v1.1.0-rc.1

What's Changed

• ci: update cherry-pick v1.0.0 by @Xunzhuo in #2784
• fix: add missing release notes details and re organize it by @Xunzhuo in #2785
• e2e: backend upgrade test by @guydc in #2725
• chore: add testdata to passive health checks by @deszhou in #2788
• promote: guydc as maintainer by @Xunzhuo in #2794
• fix: Delete unused status keys from watchable by @uniglot in #2782
• docs: fix commands in basic auth example by @arkodg in #2791
• feat: Support WellKnownSystemCerts in BackendTLSPolicy by @liorokman in #2804
• docs: refactor user guides by @Xunzhuo in #2797
• Fix gen check by @Xunzhuo in #2814
• refactor: set instead of map for mergeGateways by @deszhou in #2803
• remove: support for hostnetwork by @Xunzhuo in #2815
• feat(egctl): add support for egctl to translate from gateway-api resources to IR by @liorokman in #2799
• docs: basic auth example use https by @phantooom in #2806
• chore: group go.opentelemetry.io dependabot by @zirain in #2821
• Add referenced BackendRefs for ExtAuth to Resource Tree by @zhaohuabing in #2795
• fix bootstrap merge by @zirain in #2801
• fix: skip the ReasonTargetNotFound for all policies by @shawnh2 in #2802
• docs: update EnvoyProxy logs by @zirain in #2822
• fix: omit default replicas on Kubernetes Deployment by @ardikabs in #2816
• bug: compute endpointType for all protocol types by @arkodg in #2833
• docs: Routing outside k8s by @arkodg in #2831
• build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0 by @dependabot in #2825
• build(deps): bump golang.org/x/net from 0.21.0 to 0.22.0 by @dependabot in #2826
• build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in #2827
• Fix: failed to create envoy-oidc-hmac secret when upgrading EG by @zhaohuabing in #2835
• build(deps): bump google.golang.org/grpc from 1.62.0 to 1.62.1 by @dependabot in #2829
• Ext auth e2e tests by @zhaohuabing in #2830
• fix existing secret check by @zirain in #2838
• ci: update k8s matrix by @zirain in #2836
• e2e: try to fix client timeout flakes by @zirain in #2812
• feat: Support Upstream TLS to multiple Backends by @liorokman in #2818
• e2e: move drain settings into shutdown settings by @arkodg in #2850
• docs: mtls to the gateway by @arkodg in #2851
• ignore finalizers when comparing envoy proxy svc by @arkodg in #2856
• Chore: remove the uncessary allAssociatedRefGrants from resourceMappings by @zhaohuabing in #2843
• docs: allow users to configure custom certs for control plane auth by @zirain in #2847
• add e2e tests for ext auth with grpc auth service by @zhaohuabing in #2841
• fix: Address race condition disrupting graceful shutdown process by @davidalger in #2864
• docs: move Design docs under "Get Involved" by @arkodg in #2857
• e2e: backend TLS policy by @guydc in #2853
• Update the user doc for OIDC by @zhaohuabing in #2778
• add ADOPTERS.md by @zhaohuabing in #2865
• build(deps): bump softprops/action-gh-release from 1 to 2 by @dependabot in #2867
• build(deps): bump github.com/bufbuild/buf from 1.29.0 to 1.30.0 in /tools/src/buf by @dependabot in #2870
• build(deps): bump github.com/prometheus/common from 0.49.0 to 0.50.0 by @dependabot in #2871
• build(deps): bump fortio.org/fortio from 1.63.3 to 1.63.4 by @dependabot in #2873
• Add tetrate to adopters by @zhaohuabing in #2874
• fix: Don't override the ALPN array if HTTP/3 is enabled. by @liorokman in #2876
• [e2e] eg release upgrade test by @alexwo in #2862
• Docs for ext auth by @zhaohuabing in #2868
• Remove the uncessary \ by @zhaohuabing in #2883
• docs: backend tls policy by @guydc in #2884
• feat: add PolicyStatus for BackendTrafficPolicy by @shawnh2 in #2846
• Change the Merge behavior to Replace for SecurityPolicy by @zhaohuabing in #2885
• e2e: add weighted backend by @ShyunnY in #2863
• http3: use service port in alt-svc header by @arkodg in #2886
• bug: add h3 alpn by default if http3 is enabled by @arkodg in #2887
• fix: prevent policies targeting non-TLS listeners on the same port from conflicting by @liorokman in #2786
• chore: remove ProcessBackendTLSPoliciesAncestorRef by @zhaohuabing in #2845
• Change the Merge behavior to Replace for BackendTrafficPolicy by @zhaohuabing in #2888
• shutdown drainTimeout should also affect envoy drain time by @arkodg in #2898
• skip publishing empty status for policies by @arkodg in #2902
• docs: multiple gatewayclass and merge gateways deployment mode by @cnvergence in #2881
• feat: add PolicyStatus for ClientTrafficPolicy by @shawnh2 in #2895
• Use gwapiv1a2.PolicyStatus for SecurityPolicy Status by @zhaohuabing in #2848
• Fix oidc doc by @zhaohuabing in #2905
• Release v1.0 by @Xunzhuo in #2909
• fix: deployment-mode doc markdown links by @cnvergence in #2912
• fix: QUIC listeners should only advertise HTTP/3 over ALPN, and not HTTP/2 and HTTP/1.1 by @liorokman in #2907
• e2e: graceful envoy shutdown by @guydc in #2839
• feat: add PolicyStatus for EnvoyPatchPolicy by @shawnh2 in #2910
• chore: improve docs-serve by @zirain in #2920
• api: increase rate-limit global rules limit by @ShyunnY in #2906
• docs: add Envoy Gateway threat model by @edurra in #2915
• Remove duplicated http filters for ExtAuth by @zhaohuabing in #2893
• feat: expose prom port in rl svc by @ShyunnY in #2914
• blog post for v1.0 by @arkodg in #2923
• rm extra "that" from blog by @arkodg in #2928
• docs: %s/Application/API/g by @arkodg in #2929
• Pin version to v1.0.0 in 1.0.0 docs by @zhaohuabing in #2933
