v0.6.0

[shaneutt]

API versions: v1beta1, v1alpha2

Major Changes

ReferenceGrant moves to v1beta1, ReferencePolicy removed

With more implementations now supporting ReferenceGrant (and more conformance coverage of the resource), we've moved ReferenceGrant to v1beta1 in this release. Note that moving to beta also moves the object to the Standard channel (it was Experimental previously).

We've also removed the already-deprecated ReferencePolicy resource, so please move over to the shiny new ReferenceGrant, which has all the same features.

• Promotes ReferenceGrant to the v1beta1 API and the standard release channel
  (Promote ReferenceGrant to Beta #1455, @nathancoleman)
• ReferencePolicy has been removed from the API in favor of ReferenceGrant.
  (Remove ReferencePolicy in favor of ReferenceGrant #1406, @robscott)

Introduce GRPCRoute

The GRPCRoute resource has been introduced in order to simplify the routing of GRPC requests.
Its design is described in GEP-1016.
As it is a new resource, it is introduced in the experimental channel.

Thanks to @gnossen for pushing this ahead.

• Introduce GRPCRoute resource. (Implement GRPCRoute (GEP 1016) #1115, @gnossen)

Status updates

As described in GEP-1364, status conditions have been updated within the Gateway resource to make it more consistent with the rest of the API. These changes, along with some other status changes, are detailed below.

Gateway:

• New Accepted and Programmed conditions introduced.
• Scheduled condition deprecated.
• Core Conditions now Accepted and Programmed.
• Moves to Extended: Ready.

Gateway Listener:

• New Accepted and Programmed conditions introduced.
• Detached condition deprecated.
• Core Conditions now Accepted, Programmed, ResolvedRefs, and Conflicted.
• Moves to Extended: Ready.

All Resources:

• The Accepted Condition now has a Pending reason, which is the default until
  the condition is updated by a controller.

Route resources:

• The Accepted Condition now has a NoMatchingParent reason, to be set on routes
  when no matching parent can be found.

The purpose of these changes is to make the status flows more consistent across objects, and to provide a clear pattern for new objects as we evolve the API.

Note: This change will require updates for implementations to be able to pass conformance tests. Implementations may choose to publish both new and old conditions, or only new conditions.

• Adds Accepted and deprecates Detached Listener conditions and reasons (add ListenerConditionAccepted, update docs from "Detached" #1446, @mikemorris)
• Adds Accepted and deprecates Scheduled Gateway conditions and reasons (add GatewayConditionAccepted and GatewayReasonAccepted #1447, @mikemorris)
• Adds Pending reason for use with all Accepted conditions throughout the API (Add Pending reason to GatewayClass, Gateway, Listener, and Routes #1453, @youngnick)
• Adds Programmed Gateway and Listener conditions, moves Ready to extended
  conformance (Add "Programmed" Gateway condition, move "Ready" to extended conformance #1499, @LCaparelli)
• Add RouteReasonNoMatchingParent reason for Accepted condition. (feat: add RouteReasonNoMatchingParent #1516, @pmalek)

Other Changes by type

Deprecations

• GatewayClass, Gateway, and HTTPRoute are now only supported with the v1beta1
  version of the API. The v1alpha2 API versions of these resources will be fully
  removed in a future release. Additionally, v1alpha2 is marked as deprecated
  everywhere. (Beta resources: Setting storage version to v1beta1, not serving v1alpha2 #1348 and Marking v1alpha2 as deprecated for beta resources #1405, @robscott)

API Changes

• A new field responseHeaderModifier is added to .spec.rules.filters, which
  allows for modification of HTTP response headers (Add ResponseHeaderModifier to HTTPRouteFilter  #1373, @aryan9600)
• Display the Programmed condition instead of the Ready condition in the output
• HTTPRoute: Validating webhook now ensures that Exact and Prefix path match
  values can now only include valid path values per RFC-3986. (RegularExpression
  path matches are not affected by this change). (Tightening GRPCRoute validation, fixing gaps in HTTPRoute and Gateway webhook validation #1599, @robscott)
• RegularExpression type selectors have been clarified to all be
  ImplementationSpecific conformance. (Update types to fix API review feedback #1604, @youngnick)

