This repository has been archived by the owner on Jul 11, 2023. It is now read-only.
Releases: openservicemesh/osm
Releases · openservicemesh/osm
v0.9.0
Notable Changes
- Support for PodSecurityPolicies
- Support for Egress traffic policies, to provide fine-grained access control of traffic destined to external services and endpoints.
- MeshConfig CRD replaces osm-config ConfigMap as the configuration object.
- Use
--setargument list in the osm installation and upgrade CLI commands. - Envoy sidecar image is upgraded to 1.18.3
- Deprecated the validating webhook as a part of configmap removal
- Support for global and pod level outbound port exclusion in OSM
- Support for OPA
- Support for Integrating with Dapr
- Enabled garbage collection of secrets created by OSM
CRD Updates
charts/osm/crds/access.yaml
charts/osm/crds/httproutegroup.yaml
charts/osm/crds/meshconfig.yaml
charts/osm/crds/policy.yaml
charts/osm/crds/specs.yaml
charts/osm/crds/split.yaml
charts/osm/crds/tcproute.yaml
Breaking Changes
- OSM 0.9.0 does not work on OpenShift due to a garbage collection bug. (#3641)
Changelog
- release: Update versions to 0.9.0 (#3589) 96498ba (Kalya Subramanian)
- fix(e2e): skip e2e_init_controller_test for noInstall 15bead6 (nshankar13)
- fix(e2e): Add default meshconfig ebf9d0f (nshankar13)
- fix(crds/meshconfig): remove envoy image pattern (#3529) a0decfd (mergify[bot])
- fix(crds/meshconfig): change envoy image pattern 3b7ba8f (nshankar13)
- chore(release): release v0.9.0-rc.2 ff6cd4d (Allen Leigh)
- egress: enable egress policy by default 1cba4e3 (Shashank Ram)
- tests/e2e: fix install properties in upgrade test abc3c9a (Shashank Ram)
- charts/osm: allow additional root properties 3ff6648 (Shashank Ram)
- chore(release): release v0.9.0-rc.1 5b0a5d9 (Allen Leigh)
- feat(rbac): Add Grafana and Prometheus SecurityContexts by default (#3455) 68279d4 (Kalya Subramanian)
- feat(rbac): Add Jaeger SecurityContext and PSP (#3454) 24a1140 (Kalya Subramanian)
- feat(multicluster): add a feature flag for osm multicluster 31665ba (Sneha Chhabria)
- Update Envoy config to comply with 1.18.3 api cd3cf5e (Sotiris Nanopoulos)
- ref(controller): GetMeshConfigJSON returns string 70e9e0a (Allen Leigh)
- bug(test): set registry secret when necessary a8dc4c8 (Allen Leigh)
- ref(config): remove osmconfig footprint e6320d1 (Allen Leigh)
- charts/osm: remove deprecated validating webhook config 5df9754 (Shashank Ram)
- osm-controller: use fixed port number for ADS server dc9c2ec (Shashank Ram)
- Make unit tests pass on Windows 9366d5a (Sotiris Nanopoulos)
- ref(osm-controller): remove validating webhook 76c6843 (Allen Leigh)
- feat(cli): add namespace info to mesh list cmd 1ae94c8 (Johnson Shi)
- chore(release): update charts and tags to v0.8.4 df3d61c (Johnson Shi)
- ref(pkg/*): make UnmarshalK8sServiceAccount a method on SDSCert cf2854a (Jackie Elliott)
- ref(*): move proxy-service mapping from catalog to proxy registry 040c069 (Jon Huhn)
- envoy/rds: remove colon from egress route config name f238c77 (Shashank Ram)
- ref(controller): remove osmConfig struct 8d9626b (Allen Leigh)
- Add OSM Twitter account to community section d079230 (Karen Chu)
- ref(pkg/*): make UnmarshsalMeshService a method on SDSCert 66bc98b (Jackie Elliott)
- Docs cleanup (#3379) 343e375 (Bridget Kromhout)
- charts/osm: enforce stricter validations on chart values a956542 (Shashank Ram)
- test(pkg/kubernetes): add garbage collector unit test 49e216d (Jackie Elliott)
- ref(build): only include build date for releases e98ffbe (Jon Huhn)
- charts/osm: allow specifying tolerations for control plane pods 35dcd62 (Shashank Ram)
