Tag 1.5.0-rc4 release.
Bart Smykla (15):
feat(ci) auto merge backport PRs after kuma-commit (#3180)
fix(ci) disable auto approve backport prs (#3183)
chore() bump helm chart version to 0.8 (#3202)
feat() inspect other dependencies versions (#3352)
chore(kuma-dp) send reports to tls endpoint (#3361)
fix(ci): display name of vars not interpolate them (#3498)
chore(ci): bump patch versions of minikube/k8s (#3500)
chore(): add changelog for Kuma 1.4.1 (#3563)
chore(): bump logging and metrics dependencies (#3641)
feat() allow ca.crt to be in separate k8s secret (#3638)
feat: allow for ca/identity secrets for every mesh (#3696)
feat(): introduce new zone token (#3729)
feat(): add zone egress resource (#3757)
feat(): zone egress insight + renaming zone-egress to zoneegress (#3767)
feat(*): zone egress service generators (#3809)
Charly Molter (31):
chore(kuma-cp) Use go structs instead of gotemplate for bootstrap (#3156)
Add lifecycle actions for triage (#3196)
chore(ci) add extra labels for issues (#3229)
chore(release) update RELEASE.md with upgrade instructions (#3364)
fix(kuma-dp) validate cp url in dp conf (#3357)
fix(external-service): simplify cluster creation with endpoints (#3403)
ci: fix failing mac CI because of unsupported instance size (#3408)
ci: update k3d version (#3421)
chore(config): remove ability to disable insights (#3501)
fix(ci): Don’t use wget to install runc (#3506)
fix(ci): fix flaky mads test (#3508)
docs: document new backporting policy (#3633)
ci: stop applying dependabot on release branches (#3645)
feat(ci): remove minikube jobs and use multiple k3d jobs (#3572)
docs: update and refresh DEVELOPER.md and e2e-test-tips.md (#3653)
ci(e2e): use tunnel from terratest instead of our own (#3664)
ci(circleci): speed up dev_mac job (#3665)
ci(e2e): retry update to resource in case of conflicts (#3668)
ci(e2e): make sure the pod selected for tunnel is available (#3680)
ci(e2e): correct bad retry on apply (#3681)
fix(dataplane)!: disallow using 0.0.0.0 in networking.address for dp (#3691)
ci(e2e): simplify e2e test setup (#3657)
feat(kumactl): add –api-timeout flag (#3723)
fix(kumactl): correct tests that broke the build (#3738)
ci(e2e): simplify e2e tests by build a config file (#3727)
fix(kuma-cp): fix missing label sidecar injection (#3740)
fix(e2e): make env var work and cleanup tests (#3780)
fix(e2e): escape env vars in e2e test (#3794)
fix(api/mesh): change membership to constraints (#3798)
fix(gateway): rename Gateway to MeshGateway (#3799)
fix(grafana): update to latest grafana plugin version (#3812)
Chin-Ying Li (1):
improvement(metadata): include name of annotation to parse error message (#3677)
Eng Zer Jun (1):
refactor(*): move from io/ioutil to io and os packages (#3265)
Ilya Lobkov (20):
chore() scripts for build, publish and fetch Envoy binaries (#3110)
fix(kuma-dp) add .exe extension if windows (#3189)
fix(kuma-dp) parse envoy version (#3188)
Revert “fix(kuma-dp) add .exe extension if windows (#3189)” (#3193)
chore() update Envoy to 1.20 (#2967)
fix(kuma-dp) simplify Envoy scripts (#3378)
chore(kuma-cp) refactor MatchedPolicies structure (#3461)
feat(kuma-cp): add endpoint for returning policies by dataplane (#3462)
feat(kuma-cp) add endpoint for inspecting policies (#3568)
feat(*): move adminPort to DPP resource (#3739)
chore(zone-ingress): delete deprecated env KUMA_DATAPLANE_ADMIN_PORT (#3766)
feat(inspect-api): return empty list of ‘items’ instead of ‘null’ (#3765)
feat(inspect-api): retrieve full XDS config (#3768)
test(e2e): use names from e2e config (#3800)
test(e2e): disable k8s Inspect API tests (#3802)
feat(kumactl): inspect api support (#3805)
chore(ci): tests are not properly distributed across workers (#3813)