• Run certgen when upgrading by @zhaohuabing in #2934
• chore: use v1.0.0 as default for upgrade test by @guydc in #2938
• api: connection limits by @guydc in #2709
• docs: fix name spelling in threat model by @mrcdb in #2936
• api: support failOpen in ext auth by @deszhou in #2908
• API: EnvoyExtensionPolicy by @guydc in #2570
• chore: add helm template test by @zirain in #2935
• fix: install-egctl doc dead link by @deszhou in #2916
• chore: fix helm-template by @zirain in #2943
• e2e: use default shutdown mgr settings in upgrade test suite by @guydc in #2946
• refactor: collapse eg-metrics-svc into eg-svc by @ShyunnY in #2932
• chore: make clean should clean tools/bin by @zirain in #2945
• build(deps): bump softprops/action-gh-release from 2.0.2 to 2.0.4 by @dependabot in #2960
• build(deps): bump distroless/static from 49af061 to 55c6361 in /tools/docker/envoy-gateway by @dependabot in #2956
• build(deps): bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in #2959
• build(deps): bump github/codeql-action from 3.24.6 to 3.24.7 by @dependabot in #2957
• build(deps): bump docker/login-action from 3.0.0 to 3.1.0 by @dependabot in #2958
• build(deps): bump helm.sh/helm/v3 from 3.14.2 to 3.14.3 by @dependabot in #2962
• feat: support failOpen in ext auth by @deszhou in #2948
• fix: redirect user doc by @zhaohuabing in #2977
• Remove duplicated http filters by @zhaohuabing in #2944
• build(deps): bump the k8s-io group with 6 updates by @dependabot in #2961
• chore: set mergedGateways in translator runner by @cnvergence in #2971
• api: fix gatewayclass link by @zirain in #2986
• refactor: reuse xPolicy status methods for backendTLSPolicy by @shawnh2 in #2950
• Add missing secrets testdata for oidc by @zhaohuabing in #2994
• minor change to address a missing comment in #2944 by @zhaohuabing in #2992
• docs: set up linkinator for doc site by @zirain in #2990
• docs: remove latest from ignore list by @zirain in #2996
• fix cors e2e test by @zhaohuabing in #3003
• fix: do nof forward not matching prefilights to backends by @zhaohuabing in #3002
• Fix: nil secret in resourceversiontable by @zhaohuabing in #2982
• build(deps): bump github/codeql-action from 3.24.7 to 3.24.9 by @dependabot in #3008
• build(deps): bump actions/deploy-pages from 4.0.4 to 4.0.5 by @dependabot in #3007
• build(deps): bump fortio.org/log from 1.12.0 to 1.12.1 by @dependabot in #3009
• build(deps): bump github.com/golangci/golangci-lint from 1.56.2 to 1.57.1 in /tools/src/golangci-lint by @dependabot in #3012
• build(deps): bump github.com/prometheus/common from 0.50.0 to 0.51.1 by @dependabot in #3010
• docs: fix squash link by @zirain in #3013
• build(deps): bump fortio.org/fortio from 1.63.4 to 1.63.5 by @dependabot in #3011
• ci: trigger docs action by @zirain in #3017
• ci: fix cherrypick permission by @zirain in #2985
• fix: set path prefix for http ext auth service by @zhaohuabing in #3018
• feat: add Chinese language support for doc site by @wilsonwu in #2532
• feat(translator): implement connection limit by @guydc in #2952
• docs: remove 0.1.0 from linkinator ignore list by @yuluo-yx in #3015
• disable connection limit test by @zhaohuabing in #3025
• fix: use correct connection limit attribute name in e2e, docs by @guydc in #3028
• docs: document patches in envoy proxy by @yaelSchechter in #3027
• feat(policy): Adding BTP support for UDP/TCPRoute by @alexwo in #3004
• fix: add missing http filters to the http filter chain by @zhaohuabing in #2970
• ci: grant pull-requests permission to cherrypick action by @zirain in #3039
• Update ADOPTERS.md for Airspace Link by @akhenakh in #3045
• feat: added option to specify resources on the OIDC security policy by @jaynis in #3030
• fix: allow websockets in url rewrite by @zetaab in #3022
• api: support IdleTimeout in clientTrafficPolicy by @yaelSchechter in #3042
• fix: use Patch API for infra-client by @ardikabs in #3034
• fix: Allow Policy to attach to multiple http listeners by @liorokman in #2967
• chore: Address unused write and tautological nilness checks by @davidalger in #3053
• fix: BadRequest error applying JSON access log example by @davidalger in #3054
• test: supplementary metrics test by @ShyunnY in #3037
• api: wasm extension by @zhaohuabing in #2877
• api: support buffer limit in clientTrafficPolicy by @yaelSchechter in #2805
• Fix: double slashes in redirect URL by @zhaohuabing in #2998
• feat: HeadersWithUnderscoreActions on ClientTrafficPolicy by @davidalger in #3052
• highlight Gateway API in readme by @zirain in #3066
• chore: bump golang to 1.22 by @Xunzhuo in #2793
• docs: version desc by @zirain in #3065
• fix: helm-template should explicitly set ns by @Xunzhuo in #3070
• build(deps): bump github.com/golangci/golangci-lint from 1.57.1 to 1.57.2 in /tools/src/golangci-lint by @dependabot in #3073
• build(deps): bump distroless/static from 55c6361 to 6732c39 in /tools/docker/envoy-gateway by @dependabot in #3074
• build(deps): bump carloscastrojumo/github-cherry-pick-action from 1.0.9 to 1.0.10 by @dependabot in #3076
• feat: add install and uninstall sub cmd to egctl by @ShyunnY in #2859
• refactor: reorder fault filter by @ShyunnY in #3059
• doc: add user guide on how to enable private key provider by @soulxu in #2533
• fix: repeated file generation on every metrics test running by @ShyunnY in #3077
• fix: do not create infra resources when missing translated listeners by @cnvergence in #3043
