2.0.8

This is a patch release that every user should upgrade to.

Addresses: CVE-2023-44487 see: GHSA-9wmc-rg4h-28wv for details

Changelog

• chore(deps): bump envoy from 1.24.10 to 1.24.11 #8028 @lahabana
• chore(deps): bump go from 1.18 to 1.21.1 #7533 #7828 @kumahq,@michaelbeaumont
• chore(deps): bump go version to 1.21.3 (backport of #8001) #8014 @kumahq
• chore(deps): bump golang.org/x/net to v0.17.0, google.golang.org/grpc to v1.57.1 #8029 @michaelbeaumont
• chore(deps): bump golangci-lint from v1.53.3 to v1.53.3 #7841 #7847 @kumahq
• chore(deps): security update #7406 #7453 #7717 @kumahq
• chore(deps): update CoreDNS to v1.11.1 (backport of #7523) #7528 @kumahq
• fix(containerd): only build cgroups on linux (backport of #7408) #7423 @kumahq
• fix(kuma-cp): set error when KDS clients fails in goroutine (backport of #7725) #7831 @kumahq
• fix(kuma-cp): specifying IPv6 Envoy Admin address breaks readiness/liveness probes (backport of #7909) #7930 @kumahq
• fix(metrics): hijacker should not pass accept-encoding (backport of #7572) #7580 @kumahq
• fix(sec): get rid of dependency on containerd (backport of #7387) #7389 @kumahq

2.4.2

This is a patch release that every user should upgrade to.

Changelog

• chore(deps): bump go from 1.20.7 to 1.21.1 #7826 @kumahq
• chore(deps): security update #7719 @kumahq
• feat(kds): add user-agent with useful version info (backport of #7886) #7897 @kumahq
• feat(kds): better error handling (backport of #7868) #7877 @kumahq
• feat(transparent-proxy): allow to wait for xtables lock and retry when installing tproxy fails (backport of #7870) #7892 @kumahq
• fix(kds): call CloseSend and exit a goroutine when sync fails to start (backport of #7869) #7883 @kumahq
• fix(kuma-cp): set error when KDS clients fails in goroutine (backport of #7725) #7834 @kumahq
• fix(kuma-cp): specifying IPv6 Envoy Admin address breaks readiness/liveness probes (backport of #7909) #7929 @kumahq

2.4.1

This is a patch release that every user should upgrade to.

Changelog

• chore(deps): bump sigs.k8s.io/controller-runtime from 0.15.1 to 0.16.1 #7680 @kumahq
• chore(deps): bump sigs.k8s.io/gateway-api from 0.8.0-rc1 to 0.8.0 #7664 @kumahq
• chore(deps): bump the go-opentelemetry-io-contrib group with 2 updates (backport of #7613) #7678 @kumahq
• chore(deps): bump the go-opentelemetry-io-otel group with 2 updates (backport of #7607) #7670 @kumahq
• chore(deps): bump the k8s-libs group with 3 updates (backport of #7606) #7688 @kumahq
• fix(kumactl): add --mesh parameter to inspect <policy> (backport of #7696) #7703 @kumahq
• fix(xds): backwards compatibility on access logs paths (backport of #7662) #7694 @kumahq

2.4.0

We’re excited to announce the release of Kuma 2.4, a new minor release improves cross zone routing, adds a new alternative metrics TLS setup and improves observability further.

Notable Changes

• 🚀 Support for user provided certificates to be used to scrape from prometheus securely.
• 🚀 Add multi-zone support for VirtualOutbound.
• 🚀 Wait for sidecar to be ready before starting the app.
• 🚀 Add MeshGateway targetRef support to: MeshHealthCheck, MeshRetry and MeshTimeout.
• 🚀 Many improvements to the GUI.
• 🚀 Improved kubectl support with targetRef policies.
• 🚀 Upgrade to Envoy 1.27.

And a lot more! Check out the blog post to learn more about the release.