fix(inspect-api): flaky multizone k8s test (#3817)
feat(kuma-cp): add support for custom inbound policies (#3811)
chore(ci): release workflow (#3833)
Jakub Dyszkiewicz (39):
chore(ci) install latest kubectl version (#3207)
chore(kuma-cp) remove dp token from xds metadata (#3282)
fix(kuma-cp) switch to mTLS when CP communicates with Envoy Admin (#3353)
chore(kuma-cp) check explicit service account name (#3228)
feat(kuma-cp) consolidate tokens logic to support expiration, rotation, revocation and RSA256 (#3376)
test() disable KIC E2E tests on Kind (#3398)
fix(kuma-cp) enable metrics hijacker for current version of Kuma (#3405)
feat(kuma-cp): sidecar injection webhook based on labels (#3417)
test(): fix postgress tests permissions (#3443)
chore() remove old Ingress (#3435)
perf(): update Mesh and ServiceInsights only when really needed (#3463)
feat(kmesh-cp) add kubernetes tags automatically (#3439)
chore(): update k8s.io and logr dependencies (#3533)
fix(kuma-cp) do not override other dataplane with dp lifecycle (#3507)
feat(kuma-cp): enable client side gRPC keepalive (#3574)
ci(): build CoreDNS only if binary is not present (#3581)
test(): skip status when applying K8S object (#3583)
chore(): fix package names in Auth DP E2E tests (#3588)
fix(kuma-cp): add cp selector to global sync service (#3579)
test(): add test/e2e/debug-fast target (#3586)
feat(kuma-cp) data plane proxy membership (#3619)
fix(kuma-dp): binary lookup function skips not available directories (#3667)
chore(): add posibility to customize Kuma images (#3669)
chore(): add posibility to customize images on release (#3686)
perf(kuma-cp): use mesh snapshot in proxy builder (#3700)
ci(): release on every commit in master and release branches (#3712)
feat(): enable Gateway with runtime flag (#3736)
test(): filter out Gateway CRDs (#3753)
feat(): install Gateway CRDs with HELM (#3752)
feat(kuma-cp): multizone routing using builtin Gateway (#3758)
feat(kuma-cp): add service name to inspect apis (#3763)
feat(kuma-cp): support NodePort in GatewayInstance (#3761)
feat(kuma-cp): zone token access (#3782)
feat(kuma-cp): reachable services in transparent proxying (#3791)
chore(kuma-cp): upgrade GUI (#3796)
test(): https and external service e2e test for gateway (#3801)
test(): fix hardcoded namespace (#3803)
fix(): do not annotate gateway services with ingress upstream (#3816)
chore(*): upgrade Envoy to v1.21.0 (#3810)
James Peach (28):
chore() remove RBAC generator (#3176)
fix(kuma-cp) validate newly generated xDS snapshots (#3195)
chore(ci) add area/gateway label (#3263)
chore(ci) upgrade minikube to v1.24.0 (#3269)
chore(kuma-cp) enable zone synchronization for Gateway (#3266)
chore(kuma-cp) allow gateway listeners to omit tags (#3264)
chore(kuma-cp) remove type indices from xDS snapshots (#3359)
feat(kuma-cp): support Retry policy for Gateways (#3402)
feat(kuma-cp): support Gateway request timeouts (#3426)
fix(kuma-cp): set the accesslog policy for Gateway listeners (#3437)
chore(kuma-cp): minor CRD type cleanups (#3452)
fix(kuma-cp): use the hostname for gateway stats (#3467)
feat(kuma-cp): add gateway support for local rate limiting (#3484)
chore(kuma-cp): remove uncached Kubernetes readers (#3505)
chore(build): remove hard-coded type generator outputs (#3512)
chore(e2e): apply test namespace helper (#3550)
chore(e2e): regularize test framework cluster creation (#3513)
fix(kuma-cp): make Gateway resources cluster scoped (#3552)
fix(ci): set kubebuilder assets directory (#3577)
fix(kuma-dp): update GatewayInstance readiness (#3608)
tests(kuma-cp): add initial Gateway tests for Kubernetes (#3607)
fix(build): move API makefile to the main build system (#3635)
tests(kuma-cp): add kubernetes mTLS permissions test (#3623)
