v0.10.0

Notable changes

• Envoy version updated to v1.19.1
• Ingress enhancements using the IngressBackend API to support plaintext HTTP and HTTPS ingress with mutual-TLS or TLS
• Ingress gateway integration with Contour ingress controller
• Ability to override OSM CLI defaults and commands based on the environment
• OSM CLI command to generate bug reports
• Validating webhook to validate API resources managed by OSM
• Control plane error code metrics, logging, and documentation
• Pod Disruption Budget for OSM control plane pods
• Deprecate support for Kubernetes v1.18
• Preset mesh config has been changed from kind: MeshConfig to kind: ConfigMap
• Prometheus scraping flag has been deprecated in favor of automatic scraping of metrics from pods in namespaces enabled for metrics collection
• CRD upgrades are now handled by OSM, requiring no updates to the CRDs or CRs from the user prior to updating the installed OSM version
• Experimental support for Mutlicluster using a feature flag
• Nightly images from the main branch are published using the latest-main tag

CRD Updates

charts/osm/crds/config_meshconfig.yaml
charts/osm/crds/config_multicluster_service.yaml
charts/osm/crds/policy_egress.yaml
charts/osm/crds/policy_ingress_backend.yaml
charts/osm/crds/smi_http_route_group.yaml
charts/osm/crds/smi_tcp_route.yaml
charts/osm/crds/smi_traffic_access.yaml
charts/osm/crds/smi_traffic_split.yaml

Changelog

• chore(release): update to v0.10.0 cb02632 (nshankar13)
• fix(healthcheck): set curl req timeout 6d118b9 (nshankar13)
• chore(release): update version to v0.10.0-rc.2 94ff285 (nshankar13)
• chore(bootstrap): increase memory limit 76136bc (nshankar13)
• charts/osm: add namespace to preset-mesh-config resource (#4084) d689946 (Shashank Ram)
• tests/e2e: reset k8s version in version test (#4050) (#4080) c532d22 (mergify[bot])
• tests/framework: logs k8s server version (#4049) (#4081) 41b3b60 (mergify[bot])
• test(e2e): enable verbose for install b992b49 (nshankar13)
• Revert "feat(*): adds feature flag for retry policy" d1b758b (nshankar13)
• test(e2e): update kind version ca34c5d (nshankar13)
• feat(cli): add debug flag e1e081b (nshankar13)
• envoy: update version to v1.19.1 (#4034) (#4035) bf8c0aa (Shashank Ram)
• chore(release): update version to v0.10.0-rc.1 89c91c7 (nshankar13)
• feat(*): adds feature flag for retry policy a09d998 (Shalier Xia)
• feat(windows): Make Egress test pass on Windows (#4022) 928bd1a (Sotiris Nanopoulos)
• test(pkg/certificate/providers): add tests to config file 699e7ca (Shalier Xia)
• ingress: allow IPRange as a source in IngressBackend (#4025) caf0604 (Shashank Ram)
• chore: Remove dead code getXdsCluster (#4024) eea4672 (Sotiris Nanopoulos)
• ref(cli): extract policy check-pod helpers into pkg/cli for reuse aa36b91 (Sanya Kochhar)
• cli: provide environment override capability (#4019) 4dcc321 (Shashank Ram)
• Updates Mergify as some check names have changed 634db98 (Shalier Xia)
• feat(e2e): Remove dependency on oc for SCC (#4014) ac3857d (Kalya Subramanian)
• docs(release-guide): update release guide to include doc updates 61d473b (jaellio)
• chore(relase): update osm version to v0.9.2 9246e4e (Sneha Chhabria)
• Added test for cert manager (#4004) 7e580ef (mudit singh)
• ingress: don't error if candidate group version is not available (#4007) f96e93d (Shashank Ram)
• chore: remove helper tracingAddress 0365a94 (Allen Leigh)
• fix(crds-upgrade): add psp for crds-upgrade-hook bab8372 (jaellio)
