jakubdyszkiewicz - -Filtering Envoy metrics: - -* added option to define filter for Envoy metrics [#4503](https://github.com/kumahq/kuma/pull/4503) @lukidzi - -Projected service account token: - -* support for projected service account token [#4453](https://github.com/kumahq/kuma/pull/4453) @lukidzi - -### Fixes: - -#### Helm: - -* remove duplicate keys in resources [#4681](https://github.com/kumahq/kuma/pull/4681) @michaelbeaumont -* add containersecuritycontext to CNI daemonset [#4677](https://github.com/kumahq/kuma/pull/4677) @jakubdyszkiewicz -* fix extraConfigMap and cp labels [#4531](https://github.com/kumahq/kuma/pull/4531) @lahabana -* use image.global.registry for imageExperimental [#4641](https://github.com/kumahq/kuma/pull/4641) @jakubdyszkiewicz - -#### Gateway: - -* `ListenerReason` for unresolved certificate refs, enable ReferenceGrant conformance tests [#4806](https://github.com/kumahq/kuma/pull/4806) @michaelbeaumont -* check hostname intersection between HTTPRoute and Gateway listener [#4537](https://github.com/kumahq/kuma/pull/4537) @michaelbeaumont -* create MeshGatewayInstance in same Mesh as Gateway [#4794](https://github.com/kumahq/kuma/pull/4794) @michaelbeaumont -* don't create invalid envoy config when routes and listeners don't match (backport #4837) [#4841](https://github.com/kumahq/kuma/pull/4841) @mergify -* hostname intersections, use new RouteReasons [#4544](https://github.com/kumahq/kuma/pull/4544) @michaelbeaumont -* improve HTTPRoute statuses with unresolved BackendRefs [#4635](https://github.com/kumahq/kuma/pull/4635) @michaelbeaumont -* npe without any timeout [#4548](https://github.com/kumahq/kuma/pull/4548) @michaelbeaumont -* rbac permissions for ReferenceGrant [#4628](https://github.com/kumahq/kuma/pull/4628) @michaelbeaumont -* workaround label value max length with hash [#4545](https://github.com/kumahq/kuma/pull/4545) @michaelbeaumont - -#### Control Plane: - -* check if kuma annotation or label is set but ignore value [#4731](https://github.com/kumahq/kuma/pull/4731) @lukidzi -* delete an empty TimeoutConfigurer [#4554](https://github.com/kumahq/kuma/pull/4554) @lobkovilya -* do not modify external service tags [#4591](https://github.com/kumahq/kuma/pull/4591) @jakubdyszkiewicz -* don't deploy Pod/Service webhooks in global [#4673](https://github.com/kumahq/kuma/pull/4673) @michaelbeaumont -* don't fail generation if other mesh CAs are misconfigured [#4501](https://github.com/kumahq/kuma/pull/4501) @michaelbeaumont -* external service datasource validation [#4652](https://github.com/kumahq/kuma/pull/4652) @jakubdyszkiewicz -* fix builtdns annotations for kubernetes [#4660](https://github.com/kumahq/kuma/pull/4660) @lahabana -* generate cluster name hash based on tags not config [#4598](https://github.com/kumahq/kuma/pull/4598) @lukidzi -* grant delete Pods in kuma-system namespace to control plane [#4571](https://github.com/kumahq/kuma/pull/4571) @michaelbeaumont -* localhost exposed application shouldn't be reachable [#4750](https://github.com/kumahq/kuma/pull/4750) @lukidzi -* make options for policies simpler [#4722](https://github.com/kumahq/kuma/pull/4722) @lahabana -* protect sort from empty locality [#4820](https://github.com/kumahq/kuma/pull/4820) @jakubdyszkiewicz -* registering dp on reconnect [#4647](https://github.com/kumahq/kuma/pull/4647) @jakubdyszkiewicz -* support GC service account [#4483](https://github.com/kumahq/kuma/pull/4483) @lobkovilya -* validate both old and new objects on Update [#4589](https://github.com/kumahq/kuma/pull/4589) @michaelbeaumont -* validation error with user tokens [#4507](https://github.com/kumahq/kuma/pull/4507) @jakubdyszkiewicz - -#### Data Plane: - -* access log path on windows when cp is on linux [#4518](https://github.com/kumahq/kuma/pull/4518) @jakubdyszkiewicz -* fix multi OS build of accesslogs [#4767](https://github.com/kumahq/kuma/pull/4767) @lahabana -* have envoy version check always work [#4564](https://github.com/kumahq/kuma/pull/4564) @lahabana -* propagate context for metrics aggregate [#4640](https://github.com/kumahq/kuma/pull/4640) @lukidzi -* set prometheus content-type when returning metrics [#4706](https://github.com/kumahq/kuma/pull/4706) @lukidzi - -### Other: - -* add operations now create non-existent path elements [#4595](https://github.com/kumahq/kuma/pull/4595) @michaelbeaumont - -#### Docs: - -* new policy matching proposal [#4474](https://github.com/kumahq/kuma/pull/4474) @lobkovilya - -#### Other changes: - -##### Gateway: - -* mention mesh name in gateway instance status [#4678](https://github.com/kumahq/kuma/pull/4678) @lahabana -* add listener connection limits [#4755](https://github.com/kumahq/kuma/pull/4755) @michaelbeaumont -* add loadBalancerIP to MeshGatewayInstance [#4519](https://github.com/kumahq/kuma/pull/4519) @michaelbeaumont -* allow MeshGateway Dataplane Pods to bind privileged ports [#4535](https://github.com/kumahq/kuma/pull/4535) @michaelbeaumont -* configure overload_manager based on max memory [#4694](https://github.com/kumahq/kuma/pull/4694) @michaelbeaumont -* multi-zone cross-mesh MeshGateway [#4443](https://github.com/kumahq/kuma/pull/4443) @michaelbeaumont -* propagate x-kuma-tags from MeshGateways [#4476](https://github.com/kumahq/kuma/pull/4476) @michaelbeaumont -* send default static payload for empty gateway [#4617](https://github.com/kumahq/kuma/pull/4617) @tharun208 -* set `path_with_escaped_slashes_action` [#4719](https://github.com/kumahq/kuma/pull/4719) @michaelbeaumont -* set cluster HTTP2 stream and connection window size [#4779](https://github.com/kumahq/kuma/pull/4779) @michaelbeaumont -* set cluster per_connection_buffer_limit_bytes [#4696](https://github.com/kumahq/kuma/pull/4696) @michaelbeaumont -* set global_downstream_max_connections to 50000 [#4724](https://github.com/kumahq/kuma/pull/4724) @michaelbeaumont -* update to Gateway API v0.5.0, support v1beta1 resources [#4599](https://github.com/kumahq/kuma/pull/4599) @michaelbeaumont -* validate listeners for collapsibility [#4765](https://github.com/kumahq/kuma/pull/4765) @michaelbeaumont -* add MeshGateway dashboard [#4555](https://github.com/kumahq/kuma/pull/4555) @michaelbeaumont - -##### Control Plane: - -* config cleanup (backport #4855) [#4857](https://github.com/kumahq/kuma/pull/4857) @mergify -* don't set deprecated dns_resolver_config [#4702](https://github.com/kumahq/kuma/pull/4702) @michaelbeaumont -* don't set deprecated known_suffixes [#4701](https://github.com/kumahq/kuma/pull/4701) @michaelbeaumont -* remove deprecated Cluster.Http2ProtocolOptions [#4528](https://github.com/kumahq/kuma/pull/4528) @michaelbeaumont -* remove versions_ws [#4512](https://github.com/kumahq/kuma/pull/4512) @lahabana -* replace deprecated admin_access_log_path [#4552](https://github.com/kumahq/kuma/pull/4552) @lahabana -* add /policies endpoint to list all registered policies [#4708](https://github.com/kumahq/kuma/pull/4708) @lahabana -* authenticate DP every time [#4685](https://github.com/kumahq/kuma/pull/4685) @jakubdyszkiewicz -* enrich policies endpoint [#4791](https://github.com/kumahq/kuma/pull/4791) @jakubdyszkiewicz -* identify gateway service by deployment [#4703](https://github.com/kumahq/kuma/pull/4703) @parkanzky -* separate CA for Envoy Admin communication [#4676](https://github.com/kumahq/kuma/pull/4676) @jakubdyszkiewicz -* use remote address for Gateway [#4530](https://github.com/kumahq/kuma/pull/4530) @jakubdyszkiewicz -* add operations now create non-existent path elements [#4595](https://github.com/kumahq/kuma/pull/4595) @michaelbeaumont - -##### Data Plane: - -* remove envoy admin port flag [#4574](https://github.com/kumahq/kuma/pull/4574) @tharun208 -* detect memory limit only on linux [#4715](https://github.com/kumahq/kuma/pull/4715) @jakubdyszkiewicz - -##### kumactl: - -* add a limit to the prom TSDB size [#4651](https://github.com/kumahq/kuma/pull/4651) @lahabana -* remove old flags in install tp [#4760](https://github.com/kumahq/kuma/pull/4760) @lahabana -* add MeshGateway to `install demo` [#4679](https://github.com/kumahq/kuma/pull/4679) @michaelbeaumont -* add install control-plane --registry flag [#4533](https://github.com/kumahq/kuma/pull/4533) @michaelbeaumont - -##### Documentation: - -* create MADR for MeshTrafficPermission [#4666](https://github.com/kumahq/kuma/pull/4666) @lobkovilya -* new policy matching proposal [#4474](https://github.com/kumahq/kuma/pull/4474) @lobkovilya -* policy matching, replace 'conf' with 'default' [#4693](https://github.com/kumahq/kuma/pull/4693) @lobkovilya - -##### CNI: - -* add cni ebpf plugin [#4810](https://github.com/kumahq/kuma/pull/4810) @bartsmykla -* implement the cni plugin [#4481](https://github.com/kumahq/kuma/pull/4481) @slonka [#4618](https://github.com/kumahq/kuma/pull/4618) @slonka [#4613](https://github.com/kumahq/kuma/pull/4613) @slonka [#4850](https://github.com/kumahq/kuma/pull/4850) @mergify [#4642](https://github.com/kumahq/kuma/pull/4642) @slonka [#4788](https://github.com/kumahq/kuma/pull/4788) @slonka [#4858](https://github.com/kumahq/kuma/pull/4858) @mergify [#4826](https://github.com/kumahq/kuma/pull/4826) @slonka [#4695](https://github.com/kumahq/kuma/pull/4695) @slonka [#4846](https://github.com/kumahq/kuma/pull/4846) @mergify -* taint controller [#4852](https://github.com/kumahq/kuma/pull/4852) @jakubdyszkiewicz -* use our cni with calico [#4801](https://github.com/kumahq/kuma/pull/4801) @slonka - -### Dependency updates: - -* update demo to latest version [#4572](https://github.com/kumahq/kuma/pull/4572) @lahabana -* update Kuma GUI [#4815](https://github.com/kumahq/kuma/pull/4815) @kleinfreund [#4723](https://github.com/kumahq/kuma/pull/4723) @lahabana -* use github.com/emicklei/go-restful/v3 [#4665](https://github.com/kumahq/kuma/pull/4665) @mmorel-35 -* bump alpine from 3.16.0 to 3.16.2 in /tools/releases/dockerfiles [#4670](https://github.com/kumahq/kuma/pull/4670) [#4827](https://github.com/kumahq/kuma/pull/4827) @dependabot -* bump github.com/containerd/cgroups from 1.0.3 to 1.0.4 [#4717](https://github.com/kumahq/kuma/pull/4717) @dependabot -* bump github.com/containernetworking/cni from 0.8.1 to 1.1.2 [#4632](https://github.com/kumahq/kuma/pull/4632) [#4716](https://github.com/kumahq/kuma/pull/4716) @dependabot -* bump github.com/golang-jwt/jwt/v4 from 4.4.1 to 4.4.2 [#4499](https://github.com/kumahq/kuma/pull/4499) @dependabot -* bump github.com/golang-migrate/migrate/v4 from 4.15.0 to 4.15.2 [#4672](https://github.com/kumahq/kuma/pull/4672) @dependabot -* bump github.com/gruntwork-io/terratest from 0.40.15 to 0.40.20 [#4469](https://github.com/kumahq/kuma/pull/4469) [#4480](https://github.com/kumahq/kuma/pull/4480) @dependabot -* bump github.com/miekg/dns from 1.1.49 to 1.1.50 [#4492](https://github.com/kumahq/kuma/pull/4492) @dependabot -* bump github.com/onsi/gomega from 1.19.0 to 1.20.0 [#4671](https://github.com/kumahq/kuma/pull/4671) @dependabot -* bump github.com/prometheus/client_golang from 1.12.2 to 1.13.0 [#4783](https://github.com/kumahq/kuma/pull/4783) @dependabot -* bump github.com/prometheus/common from 0.34.0 to 0.37.0 [#4489](https://github.com/kumahq/kuma/pull/4489) [#4627](https://github.com/kumahq/kuma/pull/4627) @dependabot -* bump github.com/spf13/cobra from 1.4.0 to 1.5.0 [#4491](https://github.com/kumahq/kuma/pull/4491) @dependabot -* bump go.uber.org/zap from 1.21.0 to 1.22.0 [#4829](https://github.com/kumahq/kuma/pull/4829) @dependabot -* bump google.golang.org/grpc from 1.47.0 to 1.48.0 [#4631](https://github.com/kumahq/kuma/pull/4631) @dependabot -* bump google.golang.org/protobuf from 1.28.0 to 1.28.1 [#4718](https://github.com/kumahq/kuma/pull/4718) @dependabot -* bump k8s.io/apiextensions-apiserver from 0.24.0 to 0.24.3 [#4493](https://github.com/kumahq/kuma/pull/4493) [#4624](https://github.com/kumahq/kuma/pull/4624) @dependabot -* bump sigs.k8s.io/controller-runtime from 0.12.1 to 0.12.3 [#4498](https://github.com/kumahq/kuma/pull/4498) [#4581](https://github.com/kumahq/kuma/pull/4581) @dependabot -* bump sigs.k8s.io/controller-tools from 0.9.0 to 0.9.2 [#4549](https://github.com/kumahq/kuma/pull/4549) @dependabot - -## 1.7.1 -> Released on 2022/07/19 - -### Fixes - -#### Gateway - -* Nil pinter exception without any timeout (#4550) -* Use remote address for Gateway (#4538) - -#### kumactl - -* Update demo to latest version (#4587) - -#### Control plane - -* Grant delete Pods in kuma-system namespace to control plane (#4575) -* Don't fail generation if other mesh CAs are misconfigured (#4517) -* Don't override timeout values for ExternalServices (#4568) - -#### Data plane proxy - -* Access log path on windows when cp is on linux (#4518) - -#### Helm - -* Fix extraConfigMap and cp labels (#4541) - -#### General - -* Avoid `-` in version of the binaries (#4527) - -## 1.7.0 -> Released on 2022/06/16 - -### New features: - -Cross Mesh Communication: -* add cross-mesh `MeshGateway` listeners [#4274](https://github.com/kumahq/kuma/pull/4274)[#4405](https://github.com/kumahq/kuma/pull/4405) @michaelbeaumont - -ContainerPatch: -* allow custom configuration of Kubernetes' `kuma-init` and `kuma-sidecar` containers by introducing `ContainerPatch` CRD [#4280](https://github.com/kumahq/kuma/pull/4280) [#4362](https://github.com/kumahq/kuma/pull/4362) / [#4366](https://github.com/kumahq/kuma/pull/4366) [#4369](https://github.com/kumahq/kuma/pull/4369) / [#4370](https://github.com/kumahq/kuma/pull/4370) @parkanzky, @bartsmykla - -Observability: -* hijack application metrics to enable scraping metrics from mTLSed applications without prometheus in the mesh [#4286](https://github.com/kumahq/kuma/pull/4286) [#4388](https://github.com/kumahq/kuma/pull/4388)/[#4406](https://github.com/kumahq/kuma/pull/4406) @lukidzi -* unified installation of `metrics/logging/tracing` into one command `observability` [#4308](https://github.com/kumahq/kuma/pull/4308) [#4411](https://github.com/kumahq/kuma/pull/4411)/[#4418](https://github.com/kumahq/kuma/pull/4418) @lukidzi, @lahabana - -ARM64 support: -* added arm build and release pipeline [#4231](https://github.com/kumahq/kuma/pull/4231) @lukidzi -* release for arm64 now publish correct arch image [#4276](https://github.com/kumahq/kuma/pull/4276) @lukidzi -* upgrade kubectl to version with ARM support [#4180](https://github.com/kumahq/kuma/pull/4180) @lukidzi -* support ARM Linux/Darwin for dev/tools [#4199](https://github.com/kumahq/kuma/pull/4199) @lukidzi -* introduced map of arch for a specific build [#4321](https://github.com/kumahq/kuma/pull/4321) @lukidzi -* do not exclude arm64 files from docker [#4265](https://github.com/kumahq/kuma/pull/4265) @lukidzi - -Gateway: -* add `GatewayClass.Spec.ParametersRef` support [#4157](https://github.com/kumahq/kuma/pull/4157) @michaelbeaumont -* cp annotations from gateway to svc [#4327](https://github.com/kumahq/kuma/pull/4327) @johnharris85 -* only reconcile Gateway when GatewayClass is Ready [#4162](https://github.com/kumahq/kuma/pull/4162) @michaelbeaumont -* auto generate hostname for crossMesh listeners [#4421](https://github.com/kumahq/kuma/pull/4421)/[#4424](https://github.com/kumahq/kuma/pull/4424) @michaelbeaumont - -Helm: -* set host network var in helm/cp-deployment.yaml [#4209](https://github.com/kumahq/kuma/pull/4209) @SallyBlichWalkMe -* add resource management for jobs [#4254](https://github.com/kumahq/kuma/pull/4254) @gdasson -* option for automountSAT=false on cp [#4309](https://github.com/kumahq/kuma/pull/4309) @gdasson -* helm chart improvements [#4337](https://github.com/kumahq/kuma/pull/4337) @bartsmykla - -CP: -* experimental transparent proxy annotation [#4240](https://github.com/kumahq/kuma/pull/4240) @parkanzky -* graceful shutdown on Universal using HDS [#4246](https://github.com/kumahq/kuma/pull/4246) @jakubdyszkiewicz -* intercept signal for different platforms [#4283](https://github.com/kumahq/kuma/pull/4283) @jakubdyszkiewicz -* XDS config dump on Global CP [#4301](https://github.com/kumahq/kuma/pull/4301) @jakubdyszkiewicz -* validate DP compat on kuma backend [#4236](https://github.com/kumahq/kuma/pull/4236) @parkanzky - -DP: -* graceful shutdown of kuma-dp [#4229](https://github.com/kumahq/kuma/pull/4229) @jakubdyszkiewicz - -### Fixes: - -Gateway: -* use MeshGatewayInstance mesh annotation when matching [#4361](https://github.com/kumahq/kuma/pull/4361)/[#4371](https://github.com/kumahq/kuma/pull/4371) @michaelbeaumont - -Helm: -* remove replica from cp-deployment.yaml when autoscaling enabled [#4447](https://github.com/kumahq/kuma/pull/4447)/[#4454](https://github.com/kumahq/kuma/pull/4454) @gustoliv - -CP: -* fix '/config_dump' request if Global CP is on Kubernetes [#4363](https://github.com/kumahq/kuma/pull/4363)/[#4372](https://github.com/kumahq/kuma/pull/4372) @lobkovilya -* add the latest version to compatibility matrix [#4232](https://github.com/kumahq/kuma/pull/4232) @parkanzky - -DP: -* clarify error log message when kuma-dp is wrongly connecting to global-cp [#4269](https://github.com/kumahq/kuma/pull/4269) @slonka - -Kumactl: -* fix transparent proxy --skip-conntrack-zone-split flag value [#4334](https://github.com/kumahq/kuma/pull/4334) @bartsmykla - -### Other notable changes: - -Gateway: -* add /finalizers permission for OwnerReferencesPermissionEnforcement plugin [#4239](https://github.com/kumahq/kuma/pull/4239) @michaelbeaumont -* don't match on ALPN in gateway (#4198) [#4272](https://github.com/kumahq/kuma/pull/4272) @wjrbetts - -Helm: -* delete 'kubernetes.io/arch' node selector [#4335](https://github.com/kumahq/kuma/pull/4335) @lobkovilya - -CP: -* don't always recompute mesh contexts [#4267](https://github.com/kumahq/kuma/pull/4267) @michaelbeaumont -* don't run dataplane gc in global [#4184](https://github.com/kumahq/kuma/pull/4184) @lahabana -* graceful components [#4277](https://github.com/kumahq/kuma/pull/4277) @jakubdyszkiewicz -* memory store cannot delete a parent [#4194](https://github.com/kumahq/kuma/pull/4194) @jakubdyszkiewicz -* protocol check should be case-insensitive [#4248](https://github.com/kumahq/kuma/pull/4248) @lukidzi -* remove dns server from control plane [#4192](https://github.com/kumahq/kuma/pull/4192) @lahabana -* automatically detect dns lookup family for cp cluster [#4275](https://github.com/kumahq/kuma/pull/4275) @slonka - -ZoneIngress: -* graceful start of many ZoneIngresses [#4305](https://github.com/kumahq/kuma/pull/4305) @jakubdyszkiewicz - -ZoneEgress: -* resolve zone-ingress advertized address [#4219](https://github.com/kumahq/kuma/pull/4219) @lahabana -* do not change ip to ZoneEgress address [#4193](https://github.com/kumahq/kuma/pull/4193) @lukidzi - -Kumactl: -* remove flag '--experimental-meshgateway' [#4315](https://github.com/kumahq/kuma/pull/4315) @lobkovilya - -Timeout Policy: -* deprecate 'timeout.grpc' section [#4365](https://github.com/kumahq/kuma/pull/4365)/[#4449](https://github.com/kumahq/kuma/pull/4449) @lobkovilya - -Other: -* delete dns-server 5653 port from configuration and helm files [#4339](https://github.com/kumahq/kuma/pull/4339)/[#4345](https://github.com/kumahq/kuma/pull/4345) @lobkovilya -* support kube-linter tools to analyze Kubernetes YAML files [#4294](https://github.com/kumahq/kuma/pull/4294) @mangoGoForward - -### Dependency upgrades: - -* upgrade envoy to 1.22.1 [#4288](https://github.com/kumahq/kuma/pull/4288) [#4464](https://github.com/kumahq/kuma/pull/4464)/[#4465](https://github.com/kumahq/kuma/pull/4465) @lobkovilya -* upgrade kuma-cni to 0.0.10 [#4313](https://github.com/kumahq/kuma/pull/4313) @lobkovilya -* upgrade tproxy iptables to v0.2.2 [#4328](https://github.com/kumahq/kuma/pull/4328) @bartsmykla -* upgrade GUI to the latest version [#4316](https://github.com/kumahq/kuma/pull/4316) [#4338](https://github.com/kumahq/kuma/pull/4338) [#4389](https://github.com/kumahq/kuma/pull/4389)/[#4390](https://github.com/kumahq/kuma/pull/4390) @jakubdyszkiewicz, @lahabana, @bartsmykla -* upgrade protoc and regenerate files [#4169](https://github.com/kumahq/kuma/pull/4169) @lukidzi -* bump github.com/golang-migrate/migrate/v4 from 4.15.1 to 4.15.2 [#4234](https://github.com/kumahq/kuma/pull/4234) @dependabot -* bump github.com/gruntwork-io/terratest from 0.40.6 to 0.40.10 [#4178](https://github.com/kumahq/kuma/pull/4178) [#4260](https://github.com/kumahq/kuma/pull/4260) [#4322](https://github.com/kumahq/kuma/pull/4322) @dependabot -* bump github.com/lib/pq from 1.10.5 to 1.10.6 [#4299](https://github.com/kumahq/kuma/pull/4299) @dependabot -* bump github.com/miekg/dns from 1.1.48 to 1.1.49 [#4291](https://github.com/kumahq/kuma/pull/4291) @dependabot -* bump github.com/onsi/ginkgo/v2 from 2.1.3 to 2.1.4 [#4233](https://github.com/kumahq/kuma/pull/4233) @dependabot -* bump github.com/prometheus/client_golang from 1.12.1 to 1.12.2 [#4290](https://github.com/kumahq/kuma/pull/4290) @dependabot -* bump github.com/prometheus/common from 0.33.0 to 0.34.0 [#4235](https://github.com/kumahq/kuma/pull/4235) @dependabot -* bump github.com/spf13/viper from 1.10.0 to 1.11.0 [#4177](https://github.com/kumahq/kuma/pull/4177) @dependabot -* bump google.golang.org/grpc from 1.45.0 to 1.46.2 [#4213](https://github.com/kumahq/kuma/pull/4213) [#4289](https://github.com/kumahq/kuma/pull/4289) @dependabot -* bump k8s.io/apiextensions-apiserver from 0.23.5 to 0.24.0 [#4216](https://github.com/kumahq/kuma/pull/4216) @dependabot [#4302](https://github.com/kumahq/kuma/pull/4302)/[#4378](https://github.com/kumahq/kuma/pull/4378) -* bump sigs.k8s.io/controller-runtime from 0.11.2 to 0.12.1 [#4302](https://github.com/kumahq/kuma/pull/4302)/[#4378](https://github.com/kumahq/kuma/pull/4378) @dependabot - -### Other: - -* automate policy generation [#4197](https://github.com/kumahq/kuma/pull/4197) @lobkovilya - -## 1.6.1 -> Released on 2022/06/16 - -### Fixes: - -CP: -* do not change ip to ZoneEgress address (backport #4193) [#4195](https://github.com/kumahq/kuma/pull/4195) -* memory store cannot delete a parent (backport #4194) [#4196](https://github.com/kumahq/kuma/pull/4196) - -### Dependency upgrades: - -* upgrade envoy to 1.21.3 [#4457](https://github.com/kumahq/kuma/pull/4457) @lobkovilya - -## 1.5.2 -> Released on 2022/06/16 - -### Dependency upgrades: - -* upgrade envoy to 1.21.3 [#4456](https://github.com/kumahq/kuma/pull/4456) @lobkovilya - -## 1.6.0 -> Released on 2022/04/12 - - -### New features: - -Gateway: -* release K8s GatewayAPI as preview [4072](https://github.com/kumahq/kuma/pull/4072) [4022](https://github.com/kumahq/kuma/pull/4022) [4045](https://github.com/kumahq/kuma/pull/4045) [4014](https://github.com/kumahq/kuma/pull/4014) [3956](https://github.com/kumahq/kuma/pull/3956) @jakubdyszkiewicz,@michaelbeaumont -* use MeshGatewayInstance name for generated objects [4097](https://github.com/kumahq/kuma/pull/4097) @michaelbeaumont - -Inspect api: -* add gateways to policy inspect [4125](https://github.com/kumahq/kuma/pull/4125) [4104](https://github.com/kumahq/kuma/pull/4104) [4092](https://github.com/kumahq/kuma/pull/4092) [4088](https://github.com/kumahq/kuma/pull/4088) [4077](https://github.com/kumahq/kuma/pull/4077) [4064](https://github.com/kumahq/kuma/pull/4064) [4065](https://github.com/kumahq/kuma/pull/4065) [3973](https://github.com/kumahq/kuma/pull/3973) [3966](https://github.com/kumahq/kuma/pull/3966) @michaelbeaumont - -ZoneEgress: -* Make zoneegress available in standalone mode [4100](https://github.com/kumahq/kuma/pull/4100) @lahabana -* added locality aware lb for external service [4048](https://github.com/kumahq/kuma/pull/4048) @lukidzi -* make zoneegress routing opt-in [4109](https://github.com/kumahq/kuma/pull/4109) [4013](https://github.com/kumahq/kuma/pull/4013) @lukidzi -* support RateLimit and FaultInjections [4000](https://github.com/kumahq/kuma/pull/4000) @lobkovilya - -Helm: -* Allow customization of image tags in Helm chart [4068](https://github.com/kumahq/kuma/pull/4068) @gdasson -* Expose kuma-cp's metric port so it can be scraped by self-deployed prometheus. [4047](https://github.com/kumahq/kuma/pull/4047) @jbehrends -* add resource limits option for control plane deployment [4049](https://github.com/kumahq/kuma/pull/4049) @gdasson -* fail if global.image.tag and appVersion incompatible [4085](https://github.com/kumahq/kuma/pull/4085) @michaelbeaumont -* set version to track appVersion [4083](https://github.com/kumahq/kuma/pull/4083) @michaelbeaumont -* expose kuma-cp gui through ingress [4101](https://github.com/kumahq/kuma/pull/4101) @lukidzi -* allow specifying security context [4153](https://github.com/kumahq/kuma/pull/4153) @gdasson @bartsmykla - -Other: -* feat(k8s): ability to set custom service account token volume [4036](https://github.com/kumahq/kuma/pull/4036) @johnharris85 -* feat(k8s): shutdown kuma-dp container for any owner kind [4079](https://github.com/kumahq/kuma/pull/4079) @lukidzi -* feat(k8s): support startupProbes [4090](https://github.com/kumahq/kuma/pull/4090) @lahabana -* feat(kuma-cp): add uptime, policies, gateway dps to reports [3933](https://github.com/kumahq/kuma/pull/3933) @parkanzky -* feat(kuma-cp): add metrics and timeouts to CA interface [4089](https://github.com/kumahq/kuma/pull/4089) @parkanzky -* feat(kumactl): add --values and --set to kumactl install control-plane [4086](https://github.com/kumahq/kuma/pull/4086) @lahabana -* feat(transparent-proxy): add experimental tproxy iptables generation [4114](https://github.com/kumahq/kuma/pull/4114) @bartsmykla - -### Dependency upgrades: - -* bump alpine from 3.15.0 to 3.15.2 in /tools/releases/dockerfiles [4060](https://github.com/kumahq/kuma/pull/4060) [4023](https://github.com/kumahq/kuma/pull/4023) @dependabot -* bump github.com/envoyproxy/protoc-gen-validate from 0.6.3 to 0.6.7 [3978](https://github.com/kumahq/kuma/pull/3978) [3976](https://github.com/kumahq/kuma/pull/3976) @dependabot -* bump github.com/go-logr/logr from 1.2.2 to 1.2.3 [4040](https://github.com/kumahq/kuma/pull/4040) @dependabot -* bump github.com/golang-jwt/jwt/v4 from 4.3.0 to 4.4.1 [4061](https://github.com/kumahq/kuma/pull/4061) [4025](https://github.com/kumahq/kuma/pull/4025) @dependabot -* bump github.com/k8s/* from 0.23.4 to 0.23.5 [4043](https://github.com/kumahq/kuma/pull/4043) @lahabana -* bump github.com/miekg/dns from 1.1.46 to 1.1.47 [3998](https://github.com/kumahq/kuma/pull/3998) @dependabot -* bump github.com/onsi/gomega from 1.18.1 to 1.19.0 [4062](https://github.com/kumahq/kuma/pull/4062) @dependabot -* bump github.com/spf13/cobra from 1.3.0 to 1.4.0 [3995](https://github.com/kumahq/kuma/pull/3995) @dependabot -* bump go.uber.org/multierr from 1.7.0 to 1.8.0 [3974](https://github.com/kumahq/kuma/pull/3974) @dependabot -* bump google.golang.org/grpc from 1.44.0 to 1.45.0 [3993](https://github.com/kumahq/kuma/pull/3993) @dependabot -* bump google.golang.org/protobuf from 1.27.1 to 1.28.0 [4046](https://github.com/kumahq/kuma/pull/4046) @dependabot -* bump helm.sh/helm/v3 from 3.8.0 to 3.8.1 [3994](https://github.com/kumahq/kuma/pull/3994) @dependabot -* bump sigs.k8s.io/gateway-api from 0.4.1 to 0.4.2 [3997](https://github.com/kumahq/kuma/pull/3997) @dependabot -* remove dependency on spire [4044](https://github.com/kumahq/kuma/pull/4044) @lahabana - -### Other notable changes: - -* chore(k8s): replace cni registry [4070](https://github.com/kumahq/kuma/pull/4070) @lobkovilya -* chore(k8s): use appProtocol from service by default [4015](https://github.com/kumahq/kuma/pull/4015) @jakubdyszkiewicz -* chore(kuma-dp): cleanup bootstrap version field [3670](https://github.com/kumahq/kuma/pull/3670) @tharun208 -* fix(gateway): fix status updating in MeshGatewayInstance reconciliation [4051](https://github.com/kumahq/kuma/pull/4051) @michaelbeaumont -* fix(gateway): gateway instance service reconciliation loops forever [4035](https://github.com/kumahq/kuma/pull/4035) @jakubdyszkiewicz -* fix(gateway): gateway reconciliation loops forever [4034](https://github.com/kumahq/kuma/pull/4034) @jakubdyszkiewicz -* fix(gateway): gateway tls listeners without hostnames [4093](https://github.com/kumahq/kuma/pull/4093) @jakubdyszkiewicz -* fix(gateway): ignore non TCP protocol for provided gateway [4067](https://github.com/kumahq/kuma/pull/4067) @lahabana -* fix(gateway): mesh gateway instance service target port [4071](https://github.com/kumahq/kuma/pull/4071) @jakubdyszkiewicz -* fix(gateway): skip creating MeshGateways without proper attachment [4011](https://github.com/kumahq/kuma/pull/4011) @jakubdyszkiewicz -* fix(helm): add prefix to `app` label in ingress/egress deployment [4123](https://github.com/kumahq/kuma/pull/4123) @lahabana -* fix(helm): fix other template prefix in ingress/egress [4124](https://github.com/kumahq/kuma/pull/4124) @lahabana -* fix(helm): remove wildcard rbac version [4148](https://github.com/kumahq/kuma/pull/4148) @johnharris85 -* fix(k8s): reconcile serviceMaps when using mesh namespace annotation [3815](https://github.com/kumahq/kuma/pull/3815) @lahabana -* fix(kuma-cp): avoid generating excessive envoy clusters [3984](https://github.com/kumahq/kuma/pull/3984) @lobkovilya -* fix(kuma-cp): default policy creation [4073](https://github.com/kumahq/kuma/pull/4073) @lobkovilya -* fix(kuma-cp): guard the nil version in metadata [3969](https://github.com/kumahq/kuma/pull/3969) @jakubdyszkiewicz -* fix(kuma-cp): provide better message when running with an in-memory database [3982](https://github.com/kumahq/kuma/pull/3982) @lukidzi -* fix(kuma-dp): better error message when the token is invalid [3961](https://github.com/kumahq/kuma/pull/3961) @lahabana -* fix(kumactl): add mesh flag to only commands that uses it [3788](https://github.com/kumahq/kuma/pull/3788) @tharun208 -* fix(kumactl): split yaml correctly in `kumactl apply` [4107](https://github.com/kumahq/kuma/pull/4107) @lahabana -* fix(proxytemplate): avoid validation error [3937](https://github.com/kumahq/kuma/pull/3937) @marcoferrer -* fix(proxytemplate): execute hooks before proxy template modifications [4055](https://github.com/kumahq/kuma/pull/4055) @jakubdyszkiewicz -* perf(k8s): move outbounds from Dataplane to Config [3986](https://github.com/kumahq/kuma/pull/3986) @jakubdyszkiewicz - - -## 1.5.1 -> Released on 2022/04/11 - -* chore(k8s): replace cni registry (backport #4070) [4076](https://github.com/kumahq/kuma/pull/4076) -* fix(kuma-cp): default policy creation (backport #4073) [4080](https://github.com/kumahq/kuma/pull/4080) -* fix(kuma-cp): guard the nil version in metadata (backport #3969) [3970](https://github.com/kumahq/kuma/pull/3970) - -## 1.5.0 -> Released on 2022/02/24 - -* feat(*): zone egress [#3809](https://github.com//kumahq/kuma/pull/3809) [#3757](https://github.com//kumahq/kuma/pull/3757) -* feat(kuma-cp) data plane proxy membership [#3619](https://github.com//kumahq/kuma/pull/3619) -* feat(kuma-cp): reachable services in transparent proxying [#3791](https://github.com//kumahq/kuma/pull/3791) -* feat(inspect-api): retrieve full XDS config [#3768](https://github.com//kumahq/kuma/pull/3768) -* feat(*): inspect api support [#3805](https://github.com//kumahq/kuma/pull/3805) [#3568](https://github.com//kumahq/kuma/pull/3568) [#3462](https://github.com//kumahq/kuma/pull/3462) -* feat(kuma-cp): add proxytemplate to matched policies for inspect poli… [#3786](https://github.com//kumahq/kuma/pull/3786) 👍contributed by @tharun208 -* feat(kuma-cp): enable traffic route for inspect endpoints [#3735](https://github.com//kumahq/kuma/pull/3735) 👍contributed by @tharun208 -* feat(*): move adminPort to DPP resource [#3739](https://github.com//kumahq/kuma/pull/3739) -* feat(helm): add imagePullSecrets support [#3755](https://github.com//kumahq/kuma/pull/3755) 👍contributed by @johnharris85 -* feat(*): enable Gateway with runtime flag [#3736](https://github.com//kumahq/kuma/pull/3736) -* feat(kumactl): add --api-timeout flag [#3723](https://github.com//kumahq/kuma/pull/3723) -* feat: allow for ca/identity secrets for every mesh [#3696](https://github.com//kumahq/kuma/pull/3696) -* feat(kuma-cp): allow extra cm in kuma cp chart [#3671](https://github.com//kumahq/kuma/pull/3671) 👍contributed by @wjrbetts -* feat(kuma-cp): add gui link in index api response [#3675](https://github.com//kumahq/kuma/pull/3675) 👍contributed by @tharun208 -* feat(*): allow ca.crt to be in separate k8s secret [#3638](https://github.com//kumahq/kuma/pull/3638) -* feat(kumactl): add type of logging and tracing backends with name in table output [#3636](https://github.com//kumahq/kuma/pull/3636) 👍contributed by @tharun208 -* feat(kuma-cp): enable client side gRPC keepalive [#3574](https://github.com//kumahq/kuma/pull/3574) -* feat(gui): new onboarding view [kumahq/kuma-gui#194](https://github.com/kumahq/kuma-gui/pull/194) -* feat(gui): link to documentation from policy view [kumahq/kuma-gui#289](https://github.com/kumahq/kuma-gui/pull/289) - -* fix(kuma-cp): do not update unchanged insights [#3819](https://github.com//kumahq/kuma/pull/3819) -* fix(*): do not annotate gateway services with ingress upstream [#3816](https://github.com//kumahq/kuma/pull/3816) -* fix(*): properly escape DB password when creating postgres connection string [#3804](https://github.com//kumahq/kuma/pull/3804) -* fix(kuma-cp): fix missing label sidecar injection [#3740](https://github.com//kumahq/kuma/pull/3740) -* fix(kuma-dp): fix conntrack collisions [#3459](https://github.com//kumahq/kuma/pull/3459) 👍contributed by @johnharris85 -* fix(conf): remove invalid health check fields from example [#3697](https://github.com//kumahq/kuma/pull/3697) 👍contributed by @tharun208 -* fix(kuma-dp): binary lookup function skips not available directories [#3667](https://github.com//kumahq/kuma/pull/3667) -* fix(k8s): make sure controllers start after leader election [#3666](https://github.com//kumahq/kuma/pull/3666) -* fix(build): fix gomega matchers for inspect resources command test [#3660](https://github.com//kumahq/kuma/pull/3660) [#3651](https://github.com//kumahq/kuma/pull/3651) 👍contributed by @tharun208 -* fix(kumactl): ignore any unregistered CRDs, not only from the root chart [#3643](https://github.com//kumahq/kuma/pull/3643) -* fix(kumactl): print meta before spec for Kuma resources [#3637](https://github.com//kumahq/kuma/pull/3637) -* fix(kuma-cp): add cp selector to global sync service [#3579](https://github.com//kumahq/kuma/pull/3579) -* fix(kuma-cp) do not override other dataplane with dp lifecycle [#3507](https://github.com//kumahq/kuma/pull/3507) -* fix(helm) Add support to customize nodeport [#1944](https://github.com//kumahq/kuma/pull/1944) 👍contributed by @bhiravabhatla - -* perf(kuma-cp): use mesh snapshot in proxy builder [#3700](https://github.com//kumahq/kuma/pull/3700) -* perf(kuma-cp): use mesh snapshot in gateway [#3710](https://github.com//kumahq/kuma/pull/3710) -* perf(kuma-cp): share mesh context [#3659](https://github.com//kumahq/kuma/pull/3659) - -* improvement(metadata): include name of annotation to parse error message [#3677](https://github.com//kumahq/kuma/pull/3677) 👍contributed by @ChinYing-Li -* refactor(insights): delete method GetLatestSubscription for insights [#3656](https://github.com//kumahq/kuma/pull/3656) 👍contributed by @tharun208 -* refactor(kuma-cp): unify mesh determination for k8s objects [#3708](https://github.com//kumahq/kuma/pull/3708) -* refactor(*): replace ensureDefaultXXX functions with a single generic function [#3662](https://github.com//kumahq/kuma/pull/3662) 👍contributed by @tharun208 -* chore(zone-ingress): delete deprecated env KUMA_DATAPLANE_ADMIN_PORT [#3766](https://github.com//kumahq/kuma/pull/3766) -* chore(k8s): remove GetBool method and use GetEnabled [#3698](https://github.com//kumahq/kuma/pull/3698) 👍contributed by @tharun208 -* chore(*): generate CRD types [#3453](https://github.com//kumahq/kuma/pull/3453) -* chore(dataplane)!: disallow using 0.0.0.0 in networking.address for dp [#3691](https://github.com//kumahq/kuma/pull/3691) -* chore(kuma-cp): consolidate mesh defaults creation [#3678](https://github.com//kumahq/kuma/pull/3678) -* chore(config): remove ability to disable insights [#3501](https://github.com//kumahq/kuma/pull/3501) -* chore(*): remove old Ingress [#3435](https://github.com//kumahq/kuma/pull/3435) -* chore(*): upgrade Envoy to v1.21.1 [#3909](https://github.com//kumahq/kuma/pull/3909) -* chore(grafana): update to latest grafana plugin version [#3812](https://github.com//kumahq/kuma/pull/3812) -* ci(*): release