Documentation

• Clarify that BackendObjectReference's Port field specifies a service port, not
  a target port, for Kubernetes Service backends. (Clarify BackendObjectReference Port field godoc #1332, @Miciah)
• HTTPRequestHeaderFilter and HTTPResponseHeaderFilter forbid configuring
  multiple actions for the same header. (Add and test single filter action per header restriction #1497, @rainest)
• Changes "custom" conformance level to "implementation-specific" (docs: merge 'custom' and 'implementation-specific' conformance #1436,
  @LCaparelli)
• Clarification that changes to ReferenceGrants MUST be reconciled (Clarifying ReferenceGrant documentation #1429,
  @robscott)

Conformance Tests

• ExemptFeatures have been merged into SupportedFeatures providing implementations
  a uniform way to specify the features they support.
  (Conformance: Merging SupportedFeatures and ExemptFeatures, adding TCPRoute feature #1507, @robscott) (Add flags for SupportedFeatures and ExemptFeatures in conformance tests. #1394, @gyohuangxin)
• To be conformant with the API, if there is no ReferenceGrant that grants a
  listener to reference a secret in another namespace, the
  ListenerConditionReason for the condition ResolvedRefs must be set to
  RefNotPermitted instead of InvalidCertificateRef. (Conformance: fix Listener ConditionReason #1305, @mlavacca)
• A new test has been added to cover HTTP Redirects (added redirect tests for core redirect features #1556, @LiorLieberman)
• Fix Gateway reference in HTTPRouteInvalidParentRefNotMatchingListenerPort
  (conformance: Update HTTPRouteInvalidParentRefNotMatchingListenerPort #1591, @sayboras)

Developer Notes

• Deprecated v1alpha2 Go types are now aliases to their v1beta1 versions
  (Make alpha types aliases of beta types #1390, @howardjohn)

New Contributors

• @lizrice made their first contribution in [docs] Cilium Gateway API implementation #1280
• @timrosenblatt made their first contribution in Fixes broken link on Security Model docs #1293
• @abhijit-dev82 made their first contribution in Rectified Conformance Test Name Generation #1290
• @wstcliyu made their first contribution in make timeout configurable #1292
• @mlavacca made their first contribution in Conformance: fix Listener ConditionReason #1305
• @pmalek made their first contribution in docs: update README.md about v0.5.0 release #1322
• @carlisia made their first contribution in Add converter pkg to house type conversion helpers #1337
• @david-yu made their first contribution in gep-1234: Formatting fixes around use cases for GAMMA initiative #1342
• @kate-osborn made their first contribution in Add help info to NGINX Kubernetes Gateway implementation section #1359
• @asim-reza made their first contribution in changed docstring in shared_types.go to account for empty strings being an error #1376
• @akankshakumari393 made their first contribution in Fix Anchor for installing Gateway API CRD manually on Getting Started Guide #1404
• @subi9 made their first contribution in HTTP rewrite matches the example text #1346
• @oscr made their first contribution in Fix some spelling mistakes #1423
• @Amila-Rukshan made their first contribution in website: render approved GEPs in chronological order #1438
• @naqvis made their first contribution in Add Flomesh Service Mesh as a downstream implementation #1421
• @LCaparelli made their first contribution in docs: merge 'custom' and 'implementation-specific' conformance #1436
• @jrsmroz made their first contribution in docs: update Kong implementation statuses #1456
• @pydctw made their first contribution in docs: update Contour implementation status #1471
• @arkodg made their first contribution in update envoy gateway status #1475
• @wilsonwu made their first contribution in Add Docker image support multi OS archs #1462
• @rperper made their first contribution in chore: cleanup litespeed section on implementations page #1529
• @Xunzhuo made their first contribution in fix: overview meetings links #1550
• @jtmckay2017 made their first contribution in Typo in ReferenceGrant documentation. #1557
• @michaelvl made their first contribution in Correct util/translator function documentation #1558
• @dspo made their first contribution in fix: typo: indent #1566
• @mmontes11 made their first contribution in Update typo in security-model.md #1577
• @sayboras made their first contribution in conformance: Update HTTPRouteInvalidParentRefNotMatchingListenerPort #1591
• @LiorLieberman made their first contribution in added redirect tests for core redirect features #1556
• @lucacome made their first contribution in Bump kind to v0.17.0 #1597
• @frankbu made their first contribution in Update istio implementation info #1609

Full Changelog: v0.5.0...v0.6.0

---

This discussion was created from the release v0.6.0.