• pkg/*: un-export k8s client implementing interface (#4002) c9d2292 (Shashank Ram)
• charts/osm: use official Contour image (#3998) fdef5c5 (Shashank Ram)
• envoy: update version to v1.19.0 (#3995) 4961af9 (Shashank Ram)
• github: update PR template (#3997) bdc0a81 (Shashank Ram)
• Makefile: avoid prompt while overwriting file (#3996) da6be5a (Shashank Ram)
• charts/osm: used fixed dependency for Contour (#3989) 48aaf97 (Shashank Ram)
• feat(multicluster): add weight to RemoteCluster 8530395 (Allen Leigh)
• fix(wasm): move metrics handles to RootContext 05f4ff1 (Jon Huhn)
• cli/policy: add conflict detection command (#3972) f78e72f (Shashank Ram)
• test(pipeline): Push latest-main images nightly 0d6a191 (nshankar13)
• docs(openshift): Create OpenShift pipeline TSG (#3971) 9b39316 (Kalya Subramanian)
• chore: remove default value from meshconfig CRD b00178e (Allen Leigh)
• fix(helm-chart-kubeversion-eks): Fixes Helm chart to install on EKS (#3968) ada49d0 (Stefan Jokic)
• chore(metrics): update todos for error code metrics (#3964) 0dc9e1f (Jackie Elliott)
• fix deprecated urls in readme (#3967) deb18a7 (Chenxiao Ma)
• fix(cli): fix proxy get command truncating output 9f1992f (Jon Huhn)
• validator: fix scoping and remove unused code (#3959) abdaefc (Shashank Ram)
• docs/api_reference: rename folder and update guide (#3955) 84a2a8c (Shashank Ram)
• github: update bug report template (#3954) 6631d5e (Shashank Ram)
• test(e2e/restart): Set podcount to replica num e92137b (nshankar13)
• Add tracing options when Jaeger deployment is enabled for the demo script (#3947) 38d7c0e (Thomas Stringer)
• ingress-backend: add status field and reporting 9f2dd07 (Shashank Ram)
• feat(metrics): Add errcode metrics for injector, validatingwebhook, and certificate providers 6d2d32d (nshankar13)
• chore(crdConverter): Rename crd converter to osm bootstrap 245e676 (Sneha Chhabria)
• crdUpgrades: Update osm clean up hook to patch osm crds instead of deleting them 7f7b1d3 (Sneha Chhabria)
• Added overlapping and missing metrics a9b24c1 (jaellio)
• feat(metrics): add errCode metrics to MeshConfig 1379930 (Shalier Xia)
• feat(metric): Add errcode metric to K8s constructs 025002e (Shalier Xia)
• feat(metrics): add errcode metrics for Traffic Policy cc295b6 (Shalier Xia)
• feat(metrics): add errcode metric for pubsub e92e9b8 (Shalier Xia)
• fix(openshift): Create env file for cleanup (#3942) 0adbba8 (Kalya Subramanian)
• feat(pkg/envoy): metrics for envoy error codes 25c267d (jaellio)
• e2e: fix variable and missing recovers bd0ea12 (Eduard Serra)
• feat(demo): Set USE_PRIVATE_REGISTRY to true 626a065 (nshankar13)
• test(e2e): Reset ingressBackend for noInstall cb917f1 (nshankar13)
• ingress: enable IngressBackend policy by default 7d95a6d (Shashank Ram)
• Add demo book app watcher for terminal and raw JSON from web API (#3930) 3f53acc (Thomas Stringer)
• gitignore: ignore Helm dependency lock file a16f971 (Shashank Ram)
• chore(demo): Switch demo to use FQDN (#3927) 6a205e4 (Sotiris Nanopoulos)
• ref(cdrUpgradeHook) : change crd upgrade hook from pod to job faa76be (Sneha Chhabria)
• rds/ingress: remove WASM mesh headers ee994dd (Shashank Ram)
• example/manifests: update httpbin listen port to 14001 4a3a2ef (Shashank Ram)
• feat(windows): Adds node selector to pods deployed by tests (#3855) 73f7407 (Sotiris Nanopoulos)
• fix(meshConfig) : Fix MeshConfig availability to OSM control plane resources b832367 (Sneha Chhabria)
• feat(metrics): initial errcode metric 87b65f4 (jaellio)
