Saarasio Enroute Versions Save

• https://github.com/saarasio/enroute/commit/59667db962e0a629180e04e076f1e700584fd768 - Upgrade to latest version of Envoy 1.27.0
• https://github.com/saarasio/enroute/commit/fac96684245f53d1fede433c197accc1b7b4ef28 - update to golang 1.21
• Misc changes to OSS, Community Version with bug fixes, upgrades. See https://getenroute.io for latest update

Release Notes

https://github.com/saarasio/enroute/issues/79 - Support Redirects https://github.com/saarasio/enroute/issues/78 - Support Host Rewrite https://github.com/saarasio/enroute/issues/77 https://github.com/saarasio/enroute/commit/b98c09ac3b061b61cddebb2d37e5257aa1e10a38 https://github.com/saarasio/enroute/commit/0d279458c462b1d60977e21fad28f21cd05dd7b1 - Add ServiceRoute - Associate (or map) a service (with Route) to a GatewayHost https://github.com/saarasio/enroute/issues/76 - Auto Generate CRDs https://github.com/saarasio/enroute/issues/72 - Add support for HealthCheck filter https://github.com/saarasio/enroute/commit/0b0fc515f03647e9242a7ec8d2927f02c854fe7e - Add support for OutlierDetection https://github.com/saarasio/enroute/commit/d884fdf75df8bbb46e69964525a12def12f1a4db - Fix regression in stats listener due to go-control-plane upgrade https://github.com/saarasio/enroute/commit/010075cf37c5b6464d53adc32c02159b959799c1 https://github.com/saarasio/enroute/commit/94be0397ca38b50299ce1df933e5bb44a87f9dbe https://github.com/saarasio/enroute/commit/5ed7743f9e4dad50b190235d808a83b99badf2bb https://github.com/saarasio/enroute/commit/eb16e3ee6e4a6c78a4fa8c903f7c1cae261de6fb - cleanup enroute helm chart, support for generic annotations, configure proxy protocol from enroute helm chart, prometheus annotations https://github.com/saarasio/enroute/commit/7f621b7a3d5ae71905d569dd41d4356ca106195d - upgrade go-control-plane to github.com/envoyproxy/go-control-plane v0.10.3-0.20220715065308-8bcd7ee0191a https://github.com/saarasio/enroute/commit/bb469b920fcc4ac9a9eef35039366c4295397471 - upgrade envoy to 1.23 CVEs Addressed - CVE-2022-29225, CVE-2022-29224, CVE-2022-29226, CVE-2022-29228, CVE-2022-29227 https://github.com/saarasio/enroute/commit/14cafea3b2079bb739bc4448051255a7d3013b46 https://github.com/saarasio/enroute/commit/1eee5f22bd0175535c2faba4460ff81cdc99a900 - Add helm charts (1) service-host-route to configure GatewayHost or ServiceRoute (2) service-globalconfig to setup globalconfig filters like jwt, ext_authz, wasm etc. (3) demo-services for installing demo workloads like httpbin, grpcbin, echo

• Upgrade to the latest version of Envoy 1.21.1 to address CVEs CVE-2021-43824 CVE-2021-43825 CVE-2021-43826 CVE-2022-21654 CVE-2022-21655 CVE-2022-23606 CVE-2022-21656 CVE-2022-21657
• API for defining Policy Overlay. Policy overlay provides a mechanism for Operations teams to build overlay policies on top of the existing configuration. https://github.com/saarasio/enroute/commit/2d6e74dfd7f17ab6da6cb2be6a13de0ebaddf720
• Add default http health check to service policy https://github.com/saarasio/enroute/commit/9b5ba7cc84ce7a46d7254243414d8507379738fa
• Upgrade client-go to v1.21, v1.23 https://github.com/saarasio/enroute/commit/14c98bc6761cd5075a246f5a683e748745e784ce
• Open source circuit breaker config support https://github.com/saarasio/enroute/commit/5691a1f3fda07d61ba6b7a6e9a558ae7a5a5c54e
• Upgrade helm charts to v2 https://github.com/saarasio/enroute/commit/a59b0aa9ce4773e48ad9ce54382e0307d1172d8f
• Upgrade go-control-plane https://github.com/saarasio/enroute/commit/1610869ec3c9985bc58ea584515fe7ceb2979575