• Set host for http health checker explicitly to avoid using the cluster name as host header for http health checking request. by @lemonlinger in #3057
• feat(translator): implement idle timeout in ClientTrafficPolicy by @yaelSchechter in #3056
• api: Model OpenTelelemetry Sinks as a BackendRef by @zirain in #3067
• chore: add ignore path for codecov by @shawnh2 in #3072
• feat(translator): Envoy Extension Policy and ExtProc by @guydc in #2991
• fixes minor typo in http-routing guide by @eitansuez in #3088
• fixes minor typo in http-routing guide by @zirain in #3089
• feat(EG K8S Provider): Enable leader election for EG controller by @alexwo in #2694
• correct kubectl command to show deployment in envoy-gateway-system na… by @eitansuez in #3090
• feat(translator): implement buffer limit support in CTP by @yaelSchechter in #3058
• fix: nil leader election by @zhaohuabing in #3096
• Change route sorting order to Exact > RegularExpression > PathPrefix by @vixns in #2579
• feat: configure overload manager by @shahar-h in #3082
• ci: pin linkinator version in docs workflow by @shahar-h in #3097
• team: remove LanceEA as a gateway-reviewer by @LanceEa in #3105
• fix: infraIR duplicate port translation for merged gateways by @cnvergence in #3061
• fixed obsolete links in the docs by @LiZhenCheng9527 in #3050
• translator: set SpawnUpstreamSpan to true by @zirain in #3102
• run cel validation on different k8s versions by @zirain in #3101
• e2e: disable client timeout by @zirain in #3100
• fix: rate limit doesn't work with two(and more) listeners by @zhaohuabing in #3085
• dont fail CI if codecov upload fails by @arkodg in #3123
• build(deps): bump distroless/static from 6732c39 to f41b84c in /tools/docker/envoy-gateway by @dependabot in #3121
• fix: make setting ratelimit.backend.redis optional by @arkodg in #3128
• docs: Translate about page into Chinese by @wilsonwu in #3035
• build(deps): bump github.com/prometheus/common from 0.51.1 to 0.52.2 by @dependabot in #3120
• build(deps): bump codecov/codecov-action from 3.1.5 to 4.2.0 by @dependabot in #3115
• Revert codecov to v3 by @arkodg in #3132
• build(deps): bump github.com/bufbuild/buf from 1.30.0 to 1.30.1 in /tools/src/buf by @dependabot in #3112
• build(deps): bump peaceiris/actions-hugo from 2.6.0 to 3.0.0 by @dependabot in #3113
• build(deps): bump fortio.org/fortio from 1.63.5 to 1.63.7 by @dependabot in #3119
• docs: renames user guides to tasks by @eitansuez in #3104
• build(deps): bump github.com/fatih/color from 1.15.0 to 1.16.0 by @dependabot in #3136
• build(deps): bump the go-opentelemetry-io group with 9 updates by @dependabot in #3135
• build(deps): bump github/codeql-action from 3.24.9 to 3.24.10 by @dependabot in #3116
• refactor: infra client CreateOrUpdate to ServerSideApply by @ardikabs in #3134
• build(deps): bump google.golang.org/grpc from 1.63.0 to 1.63.2 by @dependabot in #3141
• docs: fix dead links by @zirain in #3146
• release: v1.0.1 by @Xunzhuo in #3144
• ci: remove continue-on-error by @zirain in #3150
• build(deps): bump golang.org/x/sys from 0.18.0 to 0.19.0 by @dependabot in #3117
• fix: date and sync release note to v1.0.1 by @Xunzhuo in #3152
• docs: renames user guides to 'tasks' for v1.0 by @eitansuez in #3155
• fix egctl does not support custom controller name. by @qicz in #3129
• Refactor and fix early return: HTTP Listener XDS translator by @zhaohuabing in #2981
• fix: remove no needed new pointer creation by @Xunzhuo in #2739
• feat: add trace for rate-limit by @ShyunnY in #2974
• docs: fix typo in release process by @wilsonwu in #3175
• feat: implment BackendRefs in EnvoyProxy by @zirain in #3080
• fix: delete tab character by @yigang01 in #3169
• docs: move contribution out of version by @zirain in #3176
• chore: update golint by @zirain in #3177
• docs: support notImplementedHide by @zirain in #2849
• refactor: group xds security features for security policy by @shawnh2 in #3019
• fix: use ptr.To[uint32] intead of func()*uint32 by @ShyunnY in #3187
• api: gRPC Access Log Service (ALS) sink by @davidalger in #3078
• build(deps): bump golang.org/x/net from 0.23.0 to 0.24.0 by @dependabot in #3193
• fix merge race caused by #3078 by @shawnh2 in #3196
• docs: Generate enum documentation by @liorokman in #3186
• docs: provides a suggested path through the docs after the quickstart by @eitansuez in #3185
• fix merge race caused by #3185 by @shawnh2 in #3197
• fix(chart): set ttlSecondsAfterFinished on certgen job to 30 by default by @JuniorJPDJ in #3156
• api: fix WasmCodeSourceType enum validation by @eguzki in #3203
• api: ext-proc timeout, fail-open, backendRefs by @guydc in #3087
• build(deps): bump sigs.k8s.io/controller-runtime from 0.17.2 to 0.17.3 by @dependabot in #3192
• build(deps): bump github.com/prometheus/common from 0.52.2 to 0.52.3 by @dependabot in #3194
• build(deps): bump helm.sh/helm/v3 from 3.14.3 to 3.14.4 by @dependabot in #3195
• docs: translate release announcement and process into Chinese by @wilsonwu in #3166
• docs: use tabpane by @zirain in #3208
• Use - for naming service and container ports by @arkodg in #3130
• API: HTTP Filter ordering by @zhaohuabing in #2993
• e2e: disable GatewayInfraResourceTest by @zirain in #3205
• chore: use golang 1.N.P version syntax by @guydc in #3215
• feat: support HTTP compression on stats/prometheus by @zufardhiyaulhaq in #3201