• tests/e2e: add ingress test using the IngressBackend API c4efaff (Shashank Ram)
• multicluster: Hardcode env vars in the demo script (#3923) a0a1a16 (Delyan Raychev)
• feat(multicluster): Multicluster working demo d2975b8 (Sneha Chhabria)
• tests/e2e: move nginx ingress install to a helper 0503c61 (Shashank Ram)
• charts: allow deploying Contour ingress gateway 792ce0c (Shashank Ram)
• chore: add testing summary to PR template d796f9a (Allen Leigh)
• ref: Simply events sub and pub implementation 0345bb8 (Allen Leigh)
• feat(metrics): Remove k8s specific metrics f1451d3 (nshankar13)
• ingress: add support for automatic gateway cert provisioning 3b60f5b (Shashank Ram)
• k8s/event_handler: fix bug in update handler 6859767 (Shashank Ram)
• fix(install): enable WASM stats option 093cf1c (Allen Leigh)
• chore(cli): Refactor pkg/cli envoy helpers. 34d4221 (Johnson Shi)
• chore(multicluster): add field for related log lines 7d1f578 (Allen Leigh)
• test/ads: fix test flakyness 352c220 (Eduard Serra)
• certificate/tresor: fix root CA cert CN a6e26c3 (Shashank Ram)
• GetServiceHostnames: Fix nil pointer dereference ed7d04c (Eduard Serra)
• fix(openshift/nightly): Fix always condition 2c5d7f8 (nshankar13)
• cli: Fixing a broken test (#3900) e003a65 (Delyan Raychev)
• chore(cli): Refactor envoy helpers to cli pkg (#3881) 9be2511 (Johnson Shi)
• chore(demo): Only create creds for private registry 39a9c5d (nshankar13)
• ads: add e2e for permissive-smi switching 2ec925f (Eduard Serra)
• tests(openshift/nightly): Change demo d665f6f (nshankar13)
• feat(metrics): max/average proxy config update time 870fa7a (Shalier Xia)
• pkg/*: add error codes 3e7b1bb (jaellio)
• fix: cluster ID used in demo application 1def087 (Allen Leigh)
• ads: change resource difference condition from superser to equals 9507072 (Eduard Serra)
• chore(injector): Reduce tech debt in osm /pkg/injector d89eb0d (Sotiris Nanopoulos)
• feat(windows): Make local clusters use localhostIP instead of wildcardIP 2c6f2cb (Sotiris Nanopoulos)
• ads: fix wrong accountability of sent resources 0cf7acf (Eduard Serra)
• Make the certificate key size configurable (#3837) 084ed38 (Thomas Stringer)
• bugreport: use tar.gz archive and expand help text a25a3db (Shashank Ram)
• test(openshift/nightly): Always clean up resources c91b0fc (nshankar13)
• feat(metrics): proxy broadcast event count 7e42e6e (jaellio)
• bug-report: implement bug report tool ea27b73 (Shashank Ram)
• chore(pkg/metricsstore): make Help string formatted consistently 0830058 (Shalier Xia)
• test(openshift/nightly): Add cleanup step 48bdc91 (nshankar13)
• osm-validator: enable webhook to validate resources f7159b3 (Shashank Ram)
• smi/health: fix race condition leading to controller crash 35dcb3d (Shashank Ram)
• feat(win): Deploy Windows Sidecar for Windows worker nodes a6ca350 (Sotiris Nanopoulos)
• go/deps: update Helm to v3.6.1, client-go & controller-runtime a9ba259 (Shashank Ram)
• chore(multicluster): Remove cluster domain usages 748ff4b (Allen Leigh)
• bump version to 1.41.1 for golangci-lint and use container bc455e3 (Thomas Stringer)
• fix broken lint rule so that it targets the ci golangci-lint version and correctly runs c748302 (Thomas Stringer)
• multicluster: Test LDS (#3860) a3b7451 (Delyan Raychev)
• multicluster: Adding GetMulticlusterGatewaySubjectCommonName() (#3857) 7f90827 (Delyan Raychev)
• pkg/envoy/*: add error codes for Envoy RDS and SDS 039d278 (jaellio)
• demo(env): add publish_images var 0248813 (nshankar13)