Changelog

• chore(deps): bump CoreDNS from v1.10.1 to v1.11.1 #7493 #7523 @michaelbeaumont
• chore(deps): bump cirello.io/pglock from 1.13.0 to 1.14.0 #7554 @dependabot
• chore(deps): bump debian from 3d868b5 to b91baba #7403 #7547 @dependabot
• chore(deps): bump envoy to 1.26.3 #7267 @lukidzi
• chore(deps): bump github.com/cilium/ebpf from 0.10.0 to 0.11.0 #7205 @dependabot
• chore(deps): bump github.com/emicklei/go-restful/v3 from 3.10.2 to 3.11.0 #7552 @dependabot
• chore(deps): bump github.com/envoyproxy/protoc-gen-validate from 1.0.1 to 1.0.2 #7159 @dependabot
• chore(deps): bump github.com/exaring/otelpgx from 0.5.0 to 0.5.1 #7337 @dependabot
• chore(deps): bump github.com/jackc/pgx/v5 from 5.4.1 to 5.4.3 #7273 #7474 @dependabot
• chore(deps): bump github.com/onsi/gomega from 1.27.8 to 1.27.10 #7336 @dependabot
• chore(deps): bump github.com/testcontainers/testcontainers-go from 0.20.1 to 0.23.0 #7122 #7514 @dependabot
• chore(deps): bump go.opentelemetry.io/proto/otlp from 0.20.0 to 1.0.0 #7272 @dependabot
• chore(deps): bump go.uber.org/zap from 1.24.0 to 1.25.0 #7472 @dependabot
• chore(deps): bump golang.org/x/net from 0.11.0 to 0.14.0 #7206 #7475 @dependabot
• chore(deps): bump golang.org/x/sys from 0.9.0 to 0.11.0 #7204 #7471 @dependabot
• chore(deps): bump golang.org/x/text from 0.10.0 to 0.12.0 #7203 #7476 @dependabot
• chore(deps): bump golangci-lint from v1.51.2 to v1.53.3 #7334 @lahabana
• chore(deps): bump gonum.org/v1/gonum from 0.13.0 to 0.14.0 #7553 @dependabot
• chore(deps): bump google.golang.org/grpc from 1.56.0 to 1.57.0 #7123 #7202 #7373 @dependabot
• chore(deps): bump google.golang.org/protobuf from 1.30.0 to 1.31.0 #7124 @dependabot
• chore(deps): bump helm.sh/helm/v3 from 3.12.1 to 3.12.3 #7270 #7515 @dependabot
• chore(deps): bump k8s.io/apiextensions-apiserver from 0.27.3 to 0.27.4 #7372 @michaelbeaumont
• chore(deps): bump sigs.k8s.io/controller-runtime from 0.15.0 to 0.15.1 #7470 @dependabot
• chore(deps): bump sigs.k8s.io/controller-tools from 0.12.0 to 0.13.0 #7271 #7550 @dependabot
• chore(deps): bump sigs.k8s.io/gateway-api from 0.7.1-0.20230727082008-1764e458047d to 0.8.0-rc1 #7371 #7513 @dependabot,@michaelbeaumont
• chore(deps): bump the k8s-libs group with 3 updates #7335 #7549 @dependabot
• chore(deps): bump ubuntu from 0bced47 to ec050c3 #7546 @dependabot
• chore(deps): update go from 1.20.5 to 1.20.6 #7414 @slonka
• chore(deps): update testcontainers-go to 0.22.0 #7477 @slonka
• chore(deps): update to go 1.20.7 #7429 @slonka
• chore(deps): upgrade envoy to 1.26.4 #7367 @lukidzi
• chore(deps): upgrade envoy to 1.27.0 #7411 @lukidzi
• chore(deps): use latest kumahq/kuma-gui #7095 #7096 #7097 #7100 #7113 #7127 #7128 #7156 #7169 #7171 #7193 #7219 #7255 #7260 #7261 #7274 #7279 #7284 #7305 #7308 #7320 #7322 #7328 #7331 #7340 #7341 #7343 #7345 #7350 #7357 #7369 #7370 #7376 #7378 #7379 #7385 #7388 #7413 #7421 #7430 #7444 #7478 #7479 #7480 #7481 #7482 #7487 #7498 #7499 #7503 #7509 #7510 #7511 #7517 #7518 #7522 #7524 #7537 #7538 #7548 #7557 #7566 #7568 #7569 #7571 #7575 #7581 #7582 #7584 @kumahq
• chore(release): merge release-2.3 #7099 @michaelbeaumont
• feat(MeshHealthCheck): allow top level targetRef kind MeshGateway #7194 @michaelbeaumont
• feat(MeshRetry): allow top level targetRef kind MeshGateway #7190 @michaelbeaumont
• feat(MeshTimeout): allow top level targetRef.kind MeshGateway #7137 @michaelbeaumont
• feat(VirtualOutbound): support multizone #7407 @jakubdyszkiewicz
• feat(api-server): add isTargetRefBased in /policies #7561 @lahabana
• feat(api-server): add service unavailable error #7501 @slonka
• feat(api-server): allow WebService customization in plugins #7497 @michaelbeaumont
• feat(api-server): error status is an int #7162 @jakubdyszkiewicz
• feat(cni): add retry for CNI config file check...