• api: ext-proc processing mode by @guydc in #3171
• fix: match serviceName in tracing with mergedGateways topology by @cnvergence in #3214
• ci: move write permissions to job level in cherrypick workflow by @shahar-h in #3219
• docs: replaces json patch bodies with yaml format by @eitansuez in #3184
• Feat: Support for loadBalancerSourceRanges on the envoy service by @jaynis in #2878
• feat: add support for optional JWT authentication by @ardikabs in #3157
• Use native per-route config for basic auth by @zhaohuabing in #3182
• docs: fix zh content, translate docs page and add zh standard page by @wilsonwu in #3216
• feat: add requiredClientCertificate on mutual TLS to make it optional by @zufardhiyaulhaq in #3199
• fix flaky ext auth e2e by @zhaohuabing in #3221
• feat: Wasm extension HTTP code source by @zhaohuabing in #3164
• Run Envoy Gateway like DaemonSet by @zvlb in #3092
• feat: add enable stats for peer endpoint of envoyproxy by @ShyunnY in #3145
• docs: Translate quickstart of user guide page into Chinese by @terry-chao in #3148
• docs: extProc is an optional field by @ardikabs in #3224
• build(deps): bump github.com/miekg/dns from 1.1.58 to 1.1.59 by @dependabot in #3239
• build(deps): bump actions/checkout from 4.1.2 to 4.1.3 by @dependabot in #3236
• build(deps): bump github/codeql-action from 3.24.10 to 3.25.1 by @dependabot in #3235
• build(deps): bump sphinx from 7.2.6 to 7.3.7 in /tools/src/sphinx-build by @dependabot in #3240
• build(deps): bump actions/download-artifact from 4.1.4 to 4.1.5 by @dependabot in #3233
• build(deps): bump github.com/prometheus/common from 0.52.3 to 0.53.0 by @dependabot in #3238
• crds: cleanup and fix comment by @zirain in #3228
• build(deps): bump actions/upload-artifact from 4.3.1 to 4.3.2 by @dependabot in #3234
• crds: remove status by @zirain in #3229
• HTTP2 settings API by @zhaohuabing in #3222
• feat: support egctl install output manifests and fix bugs by @ShyunnY in #3227
• chore: update envoypatch test by @zirain in #3231
• docs: Fix commands for testing jwt based routing by @biefy in #3243
• feat: http2 listener setting impl by @zhaohuabing in #3249
• docs(zh): translate code of conduct and code owner page and fix standard page problem by @wilsonwu in #3241
• api: Enable controlling the HTTP version used to connect to the backend by @liorokman in #2433
• fix: make Write create files without the executable bit set by @liorokman in #3255
• chore: fix eep targetRef doc by @guydc in #3248
• docs: (#3137) show 'apply yaml' either from stdin, or from file using… by @eitansuez in #3223
• e2e: add e2e test for MergeGateways feature by @shawnh2 in #2665
• ci: add osv-scanner workflow by @shahar-h in #3261
• docs: Fix global rate limit doc for sourceCIDR type by @owenhaynes in #3256
• chore: add protos to gen-check and regenerate protos by @shahar-h in #3266
• fix: Add SourceMatchType validation for acceptable values by @owenhaynes in #3260
• refactor: remove explicit test case definition for xds translator test by @shawnh2 in #3230
• Sync envoyproxy docs from latest into v1.0.1 by @arkodg in #3268
• feat: Implement useClientProtocol by @liorokman in #3254
• feat: support backend tls settings with envoyproxy by @alexwo in #3218
• chore: resolve protoc-gen-go-grpc vulnerability by @shahar-h in #3267
• fix CI by @zhaohuabing in #3277
• ci: add trivy image vulnerabilities scan workflow by @shahar-h in #3287
• ci: add badges for security scans by @shahar-h in #3288
• lint: enable gofumpt by @zirain in #3291
• doc: update oidc docs by @zhaohuabing in #3275
• e2e: disable unstable tests by @zirain in #3306
• feat(translator): extproc timeout, failopen and backendRefs by @guydc in #3206
• build(deps): bump actions/upload-artifact from 4.3.2 to 4.3.3 by @dependabot in #3300
• build(deps): bump actions/download-artifact from 4.1.5 to 4.1.7 by @dependabot in #3299
• build(deps): bump github/codeql-action from 3.25.1 to 3.25.3 by @dependabot in #3297
• build(deps): bump the go-opentelemetry-io group with 8 updates by @dependabot in #3295
• build(deps): bump myst-parser from 2.0.0 to 3.0.1 in /tools/src/sphinx-build by @dependabot in #3294
• e2e: fix connectionLimit e2e test by @ShyunnY in #3292
• chore: fix lint by @zirain in #3309
• build(deps): bump distroless/static from f41b84c to e9ac71e in /tools/docker/envoy-gateway by @dependabot in #3301
• build(deps): bump actions/checkout from 4.1.3 to 4.1.4 by @dependabot in #3298
• docs: updates task testing instructions to use tabs for with|without external load balancer by @eitansuez in #3284
• e2e: disable EGUpgradeTest by @zirain in #3310
• chore: Bump k8s.io by @zirain in #3281
• helm: use IfNotPresent for versioned helm chart release by @zirain in #3289
• e2e: Add an e2e test for useClientProtocol by @liorokman in #3314
• fix helm IfNotPresent by @zirain in #3320
• bump github.com/envoyproxy/go-control-plane by @mmorel-35 in #3286
• chore: remove redundant spaces by @yuluo-yx in #3319
• build(deps): bump github.com/golangci/golangci-lint from 1.57.2 to 1.58.0 in /tools/src/golangci-lint by @dependabot in #3330
• build(deps): bump golang.org/x/sys from 0.19.0 to 0.20.0 by @dependabot in #3326
• build(deps): bump google.golang.org/protobuf from 1.33.0 to 1.34.0 by @dependabot in #3328
• build(deps): bump actions/setup-go from 5.0.0 to 5.0.1 in /tools/github-actions/setup-deps by @dependabot in #3329