• docs(e2e): Add installType section d9f7b9a (nshankar13)
• feat(demo): add 'publish_images' flag 0c4c7f0 (nshankar13)
• test(openshift): Add demo to OpenShift nightly job (#3851) 53e8bc3 (Kalya Subramanian)
• ref(install): Log namespace for existing mesh (#3846) c3c38a0 (Kalya Subramanian)
• feat(*): add Envoy active health checks 60390e3 (Jon Huhn)
• injector/test: remove unused var and change test dir prefix 0b60c30 (Shashank Ram)
• docs(DESIGN.md): fix broken link a8b2775 (Jon Huhn)
• contributing: allow squash & merge option b0bfcbe (Shashank Ram)
• feat(metrics): proxy reconnect count 6fb139f (nshankar13)
• feat(crdUpgrades): Update upgrade e2e to verify all CRD's are present on the cluster db2d625 (Sneha Chhabria)
• feat(demo): Make timeout configurable (#3839) 5e2d18f (Kalya Subramanian)
• fix(e2e): upgrade test fixes 1cd4a17 (Jon Huhn)
• feat(crdUpgrades): enable CRD converter in OSM 4606230 (Sneha Chhabria)
• envoy/sds: skip inbound SAN validation and verify in permissive mode be00966 (Shashank Ram)
• Update node for kind cluster on CI 58c8d06 (Sneha Chhabria)
• sds/test: fix test bug and expectation 99ed5e9 (Shashank Ram)
• feat(multicluster): customize multicluster gateway port 6f4fd21 (Allen Leigh)
• codegen: add build target and CI check 416505a (Shashank Ram)
• service: Simplify and test MeshService.FQDN() (#3826) b370fa2 (Delyan Raychev)
• catalog/ingress: build policy from IngressBackend API 3d387f8 (Shashank Ram)
• ingress: refactor code to make it extendable for IngressBackend API 80e8376 (Shashank Ram)
• multicluster: Small tweaks to MeshConfig client for clarity and better logging (#3819) 44a6696 (Delyan Raychev)
• multicluster: In case of an error buildGatewayListeners() should return nil (#3818) 07591b2 (Delyan Raychev)
• multicluster: For ease of debugging - log lines related to Multicluster capability should contain 'Multicluster' word (#3817) 37c6bbf (Delyan Raychev)
• test(pipelines): Add openshift nightly job 954f48f (nshankar13)
• multicluster: Simplify and test (#3796) 013fcb8 (Delyan Raychev)
• multicluster: Carve out multicluster-related functions in a separate file (#3787) ccf463b (Delyan Raychev)
• multicluster: Populate MulticlusterService (#3802) c0d4ec1 (Delyan Raychev)
• Removing unnecessary variable & collision of variable w/ import (#3811) e63b185 (Delyan Raychev)
• multicluster: Create sni_cluster filter for the Multicluster Gateway listener (#3812) 5b4b898 (Delyan Raychev)
• multicluster: Get Envoy config from both clusters including Multicluster Gateways (#3808) 529306c (Delyan Raychev)
• ref(crds): Rename CRD's in OSM a74572e (Sneha Chhabria)
• feat(upgrade): add handlers for conversion of CRD's in OSM 1623d8a (Sneha Chhabria)
• ingress: add feature flag for IngressBackend policy 8896286 (Shashank Ram)
• multicluster: regenerate API client 60fa307 (Shashank Ram)
• multicluster: Adding ?include_eds to script getting Envoy configs (#3801) 54dae75 (Delyan Raychev)
• multicluster: Enable Multicluster Gateway feature flag for multicluster demo (#3797) 6a84528 (Delyan Raychev)
• envoy: remove unnecessary peer validation cert for TLS (non-mTLS) e3be924 (Shashank Ram)
• multicluster: Resolve multicluster services via /etc/hosts (#3788) 7a2c238 (Delyan Raychev)
• multicluster: Script to easily capture Envoy configs for multicluster development (#3789) c878a76 (Delyan Raychev)
• feat(upgrade): Add new http server to crd converter cf8b450 (Sneha Chhabria)