This release of EnRoute is verified against Envoy v1.19.1

Envoy v1.19.1 is a security release with fixes for -

CVE-2021-32777 CVE-2021-32779 CVE-2021-32781 CVE-2021-32778 CVE-2021-32780

More details about the Envoy v1.19.1 release can be found here -

https://github.com/envoyproxy/envoy/releases/tag/v1.19.1

Changes addressed in EnRoute -

• Tested and Verified EnRoute with Envoy version v1.19.1
• Upgraded charts to serve the latest version of Envoy (58567725357e0c85ae5c23fab14d0882ea926b1e)
• Upgraded versions for ClusterRole and ClusterRoleBinding (c9b56949f3a5bbfeb8a540c3a84a7f9657e2bf5d)

• Upgrade to Envoy v1.19.0 (67da3e077c72e81ff3734569c9da49ec7d518b29)
• Remove CRDs from enroute-crds and use port numbers for artifcat names (88c639cb47eb4cb7c5aa783f208d378f8182eae9)
• Use new filter names (b13432193c8eb7033115dedc86926c4ee0c56356), (b409b0f9718d0f3f14a8e02ec319170b814b695d)
• Upgrade Rate-Limit APIs to v3 (4783337455debfed9703ebaee784ab7c9b67db80)
• Use port numbers for EnRoute artificat names and add booleans to helm config createGlobalConfig, createChallengeService (8094dd585c050a2db5973062be7f4571d15fe7a1)
• Upgrade API version from v1beta1 to v1 (94fd1377a9b802199cac99659cbb3bd07cfbd5cc)
• Add default HTTP health check in helm chart (e8e622c110c6a022893f875469a4aba3e4c699ca)(6379da45ebbec5391f9f29a53182bc396f2a622b)
• Upgrade ubuntu:groovy-20210325.1 -> ubuntu:groovy-20210614 (63fb8aa5c0acdd2a2d0e449c84dd59912bbc53ad)
• Upgrade golang to 1.15, Upgrade go-control-plane v0.9.8 -> v0.9.9, Upgrade k8s.io/api from v0.17.0 -> v0.21.0, Upgrade k8s.io/client-go from v0.17.0 -> v0.21.0, Upgrade code-generator remotes/origin/release-1.15 -> remotes/origin/release-1.18 (5cb43a6095ddfce334f5e691932254c23e33cece)
• Create separate enroute-gwi image for Ingress use (1e84d4971e4b5702de90f6eede46e77fd37d2808)

• Upgrade to ubuntu groovy LTS
• Ingress Gateway: TLS/SSL: Integrate with Jack's Cert Manager using HTTP01 challenge
• Helm Chart: service-policy: Enable JWT Filter
• Upgrade to Envoy 1.16.3
• Helm Charts: Chart for installing EnRoute Gateway, EnRoute CRDs, EnRoute service-policy
• Add CORS filter
• Ingress Gateway: Deep Integration with helm
• Upgrade go-control-plane to v0.9.8
• Refactor rate-limiting bootstrap
• Standalone: Fix webhttp directives to improve swagger definition generation for standalone API
• Disable installation of Grafana and Prometheus in Standalone - Can be enabled by changing Dockerfile
• Force V4 for DNS lookups
• Refactor logging and filters
• Standalone: Show service filters in the proxy dump
• Support for TLS Upstreams

Upgrade to Envoy 1.15.3

• Upgrade docker Ubuntu base image to 18.04
• Upgrade Envoy to v1.15.0