• build(deps): bump sigs.k8s.io/controller-runtime from 0.18.0 to 0.18.1 by @dependabot in #3327
• e2e: fix flaky merge-gateways test by @shawnh2 in #3331
• fix: add proxy protocol always as first listenerFilter by @zetaab in #3332
• refactor: refactor TCP IR by @aoledk in #3271
• docs(zh): translate contributing doc into Chinese by @wilsonwu in #3308
• feat: support custom HTTP filter ordering by @zhaohuabing in #3273
• docs: document client idle timeout by @yaelSchechter in #3325
• feat: expose shutdownmanager image to EnvoyGageway API by @zhaohuabing in #3269
• bump gatewayapi to 1.1.0-rc2 by @zirain in #3336
• refactor: separate conditions computing for listeners and routes into status pkg by @shawnh2 in #2951
• feat: add xRoute and xPolicy support for egctl x status by @shawnh2 in #2949
• docs: document buffer limit for client by @yaelSchechter in #3324
• fix: sort gateways by creation timestamp before translate by @shawnh2 in #3344
• chore: correct typos in comments and code by @shawnh2 in #3349
• feat: support access log formatters by @aoledk in #3303
• chore: add gateway-api/apis/v1alpha3 to k8s client support by @shawnh2 in #3350
• feat(api): Add support for the header hash policy by @harrisonturton in #3342
• Bump Gateway API v1.1.0 by @zirain in #3356
• api: unhide FilterOrder by @zirain in #3358
• chore: bump golang to 1.22.3 by @shahar-h in #3351
• docs: fix broken BackendTLSPolicy samples by @shahar-h in #3362
• feat(translator): Implement header hash policy for consistent hash load balancers by @harrisonturton in #3357
• feat: add envoy extension policy support for egctl x status by @shawnh2 in #3363
• fix: match SNI when using TLS listeners with hostname by @michaelbeaumont in #2942
• api: Authorization API design by @zetaab in #2652
• refactor: group xds backend traffic features for BackendTrafficPolicy by @shawnh2 in #3189
• build(deps): bump github/codeql-action from 3.25.3 to 3.25.4 by @dependabot in #3383
• build(deps): bump github.com/prometheus/client_golang from 1.19.0 to 1.19.1 by @dependabot in #3375
• fix: security policy reference grant from field type by @eguzki in #3386
• build(deps): bump actions/checkout from 4.1.4 to 4.1.5 by @dependabot in #3382
• build(deps): bump google/osv-scanner-action from 1.7.1 to 1.7.3 by @dependabot in #3379
• build(deps): bump sigs.k8s.io/controller-runtime from 0.18.1 to 0.18.2 by @dependabot in #3374
• chore: update GRPCRoute version for examples by @shawnh2 in #3391
• build(deps): bump golang.org/x/net from 0.24.0 to 0.25.0 by @dependabot in #3377
• build(deps): bump google.golang.org/protobuf from 1.34.0 to 1.34.1 by @dependabot in #3376
• feat: add metrics instrumentation for status updater by @shawnh2 in #3347
• doc: update EG control-plane metrics design & usage by @shawnh2 in #3346
• feat(api): add consistent hash table size api by @aoledk in #3348
• docs: update helm install docs by @yuluo-yx in #3370
• build(deps): bump github.com/golangci/golangci-lint from 1.58.0 to 1.58.1 in /tools/src/golangci-lint by @dependabot in #3378
• build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @dependabot in #3381
• tcproute/udproute support multiple backends by @zirain in #3212
• refactor: refactor UDP IR by @aoledk in #3373
• feat: add supported features to gateway class by @levikobi in #2491
• API: Backend by @guydc in #3063
• feat(api): add idleTimeout to ClientTrafficPolicy for TCP listener by @aoledk in #3345
• fix: build is failing by @zhaohuabing in #3402
• build(deps): bump aquasecurity/trivy-action from 0.19.0 to 0.20.0 by @dependabot in #3380
• docs(zh): translate Developer Guide and related docs into Chinese by @wilsonwu in #3384
• fix: duplicated xroutes are added to gatewayapi.Resources by @aoledk in #3282
• ci: add license scan workflow by @shahar-h in #3407
• feat: add global image settings for all images in the EG chart by @zhaohuabing in #3389
• docs(zh): translate Install docs into Chinese by @wilsonwu in #3403
• doc: merge announcements and blogs into news by @shawnh2 in #3417
• chore: support multi nodes cluster by @zirain in #3422
• docs(zh): translate releases docs (1.0.0 and 1.0.1 only) into Chinese by @wilsonwu in #3413
• ci: fix codecov upload issue by @shahar-h in #3421
• ci: fix codecov upload on dependabot PRs by @shahar-h in #3439
• fix(translator): set ignoreCase for header matchers in extAuth by @haoqixu in #3420
• feat: add metrics instrumentation for xds server by @shawnh2 in #3393
• feat: PreserveExternalRequestID on ClientTrafficPolicy by @ardikabs in #3225
• feat: add knob for switching container port by @zvlb in #3333
• bug: Route extension filters with different types but the same name and namespace aren't correctly cached by @liorokman in #3388
• chore: enable gci in golangci-lint by @shawnh2 in #3437
• feat: support BackendRef HTTP filters by @cnvergence in #3246
• feat: support forward client cert config XFCC header by @zufardhiyaulhaq in #3202
• build(deps): bump helm.sh/helm/v3 from 3.14.4 to 3.15.0 by @dependabot in #3436
• ci: update codecov-action and remove workaround by @shahar-h in #3442
• build(deps): bump google.golang.org/grpc from 1.63.2 to 1.64.0 by @dependabot in #3435
• docs(zh): sync #3417 combine blog and release to news by @wilsonwu in #3438
• build(deps): bump github/codeql-action from 3.25.4 to 3.25.5 by @dependabot in #3427
• build(deps): bump sigs.k8s.io/kind from 0.22.0 to 0.23.0 in /tools/src/kind by @dependabot in #3428