• multicluster: Carve out multicluster code out into functions and into multicluster.go file (#3793) 9501af8 (Delyan Raychev)
• catalog: Refactor buildOutboundPolicies() (#3794) 17bfa18 (Delyan Raychev)
• multicluster: Use []v1alpha1.MultiClusterServic (not a slice of pointers) (#3783) 7ecbf42 (Delyan Raychev)
• policy/ingress-backend: add informer client and events 5dc1f43 (Shashank Ram)
• trafficpolicy: use ServiceIdentity type for RBAC 070dcf3 (Shashank Ram)
• MultiClusterServiceSpec in MultiClusterService CRD is not optional (#3782) 2a67eab (Delyan Raychev)
• multicluster: Augment IDENTITY envirenment variable in demos with current kubectx (#3784) 4907022 (Delyan Raychev)
• multicluster: Demo script needs to 'make docker-push' only once (#3786) 2e4d359 (Delyan Raychev)
• feat(metrics): add service count 81bb77f (nshankar13)
• policy: add IngressBackend API client and CRD 3520975 (Shashank Ram)
• envoy/lds: refactor http connection manager + wasm filter b333f45 (Shashank Ram)
• e2e: add additional OSM bringup checks on e2e b09904e (Eduard Serra)
• multicluster: Set default for MULTICLUSTER_CONTEXTS env var to 'alpha beta' (#3768) e97bb33 (Delyan Raychev)
• multicluster: Add (and use) deploy-MulticlusterService.sh (#3770) a9f2e21 (Delyan Raychev)
• test/common: simplify and further explain cleanup conditions 36ebe92 (Eduard Serra)
• Replacing empty slice declaration using a literal with nil slice declaration (#3765) 7970ba3 (Delyan Raychev)
• Renaming variable colliding with imported package name (#3766) 1deb140 (Delyan Raychev)
• dispatcher: Addi MultiClusterService events to the dispatch system (#3769) 928985f (Delyan Raychev)
• multicluster: Defaulting demo to Tresor certificate issuer (#3767) ffcbcb2 (Delyan Raychev)
• multicluster: Correct MultiClusterService - Spec should be plural (#3764) 9dfd4b5 (Delyan Raychev)
• multicluster: Implement Stringer interface on MultiClusterService struct (#3763) 75b481c (Delyan Raychev)
• chore(cli): Remove verbose osm mesh list output 22bbbe5 (Johnson Shi)
• tests: add unit tests for pkg/injector/health_probes (#3520) 5c4365f (Shuhei Kitagawa)
• tests(e2e): configure ports to make e2es pass on OpenShift 0be61da (Sanya Kochhar)
• feat(multicluster): multicluster demo setup a45abc6 (Michael Tarng)
• test(pipelines): fix noinstall nightly 5ad382d (nshankar13)
• test(e2e/port_exclusion): change ns name 01b34c0 (nshankar13)
• pkg/envoy/lds: add error codes c24947c (jaellio)
• pkg/envoy/cds: add error codes d354ce3 (jaellio)
• test(e2e): Configure e2e ports for OpenShift (#3748) 6e19645 (Kalya Subramanian)
• charts/osm: don't set the replicaCount with HPA d2e01b0 (Shashank Ram)
• ref: method renaming for cataloger endpoint methods 34d92f0 (Allen Leigh)
• tests: make upgrade e2e pass on openshift df00df6 (Sanya Kochhar)
• tests(*): scope assert handles to subtests dababc8 (Jon Huhn)
• feat(multicluster): kube provider support multicluster 78d4e97 (Allen Leigh)
• chore: add error codes to configurator ead5c9e (Allen Leigh)
• cli/test: add unit test for command initialization 60f1a79 (Shashank Ram)
• pkg/envoy/ads: add error codes c41708d (jaellio)
• test(e2e/http_ingress): Increase time limit d146c85 (nshankar13)
• test(pipelines): Add noinstall nightly job 665edd1 (nshankar13)
• pkg/certificate: add error codes 13998b0 (jaellio)
• cli: add support command to list error code description b9b0e0d (Shashank Ram)
• MultiClusterService validator checks that cluster name is not global cc86b08 (Whitney Griffith)
• release/v0.9.1: update default release refs eba60c1 (Shashank Ram)