2.1.6

This is a patch release that every user should upgrade to.

Changelog

• chore(deps): bump go from 1.18 to 1.20.7 #7446 #7489 @michaelbeaumont
• chore(deps): security update #7405 #7442 @kumahq
• fix(sec): get rid of dependency on containerd (backport of #7387) #7390 @kumahq

2.2.4

This is a patch release that every user should upgrade to.

Changelog

• chore(deps): security update #7454 @kumahq
• chore(deps): update go from 1.20.5 to 1.20.6 (backport of #7414) #7417 @kumahq
• chore(deps): update to go 1.20.7 (backport of #7429) #7432 @kumahq
• chore(deps): upgrade envoy to 1.25.9 #7366 @lukidzi
• fix(containerd): only build cgroups on linux (backport of #7408) #7422 @kumahq
• fix(kuma-cp): don't leak goroutine on every tick in SimpleWatchdog (backport of #7348) #7355 @kumahq
• fix(kuma-cp): order resources for building VIPs (backport of #7333) #7362 @kumahq
• fix(sec): get rid of dependency on containerd (backport of #7387) #7391 @kumahq

2.3.2

This is a patch release that every user should upgrade to.

Changelog

• chore(deps): security update #7443 @kumahq
• chore(deps): update go from 1.20.5 to 1.20.6 (backport of #7414) #7419 @kumahq
• chore(deps): update to go 1.20.7 (backport of #7429) #7435 @kumahq
• chore(deps): upgrade envoy to 1.26.4 #7368 @lukidzi
• fix(containerd): only build cgroups on linux (backport of #7408) #7425 @kumahq
• fix(kuma-cp): don't leak goroutine on every tick in SimpleWatchdog (backport of #7348) #7351 @kumahq
• fix(kuma-cp): order resources for building VIPs (backport of #7333) #7359 @kumahq
• fix(sec): get rid of dependency on containerd (backport of #7387) #7392 @kumahq

2.1.5

This is a patch release that every user should upgrade to.

Changelog

• chore(deps): upgrade envoy to 1.24.10 #7363 @lukidzi
• fix(kuma-cp): don't leak goroutine on every tick in SimpleWatchdog (backport of #7348) #7352 @kumahq
• fix(kuma-cp): order resources for building VIPs (backport of #7333) #7361 @kumahq

2.0.7

This is a patch release that every user should upgrade to.

Changelog

• chore(deps): upgrade envoy to 1.24.10 #7364 @lukidzi
• fix(kuma-cp): order resources for building VIPs (backport of #7333) #7358 @kumahq

1.8.8

This is a patch release that every user should upgrade to.

Changelog

• chore(deps): upgrade envoy to 1.24.10 #7365 @lukidzi
• fix(kuma-cp): order resources for building VIPs (backport of #7333) #7360 @kumahq