fix(kumactl): print meta before spec for Kuma resources (#3637)
chore(e2e): switch Kubernetes update helper to use apply (#3650)
chore(e2e): consolidate gateway tests (#3661)
chore(kuma-cp): consolidate mesh defaults creation (#3678)
chore(): generate CRD types (#3453)
John Harris (2):
fix(kuma-dp): fix conntrack collisions (#3459)
feat(helm): add imagePullSecrets support (#3755)
Mike Beaumont (82):
feat(gateway) add kuma Gateway types to k8s (#3119)
refactor(.github) simplify PR merge dispatch (#3144)
fix(.github) use pull_request_target in GH workflow (#3164)
chore(pkg/plugins/runtime/k8s) move utility function to util package (#3163)
chore: update configs with release-1.4 branch (#3165)
chore(tests) remove unused golden file (#3174)
docs(changelog) changelog for 1.4.0 RC2 (#3186) (#3187)
tests(kumactl) fix golden files after Helm chart update (#3206)
chore(RELEASE.md) add check item about bumping the Helm chart version
build(circleci) fix dev_mac (#3209)
fix(build) run test/release also for RCs (#3208)
fix(.github) notify about merged PRs to release branches (#3226)
chore(CHANGELOG) add 1.4.0 (#3227)
docs(UPGRADE.md) add 1.4.0 instructions (#3214)
build: fix make-release-tag to allow skipping v prefix (#3253)
chore(tests) remove unnecessary error helper (#3254)
feat(k8s/util) move ServiceTag for k8s Service to utils (#3257)
build: remove pkg/transparentproxy/istio nested go module (#3255)
fix(.github) don’t send dispatch for release branch (#3261)
fix(.mergify.yml) don’t merge if conflicts label is present (#3259)
build: notify about merged PRs on release branch (cherry-pick #3289) (#3291)
docs(UPGRADE.md) add note to PR template (#3358)
feat(kumactl) upgrade KIC to 2.0 (#3355)
feat(gateway) add dataplane creation for gateway deployments (#3294)
fix(go.mod): run go mod tidy (#3397)
chore(deps): update some dev dependencies (#3401)
feat(.github): add commit message linting (#3391)
ci: disable commitlint footer rules (#3407)
ci: enable contextcheck (#3412)
ci(.github): run PR checks when edited (#3414)
ci(.github): remove unnecessary commit message rules (#3436)
fix(tests): Always run Envoy compatibility test for current version (#3201)
refactor(runtime/k8s): refactor dp container handling (#3449)
fix(kumactl): don’t show builtin gateway spuriously offline (#3465)
feat(gateway): add initial Gateway API support to Kubernetes (#3109)
fix(gateway): don’t reset status when reconciling (#3470)
feat(gateway): add GatewayInstance CRD for managing Gateway deployments (#3469)
chore(gateway): fix gateway FilterChain after MatchedPolicies refactor (#3547)
feat(gateway): add GatewayInstance controller (#3476)
refactor(gateway): move CreateOrUpdateControlled to package (#3573)
refactor(pkg/core): unify tag and selector validation (#3580)
feat(gateway): validate GatewayInstance resources (#3564)
chore(tools/releases/helm.sh): don’t unnecessarily require GH_TOKEN (#3602)
feat(gateway): watch Gateways for tag changes in GatewayInstance reconciler (#3570)
chore(tools/migrations): remove 0.5.0 migration scripts (#3604)
chore(): fix shellcheck warnings (#3605)
fix(gateway): delete service if Gateway unattached (#3601)
refactor(gateway): change to prefixed autogenerated tag (#3585)
chore(tools/releases/helm.sh): don’t release Gateway-related CRDs (#3571)
Revert “refactor(gateway): change to prefixed autogenerated tag (#3585)” (#3621)
feat(gateway): add GatewaysExist finalizer to GatewayClasses (#3620)
chore: update copyright to 2022 (#3631)
test(e2e/gateway): use correct deploy opts for kubernetes (#3644)
fix(kumactl): ignore any unregistered CRDs, not only from the root chart (#3643)
feat(gateway): support multiple Kuma Gateway ParentRefs and status for HTTPRoute (#3610)