• feat(provider): catalog uses service and endpoint providers methods e77065d (Whitney Griffith)
• feat(upgrade): Add a conversion webhook server to OSM control plane ccd837e (Sneha Chhabria)
• catalog/traffic-policies: add error codes 4af79f1 (Shashank Ram)
• Fix broken link in the README (#3713) 67d7b04 (Sotiris Nanopoulos)
• catalog/egress: define error codes for error logs 46ebe85 (Shashank Ram)
• feat(pkg/envoy/lds): Switch the gateway listener to proxy mode 2786942 (Sean Teeling)
• cmd/osm-*: log error codes for errors during startup 31b0d23 (Shashank Ram)
• errcode: introduce error code management 8bb7371 (Shashank Ram)
• (TESTING) updating kind go library to 0.11.1 c4d7eab (Eduard Serra)
• test(pkg/certificate): add test for ListCertificate 0ff5b19 (Jackie Elliott)
• injector/iptables: resolve unnecessary TODO comment a1b1889 (Shashank Ram)
• pkg/cert/providers: add ValidateCertManagerOptions test a0535f5 (Eduard Serra)
• feat(pkg/apis/config) add the protocol to the mesh cluster 934b562 (Sean Teeling)
• feat(pkg/config): simplify the config client to the fields it needs 24252d5 (Sean Teeling)
• ref(catalog): improve performance of ListAllowedEndpointsForService() 484d39a (Allen Leigh)
• chore(demo): cross service distributed tracing in demo ca02252 (Allen Leigh)
• pkg/*: safely filter events for monitored namespaces 88de74e (Shashank Ram)
• smi/client: remove unused announcement channel 47dcb7b (Shashank Ram)
• pkg/*: remove unused cacheSynced channel 604818c (Shashank Ram)
• feat(upgrade): Add helm hooks to manage crd upgrades 371007f (Sneha Chhabria)
• e2e: Moving constants into const.go and out of common.go (#3670) bc441ba (Delyan Raychev)
• e2e: Turn td.RunLocal() into a variadic function (#3675) f9dc7b9 (Delyan Raychev)
• e2e: Simplify file path constructor (#3674) 1479afd (Delyan Raychev)
• e2e: Fixing typos in e2e test framework (#3667) 6925db7 (Delyan Raychev)
• e2e: Moving type definitions into types.go (#3668) 2619c53 (Delyan Raychev)
• e2e: Move helm related functions into helm.go (#3669) 3f4c9f5 (Delyan Raychev)
• e2e: Remove unused variables (#3671) 1864ce2 (Delyan Raychev)
• pkg/*: rename internal kubernetes pkg to k8s b1ed76d (Shashank Ram)
• Renaming file to match document (#3678) 90c08eb (Bridget Kromhout)
• osm-controller: remove unused kubeconfig file dependency 2d87416 (Shashank Ram)
• e2e: Renaming json variable so it does not conflict with imported package (#3673) 6948eba (Delyan Raychev)
• e2e: Fix string type conversions (#3672) 65191b3 (Delyan Raychev)
• e2e: Refactoring namespace-related test functions into a new file - namespace.go (#3666) 4af905e (Delyan Raychev)
• ref(preset-mesh-config): Change kind of preset-mesh-config to ConfigMap 2429d81 (Sneha Chhabria)
• feat(pkg/providers) Plumb through the new config client to the k8s provider 2e0e5f9 (Sean Teeling)
• envoy/identity: cleanup SDS refs in identity pkg 7ef4117 (Shashank Ram)
• envoy: encode proxy identity in XDS cert f1cf47b (Shashank Ram)
• scale: fix output and improvements 9f84f42 (Eduard Serra)
• envoy/eds: fix cluster name to mesh service parsing 38ad742 (Shashank Ram)
• fix(pkg/envoy/cds): configure egress Envoy cluster for prometheus de74f37 (jaellio)
• Changing ClusterID to ClusterDomain and nesting under experimental.multicluster in meshconfig 249c80a (Michael Tarng)
• feat(pkg/*) Add local cluster domain to mesh service. db538a1 (brunoterkaly)
• logger: making log level configurable through meshconfig 0411db4 (Eduard Serra)
