v1.1.0

Notable changes

• Circuit breaking support for traffic directed to in-mesh and external destinations

Breaking changes

The following changes are not backward compatible with the previous release.

• The osm_proxy_response_send_success_count and osm_proxy_response_send_error_count metrics are now labeled with the proxy certificate's common name and XDS type, so queries to match the previous equivalent need to sum for all values of each of those labels.

Deprecation notes

The following capabilities have been deprecated and cannot be used.

• The osm_injector_injector_sidecar_count and osm_injector_injector_rq_time metrics have been removed. The osm_admission_webhook_response_total and osm_http_response_duration metrics should be used instead.
• OSM will no longer support installation on Kubernetes version v1.19.

CRD Updates

No CRD changes between tags v1.0.0 and v1.1.0

Changelog

• cut v1.1.0 (#4652) a23afae (schristoff)
• cli/verifier: add Envoy config dump parser (#4646) 71fea3e (Shashank Ram)
• ref(smi): remove unused kubeClient from smi client (#4643) 273e512 (Deepesh Pathak)
• cli: add verify command (#4639) 1198792 (Shashank Ram)
• Add overwrite label osm bootstrap (#4642) 1b94fbf (Niranjan Shankar)
• fix(ci): fix lint (#4633) ed4b428 (Jon Huhn)
• chore(release): cut v1.1.0-rc.1 (#4630) 2820d82 (schristoff)
• ref(cert): refactor tresor (#4626) 30e5362 (schristoff)
• envoy: fix misleading comment (#4628) 6247f2f (Shashank Ram)
• feat(log): add access log to TCP listener (#4625) bd7e61d (allenlsy)
• feat(certificates) rework vault certificate provider (#4596) d1100a8 (schristoff)
• Decouple Conversion Patch and CRD Reconciler (#4612) 8bae12f (Keith Mattix II)
• ref(webhook): remove leaf cert from webhook cabundles (#4603) 9ecf16b (Jackie Elliott)
• ref(cli): refactor version subcommand to search all namespaces (#4611) a0d81cc (Shalier Xia)
• doc: add environments.md (#4593) f10a3cc (Zach Rhoads)
• apis/UpstreamTrafficSetting: allow setting status (#4615) b6ff0e7 (Shashank Ram)
• docs: update release notes for v1.1.0 (#4614) cd2c815 (Shashank Ram)
• k8s/version: drop v1.19 support and bump CI version (#4607) 97c6395 (Shashank Ram)
• feat(metrics): add conversion webhook metrics (#4606) 0f36516 (Jon Huhn)
• ref(crdconvert): respond with errors from all requested resources (#4601) aaa7f30 (Jon Huhn)
• owners: add @trstringer as a codeowner maintainer (#4604) 6bda5c3 (Shashank Ram)
• feat(metrics): generalize admission webhook metrics (#4597) 02e6d7d (Jon Huhn)
• apis: correct comments for UpstreamTrafficSetting (#4605) 2f483d2 (Shashank Ram)
• feat(ads): xDS response add TLS config (#4582) 7e0674c (allenlsy)
• fix(logs): add missing Msg calls to logs (#4599) eec706d (Jon Huhn)
• Allow custom image names for OSM Helm chart (#4595) f0c6def (Shalier Xia)
• egress: add UpstreamTrafficSetting support (#4594) 7ecd8e9 (Shashank Ram)
• feat(certificates) begin to abstract the cert manager patterns (#4580) caaa189 (steeling)
• chore: show release version in Grafana boards (#4529) dafba7b (Johnson Shi)
• feat(metrics): add cn/type labels to xds response metrics (#4590) b3b202d (Jon Huhn)
• feat(metrics): add proxy rejected max connections metric (#4589) 1775316 (Jon Huhn)
• configurator: only watch required MeshConfig (#4587) b7a4a3b (Shashank Ram)
• policy: implement UpstreamTrafficSetting API (#4585) fe04957 (Shashank Ram)
• feat(metrics): add proxy XDS request metric (#4584) cc43617 (Jon Huhn)
• feat(metrics): add feature flag metrics (#4581) 269a1b8 (Jon Huhn)
• feat(sidecar): add tls protocol version and cipher suites config to (#4418) c7fead4 (allenlsy)
• feat(metrics): add HTTP response metrics (#4578) 797a297 (Jon Huhn)
• owners: clarify non-codeowner maintainer (#4579) cc46528 (Shashank Ram)
• doc: Remove reference to closed SMI metrics support issue (#4566) 87a8d74 (mudit singh)
