[release/v1.0] release: v1.0.2 (#3595)

* release: v1.0.2 Signed-off-by: bitliu <[email protected]> * resolve feedbacks Signed-off-by: bitliu <[email protected]> * resolve feedbacks Signed-off-by: bitliu <[email protected]> --------- Signed-off-by: bitliu <[email protected]>
envoyproxy · Jun 14, 2024 · 8cf16ee · 8cf16ee
1 parent 7ffa89f
commit 8cf16ee
Show file tree

Hide file tree

Showing 41 changed files with 97 additions and 43 deletions.
diff --git a/VERSION b/VERSION
@@ -1 +1 @@
-v1.0.1
+v1.0.2
diff --git a/api/v1alpha1/shared_types.go b/api/v1alpha1/shared_types.go
@@ -20,7 +20,7 @@ const (
 	// DefaultDeploymentMemoryResourceRequests for deployment memory resource
 	DefaultDeploymentMemoryResourceRequests = "512Mi"
 	// DefaultEnvoyProxyImage is the default image used by envoyproxy
-	DefaultEnvoyProxyImage = "envoyproxy/envoy:distroless-v1.29.3"
+	DefaultEnvoyProxyImage = "envoyproxy/envoy:distroless-v1.29.5"
 	// DefaultShutdownManagerCPUResourceRequests for shutdown manager cpu resource
 	DefaultShutdownManagerCPUResourceRequests = "10m"
 	// DefaultShutdownManagerMemoryResourceRequests for shutdown manager memory resource

diff --git a/examples/kubernetes/envoy-proxy-config.yaml b/examples/kubernetes/envoy-proxy-config.yaml
@@ -22,7 +22,7 @@ spec:
       envoyDeployment:
         replicas: 2
         container:
-          image: envoyproxy/envoy:v1.26-latest
+          image: envoyproxy/envoy:distroless-v1.29.5
           resources:
             requests:
               cpu: 150m

diff --git a/internal/gatewayapi/testdata/disable-accesslog.in.yaml b/internal/gatewayapi/testdata/disable-accesslog.in.yaml
@@ -21,7 +21,7 @@ envoyproxy:
               value: env_a_value
             - name: env_b
               value: env_b_name
-            image: "envoyproxy/envoy:distroless-v1.29-latest"
+            image: "envoyproxy/envoy:distroless-v1.29.5"
             resources:
               requests:
                 cpu: 100m

diff --git a/internal/gatewayapi/testdata/disable-accesslog.out.yaml b/internal/gatewayapi/testdata/disable-accesslog.out.yaml
@@ -60,7 +60,7 @@ infraIR:
                     value: env_a_value
                   - name: env_b
                     value: env_b_name
-                  image: envoyproxy/envoy:distroless-v1.29-latest
+                  image: envoyproxy/envoy:distroless-v1.29.5
                   resources:
                     requests:
                       cpu: 100m

diff --git a/internal/gatewayapi/testdata/envoyproxy-accesslog-file-json-no-format.in.yaml b/internal/gatewayapi/testdata/envoyproxy-accesslog-file-json-no-format.in.yaml
@@ -27,7 +27,7 @@ envoyproxy:
               value: env_a_value
             - name: env_b
               value: env_b_name
-            image: "envoyproxy/envoy:distroless-v1.29-latest"
+            image: "envoyproxy/envoy:distroless-v1.29.5"
             resources:
               requests:
                 cpu: 100m

diff --git a/internal/gatewayapi/testdata/envoyproxy-accesslog-file-json-no-format.out.yaml b/internal/gatewayapi/testdata/envoyproxy-accesslog-file-json-no-format.out.yaml
@@ -60,7 +60,7 @@ infraIR:
                     value: env_a_value
                   - name: env_b
                     value: env_b_name
-                  image: envoyproxy/envoy:distroless-v1.29-latest
+                  image: envoyproxy/envoy:distroless-v1.29.5
                   resources:
                     requests:
                       cpu: 100m

diff --git a/internal/gatewayapi/testdata/envoyproxy-accesslog-file-json.in.yaml b/internal/gatewayapi/testdata/envoyproxy-accesslog-file-json.in.yaml
@@ -30,7 +30,7 @@ envoyproxy:
               value: env_a_value
             - name: env_b
               value: env_b_name
-            image: "envoyproxy/envoy:distroless-v1.29-latest"
+            image: "envoyproxy/envoy:distroless-v1.29.5"
             resources:
               requests:
                 cpu: 100m

diff --git a/internal/gatewayapi/testdata/envoyproxy-accesslog-file-json.out.yaml b/internal/gatewayapi/testdata/envoyproxy-accesslog-file-json.out.yaml
@@ -60,7 +60,7 @@ infraIR:
                     value: env_a_value
                   - name: env_b
                     value: env_b_name
-                  image: envoyproxy/envoy:distroless-v1.29-latest
+                  image: envoyproxy/envoy:distroless-v1.29.5
                   resources:
                     requests:
                       cpu: 100m