• catalog/route: fix missing hostnames for permissive mode a4c20d8 (Shashank Ram)
• fix(injector): increase injector webhook timeout fc5b4db (jaellio)
• fix(demo): remove host headers in SMI policies 9d9d893 (Jon Huhn)
• injector: fix correctness while checking for annotations 8836999 (Shashank Ram)
• fix(build): rebuild chart when its root files change fbc0158 (Jon Huhn)
• provider: move kube endpoint provider client cef48f2 (Whitney Griffith)
• golint 9597a8b (Michael Tarng)
• feat(pkg/catalog): gateway is configured for SSL passthrough 346ec28 (Sean Teeling)
• feat(pkg/catalog): gateway is configured for SSL passthrough c31e6fc (Sean Teeling)
• Service Provider Interface and Mocks bb35786 (Whitney Griffith)
• Deprecate support for k8s 1.18 3e34b61 (Shashank Ram)
• fix(cleanup): Add nodeSelectors for cleanup-hook 1a7d0b5 (Sotiris Nanopoulos)
• Adding clusterId to MeshConfig for multicluster support 9652a4c (Michael Tarng)
• ingress: support ignoring an ingress resource 9c7a2d9 (Shashank Ram)
• doc: clarify release guide 3cbb9b5 (Allen Leigh)
• test(*): Adds test to certificate_manager.go 4aca35d (Shalier Xia)
• fix(install): Add nodeSelectors for install and demo (#3611) 94fc23d (Kalya Subramanian)
• feat(/): add validating webhook server to the osm controller c03a263 (Sean Teeling)
• feat(pkg/envoy): Add multi cluster gateway LDS 329b14e (Sean Teeling)
• docs/envoy: document traffic flow 26d5fa7 (Sean Teeling)
• feat(multicluster) building config for multicluster d55ee93 (timmyreilly)
• fix(.mergfiy.yaml): Remove deprecated Mergify feature 3cdc5a3 (Shalier Xia)
• refactor(pkg/lds) Cleanup a redundant call to ListAllowedServices 4742573 (Sean Teeling)
• kubernetes/events: remove noise from logging f786ed2 (Shashank Ram)
• Add details for CNCF Slack (#3597) 8df5a05 (Bridget Kromhout)
• docs(release): Update chart update requirements (#3590) 47c1d92 (Kalya Subramanian)
• injector: support inbound port exclusions 6664c75 (Shashank Ram)
• release: Update versions to 0.9.0 (#3592) 1ef7c65 (Kalya Subramanian)
• ref(proxy registry): track proxy-service relations async 3563cd5 (Jon Huhn)
• tests(pkg/certificate/providers/tresor): add missing tests for ca.go 22fc353 (shuheiktgw)
• feat(pkg/*): Lay some groundwork for multi cluster gateways. daf03b4 (Sean Teeling)
• envoy: make logging consistent and verbose for debug levels e528961 (Shashank Ram)
• docs/dev_guide: update test framework usage 05e0200 (Shashank Ram)
• osm-gateway: add support for gateway bootstrapping 9088313 (Shashank Ram)
• README: add link to docs website c982727 (Shashank Ram)
• tests(e2e): Create ServiceAccount for Vault (#3571) c298f7b (Kalya Subramanian)
• Uses go:embed for wasm stats and helm chart a8daa83 (Sotiris Nanopoulos)
• fix(e2e): skip e2e_init_controller_test for noInstall cbbce3b (nshankar13)
• Creat Contributing Ladder file a1fee8c (Karen Chu)
• Adding files from docs site (#3566) 86ef383 (Bridget Kromhout)
• fix(e2e): Add default meshconfig e13f4c7 (nshankar13)
• osm-gateway: add feature flag 8e5571e (Shashank Ram)
• charts/osm-rbac: add delete verb for secrets (#3570) 8d0ec91 (Kalya Subramanian)
• test(pkg/smi): adds test for smi health checker 4024fd5 (Shalier Xia)
• autogen and types for multiclusterservice afedd10 (timmyreilly)
• feat(multicluster): crd only fb05f90 (timmyreilly)
• tests(pkg/certificate/providers/tresor): add missing tests 85891b3 (shuheiktgw)
• XDS Server: introducing snapshot cache 5a53fda (Eduard Serra)
• ref(*): move feature flags to meshconfig 55e3b3b (Jackie Elliott)