• build(deps): bump softprops/action-gh-release from 2.0.4 to 2.0.5 by @dependabot in #3429
• build(deps): bump github.com/bufbuild/buf from 1.31.0 to 1.32.0 in /tools/src/buf by @dependabot in #3430
• build(deps): bump github.com/golangci/golangci-lint from 1.58.1 to 1.58.2 in /tools/src/golangci-lint by @dependabot in #3431
• build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 by @dependabot in #3434
• build(deps): bump the k8s-io group with 6 updates by @dependabot in #3433
• build(deps): bump actions/checkout from 4.1.5 to 4.1.6 by @dependabot in #3432
• api: add the buffer limit knob to the cluster by @ShyunnY in #3390
• API: Follow up on XFCC header by @zhaohuabing in #3443
• docs:use server side apply when installing EG using kubectl by @arkodg in #3451
• refactor telemetry backendRefs by @zirain in #3293
• fix: filter BackendTLSPolicy by namespace by @haoqixu in #3424
• fix: Grafana dashboards conformance by @BadLiveware in #3448
• doc: add Envoy Gateway exported metrics by @shawnh2 in #3446
• feat(policy): Add CTP support for TCP/TLS listeners by @aoledk in #3337
• feat: supports custom metrics sink export period and timeout by @ShyunnY in #3103
• refactor: error processing for xPolicy by @shawnh2 in #3302
• feat: support caCerts in secrets by @ShyunnY in #3211
• doc: update api doc by @zirain in #3416
• feat: adding support for ext auth and backend mtls by @alexwo in #3441
• chore: update matrix by @zirain in #3458
• chore: fix ci by @guydc in #3465
• chore: use sets.Set[T] instead of map[T]struct{} by @zirain in #3471
• feat(translator): Implement consistent hash table size in BackendTrafficPolicy by @aoledk in #3440
• feat(translator): Implement tcp idle timeout in ClientTrafficPolicy by @aoledk in #3459
• fix api wording by @zirain in #3467
• Trigger a reconcile when EnvoyProxy backendRefs changes by @zirain in #3472
• bug: Tests are failing due to an expired certificate in one of the translator tests by @liorokman in #3476
• e2e: skip UseClientProtocolTest by @zirain in #3478
• fix: EEP RG enforcement by @guydc in #3475
• feat(docs): add adopter section in doc main page by @wilsonwu in #3466
• docs: use helm-docs template by @zirain in #3492
• build(deps): bump aquasecurity/trivy-action from 0.20.0 to 0.21.0 by @dependabot in #3482
• build(deps): bump github.com/golangci/golangci-lint from 1.58.2 to 1.59.0 in /tools/src/golangci-lint by @dependabot in #3490
• build(deps): bump the go-opentelemetry-io group with 8 updates by @dependabot in #3485
• build(deps): bump sigs.k8s.io/controller-runtime from 0.18.2 to 0.18.3 by @dependabot in #3486
• build(deps): bump fortio.org/fortio from 1.63.7 to 1.63.8 by @dependabot in #3487
• build(deps): bump github.com/bufbuild/buf from 1.32.0 to 1.32.1 in /tools/src/buf by @dependabot in #3484
• build(deps): bump github/codeql-action from 3.25.5 to 3.25.6 by @dependabot in #3483
• build(deps): bump helm.sh/helm/v3 from 3.15.0 to 3.15.1 by @dependabot in #3489
• build(deps): bump github.com/go-logr/logr from 1.4.1 to 1.4.2 by @dependabot in #3488
• helm: support ratelimit image pull secrets and pull policy by @zhaohuabing in #3454
• feat: add metrics instrumentation for infra manager by @shawnh2 in #3463
• ext_auth support backendRefs by @zirain in #3469
• feat: authorization implementation by @zhaohuabing in #3399
• feat: impl cluster buffer limit by @ShyunnY in #3479
• build(deps): bump codespell from 2.2.6 to 2.3.0 in /tools/src/codespell by @dependabot in #3481
• feat: Optionally override Oauth Cookie Names by @sam-burrell in #3274
• fix api nit by @zirain in #3497
• fix secrets/configmap updates do not trigger a controller reconcile by @alexwo in #3499
• chore: improve extension server unit tests by @liorokman in #3503
• feat: Support connecting to an Envoy Gateway Extension Server over Unix Domain Sockets by @liorokman in #3494
• o11y: add grafana dashboard for control plane metrics by @shawnh2 in #3506
• feat(translator): support disabling X-RateLimit headers by @evacchi in #3397
• feat: backend TLS SAN validation by @guydc in #3507
• feat: Adding extension server policy handling. by @liorokman in #3371
• fix: Reduce the amount of memory used by the in-memory extension manager gRPC server buffer by @liorokman in #3512
• API: add more oidc configuration settings by @zhaohuabing in #3423
• api: cookie based consistent hashing by @arkodg in #3444
• feat: add generate API and Helm doc process with zh content update by @wilsonwu in #3418
• fix: merge race between #3418 and #3444,#3423 by @shawnh2 in #3513
• chore: update codecov ignore path by @shawnh2 in #3523
• build(deps): bump github/codeql-action from 3.25.6 to 3.25.7 by @dependabot in #3518
• build(deps): bump github.com/bufbuild/buf from 1.32.1 to 1.32.2 in /tools/src/buf by @dependabot in #3517
• build(deps): bump fortio.org/fortio from 1.63.8 to 1.63.9 by @dependabot in #3516
• build(deps): bump docker/login-action from 3.1.0 to 3.2.0 by @dependabot in #3519
• feat(oidc): implement additional OIDC configuration settings by @zetaab in #3514
• fix client backend mtls secrets updates by @alexwo in #3526
• feat(translator): Add names to filterchains based on the listener name by @liorokman in #3524
• api: support user provided names for generated k8s resources by @arkodg in #3527
• feat: Enable the configuration of topologySpreadConstraints for the EG control plane. by @alexwo in #3535