- feat(cli): prompt selection during osm uninstall (#3293) 5e89418 (Johnson Shi)
- feat(extAuthz): Add inbound external authorization 7e44ce0 (Eduard Serra)
- xds: Verify that the ServiceAccount from the NodeID is the same as the one in the mTLS cert's CN (#3354) 26d6734 (Delyan Raychev)
- feat(*): garbage collector for OSM pod secrets 1ebd472 (Jackie Elliott)
- docs/apidocs: document process to generate custom API docs e226570 (Shashank Ram)
- feat(extAuthz): Add external authorization to meshconfig c45b4a5 (Eduard Serra)
- osm-controller: correctly print byte array 50421f3 (Atharva321)
- tests/e2e: add egress policy tests a498e05 (Shashank Ram)
- fix(psp): Update osm-psp capabilities (#3353) a1406f4 (Kalya Subramanian)
- Updates Envoy to version 1.18.3 c890ea1 (Sotiris Nanopoulos)
- e2e: run all tests before merge 1a358ae (Shashank Ram)
- fix(MeshConfig): adding rbac for deleting meshConfig 6499bee (Sneha Chhabria)
- Docs refactor 0138c32 (Bridget Kromhout)
- MeshConfig: Decouple mesh upgrade from updating configmap 90ea9d2 (Sneha Chhabria)
- github: update PR template and clarify questions 17d3db3 (Shashank Ram)
- MesnConfig : update comments for types 9cc42bb (Sneha Chhabria)
- charts/crds: allow object references as matches 3a561ea (Shashank Ram)
- chore(MeshConfig): Removing reduntant configMap code 5ae0fbe (Sneha Chhabria)
- feat(meshConfigCRD): Retain install configurability deba99b (Sneha Chhabria)
- charts/crds: use min-max port range validation instead of regex 6a00271 (Shashank Ram)
- charts/meshconfig: make port and IP range validations stricter 1b63e84 (Shashank Ram)
- egress: update comments for types and add field validation c3e2994 (Shashank Ram)
- Fix links and docs guide details 6db9604 (Bridget Kromhout)
- feat(proxyResLimits): Add resource limit configurability through MeshConfig a4eff89 (Eduard Serra)
- egress: add support for server-first TCP protocols a46563f (Shashank Ram)
- envoy/rds: move RDS route building pkg within rds a72bd0b (Shashank Ram)
- meshconfig: add resource limits to MeshConfig spec c20494e (Eduard Serra)
- chore(clusterIP): replace clusterIPNone constant with k8s constant d7fb64a (Sneha Chhabria)
- fix(pkg/endpoint/providers/kube): fix GetResolvableEndpointsForService c48be34 (Sneha Chhabria)
- envoy/lds: add support for egress lds configs 07ff34a (Shashank Ram)
- fix(install): Only add securityContext for PSP enabled (#3321) 911508c (Kalya Subramanian)
- Revising PR for docs migration c25c58e (Bridget Kromhout)
- Updates docs regarding golang usage and deps 683ce08 (Sotiris Nanopoulos)
- fix(portExclusion) : Fix port exclusion to arry of int cdb73db (Sneha Chhabria)
- feat(rbac): Add PodSecurityPolicies to helm chart (#3299) 16f5eb1 (Kalya Subramanian)
- fix(test): fix type definition of outboundPortExclusionList 62fa610 (Allen Leigh)
- envoy/cds: support TCP based egress clusters d19fd63 (Shashank Ram)
- fix(cli): check mesh exists before namespace add 87eeb53 (Johnson Shi)
- egress: extend API for TCP and HTTPS traffic 17dc73c (Shashank Ram)
- fix(build): fail Makefile docker-push targets when build fails 407a03b (Jon Huhn)
- fix(config): revert configurable fields in values e103029 (Allen Leigh)
- feat(podLevelPortExclusion): Add outbound port exclusion list at pod level 7a0ea03 (Sneha Chhabria)
- doc/fixed broken link of docs 78bf887 (aisuko)
- catalog/ingress: conform to k8s prefix path type 6f9b522 (Shashank Ram)
- feat(config): Rework on replacing osm-config with MeshConfig 9f7a7ee (Allen Leigh)
- pkg/*|tests: consolidate constants for protocols 5bf6131 (Shashank Ram)
- envoy/rds|route: build egress route config based on policies 9c6f2bb (Shashank Ram)
- tests: fix fluent bit deployment flag 1753...