on every commit in master and release branches [#3712](https://github.com//kumahq/kuma/pull/3712) - -## 1.4.1 -> Released on 2022/01/20 - -* feat: add kubernetes tags automatically [#3439](https://github.com//kumahq/kuma/pull/3439) -* perf: update Mesh and ServiceInsights only when really needed [#3463](https://github.com//kumahq/kuma/pull/3463) -* perf: eliminate uneccessary JSON marshalling [#3483](https://github.com//kumahq/kuma/pull/3483) -* feat: sidecar injection webhook based on labels [#3417](https://github.com//kumahq/kuma/pull/3417) -* chore: upgrade gui to new version [#3454](https://github.com//kumahq/kuma/pull/3454) -* test: fix postgress tests permissions [#3443](https://github.com//kumahq/kuma/pull/3443) -* feat: add affinity to CP and Ingress pods [#3036](https://github.com//kumahq/kuma/pull/3036) - 👍contributed by @andrey-dubnik -* chore: bump github.com/golang-jwt/jwt/v4 from 4.1.0 to 4.2.0 [#3432](https://github.com//kumahq/kuma/pull/3432) -* feat: consolidate tokens logic to support expiration, rotation, revocation and RSA256 [#3376](https://github.com/kumahq/kuma/pull/3376) -* fix: simplify cluster creation with endpoints [#3403](https://github.com//kumahq/kuma/pull/3403) -* fix: enable metrics hijacker for current version of Kuma [#3405](https://github.com//kumahq/kuma/pull/3405) -* fix: switch to mTLS when CP communicates with Envoy Admin [#3353](https://github.com//kumahq/kuma/pull/3353) -* chore: bump github.com/spiffe/spire from 0.12.3 to 1.1.1 [#3388](https://github.com//kumahq/kuma/pull/3388) -* chore: bump github.com/spf13/viper from 1.8.1 to 1.9.0 [#3389](https://github.com//kumahq/kuma/pull/3389) -* fix: validate cp url in dp conf [#3357](https://github.com//kumahq/kuma/pull/3357) -* chore: send reports to tls endpoint [#3361](https://github.com//kumahq/kuma/pull/3361) -* chore: check explicit service account name [#3228](https://github.com//kumahq/kuma/pull/3228) -* feat: inspect other dependencies versions [#3352](https://github.com//kumahq/kuma/pull/3352) -* chore: add area/gateway label [#3263](https://github.com//kumahq/kuma/pull/3263) -* chore: remove dp token from xds metadata [#3282](https://github.com//kumahq/kuma/pull/3282) -* refactor: move from io/ioutil to io and os packages [#3265](https://github.com//kumahq/kuma/pull/3265) - 👍contributed by @Juneezee -* fix: validate newly generated xDS snapshots [#3195](https://github.com//kumahq/kuma/pull/3195) -* chore: bump k8s.io/apiextensions-apiserver from 0.22.3 to 0.22.4 [#3218](https://github.com//kumahq/kuma/pull/3218) -* chore: bump helm chart version to 0.8 [#3202](https://github.com//kumahq/kuma/pull/3202) - -## 1.4.0 -> Released on 2021/11/22 - -* chore(*) scripts for build, publish and fetch Envoy binaries [#3110](https://github.com//kumahq/kuma/pull/3110) [#3182](https://github.com//kumahq/kuma/pull/3182) -* chore(kuma-cp) upgrade gui to new version [#3178](https://github.com//kumahq/kuma/pull/3178) [#3179](https://github.com//kumahq/kuma/pull/3179) -* chore(kuma-cp) Use go structs instead of gotemplate for bootstrap [#3156](https://github.com//kumahq/kuma/pull/3156) [#3173](https://github.com//kumahq/kuma/pull/3173) -* chore(deps): bump github.com/slok/go-http-metrics from 0.9.0 to 0.10.0 [#3170](https://github.com//kumahq/kuma/pull/3170) -* Disable reporting by default [#3070](https://github.com//kumahq/kuma/pull/3070) [#3159](https://github.com//kumahq/kuma/pull/3159) -* chore(kumactl) remove install CRDs filter function [#3139](https://github.com//kumahq/kuma/pull/3139) -* feat(kuma-dp) Add conf to disable service vip [#3143](https://github.com//kumahq/kuma/pull/3143) -* chore(kuma-cp) update some TODO comments [#3141](https://github.com//kumahq/kuma/pull/3141) -* feat(kuma-cp) Add kuma.io/ignore annotation [#3142](https://github.com//kumahq/kuma/pull/3142) -* fix(kuma-dp) match gateway cluster names in the hijacker [#3106](https://github.com//kumahq/kuma/pull/3106) -* feat: add ECDSA certificate generator support [#3093](https://github.com//kumahq/kuma/pull/3093) -* feat: add more global resources to GlobalInsights [#3094](https://github.com//kumahq/kuma/pull/3094) -* feat: allow creating secrets for the not yet existing mesh [#3076](https://github.com//kumahq/kuma/pull/3076) - 👍contributed by cloudwiz -* feat: don't add v6 in DNS when v6 is disabled [#3089](https://github.com//kumahq/kuma/pull/3089) -* fix: explicitly disable dns in env when disabled in injector [#3077](https://github.com//kumahq/kuma/pull/3077) -* feat: added support for https tracing endpoint [#3057](https://github.com//kumahq/kuma/pull/3057) - 👍contributed by sudeeptoroy -* fix: normalize generating TLS certificates [#3027](https://github.com//kumahq/kuma/pull/3027) -* fix: zero downtime when enabling permissive mTLS [#3019](https://github.com//kumahq/kuma/pull/3019) -* feat: add deprecation notice for kuma-prometheus-sd [#2994](https://github.com//kumahq/kuma/pull/2994) -* feat: add GlobalInsights api endpoint [#3018](https://github.com//kumahq/kuma/pull/3018) -* fix: duplicate TLS certificate usage [#3008](https://github.com//kumahq/kuma/pull/3008) -* chore: add command argument count parameters [#3010](https://github.com//kumahq/kuma/pull/3010) -* feat: aggregate dp stats by type in MeshInsight [#2999](https://github.com//kumahq/kuma/pull/2999) -* chore: delete CLI flag '--bootstrap-version' [#2965](https://github.com//kumahq/kuma/pull/2965) -* feat: show the effective Dataplane address [#2977](https://github.com//kumahq/kuma/pull/2977) -* feat: aggregate services in MeshInsight [#2974](https://github.com//kumahq/kuma/pull/2974) -* fix: allow only one healthcheck [#2972](https://github.com//kumahq/kuma/pull/2972) -* feat: give CA managers all backends at once [#2956](https://github.com//kumahq/kuma/pull/2956) -* chore: normalize timeout configurer API [#2934](https://github.com//kumahq/kuma/pull/2934) -* fix: locality-aware lb for external-services [#2903](https://github.com//kumahq/kuma/pull/2903) -* feat: add install control-plane --version flag for all components [#2904](https://github.com//kumahq/kuma/pull/2904) -* feat: add zone selector to Kuma Mesh dashboard [#2860](https://github.com//kumahq/kuma/pull/2860) -* fix: possible to delete resources on Zone CP [#2665](https://github.com//kumahq/kuma/pull/2665) -* fix: make cluster names contextually unique [#3098](https://github.com//kumahq/kuma/pull/3098) -* feat: automatically enable gzip content on gateways [#3104](https://github.com//kumahq/kuma/pull/3104) -* feat: add Gateway TLS termination support [#3044](https://github.com//kumahq/kuma/pull/3044) -* feat: add gateway support for external services [#2990](https://github.com//kumahq/kuma/pull/2990) -* fix: enable secrets support for Gateway resources [#2953](https://github.com//kumahq/kuma/pull/2953) -* feat: initial connection policy support for Gateway [#2933](https://github.com//kumahq/kuma/pull/2933) -* feat: add access to generate zone ingress token [#3075](https://github.com//kumahq/kuma/pull/3075) -* feat: user token with RSA256 [#2992](https://github.com//kumahq/kuma/pull/2992) -* feat: prefix system users and groups with mesh-system [#3013](https://github.com//kumahq/kuma/pull/3013) -* feat: localhost is not an admin on kubernetes [#3003](https://github.com//kumahq/kuma/pull/3003) -* feat: user token enabled by default [#2941](https://github.com//kumahq/kuma/pull/2941) -* feat: Admin User Token bootstrap [#2923](https://github.com//kumahq/kuma/pull/2923) -* chore: refactor access control for individual access [#2983](https://github.com//kumahq/kuma/pull/2983) -* feat: support plugin based authentication including user tokens [#2895](https://github.com//kumahq/kuma/pull/2895) -* feat: User Token for API Server authentication [#2892](https://github.com//kumahq/kuma/pull/2892) -* chore: refactor authz and authn to plugins [#2837](https://github.com//kumahq/kuma/pull/2837) -* chore(kuma-cp) upgrade gui to new version [#3148](https://github.com//kumahq/kuma/pull/3148) -* chore(*) upgrade to Go 1.17.3 [#3147](https://github.com//kumahq/kuma/pull/3147) -* chore(deps): bump github.com/operator-framework/operator-lib [#3158](https://github.com//kumahq/kuma/pull/3158) -* chore(deps): bump github.com/gruntwork-io/terratest [#3130](https://github.com//kumahq/kuma/pull/3130) -* chore: update helm and controller-runtime [#2764](https://github.com//kumahq/kuma/pull/2764) -* chore: bump github.com/lib/pq from 1.10.3 to 1.10.4 [#3131](https://github.com//kumahq/kuma/pull/3131) -* chore: bump google.golang.org/grpc from 1.41.0 to 1.42.0 [#3101](https://github.com//kumahq/kuma/pull/3101) -* chore: bump github.com/prometheus/common from 0.31.1 to 0.32.1 [#3006](https://github.com//kumahq/kuma/pull/3006) -* chore: bump github.com/envoyproxy/protoc-gen-validate [#3007](https://github.com//kumahq/kuma/pull/3007) -* chore: bump github.com/google/uuid from 1.2.0 to 1.3.0 [#2839](https://github.com//kumahq/kuma/pull/2839) -* chore: bump sigs.k8s.io/controller-runtime from 0.10.2 to 0.10.3 [#3132](https://github.com//kumahq/kuma/pull/3132) -* chore: bump k8s.io/client-go from 