• docs: highlight default 15s request timeout by @arkodg in #3529
• feat(translator): implement backend API by @guydc in #3495
• helm: add envoy gateway addon helm chart support by @shawnh2 in #3470
• fix: ReplaceFullPath not working for root path (/) by @arkodg in #3530
• chore: remove redundant helm-package command by @shawnh2 in #3539
• feat: keep core features supported when skipping extended tests by @levikobi in #3520
• chore: Remove namespace restriction for EnvoyProxy parametersRef reso… by @phantooom in #3544
• fix: doc broken links by @guydc in #3553
• chore: bump go to 1.22.4 by @guydc in #3552
• docs: Update docs on gwapi support for backendref filters by @cnvergence in #3558
• feat: support custom names for generated k8s resources by @arkodg in #3537
• build(deps): bump aquasecurity/trivy-action from 0.21.0 to 0.22.0 by @dependabot in #3578
• build(deps): bump github/codeql-action from 3.25.7 to 3.25.8 by @dependabot in #3576
• build(deps): bump google/osv-scanner-action from 1.7.3 to 1.7.4 by @dependabot in #3577
• build(deps): bump fortio.org/fortio from 1.63.9 to 1.63.10 by @dependabot in #3571
• bug: ClientTrafficPolicy resources are prevented from targeting a SectionName by an incorrect CEL validation by @liorokman in #3580
• docs: backend by @guydc in #3550
• build(deps): bump sigs.k8s.io/controller-runtime from 0.18.3 to 0.18.4 by @dependabot in #3575
• chore: automatically import Grafana dashboards when installing gateway-addons-helm by @shawnh2 in #3556
• build(deps): bump github.com/golangci/golangci-lint from 1.59.0 to 1.59.1 in /tools/src/golangci-lint by @dependabot in #3579
• chore: update make helm-readme-gen by @shawnh2 in #3555
• chore: fix gen-check by @zirain in #3585
• ci: fix osv-scanner action by @zirain in #3586
• bug: cel tests are always run on a single version of Kubernetes by @liorokman in #3584
• build(deps): bump github.com/prometheus/common from 0.53.0 to 0.54.0 by @dependabot in #3573
• feat(api): Add http health check api to ClientTrafficPolicy by @aoledk in #3540
• feat: Allow configuring tolerations for the EG control plane installed via Helm by @coro in #3587
• feat: adding pod disruption budget support for envoy proxies by @alexwo in #3583
• e2e: basic multiple gc test by @cnvergence in #2707
• Feat: adding support for PodDisruptionBudget with eg control plane by @alexwo in #3545
• release: v1.0.2 by @Xunzhuo in #3594
• docs: sync 1.0.2 release note to 1.0.2 and fix CI by @Xunzhuo in #3605
• fix: egctl x status gatewayclass example msg by @Xunzhuo in #3606
• helm: add more addons for gateway-addons-helm by @shawnh2 in #3541
• feat(translator): support switching between service/clusterIP routing by @evacchi in #3543
• chore: enable importas for lint by @shawnh2 in #3603
• feat(translator): Support extension server hooks for TCP and UDP listeners in addition to HTTP listeners. by @liorokman in #3522
• doc: add certgen description into chart readme by @ShyunnY in #3569
• feat(translator): Implement http health check filter by @aoledk in #3596
• feat(translator): Add formatter support for OpenTelemetry access logger by @aoledk in #3597
• docs(zh): translate roadmap into Chinese by @wilsonwu in #3531
• build(deps): bump github.com/miekg/dns from 1.1.59 to 1.1.61 by @dependabot in #3616
• build(deps): bump github/codeql-action from 3.25.8 to 3.25.10 by @dependabot in #3619
• add CEL validation for BackendRef Group by @phantooom in #3557
• feat: support plural targetRefs on policies by @liorokman in #3581
• build(deps): bump the k8s-io group with 6 updates by @dependabot in #3612
• build(deps): bump go.opentelemetry.io/proto/otlp from 1.2.0 to 1.3.1 in the go-opentelemetry-io group by @dependabot in #3613
• build(deps): bump codecov/codecov-action from 4.4.1 to 4.5.0 by @dependabot in #3618
• build(deps): bump github.com/bufbuild/buf from 1.32.2 to 1.33.0 in /tools/src/buf by @dependabot in #3620
• build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 by @dependabot in #3614
• build(deps): bump actions/checkout from 4.1.6 to 4.1.7 by @dependabot in #3617
• build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2 by @dependabot in #3615
• docs(zh): translate release note 1.0.2 into Chinese by @wilsonwu in #3636
• docs: ext-proc by @guydc in #3608
• oidc: preserve authorization header by @zhaohuabing in #3567
• feat: support attaching EnvoyProxy resource to Gateways by @haoqixu in #3532
• fix: envoy shutdown flaky test by @guydc in #3646
• fix: do not propagate well-known port number for xds portRedirect by @shawnh2 in #3628
• follow-up: update docs and ci pipeline to utilize gateway-addons-helm by @shawnh2 in #3610
• fix: add retries to ext-proc tests by @guydc in #3641
• api: Adding Zipkin Tracing support by @alexandermarston in #3630
• build(deps): bump fortio.org/fortio from 1.63.10 to 1.65.0 by @dependabot in #3658
• build(deps): bump softprops/action-gh-release from 2.0.5 to 2.0.6 by @dependabot in #3656
• build(deps): bump helm.sh/helm/v3 from 3.15.1 to 3.15.2 by @dependabot in #3657
• build(deps): bump github.com/bufbuild/buf from 1.33.0 to 1.34.0 in /tools/src/buf by @dependabot in #3659
• build(deps): bump aquasecurity/trivy-action from 0.22.0 to 0.23.0 by @dependabot in #3655
• docs: introduce shortcode boilerplate by @zirain in #3652
• refactor: refactor client/backend connection by @ShyunnY in #3650
• docs: remove docs-api-headings by @zirain in #3653