v0.9.0-rc.2
CRD Updates
charts/osm/crds/meshconfig.yaml
Changelog
v0.9.0-rc.1
Notable Changes
- MeshConfig CRD replaces osm-config ConfigMap as the configuration object.
- Use
--setargument list in the osm installation and upgrade CLI commands. - Envoy sidecar image is upgraded to 1.18.3
- Support for PSP enabled clusters (alpha)
- Deprecated the validating webhook as a part of configmap removal
- Support for global and pod level outbound port exclusion in OSM
- Support for OPA
- Support for Integrating with Dapr
- Enabled garbage collection of secrets created by OSM
CRD Updates
charts/osm/crds/access.yaml
charts/osm/crds/httproutegroup.yaml
charts/osm/crds/meshconfig.yaml
charts/osm/crds/policy.yaml
charts/osm/crds/specs.yaml
charts/osm/crds/split.yaml
charts/osm/crds/tcproute.yaml
Changelog
- chore(release): release v0.9.0-rc.1 5b0a5d9 (Allen Leigh)
- feat(rbac): Add Grafana and Prometheus SecurityContexts by default (#3455) 68279d4 (Kalya Subramanian)
- feat(rbac): Add Jaeger SecurityContext and PSP (#3454) 24a1140 (Kalya Subramanian)
- feat(multicluster): add a feature flag for osm multicluster 31665ba (Sneha Chhabria)
- Update Envoy config to comply with 1.18.3 api cd3cf5e (Sotiris Nanopoulos)
- ref(controller): GetMeshConfigJSON returns string 70e9e0a (Allen Leigh)
- bug(test): set registry secret when necessary a8dc4c8 (Allen Leigh)
- ref(config): remove osmconfig footprint e6320d1 (Allen Leigh)
- charts/osm: remove deprecated validating webhook config 5df9754 (Shashank Ram)
- osm-controller: use fixed port number for ADS server dc9c2ec (Shashank Ram)
- Make unit tests pass on Windows 9366d5a (Sotiris Nanopoulos)
- ref(osm-controller): remove validating webhook 76c6843 (Allen Leigh)
- feat(cli): add namespace info to mesh list cmd 1ae94c8 (Johnson Shi)
- chore(release): update charts and tags to v0.8.4 df3d61c (Johnson Shi)
- ref(pkg/*): make UnmarshalK8sServiceAccount a method on SDSCert cf2854a (Jackie Elliott)
- ref(*): move proxy-service mapping from catalog to proxy registry 040c069 (Jon Huhn)
- envoy/rds: remove colon from egress route config name f238c77 (Shashank Ram)
- ref(controller): remove osmConfig struct 8d9626b (Allen Leigh)
- Add OSM Twitter account to community section d079230 (Karen Chu)
- ref(pkg/*): make UnmarshsalMeshService a method on SDSCert 66bc98b (Jackie Elliott)
- Docs cleanup (#3379) 343e375 (Bridget Kromhout)
- charts/osm: enforce stricter validations on chart values a956542 (Shashank Ram)
- test(pkg/kubernetes): add garbage collector unit test 49e216d (Jackie Elliott)
- ref(build): only include build date for releases e98ffbe (Jon Huhn)
- charts/osm: allow specifying tolerations for control plane pods 35dcd62 (Shashank Ram)
- feat(cli): prompt selection during osm uninstall (#3293) 5e89418 (Johnson Shi)
- feat(extAuthz): Add inbound external authorization 7e44ce0 (Eduard Serra)
- xds: Verify that the ServiceAccount from the NodeID is the same as the one in the mTLS cert's CN (#3354) 26d6734 (Delyan Raychev)
- feat(*): garbage collector for OSM pod secrets 1ebd472 (Jackie Elliott)
