Releases: kumahq/kuma
2.2.8
2.6.2
2.5.3
This is a patch release that every user should upgrade to.
Changelog
2.4.6
2.3.5
2.2.7
2.6.1
This is a patch release that every user should upgrade to.
Changelog
- chore(deps): downgrade go-control-plane to v0.11.2-0.20231010133108-1dfbe83bcebc (backport of #9163) #9285 @kumahq
- chore(deps): security update #9288 @kumahq
- chore(deps): update iptables version (backport of #9200) #9216 @kumahq
- chore(deps): upgrade envoy to v1.28.1 #9218 @lukidzi
- chore(deps): use latest kumahq/kuma-gui #9174 #9194 @kumahq
- fix(MeshGateway): fix MeshTCPRoute on MeshGateway (backport of #9167) #9180 @kumahq
- fix(MeshTCPRoute): allow MeshGateway listener tags #9239 @michaelbeaumont
- fix(defaults): change meshsubset to mesh for gateway's meshtimeout (backport of #9192) #9199 @kumahq
- fix(gatewayapi): don't add HTTPRoute status if Kuma isn't the controller (backport of #9228) #9236 @kumahq
- fix(kubernetes): create builtin CA once (backport of #9124) #9129 @kumahq
- fix(kuma-cp): copy annotations when adding/update k8s object (backport of #9254) #9263 @kumahq
- fix(kuma-cp): kds sync on upgrade doubles the number of policies (backport of #9259) #9273 @kumahq
- fix(kuma-cp): prevent violating kubernetes label limit (backport of #9191) #9233 @kumahq
2.4.5
This is a patch release that every user should upgrade to.
Changelog
- chore(deps): bump the go-opentelemetry-io group with 3 updates (backport of #8347) #8352 @kumahq
- chore(deps): security update #8672 #8699 #9100 @kumahq
- chore(deps): update go from 1.21.5 to 1.21.6 (backport of #8944) #8961 @kumahq
- chore(deps): update go to 1.21.4 (backport of #8341) #8345 @kumahq
- chore(deps): update go to 1.21.5 (backport of #8616) #8626 @kumahq
- fix(ZoneIngress): subset routing when tag is present on all subsets (backport of #8443) #8473 @kumahq
- fix(k8s): don't temporarily remove all AvailableServices on ZoneIngress Pod reconciliations (backport of #8301) #8307 @kumahq
- fix(kds): race condition on fill metadata (backport of #8872) #9000 @kumahq
2.3.4
This is a patch release that every user should upgrade to.
Changelog
- chore(deps): security update #8204 #8674 #8697 #9099 @kumahq
- chore(deps): update go from 1.21.5 to 1.21.6 (backport of #8944) #8958 @kumahq
- chore(deps): update go to 1.21.4 (backport of #8341) #8343 @kumahq
- chore(deps): update go to 1.21.5 (backport of #8616) #8624 @kumahq
- chore(deps): upgrade envoy to 1.26.6 #8162 @lukidzi
- fix(MeshTrafficPermission): support permissive mtls (backport of #8171) #8175 @kumahq
- fix(k8s): don't temporarily remove all AvailableServices on ZoneIngress Pod reconciliations (backport of #8301) #8306 @kumahq
- fix(k8s): fix VIPs configmap entries with invalid keys for ExternalName services (backport of #8168) #8196 @kumahq
- fix(kds): race condition on fill metadata (backport of #8872) #8997 @kumahq
2.6.0
Get ready to elevate your Kuma experience with the release of Kuma 2.6.0, a jam-packed update that brings a myriad of exciting features to the table. From introducing a new MeshMetric policy to expanding policy targeting capabilities for MeshGateways, this minor release is packed with enhancements that will transform your network connectivity.
Check out the blog post for more details!
Upgrading
We strongly suggest upgrading to Kuma 2.6.0. Upgrading is straightforward through kumactl
or Helm.
Be sure to carefully read the Upgrade Guide before upgrading Kuma.
Notable Changes
-
🚀 Expanded Policy Targeting
Kuma now allows a wider range of policies, including MeshCircuitBreaker, MeshFaultInjection, and MeshAccessLog, to target MeshGateways. This expands the granularity of policy enforcement and enables more fine-grained control over network traffic at the gateway level.
-
🚀 MeshMetric Policy for Comprehensive Traffic Metrics
Kuma introduces the new MeshMetric policy, which provides a centralized and consistent approach to collecting traffic metrics across all data plane proxies in a mesh. This policy simplifies the management of metrics configurations and ensures that all traffic data is captured uniformly.
-
🚀 Streamlined MeshGateway Routing
MeshHTTPRoute and MeshTCPRoute can now replace MeshGatewayRoute for configuring how a MeshGateway should process network traffic. This change provides greater flexibility and control over gateway routing rules.
-
🚀 Modernized Default Policies
The default legacy policies automatically created during mesh creation have been replaced with new,
targetRef
style policies. -
🚀 Enhanced Traffic Flow without mTLS
When mTLS is not enabled for a mesh, traffic now flows by default, eliminating the need for a TrafficRoute policy.
-
🚀 Improved GUI Experience
Kuma 2.6.0 introduces a number of enhancements to the graphical user interface (GUI), making it more user-friendly and intuitive.
-
🚀 Effortless Single-Zone to Multi-Zone Migration
Kuma's zone federation allows you to effortlessly migrate from a single-zone deployment to a multi-zone configuration. This means you can start small with a single zone and gradually federate additional zones as your network grows, ensuring a smooth and controlled scaling process.