• chore: update PR template to highlight the api changes by @shawnh2 in #3637
• chore: update gateway-addons-helm by @zirain in #3649
• docs: rm backend redirect docs by @arkodg in #3591
• feat: implement zipkin tracing by @alexandermarston in #3668
• docs: rm active development alert by @arkodg in #3674
• docs: fix GATEWAY_HOST address for v1.0.2 and latest docs by @arkodg in #3676
• api: support AccessLog filter by @zirain in #3669
• chore: cleanup and upgrade some api to v1 by @shawnh2 in #3644
• Add benchmark testing framework by @shawnh2 in #3599
• feat: Wasm OCI image by @zhaohuabing in #3564
• feat: add resources dashboard for envoy gateway by @shawnh2 in #3689
• feat: AccessLog support CEL Filter by @zirain in #3688
• docs: Fix typo in bootstrap config by @pingiun in #3710
• chore: preallocate a list of addresses by @sanposhiho in #3712
• chore: remove incorrect comment by @zirain in #3716
• chore: add "extproc" to extproc ir name by @zhaohuabing in #3697
• chore: move benchmark-test job in build_and_test.yaml by @shawnh2 in #3692
• build(deps): bump github/codeql-action from 3.25.10 to 3.25.11 by @dependabot in #3723
• build(deps): bump google/osv-scanner-action from 1.7.4 to 1.8.1 by @dependabot in #3721
• build(deps): bump github.com/docker/cli from 26.1.3+incompatible to 27.0.2+incompatible by @dependabot in #3718
• build(deps): bump github.com/google/go-containerregistry from 0.19.1 to 0.19.2 by @dependabot in #3720
• build(deps): bump github.com/docker/docker from 26.1.3+incompatible to 27.0.2+incompatible by @dependabot in #3719
• build(deps): bump github.com/prometheus/common from 0.54.0 to 0.55.0 by @dependabot in #3717
• docs: Modify prerequisite go version by @sanposhiho in #3711
• docs: install with brew by @zirain in #3714
• build(deps): bump github.com/docker/docker from 26.1.3+incompatible to 27.0.3+incompatible by @dependabot in #3726
• docs: sync brew to v1.0.2 by @zirain in #3729
• feat(translator): xds route and vhost metadata by @guydc in #3602
• feat: gRPC Access Log Service (ALS) sink by @zirain in #3626
• bump go to 1.22.5 by @zirain in #3732
• fix merge conflict by @zirain in #3733
• e2e: fix accesslog test by @zirain in #3736
• e2e: add CEL to accesslog test by @zirain in #3730
• refactor: rename control-plane metrics by @shawnh2 in #3727
• feat: Implement target selectors for policies. by @liorokman in #3704
• e2e: Add backend health check e2e case via active http by @aoledk in #3677
• doc: add benchmarking section in contribution page by @shawnh2 in #3709
• feat: cookie based consistent hashing by @arkodg in #3683
• chore: show golang version in the version command by @zhaohuabing in #3750
• xds: should use TCP as default protocol by @zirain in #3749
• chore: enable lint for benchmark by @zirain in #3754
• fix flaky wasm download test by @zhaohuabing in #3759
• e2e: zkipin tracing test by @zirain in #3748
• feat: mark programmed=false with an error when too many addresses are assigned by @sanposhiho in #3713
• docs: CEL Expressions for Access Logging by @zirain in #3739
• docs: zikpin tracer by @zirain in #3762
• chore: update grafana dashboards by @shawnh2 in #3746
• docs for customized filter order by @zhaohuabing in #3761
• build(deps): bump actions/download-artifact from 4.1.7 to 4.1.8 by @dependabot in #3776
• fix basic auth doc by @zhaohuabing in #3786
• api: make accesslog format optional by @zirain in #3770
• fix: fill missing clusterIP for service in egctl x translate by @shawnh2 in #3708
• build(deps): bump the go-opentelemetry-io group with 8 updates by @dependabot in #3779
• build(deps): bump actions/upload-artifact from 4.3.3 to 4.3.4 by @dependabot in #3777
• build(deps): bump github.com/docker/cli from 27.0.2+incompatible to 27.0.3+incompatible by @dependabot in #3781
• docs: move Compatibility Matrix page out of version by @zirain in #3767
• release: v1.1.0-rc.1 by @guydc in #3791
• fix release note file name by @guydc in #3801

New Contributors

• @uniglot made their first contribution in #2782
• @alexwo made their first contribution in #2862
• @edurra made their first contribution in #2915
• @mrcdb made their first contribution in #2936
• @wilsonwu made their first contribution in #2532
• @eitansuez made their first contribution in #3088
• @vixns made their first contribution in #2579
• @LiZhenCheng9527 made their first contribution in #3050
• @yigang01 made their first contribution in #3169
• @JuniorJPDJ made their first contribution in #3156
• @eguzki made their first contribution in #3203
• @zufardhiyaulhaq made their first contribution in #3201
• @zvlb made their first contribution in #3092
• @terry-chao made their first contribution in #3148
• @biefy made their first contribution in #3243
• @owenhaynes made their first contribution in #3256
• @aoledk made their first contribution in #3271
• @harrisonturton made their first contribution in #3342
• @michaelbeaumont made their first contribution in #2942
• @levikobi made their first contribution in #2491
• @haoqixu made their first contribution in #3420
• @BadLiveware made their first contribution in #3448
• @sam-burrell made their first contribution in #3274
• @evacchi made their first contribution in #3397
• @coro made their first contribution in #3587
• @alexandermarston made their first contribution in #3630
• @pingiun made their first contribution in #3710
• @sanposhiho made their first contribution in #3712

Full Changelog: v1.0.2...v1.1.0-rc.1