- docs/apidocs: document process to generate custom API docs e226570 (Shashank Ram)
- feat(extAuthz): Add external authorization to meshconfig c45b4a5 (Eduard Serra)
- osm-controller: correctly print byte array 50421f3 (Atharva321)
- tests/e2e: add egress policy tests a498e05 (Shashank Ram)
- fix(psp): Update osm-psp capabilities (#3353) a1406f4 (Kalya Subramanian)
- Updates Envoy to version 1.18.3 c890ea1 (Sotiris Nanopoulos)
- e2e: run all tests before merge 1a358ae (Shashank Ram)
- fix(MeshConfig): adding rbac for deleting meshConfig 6499bee (Sneha Chhabria)
- Docs refactor 0138c32 (Bridget Kromhout)
- MeshConfig: Decouple mesh upgrade from updating configmap 90ea9d2 (Sneha Chhabria)
- github: update PR template and clarify questions 17d3db3 (Shashank Ram)
- MesnConfig : update comments for types 9cc42bb (Sneha Chhabria)
- charts/crds: allow object references as matches 3a561ea (Shashank Ram)
- chore(MeshConfig): Removing reduntant configMap code 5ae0fbe (Sneha Chhabria)
- feat(meshConfigCRD): Retain install configurability deba99b (Sneha Chhabria)
- charts/crds: use min-max port range validation instead of regex 6a00271 (Shashank Ram)
- charts/meshconfig: make port and IP range validations stricter 1b63e84 (Shashank Ram)
- egress: update comments for types and add field validation c3e2994 (Shashank Ram)
- Fix links and docs guide details 6db9604 (Bridget Kromhout)
- feat(proxyResLimits): Add resource limit configurability through MeshConfig a4eff89 (Eduard Serra)
- egress: add support for server-first TCP protocols a46563f (Shashank Ram)
- envoy/rds: move RDS route building pkg within rds a72bd0b (Shashank Ram)
- meshconfig: add resource limits to MeshConfig spec c20494e (Eduard Serra)
- chore(clusterIP): replace clusterIPNone constant with k8s constant d7fb64a (Sneha Chhabria)
- fix(pkg/endpoint/providers/kube): fix GetResolvableEndpointsForService c48be34 (Sneha Chhabria)
- envoy/lds: add support for egress lds configs 07ff34a (Shashank Ram)
- fix(install): Only add securityContext for PSP enabled (#3321) 911508c (Kalya Subramanian)
- Revising PR for docs migration c25c58e (Bridget Kromhout)
- Updates docs regarding golang usage and deps 683ce08 (Sotiris Nanopoulos)
- fix(portExclusion) : Fix port exclusion to arry of int cdb73db (Sneha Chhabria)
- feat(rbac): Add PodSecurityPolicies to helm chart (#3299) 16f5eb1 (Kalya Subramanian)
- fix(test): fix type definition of outboundPortExclusionList 62fa610 (Allen Leigh)
- envoy/cds: support TCP based egress clusters d19fd63 (Shashank Ram)
- fix(cli): check mesh exists before namespace add 87eeb53 (Johnson Shi)
- egress: extend API for TCP and HTTPS traffic 17dc73c (Shashank Ram)
- fix(build): fail Makefile docker-push targets when build fails 407a03b (Jon Huhn)
- fix(config): revert configurable fields in values e103029 (Allen Leigh)
- feat(podLevelPortExclusion): Add outbound port exclusion list at pod level 7a0ea03 (Sneha Chhabria)
- doc/fixed broken link of docs 78bf887 (aisuko)
- catalog/ingress: conform to k8s prefix path type 6f9b522 (Shashank Ram)