0.22.2 to 0.22.3 [#3061](https://github.com//kumahq/kuma/pull/3061) -* chore: bump k8s.io/apiextensions-apiserver from 0.22.2 to 0.22.3 [#3059](https://github.com//kumahq/kuma/pull/3059) -* chore: bump k8s.io/api from 0.22.2 to 0.22.3 [#3058](https://github.com//kumahq/kuma/pull/3058) -* chore: bump github.com/golang-migrate/migrate/v4 [#2970](https://github.com//kumahq/kuma/pull/2970) -* chore: bump helm.sh/helm/v3 from 3.6.1 to 3.7.1 [#2968](https://github.com//kumahq/kuma/pull/2968) -* chore: bump github.com/miekg/dns from 1.0.14 to 1.1.43 in /pkg/transparentproxy/istio [#2752](https://github.com//kumahq/kuma/pull/2752) - -## 1.3.1 -> Released on 2021/10/06 - -* fix: disable zone [#2884](https://github.com//kumahq/kuma/pull/2884) -* fix: limit number of postgres connection by default [#2866](https://github.com//kumahq/kuma/pull/2866) -* feat: add zone selector to Kuma Service to Service dashboard [#2876](https://github.com//kumahq/kuma/pull/2876) -* feat: add zone selector to Kuma Service dashboard [#2865](https://github.com//kumahq/kuma/pull/2865) -* feat: add zone selector to Kuma Dataplane dashboard [#2864](https://github.com//kumahq/kuma/pull/2864) -* fix: fix duplicates in dataplane list in Kuma Services dashboard [#2845](https://github.com//kumahq/kuma/pull/2845) -* chore: migrate install resources from rbac API v1beta1 to v1 [#2875](https://github.com//kumahq/kuma/pull/2875) -* fix: fault injection matching [#2757](https://github.com//kumahq/kuma/pull/2757) -* fix: delete kuma.io/region and kuma.io/sub-zone [#2824](https://github.com//kumahq/kuma/pull/2824) -* feat: print control plane version with version cmd [#2834](https://github.com//kumahq/kuma/pull/2834) -* fix: Only warn about version compatibility where it makes sense [#2828](https://github.com//kumahq/kuma/pull/2828) -* perf: remove insight update rate limit burst [#2825](https://github.com//kumahq/kuma/pull/2825) -* perf: apply ratelimit to service insights [#2815](https://github.com//kumahq/kuma/pull/2815) -* feat: adds support for specifying specific IP for cloud provider load balancers for ingress service [#2779](https://github.com//kumahq/kuma/pull/2779) - 👍contributed by @jamesdbloom -* fix: send tool output to stdout [#2787](https://github.com//kumahq/kuma/pull/2787) -* fix: switch to a Kuma fork of go-control-plane [#2771](https://github.com//kumahq/kuma/pull/2771) -* chore: parametrize label on the deployment [#2765](https://github.com//kumahq/kuma/pull/2765) -* perf: set Node only on first DiscoveryRequest [#2741](https://github.com//kumahq/kuma/pull/2741) -* feat: verify ServiceAccountToken bound to a Pod [#2745](https://github.com//kumahq/kuma/pull/2745) -* feat: internal dns should resolve AAAA records [#2760](https://github.com//kumahq/kuma/pull/2760) -* fix: Add FORMERR and NOTIMP in alternate default coredns conf [#2756](https://github.com//kumahq/kuma/pull/2756) -* fix: virtual probes with query [#2706](https://github.com//kumahq/kuma/pull/2706) -* fix: Avoid calling `Send()` from different goroutines [#2573](https://github.com//kumahq/kuma/pull/2573) -* feat: automatically set proxy concurrency [#2691](https://github.com//kumahq/kuma/pull/2691) -* feat: Improve builtin grafana setup to have traces and logs linked [#2716](https://github.com//kumahq/kuma/pull/2716) -* fix: Show gateway services in service-insights [#2711](https://github.com//kumahq/kuma/pull/2711) -* fix: Correct bad merging of duration [#2700](https://github.com//kumahq/kuma/pull/2700) -* fix: Ensure outbounds are set when migrating from old to new [#2698](https://github.com//kumahq/kuma/pull/2698) -* fix: get rid of regex for parsing IPs [#2681](https://github.com//kumahq/kuma/pull/2681) -* feat: add CP config to ZoneInsights [#2661](https://github.com//kumahq/kuma/pull/2661) -* feat: generate GatewayRoute clusters [#2819](https://github.com//kumahq/kuma/pull/2819) -* feat: add GatewayRoute route generation [#2782](https://github.com//kumahq/kuma/pull/2782) -* feat: match gateway routes [#2758](https://github.com//kumahq/kuma/pull/2758) -* feat: initial gateway TrafficRoute support [#2547](https://github.com//kumahq/kuma/pull/2547) -* feat: add a GatewayRoute resource [#2591](https://github.com//kumahq/kuma/pull/2591) -* chore: update base image for kuma-dp [#2881](https://github.com//kumahq/kuma/pull/2881) -* chore: change Go JWT version to fix security vunerability [#2844](https://github.com//kumahq/kuma/pull/2844) -* chore: bump go.uber.org/zap from 1.17.0 to 1.19.1 [#2768](https://github.com//kumahq/kuma/pull/2768) -* chore: bump google.golang.org/grpc from 1.38.0 to 1.40.0 [#2737](https://github.com//kumahq/kuma/pull/2737) -* chore: bump github.com/miekg/dns from 1.1.42 to 1.1.43 [#2769](https://github.com//kumahq/kuma/pull/2769) -* chore: upgrade github.com/spf13/cobra [#2732](https://github.com//kumahq/kuma/pull/2732) -* chore: bump alpine in /tools/releases/dockerfiles [#2705](https://github.com//kumahq/kuma/pull/2705) -* chore: bump github.com/onsi/gomega from 1.13.0 to 1.16.0 [#2657](https://github.com//kumahq/kuma/pull/2657) -* chore: update envoy to 1.18.4 [#2667](https://github.com//kumahq/kuma/pull/2667) - - -## 1.3.0 -> Released on 2021/08/26 - -* feat: remove provided ca cert validation [#2663](https://github.com/kumahq/kuma/pull/2663) - 👍contributed by Nikita Pande (@nikita15p) -* feat: Use kuma-sd in kumactl install metrics [#2654](https://github.com/kumahq/kuma/pull/2654) -* feat: Add new datasource to kumactl install metrics [#2640](https://github.com/kumahq/kuma/pull/2640) -* fix: remove extra endline in traffic log default template [#2514](https://github.com//kumahq/kuma/pull/2514) -* fix: TLSInspector is causing tcp healthcheck failures [#2639](https://github.com//kumahq/kuma/pull/2639) -* feat: Add rate-limit to outbound interfaces [#2435](https://github.com//kumahq/kuma/pull/2435) -* fix: print a newline with transparent proxy setup message [#2634](https://github.com//kumahq/kuma/pull/2634) -* chore: bump alpine in /tools/releases/dockerfiles [#2531](https://github.com//kumahq/kuma/pull/2531) -* chore: annotate required fields in proto files [#2556](https://github.com//kumahq/kuma/pull/2556) -* chore: remove MADS v1alpha1 [#2632](https://github.com//kumahq/kuma/pull/2632) -* chore: parametrize kuma tracing in ZipkinCollectorURL [#2635](https://github.com//kumahq/kuma/pull/2635) -* chore: Add the number of services to usage stats [#2628](https://github.com//kumahq/kuma/pull/2628) -* feat: Add the permissive mTLS mode [#2579](https://github.com//kumahq/kuma/pull/2579) -* chore: open CAProvider and MeshValidator for extensions [#2618](https://github.com//kumahq/kuma/pull/2618) -* feat: Add entity for virtual-outbound [#2576](https://github.com//kumahq/kuma/pull/2576) -* fix: Don't set zap.Development() in debug log [#2608](https://github.com//kumahq/kuma/pull/2608) -* chore(kuma-cp) upgrade gui to new version [#2611](https://github.com//kumahq/kuma/pull/2611), [#2452](https://github.com//kumahq/kuma/pull/2452), [#2554](https://github.com//kumahq/kuma/pull/2554), [#2528](https://github.com//kumahq/kuma/pull/2528), [#2497](https://github.com//kumahq/kuma/pull/2497), [#2490](https://github.com//kumahq/kuma/pull/2490), [#2481](https://github.com//kumahq/kuma/pull/2481) -* feat: Build kuma on Windows [#2597](https://github.com//kumahq/kuma/pull/2597), [#2606](https://github.com//kumahq/kuma/pull/2606), [#2559](https://github.com//kumahq/kuma/pull/2559) -* feat: Add CA backend stats in Dataplane and Mesh Insights [#2562](https://github.com//kumahq/kuma/pull/2562) -* fix: missing key for kv in reports logging [#2598](https://github.com//kumahq/kuma/pull/2598) -* chore: split listener configurers across source files [#2592](https://github.com//kumahq/kuma/pull/2592) -* feat: add simple HTTP connection configurers [#2593](https://github.com//kumahq/kuma/pull/2593) -* feat: add virtual host domain name configurer [#2590](https://github.com//kumahq/kuma/pull/2590) -* feat: return instance and cluster IDs in kuma-cp API statuses [#2589](https://github.com//kumahq/kuma/pull/2589) -* tests: allow kuma-specific const to be overridden [#2582](https://github.com//kumahq/kuma/pull/2582) -* feat: Intermediate CA support [#2575](https://github.com//kumahq/kuma/pull/2575) -* fix: Avoid nil dereferencing in dp validator [#2578](https://github.com//kumahq/kuma/pull/2578) -* chore: consistently use utils package for protobuf wrappers [#2570](https://github.com//kumahq/kuma/pull/2570) -* fix: subscription finalizer, rev 2 [#2526](https://github.com//kumahq/kuma/pull/2526) -* tests: fix flaky test for locality aware loadbalancing [#2564](https://github.com//kumahq/kuma/pull/2564) -* fix: DP tracking lock consistency fix [#2567](https://github.com//kumahq/kuma/pull/2567) -* chore: Certificates over ADS [#2558](https://github.com//kumahq/kuma/pull/2558) -* chore: migrate DiscoveryRequest/Response in KDS to V3 [#2541](https://github.com//kumahq/kuma/pull/2541) -* feat: Rewrite dns persistence to allow virtual-outbound to be added [#2484](https://github.com//kumahq/kuma/pull/2484) -* fix: deleted default