• owners: mirror code owners file (#4577) 1de0388 (Shashank Ram)
• doc: Update links in docs (#4519) e972a05 (allenlsy)
• Upgrade docker distribution to v2.8.0 (#4571) c522ed1 (Thomas Stringer)
• Upgrade containerd to v1.5.10 (#4570) 1dc6bfd (Thomas Stringer)
• crd/conversion: only patch CRDs needing conversion (#4569) 1d92058 (Shashank Ram)
• envoy: update go-control-plane version (#4567) 7acf583 (Shashank Ram)
• envoy: update to v1.19.3 (#4564) 2d5d065 (Shashank Ram)
• add darwin and linux arm64 support (#4553) 73f7e06 (timbo)
• fix(healthprobes): add support for TCPSocket probes (#4558) 6acc953 (Jackie Elliott)
• fix(scripts): remove bash 4.0 dependency in coverage script (#4561) f83b8a7 (Jon Huhn)
• contrib/ladder: remove duplicate approvers section (#4560) cbd6a4c (Shashank Ram)
• Create release process documentation (#4557) ebd1de5 (Thomas Stringer)
• (feature): update kind-registry port forwarding (#4554) 28e3409 (schristoff)
• ci: Use GitHub action checkout@v2 (#4542) edd9ea7 (Delyan Raychev)
• api/UpstreamTrafficSetting: add informer client (#4550) 0c9628f (Shashank Ram)
• ref(ptypes): update deprecated ptypes functions (#4544) c52865e (Jackie Elliott)
• doc: Updated broken link (#4549) f640ecb (mudit singh)
• feat(certificate): Remove the Certificater interface in favor of a struct. (#4536) 37d2e4f (steeling)
• crds: add UpstreamTrafficSetting CRD (#4547) cf5223c (Shashank Ram)
• charts(osm-*): add pod and node affinities to control plane pods (#4527) 9b268d0 (Sanya Kochhar)
• cli: Remove metrics annotation from namespaces removed from the mesh (#4539) 774eb83 (mudit singh)
• ref(install): remove redundant checks (#4543) ef48caf (Jon Huhn)
• envoy/ads: Simplify unit test (#4538) 544483d (Delyan Raychev)
• ref(install): move namespace controller check to chart (#4540) 1a3d38b (Jon Huhn)
• apis: add UpstreamTrafficSetting API types (#4535) 9b67c22 (Shashank Ram)
• ref(install): move enforceSingleMesh validation to chart (#4522) 5c5fcf8 (Jon Huhn)
• feat(ads) implement a logger for the snapshot cache (#4520) c3b6739 (steeling)
• ref(build): update image scanning (#4517) b42c9a2 (Jon Huhn)
• ref(chart): push vault validation to chart (#4513) e507ca9 (Jon Huhn)
• docs: updated link to project board (#4510) 1f299bc (mudit singh)
• feat(viz): control-plane timings viz improvements (#4481) cc0ebeb (Johnson Shi)
• fix(cli): uninstall mesh force flag description (#4507) 68dbb7e (Johnson Shi)
• fix(cmd/cli): Show single-mesh-enforced warning (#4503) cff645b (Shalier Xia)
• feat(*): add retry policy (#4476) 0d75c93 (Shalier Xia)
• chore(chart): bump chart version to 1.0.0 (#4508) df42849 (Jon Huhn)
• chore(cleanup): remove cleanup script (#4506) 0986001 (Sanya Kochhar)
• Collect bug report for e2e failures (#4504) 47db020 (Niranjan Shankar)
• fix(injector): make init container pullPolicy configurable (#4505) 755d80a (Jon Huhn)
• injector: add support to configure IP range inclusions (#4498) 3367f49 (Shashank Ram)
• use single command to uninstall mesh and cluster wide resources (#4491) fe48a44 (Sneha Chhabria)
• crdconversion: handle MeshConfig optional field (#4497) 1e0072e (Shashank Ram)
• fix(e2e): isolate upgrade test (#4494) 0923046 (Jon Huhn)
• If ignore label exist don`t add namespace (#4473) e350bc0 (mudit singh)
• feat(mockgen): improve error messaging; add ability to run one mockgen (#4493) fb5f9df (steeling)
• injector: support pod specific IP range exclusions (#4488) 252a315 (Shashank Ram)
• chore(pkg/catalog): Remove unused variable (#4487) 3b34201 (Shalier Xia)
• feat(cli): latest verion availability notification on osm version (#4416) 7158a8c (Jackie Elliott)
• ref(cert): remove expiration field from osm-ca-bundle secret data (#4472) 0c0d99f (Jackie Elliott)
• Add a message for both stale and closed issues and PRs (#4486) b6a32c2 (Thomas Stringer)
