diff --git a/CHANGELOG.md b/CHANGELOG.md index ae3e266c2d..dab0d32737 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -85,13 +85,26 @@ it will be removed; but as it won't be user-visible this isn't considered a brea ## RELEASE NOTES +## [3.11.0] TBD +[3.11.0]: https://github.com/emissary-ingress/emissary/compare/v3.10.0...v3.11.0 + +### Emissary-ingress and Ambassador Edge Stack + +- Feature: This upgrades Emissary-ingress to be built on Envoy v1.30.2 which provides security, + performance and feature enhancements. You can read more about them here: Envoy Proxy + 1.28.0 Release Notes + +- Change: Upgraded Emissary-ingress to the latest release of Golang as part of our general + dependency upgrade process. + ## [3.10.0] TBD [3.10.0]: https://github.com/emissary-ingress/emissary/compare/v3.9.0...v3.10.0 ### Emissary-ingress and Ambassador Edge Stack - Feature: This upgrades Emissary-ingress to be built on Envoy v1.28.0 which provides security, - performance and feature enhancements. You can read more about them here: Envoy Proxy 1.28.0 Release Notes @@ -109,31 +122,30 @@ it will be removed; but as it won't be user-visible this isn't considered a brea ### Emissary-ingress and Ambassador Edge Stack - Feature: This upgrades Emissary-ingress to be built on Envoy v1.27.2 which provides security, - performance and feature enhancements. You can read more about them here: Envoy Proxy 1.27.2 Release Notes -- Feature: By default, Emissary-ingress will return an `UNAVAILABLE` code when a request using gRPC +- Feature: By default, Emissary-ingress will return an `UNAVAILABLE` code when a request using gRPC is rate limited. The `RateLimitService` resource now exposes a new - `grpc.use_resource_exhausted_code` field that when set to `true`, Emissary-ingress will return a - `RESOURCE_EXHAUSTED` gRPC code instead. Thanks to Jerome + `grpc.use_resource_exhausted_code` field that when set to `true`, Emissary-ingress will return a + `RESOURCE_EXHAUSTED` gRPC code instead. Thanks to Jerome Froelich for contributing this feature! - Feature: Envoy runtime fields that were provided to mitigate the recent HTTP/2 rapid reset - vulnerability can now be configured via the Module resource so the configuration will persist - between restarts. This configuration is added to the Envoy bootstrap config, so restarting - Emissary is necessary after changing these fields for the configuration to take effect. + vulnerability can now be configured via the Module resource so the configuration will persist + between restarts. This configuration is added to the Envoy bootstrap config, so restarting + Emissary is necessary after changing these fields for the configuration to take effect. - Change: APIExt would previously allow for TLS 1.0 connections. We have updated it to now only use - a minimum TLS version of 1.3 to resolve security concerns. + a minimum TLS version of 1.3 to resolve security concerns. - Change: - Update default image to Emissary-ingress v3.9.0.
- Bugfix: The APIExt server provides CRD conversion between the stored version v2 and the version - watched for by Emissary-ingress v3alpha1. Since this component is required to operate - Emissary-ingress, we have introduced an init container that will ensure it is available before - starting. This will help address some of the intermittent issues seen during install and - upgrades. + watched for by Emissary-ingress v3alpha1. Since this component is required to operate + Emissary-ingress, we have introduced an init container that will ensure it is available before + starting. This will help address some of the intermittent issues seen during install and upgrades. ## [3.8.0] August 29, 2023 [3.8.0]: https://github.com/emissary-ingress/emissary/compare/v3.7.2...v3.8.0 diff --git a/docs/releaseNotes.yml b/docs/releaseNotes.yml index 32da6bfed0..8f1f85171b 100644 --- a/docs/releaseNotes.yml +++ b/docs/releaseNotes.yml @@ -32,6 +32,23 @@ changelog: https://github.com/emissary-ingress/emissary/blob/$branch$/CHANGELOG.md items: + - version: 3.11.0 + prevVersion: 3.10.0 + date: 'TBD' + notes: + - title: Upgrade to Envoy 1.30.2 + type: feature + body: >- + This upgrades $productName$ to be built on Envoy v1.30.2 which provides security, performance + and feature enhancements. You can read more about them here: + Envoy Proxy 1.28.0 Release Notes + docs: https://www.envoyproxy.io/docs/envoy/v1.30.2/version_history/version_history + + - title: Update to golang 1.22.4 + type: change + body: >- + Upgraded $productName$ to the latest release of Golang as part of our general dependency upgrade process. + - version: 3.10.0 prevVersion: 3.9.0 date: 'TBD'