policy is created on Kuma CP restart [#2507](https://github.com//kumahq/kuma/pull/2507) -* chore: Move kumactl logging arguments to where they can be parameterized [#2544](https://github.com//kumahq/kuma/pull/2544) -* chore: add route and virtual host configuration helpers [#2517](https://github.com//kumahq/kuma/pull/2517) -* chore: fix kumactl generate dataplane proxy-type flag deprecation message [#2522](https://github.com//kumahq/kuma/pull/2522) - 👍contributed by Tharun Rajendran -* chore: Simplify resource-gen.go by generating `ResourceDescriptor` [#2511](https://github.com//kumahq/kuma/pull/2511) -* chore: Replace netcat with test server [#2510](https://github.com//kumahq/kuma/pull/2510) -* feat: configure SNI on ExternalService [#2467](https://github.com//kumahq/kuma/pull/2467) -* chore: add importas to golangci-lint [#2516](https://github.com//kumahq/kuma/pull/2516) - 👍contributed by Tharun Rajendran -* chore: add to resource-gen.go generation of kds options [#2487](https://github.com//kumahq/kuma/pull/2487) -* chore: add to resource-gen.go generation of kumactl options [#2469](https://github.com//kumahq/kuma/pull/2469) -* fix: add owner when create ZoneIngressInsight [#2456](https://github.com//kumahq/kuma/pull/2456) -* fix: hijacker merge labels [#2476](https://github.com//kumahq/kuma/pull/2476) -* chore: improve resource-gen by auto generating ws code [#2466](https://github.com//kumahq/kuma/pull/2466) -* fix: clarify invalid resource type message [#2473](https://github.com//kumahq/kuma/pull/2473) -* fix: implement TextMarshaler for JSON keys [#2475](https://github.com//kumahq/kuma/pull/2475) -* chore: simplify resourceWsDefinition and server init [#2477](https://github.com//kumahq/kuma/pull/2477) -* fix: Stop adding outbounds to dp for vips [#2421](https://github.com//kumahq/kuma/pull/2421) -* chore(*) make port validation consistent [#2448](https://github.com//kumahq/kuma/pull/2448) - -## 1.2.3 -> Released on 2021/08/26 - -* fix(kumactl) warn about fail to check the CP version [#2438](https://github.com//kumahq/kuma/pull/2438) -* fix(kuma-cp) handle missing connection info [#2439](https://github.com//kumahq/kuma/pull/2439) -* chore(xds) rename logger to have consistent naming style [#2375](https://github.com//kumahq/kuma/pull/2375) - 👍contributed by burntcarrot -* fix(kuma-cp) set better keep-alive for bootstrap [#2432](https://github.com//kumahq/kuma/pull/2432) -* fix(kuma-dp) validate the DP proxy type [#2186](https://github.com//kumahq/kuma/pull/2186) -* fix(kuma-cp) use the typed config for TLS Inspector [#2373](https://github.com//kumahq/kuma/pull/2373) - -## 1.2.2 -> Released on 2021/07/16 - -* feat: add datadog traffic tracing [#2269](https://github.com//kumahq/kuma/pull/2247) -* refactor: add kumactl install tracing context [#2343](https://github.com//kumahq/kuma/pull/2343) -* chore: improve kumactl install transparent-proxy flags description, add extra validation [#2352](https://github.com//kumahq/kuma/pull/2352) -* fix: broken SDS auth and XDS generation on rapid DP restarts [#2342](https://github.com//kumahq/kuma/pull/2342) -* fix: allow verbose log levels [#2351](https://github.com//kumahq/kuma/pull/2351) -* chore: use resource types for DataplaneInsight tracking [#2324](https://github.com//kumahq/kuma/pull/2324) -* chore: improve resource manager initialization readability [#2316](https://github.com//kumahq/kuma/pull/2316) -* chore: upgrade gui to new version [#2340](https://github.com//kumahq/kuma/pull/2340), [#2325](https://github.com//kumahq/kuma/pull/2325), [#2315](https://github.com//kumahq/kuma/pull/2315) -* fix: allocate a new VIP for ExternalService host [#2302](https://github.com//kumahq/kuma/pull/2302) -* fix: stop components on leader election lost [#2318](https://github.com//kumahq/kuma/pull/2318) -* chore: generate system resource wrappers [#2282](https://github.com//kumahq/kuma/pull/2282), [#2311](https://github.com//kumahq/kuma/pull/2311) -* chore: remove access log V2 [#2301](https://github.com//kumahq/kuma/pull/2301) -* chore: generate DeepCopy interfaces [#2222](https://github.com//kumahq/kuma/pull/2222) -* chore: disable log sampling [#2273](https://github.com//kumahq/kuma/pull/2273) -* chore: upgrade Protocol Buffers [#2244](https://github.com//kumahq/kuma/pull/2244) -* chore: change default number of insights subscriptions [#2266](https://github.com//kumahq/kuma/pull/2266) -* chore: make the authentication interface type oblivious [#2271](https://github.com//kumahq/kuma/pull/2271) -* fix: fix hds disabled on dpserver [#2268](https://github.com//kumahq/kuma/pull/2268) - 👍contributed by Bastien Chatelard -* chore: refactor xDS metadata to store a generic resource [#2264](https://github.com//kumahq/kuma/pull/2264) -* feat: change KDS max message limit [#2265](https://github.com//kumahq/kuma/pull/2265) - -## 1.2.1 -> Released on 2021/06/30 - -* fix: Dataplane/ZoneIngress/Zone status problem when control plane forcefully exits [#2246](https://github.com//kumahq/kuma/pull/2246) -* chore: reduce memory usage by reducing cache key size [#2214](https://github.com//kumahq/kuma/pull/2214) [#2230](https://github.com//kumahq/kuma/pull/2230) - 👍contributed by nhamlh -* fix: ZoneIngress always shows up as 'offline' [#2209](https://github.com//kumahq/kuma/pull/2209) -* feat: dataplane use advertise address to add a routable ip if address is not public ip [#2116](https://github.com//kumahq/kuma/pull/2116) - 👍contributed by sudeeptoroy -* fix: builtin DNS resolve alias with dots [#2208](https://github.com//kumahq/kuma/pull/2208) -* feat: add SNI to TLSed ExternalServices [#2211](https://github.com//kumahq/kuma/pull/2211) -* fix: fix race condition in cache [#2202](https://github.com//kumahq/kuma/pull/2202) - 👍contributed by nhamlh -* fix: supported versions of Kuma DP in the GUI [#2193](https://github.com//kumahq/kuma/pull/2193) - -## 1.2.0 -> Released on 2021/06/17 - -* feat: Introduce ZoneIngress [#2147](https://github.com//kumahq/kuma/pull/2147) [#2169](https://github.com//kumahq/kuma/pull/2169) -* feat: enable dataplane dns by default [#2152](https://github.com//kumahq/kuma/pull/2152) -* feat: add --verbose flag to kuma-init [#2156](https://github.com//kumahq/kuma/pull/2156) -* feat: log rotation [#2100](https://github.com//kumahq/kuma/pull/2100) - 👍contributed by @nikita15p -* feat: mads, allow specifying fetch-timeout via query param [#2148](https://github.com//kumahq/kuma/pull/2148) - 👍contributed by @austince -* feat: mads, add support for HTTP long polling [#2121](https://github.com//kumahq/kuma/pull/2121) - 👍contributed by @austince -* feat(mads) implement v1 API [#1753](https://github.com//kumahq/kuma/pull/1753) - 👍contributed by @austince -* feat: add RateLimit policy [#2083](https://github.com//kumahq/kuma/pull/2083) -* feat: TrafficRoute L7 [#2013](https://github.com//kumahq/kuma/pull/2013) - [#2042](https://github.com//kumahq/kuma/pull/2042) [#2062](https://github.com//kumahq/kuma/pull/2062) - [#2072](https://github.com//kumahq/kuma/pull/2072) [#2168](https://github.com//kumahq/kuma/pull/2168) - -* feat: allow renegotiation for TLS in ExternalServices [#2135](https://github.com//kumahq/kuma/pull/2135) -* feat: pass header when communicating with CP [#2049](https://github.com//kumahq/kuma/pull/2049) - 👍contributed by sudeeptoroy -* feat: change default traffic route policy [#2075](https://github.com//kumahq/kuma/pull/2075) -* feat: command to install kong enterprise ingress [#1999](https://github.com//kumahq/kuma/pull/1999) -* feat: add postgres max idle connections configuration [#2020](https://github.com//kumahq/kuma/pull/2020) - 👍contributed by @nikita15p -* feat: add kumactl --no-config flag [#2048](https://github.com//kumahq/kuma/pull/2048) -* feat: nodeselector across all pods with HELM [#2012](https://github.com//kumahq/kuma/pull/2012) -* feat: enable forwarding XFCC header [#1941](https://github.com//kumahq/kuma/pull/1941) - 👍contributed by @jewertow -* feat: TrafficPermission for ExternalServices [#1957](https://github.com//kumahq/kuma/pull/1957) -* feat: metrics hijacker [#1899](https://github.com//kumahq/kuma/pull/1899) -* feat: extend CircuitBreaker [#1655](https://github.com//kumahq/kuma/pull/1655) -* chore: remove API V2 [#2119](https://github.com//kumahq/kuma/pull/2119) -* chore: bump webhooks version [#2126](https://github.com//kumahq/kuma/pull/2126) -* chore: drop deprecated Envoy options [#2143](https://github.com//kumahq/kuma/pull/2143) -* chore: dockerfiles, add a user for kuma-cp [#2129](https://github.com//kumahq/kuma/pull/2129) -* chore: bump cni version to 0.0.9 [#2137](https://github.com//kumahq/kuma/pull/2137) -* chore: rename remote cp to zone cp [#2125](https://github.com//kumahq/kuma/pull/2125) -* chore: bump versions of logging, metrics, tracing [#2178](https://github.com//kumahq/kuma/pull/2178) -* chore: parametrize bitnami/kubectl [#2151](https://github.com//kumahq/kuma/pull/2151) -* chore: backwards compatible metrics [#2173](https://github.com//kumahq/kuma/pull/2173) -* chore: upgrade Envoy version to 1.18.3 [#2145](https://github.com//kumahq/kuma/pull/2145) -* chore updated