Changelog
- chore(deps): bump actions/cache from 3.3.2 to 4.0.0 #8865 #8985 @dependabot
- chore(deps): bump actions/checkout from 3.1.0 to 4.1.1 #8862 @dependabot
- chore(deps): bump actions/download-artifact and actions/upload-artifact from 3 to 4 #8701 @michaelbeaumont
- chore(deps): bump actions/github-script from 6 to 7 #8422 #8530 @dependabot
- chore(deps): bump actions/setup-go from 4 to 5 #8586 @dependabot
- chore(deps): bump actions/upload-artifact from 3.1.0 to 4.2.0 #8863 #8986 @dependabot
- chore(deps): bump debian from
fab22df
tob16cef8
#8465 #8685 #8853 @dependabot - chore(deps): bump distroless/base-nossl-debian11 from
1ae8df5
to61c9d7a
#8659 @dependabot - chore(deps): bump distroless/static-debian11 from
cdb2034
to1e5b9bb
#8657 @dependabot - chore(deps): bump github.com/bakito/go-log-logr-adapter from v0.0.2 to latest #8646 @michaelbeaumont
- chore(deps): bump github.com/containerd/containerd from 1.7.7 to 1.7.11 #8693 @dependabot
- chore(deps): bump github.com/containernetworking/plugins from 1.3.0 to 1.4.0 #8588 @dependabot
- chore(deps): bump github.com/emicklei/go-restful/v3 from 3.11.0 to 3.11.2 #8791 @dependabot
- chore(deps): bump github.com/envoyproxy/go-control-plane from 0.11.1 to 0.12.0 #8738 @dependabot
- chore(deps): bump github.com/envoyproxy/protoc-gen-validate from 1.0.2 to 1.0.4 #8857 #8971 @dependabot
- chore(deps): bump github.com/evanphx/json-patch/v5 from 5.7.0 to 5.8.1 #8883 @dependabot
- chore(deps): bump github.com/exaring/otelpgx from 0.5.2 to 0.5.3 #8975 @dependabot
- chore(deps): bump github.com/go-logr/logr from 1.3.0 to 1.4.1 #8726 @dependabot
- chore(deps): bump github.com/golang-migrate/migrate/v4 from 4.16.2 to 4.17.0 #8724 @dependabot
- chore(deps): bump github.com/google/uuid from 1.4.0 to 1.6.0 #8644 #9018 @dependabot
- chore(deps): bump github.com/gruntwork-io/terratest from 0.46.7 to 0.46.11 #8589 #8790 #8968 @dependabot
- chore(deps): bump github.com/jackc/pgx/v5 from 5.5.0 to 5.5.2 #8587 #8860 @dependabot
- chore(deps): bump github.com/miekg/dns from 1.1.56 to 1.1.58 #8421 #8970 @dependabot
- chore(deps): bump github.com/onsi/ginkgo/v2 from 2.13.1 to 2.15.0 #8520 #8859 #8973 @dependabot
- chore(deps): bump github.com/onsi/gomega from 1.30.0 to 1.31.1 #8976 @dependabot
- chore(deps): bump github.com/prometheus/client_golang from 1.17.0 to 1.18.0 #8728 @dependabot
- chore(deps): bump github.com/prometheus/common from 0.45.0 to 0.46.0 #8858 @dependabot
- chore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.1.6 to 2.1.7 #8974 @dependabot
- chore(deps): bump github.com/testcontainers/testcontainers-go from 0.26.0 to 0.27.0 #8725 @dependabot
- chore(deps): bump github/codeql-action from 2 to 3.23.1 #8662 #8864 #8984 @dependabot
- chore(deps): bump golang from 1.21.4 to 1.21.6 #8616 #8944 @jakubdyszkiewicz,@michaelbeaumont
- chore(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 #8665 @dependabot
- chore(deps): bump golang.org/x/net from 0.18.0 to 0.20.0 #8519 #8789 @dependabot
- chore(deps): bump golang.org/x/sys from 0.14.1-0.20231108175955-e4099bfacb8c to 0.16.0 #8521 #8774 @dependabot
- chore(deps): bump google.golang.org/grpc from 1.59.0 to 1.61.0 #8645 #8686 #9017 @dependabot
- chore(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0 #8727 @dependabot
- chore(deps): bump helm.sh/helm/v3 from 3.13.2 to 3.14.0 #8643 #8969 @dependabot
- chore(deps): bump ossf/scorecard-action from 2.1.2 to 2.3.1 #8861 @dependabot
- chore(deps): bump postgres from
e213539
to49c276f
#8785 #8842 #8866 @dependabot - chore(deps): bump sigs.k8s.io/controller-runtime from 0.16.3 to 0.17.0 #8972 @dependabot
- chore(deps): bump sigs.k8s.io/controller-tools from 0.13.0 to 0.14.0 #8856 @dependabot
- chore(deps): bump the go-opentelemetry-io group with 3 updates #8420 @dependabot
- chore(deps): bump the go-opentelemetry-io group with 5 updates #8967 @dependabot
- chore(deps): bump the k8s-libs group from 0.28.3 to 0.28.4 #8419 @dependabot
- chore(deps): bump the k8s-libs group with 1 update #8854 @dependabot
- chore(deps): bump the k8s-libs group with 3 updates #8642 @dependabot
- chore(deps): bump the k8s-libs group with 4 updates #8966 @dependabot
- chore(deps): bump ubuntu from
2b7412e
to6042500
#8518 #8658 @dependabot - chore(deps): fix updat...