diff --git a/internal/gatewayapi/testdata/envoyproxy-accesslog-with-bad-sinks.in.yaml b/internal/gatewayapi/testdata/envoyproxy-accesslog-with-bad-sinks.in.yaml
@@ -28,7 +28,7 @@ envoyproxy:
               value: env_a_value
             - name: env_b
               value: env_b_name
-            image: "envoyproxy/envoy:distroless-v1.29-latest"
+            image: "envoyproxy/envoy:distroless-v1.29.5"
             resources:
               requests:
                 cpu: 100m

diff --git a/internal/gatewayapi/testdata/envoyproxy-accesslog-with-bad-sinks.out.yaml b/internal/gatewayapi/testdata/envoyproxy-accesslog-with-bad-sinks.out.yaml
@@ -60,7 +60,7 @@ infraIR:
                     value: env_a_value
                   - name: env_b
                     value: env_b_name
-                  image: envoyproxy/envoy:distroless-v1.29-latest
+                  image: envoyproxy/envoy:distroless-v1.29.5
                   resources:
                     requests:
                       cpu: 100m

diff --git a/internal/gatewayapi/testdata/envoyproxy-accesslog.in.yaml b/internal/gatewayapi/testdata/envoyproxy-accesslog.in.yaml
@@ -35,7 +35,7 @@ envoyproxy:
               value: env_a_value
             - name: env_b
               value: env_b_name
-            image: "envoyproxy/envoy:distroless-v1.29-latest"
+            image: "envoyproxy/envoy:distroless-v1.29.5"
             resources:
               requests:
                 cpu: 100m

diff --git a/internal/gatewayapi/testdata/envoyproxy-accesslog.out.yaml b/internal/gatewayapi/testdata/envoyproxy-accesslog.out.yaml
@@ -60,7 +60,7 @@ infraIR:
                     value: env_a_value
                   - name: env_b
                     value: env_b_name
-                  image: envoyproxy/envoy:distroless-v1.29-latest
+                  image: envoyproxy/envoy:distroless-v1.29.5
                   resources:
                     requests:
                       cpu: 100m

diff --git a/internal/gatewayapi/testdata/envoyproxy-valid.in.yaml b/internal/gatewayapi/testdata/envoyproxy-valid.in.yaml
@@ -18,7 +18,7 @@ envoyproxy:
               value: env_a_value
             - name: env_b
               value: env_b_name
-            image: "envoyproxy/envoy:distroless-v1.29-latest"
+            image: "envoyproxy/envoy:distroless-v1.29.5"
             resources:
               requests:
                 cpu: 100m

diff --git a/internal/gatewayapi/testdata/envoyproxy-valid.out.yaml b/internal/gatewayapi/testdata/envoyproxy-valid.out.yaml
@@ -60,7 +60,7 @@ infraIR:
                     value: env_a_value
                   - name: env_b
                     value: env_b_name
-                  image: envoyproxy/envoy:distroless-v1.29-latest
+                  image: envoyproxy/envoy:distroless-v1.29.5
                   resources:
                     requests:
                       cpu: 100m

diff --git a/internal/infrastructure/kubernetes/proxy/resource_provider_test.go b/internal/infrastructure/kubernetes/proxy/resource_provider_test.go
@@ -123,7 +123,7 @@ func TestDeployment(t *testing.T) {
 					},
 				},
 				Container: &egv1a1.KubernetesContainerSpec{
-					Image: ptr.To("envoyproxy/envoy:v1.2.3"),
+					Image: ptr.To("envoyproxy/envoy:distroless-v1.29.5"),
 					Resources: &corev1.ResourceRequirements{
 						Limits: corev1.ResourceList{
 							corev1.ResourceCPU:    resource.MustParse("400m"),
@@ -223,7 +223,7 @@ func TestDeployment(t *testing.T) {
 							Value: "env_b_value",
 						},
 					},
-					Image: ptr.To("envoyproxy/envoy:v1.2.3"),
+					Image: ptr.To("envoyproxy/envoy:distroless-v1.29.5"),
 					Resources: &corev1.ResourceRequirements{
 						Limits: corev1.ResourceList{
 							corev1.ResourceCPU:    resource.MustParse("400m"),
@@ -256,7 +256,7 @@ func TestDeployment(t *testing.T) {
 				},
 				Container: &egv1a1.KubernetesContainerSpec{
 					Env:   nil,
-					Image: ptr.To("envoyproxy/envoy:v1.2.3"),
+					Image: ptr.To("envoyproxy/envoy:distroless-v1.29.5"),
 					Resources: &corev1.ResourceRequirements{
 						Limits: corev1.ResourceList{
 							corev1.ResourceCPU:    resource.MustParse("400m"),
@@ -309,7 +309,7 @@ func TestDeployment(t *testing.T) {
 							Value: "env_b_value",
 						},
 					},
-					Image: ptr.To("envoyproxy/envoy:v1.2.3"),
+					Image: ptr.To("envoyproxy/envoy:distroless-v1.29.5"),
 					Resources: &corev1.ResourceRequirements{
 						Limits: corev1.ResourceList{
 							corev1.ResourceCPU:    resource.MustParse("400m"),
@@ -380,7 +380,7 @@ func TestDeployment(t *testing.T) {
 					},
 				},
 				Container: &egv1a1.KubernetesContainerSpec{
-					Image: ptr.To("envoyproxy/envoy:v1.2.3"),
+					Image: ptr.To("envoyproxy/envoy:distroless-v1.29.5"),
 					Resources: &corev1.ResourceRequirements{
 						Limits: corev1.ResourceList{
 							corev1.ResourceCPU:    resource.MustParse("400m"),

diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/bootstrap.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/bootstrap.yaml
@@ -57,7 +57,7 @@ spec:
             fieldRef:
               apiVersion: v1
               fieldPath: metadata.name
-        image: envoyproxy/envoy:distroless-v1.29.3
+        image: envoyproxy/envoy:distroless-v1.29.5
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:

diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/component-level.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/component-level.yaml
@@ -58,7 +58,7 @@ spec:
             fieldRef:
               apiVersion: v1
               fieldPath: metadata.name
-        image: envoyproxy/envoy:distroless-v1.29.3
+        image: envoyproxy/envoy:distroless-v1.29.5
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:

diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/custom.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/custom.yaml
@@ -183,7 +183,7 @@ spec:
             fieldRef:
               apiVersion: v1
               fieldPath: metadata.name
-        image: envoyproxy/envoy:v1.2.3
+        image: envoyproxy/envoy:distroless-v1.29.5
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:

diff --git a/...rnal/infrastructure/kubernetes/proxy/testdata/deployments/custom_with_initcontainers.yaml b/...rnal/infrastructure/kubernetes/proxy/testdata/deployments/custom_with_initcontainers.yaml
@@ -183,7 +183,7 @@ spec:
             fieldRef:
               apiVersion: v1
               fieldPath: metadata.name
-        image: envoyproxy/envoy:v1.2.3
+        image: envoyproxy/envoy:distroless-v1.29.5
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:

diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/default-env.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/default-env.yaml
@@ -181,7 +181,7 @@ spec:
             fieldRef:
               apiVersion: v1
               fieldPath: metadata.name
-        image: envoyproxy/envoy:v1.2.3
+        image: envoyproxy/envoy:distroless-v1.29.5
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:

diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/default.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/default.yaml
@@ -180,7 +180,7 @@ spec:
             fieldRef:
               apiVersion: v1
               fieldPath: metadata.name
-        image: envoyproxy/envoy:distroless-v1.29.3
+        image: envoyproxy/envoy:distroless-v1.29.5
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:

diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/disable-prometheus.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/disable-prometheus.yaml
@@ -154,7 +154,7 @@ spec:
             fieldRef:
               apiVersion: v1
               fieldPath: metadata.name
-        image: envoyproxy/envoy:distroless-v1.29.3
+        image: envoyproxy/envoy:distroless-v1.29.5
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:

diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/extension-env.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/extension-env.yaml
@@ -185,7 +185,7 @@ spec:
           value: env_a_value
         - name: env_b
           value: env_b_value
-        image: envoyproxy/envoy:v1.2.3
+        image: envoyproxy/envoy:distroless-v1.29.5
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:

diff --git a/...infrastructure/kubernetes/proxy/testdata/deployments/override-labels-and-annotations.yaml b/...infrastructure/kubernetes/proxy/testdata/deployments/override-labels-and-annotations.yaml
@@ -191,7 +191,7 @@ spec:
             fieldRef:
               apiVersion: v1
               fieldPath: metadata.name
-        image: envoyproxy/envoy:distroless-v1.29.3
+        image: envoyproxy/envoy:distroless-v1.29.5
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:

diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/patch-deployment.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/patch-deployment.yaml
@@ -180,7 +180,7 @@ spec:
             fieldRef:
               apiVersion: v1
               fieldPath: metadata.name
-        image: envoyproxy/envoy:distroless-v1.29.3
+        image: envoyproxy/envoy:distroless-v1.29.5
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:

diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/shutdown-manager.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/shutdown-manager.yaml
@@ -181,7 +181,7 @@ spec:
             fieldRef:
               apiVersion: v1
               fieldPath: metadata.name
-        image: envoyproxy/envoy:distroless-v1.29.3
+        image: envoyproxy/envoy:distroless-v1.29.5
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:

diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/volumes.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/volumes.yaml
@@ -185,7 +185,7 @@ spec:
           value: env_a_value
         - name: env_b
           value: env_b_value
-        image: envoyproxy/envoy:v1.2.3
+        image: envoyproxy/envoy:distroless-v1.29.5
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:

diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-annotations.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-annotations.yaml
@@ -185,7 +185,7 @@ spec:
             fieldRef:
               apiVersion: v1
               fieldPath: metadata.name
-        image: envoyproxy/envoy:distroless-v1.29.3
+        image: envoyproxy/envoy:distroless-v1.29.5
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:

diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-concurrency.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-concurrency.yaml
@@ -58,7 +58,7 @@ spec:
             fieldRef:
               apiVersion: v1
               fieldPath: metadata.name
-        image: envoyproxy/envoy:distroless-v1.29.3
+        image: envoyproxy/envoy:distroless-v1.29.5
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:

diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-extra-args.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-extra-args.yaml
@@ -182,7 +182,7 @@ spec:
             fieldRef:
               apiVersion: v1
               fieldPath: metadata.name
-        image: envoyproxy/envoy:distroless-v1.29.3
+        image: envoyproxy/envoy:distroless-v1.29.5
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:

diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-image-pull-secrets.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-image-pull-secrets.yaml
@@ -180,7 +180,7 @@ spec:
             fieldRef:
               apiVersion: v1
               fieldPath: metadata.name
-        image: envoyproxy/envoy:distroless-v1.29.3
+        image: envoyproxy/envoy:distroless-v1.29.5
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:

diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-node-selector.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-node-selector.yaml
@@ -180,7 +180,7 @@ spec:
             fieldRef:
               apiVersion: v1
               fieldPath: metadata.name
-        image: envoyproxy/envoy:distroless-v1.29.3
+        image: envoyproxy/envoy:distroless-v1.29.5
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:

diff --git a/...nfrastructure/kubernetes/proxy/testdata/deployments/with-topology-spread-constraints.yaml b/...nfrastructure/kubernetes/proxy/testdata/deployments/with-topology-spread-constraints.yaml
@@ -180,7 +180,7 @@ spec:
             fieldRef:
               apiVersion: v1
               fieldPath: metadata.name
-        image: envoyproxy/envoy:distroless-v1.29.3
+        image: envoyproxy/envoy:distroless-v1.29.5
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:

diff --git a/release-notes/v1.0.2.yaml b/release-notes/v1.0.2.yaml
@@ -0,0 +1,25 @@
+date: June 12, 2024
+
+changes:
+  - area: installation
+    change: |
+      Updated EnvoyProxy to 1.29.5
+      Use Patch API for infra-client
+      Use ServerSideApply instead of CreateOrUpdate for infra-client
+  - area: testing
+    change: |
+      Fixed failures due to an expired certificate in one of the translator tests
+  - area: translator
+    change: |
+      Use <proto>-<port> for naming service and container ports
+      Added proxy protocol always as first listenerFilter
+      Set ignoreCase for header matchers in extAuth
+      Added backend TLS SAN validation
+      Fixed ReplaceFullPath not working for root path (/)
+  - area: providers
+    change: |
+      Fixed duplicated xroutes are added to gatewayapi Resources
+      Fixed security policy reference grant from field type
+      Fixed Route extension filters with different types but the same name and namespace aren't correctly cached
+      Fixed secrets/configmap updates to trigger a controller reconcile by removing the generationChanged predicate
+      Removed namespace restriction for EnvoyProxy parametersRef
diff --git a/site/content/en/latest/releases/v1.0.2.md b/site/content/en/latest/releases/v1.0.2.md
@@ -0,0 +1,29 @@
+---
+title: "v1.0.2"
+publishdate: 2024-06-12
+---
+
+Date: June 12, 2024
+
+## Installation
+- Updated EnvoyProxy to 1.29.5
+- Use Patch API for infra-client
+- Use ServerSideApply instead of CreateOrUpdate for infra-client
+
+## Testing
+- Fixed failures due to an expired certificate in one of the translator tests
+
+## Translator
+- Use <proto>-<port> for naming service and container ports
+- Added proxy protocol always as first listenerFilter
+- Set ignoreCase for header matchers in extAuth
+- Added backend TLS SAN validation
+- Fixed ReplaceFullPath not working for root path (/)
+
+## Providers
+- Fixed duplicated xroutes are added to gatewayapi Resources
+- Fixed security policy reference grant from field type
+- Fixed Route extension filters with different types but the same name and namespace aren't correctly cached
+- Fixed secrets/configmap updates to trigger a controller reconcile by removing the generationChanged predicate
+- Removed namespace restriction for EnvoyProxy parametersRef
+