- feat(config): Rework on replacing osm-config with MeshConfig 9f7a7ee (Allen Leigh)
- pkg/*|tests: consolidate constants for protocols 5bf6131 (Shashank Ram)
- envoy/rds|route: build egress route config based on policies 9c6f2bb (Shashank Ram)
- tests: fix fluent bit deployment flag 1753d90 (Shashank Ram)
- update comment 31d01a8 (Sneha Chhabria)
- addressing PR comments 719e227 (Sneha Chhabria)
- fix(hostHeaders) : updating host headers configuration on envoy 5f7e1a5 (Sneha Chhabria)
- fix: cleanup bugs from PR to move envoy proxy image 077173d (Jackie Elliott)
- envoy/route: un-export package local variables 2c75150 (Shashank Ram)
- envoy/cds: build clusters based on egress cluster configs 1ba65aa (Shashank Ram)
- egress policy: add feature flag 8a041aa (Shashank Ram)
- ref(pkg/*): move envoy init container image to OSM's ConfigMap dbbeff8 (Jackie Elliott)
- feat(cli/install): remove install cmd cli flags bff18e7 (Cizer Pereira)
- Revert "feat(config): replace osm-config with MeshConfig" df87b02 (Allen Leigh)
- feat(config): replace osm-config with MeshConfig...
Release v0.8.4
Notable Changes
Security
- Envoy version has been updated from
v1.17.2tov1.17.3to address a security vulnerability.
CRD Updates
No CRD changes between tags v0.8.3 and v0.8.4
Changelog
Release v0.8.4-rc.1
CRD Updates
No CRD changes between tags v0.8.3-rc.1 and v0.8.4-rc.1
Changelog
Release v0.8.3
Notable Changes
- Envoy version has been updated from v1.17.1 to v1.17.2
CRD Updates
No CRD changes between tags v0.8.2 and v0.8.3
Changelog
- chore(release): update chart and tags for v0.8.3 55280d4 (Sneha Chhabria)
- Fix typos in manual demo 45bdbc9 (nshankar13)
- chore(release): update charts and tags to v0.8.3-rc.1 1264b26 (Sneha Chhabria)
- chore(*): add app labels to all OSM resources f4e85f8 (Jon Huhn)
- feat(charts/osm): add podLabels to osm pods a21470e (Rita Zhang)
- feat(charts/osm): add os and arch node selectors aa1d00e (Michelle Noorali)
- update envoy to 1.17.2 f3a37bf (Sneha Chhabria)
- docs/manifests: Cleanup client services - not needed in v0.8.2 (#3009) 776a875 (Delyan Raychev)
- Adding pull request template to release-v0.8 (#3006) c033d92 (Delyan Raychev)
Release v0.8.3-rc.1
Notable Changes
- Envoy version has been updated from v1.17.1 to v1.17.2
CRD Updates
No CRD changes between tags v0.8.2 and v0.8.3-rc.1
Changelog
- chore(release): update charts and tags to v0.8.3-rc.1 1264b26 (Sneha Chhabria)
- chore(*): add app labels to all OSM resources f4e85f8 (Jon Huhn)
- feat(charts/osm): add podLabels to osm pods a21470e (Rita Zhang)
- feat(charts/osm): add os and arch node selectors aa1d00e (Michelle Noorali)
- update envoy to 1.17.2 f3a37bf (Sneha Chhabria)
- docs/manifests: Cleanup client services - not needed in v0.8.2 (#3009) 776a875 (Delyan Raychev)
- Adding pull request template to release-v0.8 (#3006) c033d92 (Delyan Raychev)
Release v0.8.2
Notable Changes
- Fixed bug in Secret Discovery Service (SDS) where the SDS secret corresponding to the root certificate used for client certificate validation was not being pushed to Envoy.