go-control-plane [#2082](https://github.com//kumahq/kuma/pull/2082) - 👍contributed by @sudeeptoroy -* chore: fix misspelled words [#1984](https://github.com//kumahq/kuma/pull/1984) - 👍contributed by @tharun208 -* chore: upgrade GUI [#2157](https://github.com//kumahq/kuma/pull/2157) -* chore namespace source names for v1 API [#1896](https://github.com//kumahq/kuma/pull/1896) - 👍contributed by @austince -* chore: use cmux for MADS server [#1887](https://github.com//kumahq/kuma/pull/1887) -* chore: Add internal support for outbound UDP listeners [#1618](https://github.com//kumahq/kuma/pull/1618) - 👍contributed by @lahabana -* chore: Avoid generating duplicate subsets in ingress - 👍contributed by @lahabana -* chore: upgrade to apiextensions.k8s.io/v1 [#1108](https://github.com//kumahq/kuma/pull/1108) - 👍contributed by @austince -* fix: Clear snapshots from cache on disconnect [#2172](https://github.com//kumahq/kuma/pull/2172) - 👍contributed by @lahabana -* fix: use service account name to identify sync [#2127](https://github.com//kumahq/kuma/pull/2127) -* fix: raise the regex program size limit [#2139](https://github.com//kumahq/kuma/pull/2139) -* fix: pass query parameters through the metrics hijacker [#2124](https://github.com//kumahq/kuma/pull/2124) -* fix: matching endpoints by tags [#2096](https://github.com//kumahq/kuma/pull/2096) -* fix: manage and warn on control plane file limits [#2057](https://github.com//kumahq/kuma/pull/2057) [#2106](https://github.com//kumahq/kuma/pull/2106) -* fix: fix transparent-proxy for GCP/GKE [#2051](https://github.com//kumahq/kuma/pull/2051) -* fix: set death signal on child processes [#2045](https://github.com//kumahq/kuma/pull/2045) -* fix: TrafficRoute in multizone issue [#1979](https://github.com//kumahq/kuma/pull/1979) - -## 1.1.6 -> Released on 2021/05/13 - -* feat: expose reuse_connection in healthchecks [#1952](https://github.com//kumahq/kuma/pull/1952) -* feat: allow tcp/http healthchecks together [#1951](https://github.com//kumahq/kuma/pull/1951) -* feat: kumactl option to install gateway types [#1950](https://github.com//kumahq/kuma/pull/1950) -* feat: kumactl option to install kuma demo app [#1932](https://github.com//kumahq/kuma/pull/1932) -* feat: kumactl option to install Kong ingress [#1929](https://github.com//kumahq/kuma/pull/1929) -* feat: support all tags in traffic permission [#1902](https://github.com//kumahq/kuma/pull/1902) -* fix: gateway status was always reporting offline [#1946](https://github.com//kumahq/kuma/pull/1946) -* fix: don't cache failed calls [#1894](https://github.com//kumahq/kuma/pull/1894) - 👍contributed by @lahabana -* chore: add hostname when sending traces to the collector [#1962](https://github.com//kumahq/kuma/pull/1962) -* docs: prepare api docs generation [#1741](https://github.com//kumahq/kuma/pull/1741) -* test: azure aks and e2e improvements for the CI [#1880](https://github.com//kumahq/kuma/pull/1880) - [#1871](https://github.com//kumahq/kuma/pull/1871) - [#1933](https://github.com//kumahq/kuma/pull/1933) - [#1953](https://github.com//kumahq/kuma/pull/1953) - [#1972](https://github.com//kumahq/kuma/pull/1972) - -## 1.1.5 -> Released on 2021/05/05 - -* feat: generate outbounds for itself [#1900](https://github.com//kumahq/kuma/pull/1900) -* chore: migrate from bintray [#1901](https://github.com//kumahq/kuma/pull/1901) -* chore: GUI updates and fixes [#1897](https://github.com//kumahq/kuma/pull/1897) -* chore: kumactl check version after loading config [#1879](https://github.com/kumahq/kuma/pull/1879) -* chore: transparent proxy improvements [#1852](https://github.com//kumahq/kuma/pull/1852) -* chore upgrade Go to 16.3 and use go embed [#1864](https://github.com//kumahq/kuma/pull/1864) [#1865](https://github.com//kumahq/kuma/pull/1865) -* fix: always set locality in multizone [#1863](https://github.com//kumahq/kuma/pull/1863) -* fix: Envoy config is created based on old Dataplane [#1848](https://github.com//kumahq/kuma/pull/1848) - - -## 1.1.4 -> Released on 2021/04/19 - -* chore: force all DNS traffic capture [#1842](https://github.com//kumahq/kuma/pull/1842) - -## 1.1.3 -> Released on 2021/04/16 - -* feat: support External Services with original hostname and port (built-in DNS) - [#1807](https://github.com//kumahq/kuma/pull/1807) [#1811](https://github.com//kumahq/kuma/pull/1811) [#1817](https://github.com//kumahq/kuma/pull/1817) [#1812](https://github.com//kumahq/kuma/pull/1812) [#1821](https://github.com//kumahq/kuma/pull/1821) [#1824](https://github.com//kumahq/kuma/pull/1824) [#1828](https://github.com//kumahq/kuma/pull/1828) [#1822](https://github.com//kumahq/kuma/pull/1822) -* fix: pass validation of V3 specific configs in ProxyTemplate [#1819](https://github.com//kumahq/kuma/pull/1819) -* chore: support ingress annotations (kuma.io/ingress-public-address and kuma.io/ingress-public-port) in HELM [#1796](https://github.com//kumahq/kuma/pull/1796) - - -## 1.1.2 -> Released on 2021/04/13 - -* feat: extend CircuitBreaker policy with Thresholds [#1688](https://github.com//kumahq/kuma/pull/1688) -* feat: enable IPv6 support and tests [#1726](https://github.com//kumahq/kuma/pull/1726) [#1734](https://github.com//kumahq/kuma/pull/1734) -* feat: unuversal mode transparent-proxy firewalld support [#1702](https://github.com//kumahq/kuma/pull/1702) -* feat: new Grafana charts for golden signals and L7 metrics [#1739](https://github.com//kumahq/kuma/pull/1739) [#1786](https://github.com//kumahq/kuma/pull/1786) -* chore: verify e2e tests run in EKS [#1684](https://github.com//kumahq/kuma/pull/1684) [#1685](https://github.com//kumahq/kuma/pull/1685) [#1744](https://github.com//kumahq/kuma/pull/1744) -* chore: upgrade CRDS to apiextensions.k8s.io/v1 [#1108](https://github.com//kumahq/kuma/pull/1108) -* fix: helm cp service annotations [#1767](https://github.com//kumahq/kuma/pull/1767) - 👍contributed by nbrink91 -* fix: gui fixes [#1773](https://github.com//kumahq/kuma/pull/1773) -* fix: KDS may delete ConfigMaps on Control Plane restarts [#1769](https://github.com//kumahq/kuma/pull/1769) -* fix: Kuma CP restart may cause stale Envoy configs on Universal [#1749](https://github.com//kumahq/kuma/pull/1749) -* fix: use EnvoyGRPC to fix DNS resolving [#1740](https://github.com//kumahq/kuma/pull/1740) -* fix: fix ingress-enabled [#1725](https://github.com//kumahq/kuma/pull/1725) -* fix: pick HTTP health checker version depending on outbound's protocol [#1714](https://github.com//kumahq/kuma/pull/1714) -* fix: improve the DNS server bind message [#1701](https://github.com//kumahq/kuma/pull/1701) -* fix: validate --name and --mesh when dataplane is provided [#1771](https://github.com//kumahq/kuma/pull/1771) -* fix: better error messages when there is problem with pod dataplane convertion [#1743](https://github.com//kumahq/kuma/pull/1743) -* fix: crashes under load [#1694](https://github.com//kumahq/kuma/pull/1694) [#1695](https://github.com//kumahq/kuma/pull/1695) - -## 1.1.1 -> Released on 2021/03/11 - -* fix: make sure we enumerate all types in kumactl [#1673](https://github.com//kumahq/kuma/pull/1673) -* fix: annnotate service with ingress that has no annotations [#1671](https://github.com//kumahq/kuma/pull/1671) -* fix: improve err message if $HOME is not defined [#1664](https://github.com//kumahq/kuma/pull/1664) -* feat: zipkin config add shared span context option [#1660](https://github.com//kumahq/kuma/pull/1660) - 👍contributed by @ericmustin -* feat: get rid of 'changed' check [#1663](https://github.com//kumahq/kuma/pull/1663) diff --git a/versions.yml b/versions.yml index 99cd66ab8736..2e2b93889acd 100644 --- a/versions.yml +++ b/versions.yml @@ -1,3 +1,33 @@ +- edition: kuma + version: 1.6.5 + release: 1.6.x + releaseDate: "2023-02-16" + endOfLifeDate: "2024-02-16" + branch: release-1.6 +- edition: kuma + version: 1.7.6 + release: 1.7.x + releaseDate: "2023-02-16" + endOfLifeDate: "2024-02-16" + branch: release-1.7 +- edition: kuma + version: 1.8.8 + release: 1.8.x + releaseDate: "2023-04-07" + endOfLifeDate: "2024-04-07" + branch: release-1.8 +- edition: kuma + version: 2.0.8 + release: 2.0.x + releaseDate: "2023-02-16" + endOfLifeDate: "2024-02-16" + branch: release-2.0 +- edition: kuma + version: 2.1.7 + release: 2.1.x + releaseDate: "2023-02-16" + endOfLifeDate: "2024-02-16" + branch: release-2.1 - edition: kuma version: 2.2.9 release: 2.2.x @@ -23,18 +53,17 @@ endOfLifeDate: "2024-11-15" branch: release-2.5 - edition: kuma - version: 2.6.14 + version: 2.6.15 release: 2.6.x releaseDate: "2024-02-01" endOfLifeDate: "2025-02-01" branch: release-2.6 - edition: kuma - version: 2.7.10 + version: 2.7.11 release: 2.7.x releaseDate: "2024-04-19" - endOfLifeDate: "2026-04-19" + endOfLifeDate: "2025-04-19" branch: release-2.7 - lts: true - edition: kuma version: 2.8.5 release: 2.8.x @@ -42,7 +71,7 @@ endOfLifeDate: "2025-06-24" branch: release-2.8 - edition: kuma - version: 2.9.2 + version: 2.9.3 release: 2.9.x latest: true releaseDate: "2024-10-22" @@ -50,6 +79,5 @@ branch: release-2.9 - edition: kuma version: preview - release: 2.10.x + release: dev branch: master - label: dev