• tests: remove kubectl dependency for namespace info (#4485) 3849554 (Shashank Ram)
• injector: simplify port exclusion code (#4484) 2802cb1 (Shashank Ram)
• Uninstall mesh command won`t prompt if mesh is non-existent (#4463) d95ebc9 (mudit singh)
• Add documentation on certificate management internals (#4465) 76eb369 (Thomas Stringer)
• Fixed typo (#4482) ede74c0 (mudit singh)
• fix(e2e): specify pullPolicy for upgrade test (#4478) 0b08eb6 (Jon Huhn)
• github: exempt milestone items from going stale (#4483) 35e66c2 (Thomas Stringer)
• GitHub Action to daily (at midnight) label issues and PRs that have had (#4480) a45d223 (Thomas Stringer)
• configurator: remove ip/port exclusion APIs (#4479) 7b9ac17 (Shashank Ram)
• configurator: simplify MeshConfig API (#4475) a8fc477 (Shashank Ram)
• apis: use config.openservicemesh.io/v1alpha2 (#4421) e45d28a (Shashank Ram)
• tests/framework: wait for deletion and dump namespace (#4471) a0c9a86 (Shashank Ram)
• charts/cleanup-hook: fix CRD reset logic (#4468) 657e9f7 (Shashank Ram)
• chore(github): add docs to checklist in pr template (#4464) 6c28485 (Sanya Kochhar)
• chore(tracing): allow multi-span tracing in demo application (#4456) f423a82 (allenlsy)
• fix(grafana): remove hardcoded control plane namespace (#4454) ec0da63 (Jackie Elliott)
• docs: remove demo manifests required by website (#4455) 2da6870 (Shashank Ram)
• bug(*): Fix memory targetAverageUtilization 4c265a1 (Shalier Xia)
• fix(cli): do not throw error for osm version when no control plane (#4433) 95fb342 (Jackie Elliott)
• [reconciler]: fix label assignment on mwhc (#4431) c7675e5 (Sneha Chhabria)
• crd-conversion: fix webhook port number (#4424) a70d654 (Shashank Ram)
• meshConfig: add validation for ingressgateway certificate (#4422) 1a2d41e (Sneha Chhabria)
• codeowners: add @jaellio as an approver (#4423) 09af567 (Shashank Ram)
• contributing: update maintainer requirement (#4415) 5e29c53 (Shashank Ram)
• ref(build): build all images with buildx (#4402) 54376b6 (Jon Huhn)
• build: update to Go 1.17 (#4410) 89b5661 (Eng Zer Jun)
• fix security vulnerabilities in dependencies (#4413) ce6d63d (Sneha Chhabria)
• chore(route): Refactor buildRoute() by reducing parameters (#4407) d7e8309 (Shalier Xia)
• validator: validate ingress backend source kind (#4412) 26f7879 (Shashank Ram)
• injector: allow redirection of app traffic to itself (#4411) 97fac56 (Shashank Ram)
• ref(*): stepping down as maintainer (#4400) 0f4fecd (Edu Serra)
• add ingress information to bug report 0e0fc95 (Thomas Stringer)
• feat(cli): add remote version to osm version output (#4395) 718517c (Jackie Elliott)
• Corrected spelling mistake (#4392) 01013d7 (mudit singh)
• ref(*): stepping down as maintainer b121289 (Michelle Noorali)
• rename environment variables for images 5da4e39 (Thomas Stringer)
• remove image defaults from preset mesh config and CRD and allow the ability to specify the images through environment variables 9546904 (Thomas Stringer)
• fix(cli): set sidecar injection annotation to disabled 0faa191 (jaellio)
• injector: rename iptables chains for clarity (#4379) 8dccabb (Shashank Ram)
• ref(k8s): remove IsMetricsEnabled from Controller a1718af (Jon Huhn)
• injector: make iptable rules idempotent (#4373) fe85f60 (Shashank Ram)
• ref(k8s): remove K8sServiceToMeshServices from Controller 6d3ff70 (Jon Huhn)
• fix(ingress): increase timeout for TestHandleCertificateChange f417098 (jaellio)
• add ability for bug-report to get previous logs for control plane containers if they have been restarted 9926bc6 (Thomas Stringer)
• Add bug-report ability to collect control plane logs (#4365) 81b5265 (Thomas Stringer)
• fix(e2e): update upgrade test 2227135 (Jon Huhn)
• fix(ci): fix image scan 4cf9687 (Jon Huhn)
• injector: skip injection when pod belongs to host network (#4360) 0fcedaa (Shashank Ram)