• tests(pkg/injector/patch): add unit tests cb20f5f (shuheiktgw)
• test: add test for init-osm-controller methods 9da9514 (Allen Leigh)
• Improves Access Logger names 9949d04 (Sotiris Nanopoulos)
• feat(pkg/validators): add the main body for the validators libraries. 220ee33 (Sean Teeling)
• fix checks for automerge feature (#3546) b223d9e (Shalier Xia)
• Add hpa to osm controller and injector (#3499) 3f79415 (Shalier Xia)
• Fix autorebase label (#3545) eeddf2e (Shalier Xia)
• envoy/bootstrap: build bootstrap config generically c2515b6 (Shashank Ram)
• test: add test to pkg/configurator 04c7667 (Allen Leigh)
• chore(/): Remove unused references to kubeclient. 8b680ed (Sean Teeling)
• test(cmd/cli): add test for trafficPolicyCheckCmd 91669e0 (Jackie Elliott)
• utils/proto: add unit test and remove duplicated code 141475a (Shashank Ram)
• utils/proto: consolidate proto helpers ee23bc0 (Shashank Ram)
• fix(crds/meshconfig): remove envoy image pattern 56d9248 (nshankar13)
• envoy: error if proxy is not valid 5fb47f2 (Shashank Ram)
• test(e2e): Skip FluentBit tests on OpenShift (#3518) 536feb2 (Kalya Subramanian)
• chore(chart): enable WASM stats by default 770b0c3 (Jon Huhn)
• Bump cert-manager API and library version 180a9be (irbekrm)
• fix(crds/meshconfig): change envoy image pattern ea1b12d (nshankar13)
• prometheusScraping: Remove prometheus scraping flag 3f8d154 (Sneha Chhabria)
• envoy: add additional metadata for the proxy's kind 9889c1d (Shashank Ram)
• ref(cmd/cli): simplify trafficPolicyCheckCmd output cd0ae95 (Jackie Elliott)
• envoy/eds: allow generation of all endpoints on empty request 0394fc8 (Eduard Serra)
• envoy/eds: only respond to requested clusters 419ff9d (Shashank Ram)
• ref(pkg/injector): use XDS structs for envoy bootstrap config e923e3c (Jackie Elliott)
• [testing] Do not send SDS on full config updates c32f3c5 (Eduard Serra)
• egress: enable egress policy by default a4cc3d5 (Shashank Ram)
• test: unit test for pkg/ticker 63c2fd2 (Allen Leigh)
• test: add test case to pkg/envoy/lds b31b8f2 (Allen Leigh)
• envoy: changing node ID to CN db396d0 (Eduard Serra)
• tests(cds): increase NewResponse coverage ad0f65f (Jon Huhn)
• PodMetadata: Use kubecontroller to gather PodMetadata c46db6f (Eduard Serra)
• Revert "catalog: add GetKubecontroller interface" ac68115 (Eduard Serra)
• tests: validate osm-controller CLI params bde0a5f (Sanya Kochhar)
• test: add test case for pkg/httpserver d68983d (Allen Leigh)
• test(e2e): Enable priv init container for OpenShift (#3480) ed30fa8 (Kalya Subramanian)
• tests/e2e: fix install properties in upgrade test 3e17d11 (Shashank Ram)
• charts/osm: allow additional root properties ea70ba5 (Shashank Ram)
• catalog: add GetKubecontroller interface c0605a7 (Eduard Serra)
• Fixing broken links and clarifying link targets (#3476) 4aa177a (Bridget Kromhout)
• Update the docs site for a release. (#3471) e666c3b (Bridget Kromhout)
• test(pkg/kubernetes): add test for GetEndpoint method b005bae (Jackie Elliott)
• ref(docs): use relative links to repo files a0f8f0c (Jon Huhn)
• test(pkg/envoy/eds): improve test coverage for clusterLoadAssignment 6b449b1 (Sneha Chhabria)
• feat(rbac): Add FluentBit PodSecurityPolicy (#3313) 8c812c8 (Kalya Subramanian)
• tools(demo): Add fluentbit logs script (#3463) 67e29e3 (Kalya Subramanian)
• smi: check SMI CRDs during liveness probe aeebfab (Shashank Ram)
• charts/osm: add pod disruption budgets for control plane 30a6ec0 (Shashank Ram)