refactor(gateway): resolve Service BackendRefs and code cleanup (#3652)
fix(k8s): make sure controllers start after leader election (#3666)
refactor(gateway): patch status, check for obj not found, unify status updating (#3654)
feat(gateway): support Gateway API ReferencePolicy (#3672)
refactor(gateway): garbage collect Kuma Gateway resources owned by Gateway API resources (#3655)
feat(gateway): support service addresses with hostname in GatewayInstance (#3694)
fix(gateway): fix NPE in policy code (#3693)
feat(gateway): initial support for GatewayStatus.Listeners (#3609)
chore(deps): bump sigs.k8s.io/gateway-api from 0.4.0 to 0.4.1 (#3705)
refactor(gateway): cleanup GatewayClass controller (#3704)
feat(gateway): set GatewayClass status (#3703)
fix(gateway): set mesh of objects owned by Gateway API objs (#3707)
fix(gateway): use subresource patch for GatewayClass status (#3706)
refactor(kuma-cp): unify mesh determination for k8s objects (#3708)
feat(gateway): reconcile relevant HTTPRoutes when Gateways change (#3699)
refactor(gateway): move gatewayapi/common.go to package (#3709)
feat(gateway): reconcile Gateways when a Route changes (#3716)
refactor(gateway): use Patch to reconcile GatewayInstances’s owned objects (#3715)
feat(gateway): complete Gateway Listener status with route info (#3711)
feat(gateway): respect AllowedRoutes on Gateways (#3695)
fix(gateway): don’t replace Service spec in GatewayInstance controller (#3759)
ci: check shell scripts with shellcheck (#3785)
fix(): properly escape DB password when creating postgres connection string (#3804)
docs(ecs): remove ECS example (#3826)
test(e2e/ratelimit): increase polling interval (#3828)
refactor(gateway): refactor GatewayResourceInfo to GatewayListenerInfo (#3829)
fix(gateway): make sure resources are validated (#3845)
Santosh Kumar Bhiravabhatla (1):
fix(helm) Add support to customize nodeport (#1944)
Tharun Rajendran (11):
feat(kumactl): add type of logging and tracing backends with name in table output (#3636)
fix(build): fix make test targets for individual components (#3646)
fix(build): fix gomega matchers for get resources command test (#3651)
fix(build): fix gomega matchers for inspect resources command test (#3660)
refactor(*): replace ensureDefaultXXX functions with a single generic function (#3662)
feat(kuma-cp): add gui link in index api response (#3675)
fix(conf): remove invalid health check fields from example (#3697)
chore(k8s): remove GetBool method and use GetEnabled (#3698)
refactor(insights): delete method GetLatestSubscription for insights (#3656)
feat(kuma-cp): enable traffic route for inspect endpoints (#3735)
feat(kuma-cp): add proxytemplate to matched policies for inspect poli… (#3786)
Tomasz Wylężek (4):
chore(kuma-cp) upgrade gui to new version (#3178)
chore(kuma-cp): upgrade gui to new version (#3454)
chore(scripts): adjust run scripts to set experimental gateway flag (#3754)
chore(kuma-cp): upgrade gui to new version (#3760)
William Betts (1):
feature(kuma-cp): allow extra cm in kuma cp chart (#3671)
cloudwiz (1):
feat(kuma-cp) add affinity to CP and Ingress pods (#3036)
dependabot[bot] (41):
chore(deps): bump github.com/slok/go-http-metrics from 0.9.0 to 0.10.0 (#3171)
chore(deps): bump alpine in /tools/releases/dockerfiles (#3150)
chore(deps): bump github.com/gruntwork-io/terratest (#3223)
chore(deps): bump github.com/testcontainers/testcontainers-go (#3216)
chore(deps): bump k8s.io/apiextensions-apiserver from 0.22.3 to 0.22.4 (#3220)
chore(deps): bump github.com/spf13/viper from 1.8.1 to 1.9.0 (#3382)
chore(deps): bump github.com/spiffe/spire from 0.12.3 to 1.1.1 (#3384)
chore(deps): bump alpine from 3.14.3 to 3.15.0 in /tools/releases/dockerfiles (#3390)
chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.1.0 to 4.2.0 (#3430)
chore(deps): bump github.com/gruntwork-io/terratest (#3431)
chore(deps): bump helm.sh/helm/v3 from 3.7.1 to 3.7.2 (#3542)
chore(deps): bump github.com/gruntwork-io/terratest (#3549)
chore(deps): bump google.golang.org/grpc from 1.42.0 to 1.43.0 (#3543)
chore(deps): bump github.com/spiffe/spire from 1.1.1 to 1.1.2 (#3555)
chore(deps): bump github.com/go-logr/zapr from 1.2.0 to 1.2.2 (#3559)
chore(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#3548)
chore(deps): bump k8s.io/apiextensions-apiserver from 0.23.0 to 0.23.1 (#3592)
chore(deps): bump github.com/miekg/dns from 1.1.43 to 1.1.45 (#3626)
chore(deps): bump go.uber.org/zap from 1.19.1 to 1.20.0 (#3649)
chore(deps): bump github.com/sethvargo/go-retry from 0.1.0 to 0.2.1 (#3648)
chore(deps): bump github.com/spiffe/spire from 1.1.2 to 1.1.3 (#3687)
chore(deps): bump github.com/sethvargo/go-retry from 0.2.1 to 0.2.2 (#3688)
chore(deps): bump sigs.k8s.io/controller-tools from 0.7.0 to 0.8.0 (#3689)
chore(deps): bump github.com/envoyproxy/protoc-gen-validate (#3719)
chore(deps): bump github.com/onsi/gomega from 1.17.0 to 1.18.0 (#3745)
chore(deps): bump github.com/gruntwork-io/terratest (#3742)
chore(deps): bump github.com/prometheus/client_golang (#3743)
chore(deps): bump github.com/operator-framework/operator-lib (#3741)
chore(deps): bump k8s.io/apiextensions-apiserver from 0.23.1 to 0.23.2 (#3746)
chore(deps): bump helm.sh/helm/v3 from 3.7.2 to 3.8.0 (#3749)
chore(deps): bump github.com/onsi/gomega from 1.18.0 to 1.18.1 (#3773)
chore(deps): bump github.com/gruntwork-io/terratest (#3769)
chore(deps): bump google.golang.org/grpc from 1.43.0 to 1.44.0 (#3770)
chore(deps): bump k8s.io/apiextensions-apiserver from 0.23.2 to 0.23.3 (#3775)
chore(deps): bump github.com/spiffe/spire from 1.1.3 to 1.2.0 (#3777)
chore(deps): bump github.com/prometheus/client_golang (#3778)
chore(deps): bump go.uber.org/zap from 1.20.0 to 1.21.0 (#3824)
chore(deps): bump github.com/sethvargo/go-retry from 0.2.2 to 0.2.3 (#3821)
chore(deps): bump github.com/gruntwork-io/terratest (#3825)
chore(deps): bump github.com/miekg/dns from 1.1.45 to 1.1.46 (#3823)
chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.2.0 to 4.3.0 (#3822)
github-actions[bot] (5):
Updating community files (#3213)
Updating community files (#3270)
ci(.github): automatic sync of files in kumahq/.github (#3420)
ci(.github): automatic sync of files in kumahq/.github (#3471)
ci(.github): automatic sync of files in kumahq/.github (#3647)
mergify[bot] (14):
fix(kuma-cp): handle zone token sync with old versions of cp (#3848)
feat(inspect-api): support for ZoneEgress (#3847) (#3856)
fix(): fix order for zoneegress (#3839) (#3855)
fix(kuma-cp): fix getting certs for zoneegress (#3857) (#3858)
fix(kuma-cp): zero generation on insights provided by zone cp (#3859)
chore(gui): upgrade kuma-gui (#3860) (#3862)
fix(kuma-cp): filter out secrets that are not used (#3864) (#3866)
test(e2e/ratelimit): mark as pending while we investigate flakiness (#3871) (#3877)
fix(helm): update helm chart version (#3851) (#3869)
chore(): rename flag –experimental-gateway to –experimental-meshgateway (#3870) (#3879)
chore(): rename experimental gateway in kuma-cp.default.config (#3880) (#3881)
chore(changelog): Add changelog for 1.5.0 (#3836) (#3895)
chore(): update gui (#3896) (#3898)
chore(envoy): update to 1.21.1 (#3909) (#3911)
parkanzky (4):
perf(*): eliminate uneccessary JSON marshalling (#3440)
perf(kuma-cp): share mesh context (#3659)
perf(kuma-cp): use mesh snapshot in gateway (#3710)
fix(kuma-cp): do not update unchanged insights (#3819)
webliupeng (1):
feat(kuma-cp) Support add retriable methods to http retry policy (#2984)