- Fixed bug in Secret Discovery Service (SDS) where the SDS secret corresponding to the workload certificates used during mTLS handshake was not being pushed to Envoy when the associated service and service account names are different for a given proxy instance.
- Ticker / periodic resync mechanism: a configurable periodic proxy resync mechanism has been ported back from main. It allows configuring a periodic interval where a full config will be re-computed for existing envoys on the mesh. This mechanism is off by default, and is configurable through config map.
CRD Updates
charts/osm/crds/access.yaml
charts/osm/crds/httproutegroup.yaml
charts/osm/crds/specs.yaml
charts/osm/crds/split.yaml
charts/osm/crds/tcproute.yaml
Changelog from v0.8.0
- chore(release): update chart and tags for v0.8.2 e631550 (Sanya Kochhar)
- chore(release): update charts and tags for v0.8.1 2696a65 (Sanya Kochhar)
- chore(release): update charts and tags for v0.8.1-rc.2 a8a5067 (Sanya Kochhar)
- ticker: Add config hooks to start/stop ticker 3562e0c (edu)
- cfgmap: add ticker config ef3ec9b (edu)
- pkg/ticker: reintroduce ticker concept 69386f5 (edu)
- chore(release): update charts and tags for v0.8.1-rc.1 a9788f9 (Sanya Kochhar)
- fix(ci): fix missing paren 970d61e (Jon Huhn)
- feat(ci): push images for each push to release branches e4a9777 (Jon Huhn)
- envoy: correctly set downstream root cert names 78146e7 (Shashank Ram)
- envoy/ads: program upsteam's service cert when making all secrets 129f8b6 (Shashank Ram)
- Revert "envoy: wait indefinitely on TLS secrets" dae746c (Shashank Ram)
v0.8.1
DO NOT USE
This release contains commits that are intended for v0.9 rather than a minor release. Commits intended for v0.8.1 are in v0.8.2 instead.
CRD Updates
charts/osm/crds/access.yaml
charts/osm/crds/httproutegroup.yaml
charts/osm/crds/specs.yaml
charts/osm/crds/split.yaml
charts/osm/crds/tcproute.yaml
Changelog
- chore(release): update charts and tags for v0.8.1 2696a65 (Sanya Kochhar)
- chore(release): update charts and tags for v0.8.1-rc.2 a8a5067 (Sanya Kochhar)
- ticker: Add config hooks to start/stop ticker 3562e0c (edu)
- cfgmap: add ticker config ef3ec9b (edu)
- pkg/ticker: reintroduce ticker concept 69386f5 (edu)
- chore(release): update charts and tags for v0.8.1-rc.1 a9788f9 (Sanya Kochhar)
- fix(ci): fix missing paren 970d61e (Jon Huhn)
- feat(ci): push images for each push to release branches e4a9777 (Jon Huhn)
- envoy: correctly set downstream root cert names 78146e7 (Shashank Ram)
- envoy/ads: program upsteam's service cert when making all secrets 129f8b6 (Shashank Ram)
- Revert "envoy: wait indefinitely on TLS secrets" dae746c (Shashank Ram)
Release v0.8.1-rc.2
Notable Changes
CRD Updates
No CRD changes between tags v0.8.1-rc.1 and v0.8.1-rc.2
Ticker / periodic resync mechanism
A configurable periodic proxy resync mechanism has been ported back from main.
It allows configuring a periodic interval where a full config will be re-computed for
existing envoys on the mesh.
This mechanism is off by default, and is configurable through config map.