Skip to content

Commit 80af09c

Browse files
kflynnkflynn
authored
Merge pull request #25 from datawire/flynn/dev/edge-stack-tweaks
Edge Stack Tweaks
2 parents 39e336a + 211cffd commit 80af09c

File tree

8 files changed

+99
-38
lines changed

8 files changed

+99
-38
lines changed

‎CHANGELOG.md

Lines changed: 14 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -73,12 +73,11 @@ Please see the [Envoy documentation](https://www.envoyproxy.io/docs/envoy/latest
7373
## [2.0.4] 2021-10-19
7474
[2.0.4]: https://github.com/datawire/edge-stack/releases/v2.0.4
7575

76-
We're pleased to introduce Ambassador Edge Stack 2.0.4 for general availability for new
77-
installations! The 2.X family introduces a number of changes to allow Ambassador Edge Stack to
78-
more gracefully handle larger installations, reduce global configuration to better handle
79-
multitenant or multiorganizational installations, reduce memory footprint, and improve
80-
performance. We welcome feedback!! Join us on <a href="https://a8r.io/slack">Slack</a> and let us
81-
know what you think.
76+
We're pleased to introduce Ambassador Edge Stack 2.0.4 for general availability! The 2.X family
77+
introduces a number of changes to allow Ambassador Edge Stack to more gracefully handle larger
78+
installations, reduce global configuration to better handle multitenant or multiorganizational
79+
installations, reduce memory footprint, and improve performance. We welcome feedback!! Join us on
80+
<a href="https://a8r.io/slack">Slack</a> and let us know what you think.
8281

8382
## Ambassador Edge Stack
8483

@@ -88,7 +87,8 @@ know what you think.
8887
for 2.0.4_ &mdash; full support for `getambassador.io/v2` will arrive soon in a later 2.X version.
8988

9089
- Feature: The `getambassador.io/v3alpha1` API version and the published chart and manifests have been
91-
updated to support Kubernetes 1.22.
90+
updated to support Kubernetes 1.22. Thanks to <a href="https://github.com/imoisharma">Mohit
91+
Sharma</a> for contributions to this feature!
9292

9393
- Feature: You can now set `dns_type` between `strict_dns` and `logical_dns` in a `Mapping` to configure the
9494
Service Discovery Type.
@@ -147,7 +147,7 @@ installations, reduce memory footprint, and improve performance. We welcome feed
147147
- Bugfix: Upgraded envoy to 1.17.4 to address security vulnerabilities CVE-2021-32777, CVE-2021-32778,
148148
CVE-2021-32779, and CVE-2021-32781.
149149

150-
- Feature: You can now set `allow_chunked_length` in the Ambassador Module to configure the same value in
150+
- Feature: You can now set `allow_chunked_length` in the `ambassador` `Module` to configure the same value in
151151
Envoy.
152152

153153
- Change: Envoy-configuration snapshots get saved (as `ambex-#.json`) in `/ambassador/snapshots`. The number
@@ -221,7 +221,7 @@ installations, reduce memory footprint, and improve performance. We welcome feed
221221
regex, the new `hostname` element is always a DNS glob. Use `hostname` instead of `host` for best
222222
results.
223223

224-
- Feature: The behavior of the Ambassador module `prune_unreachable_routes` field is now automatic, which
224+
- Feature: The behavior of the `ambassador` `Module` `prune_unreachable_routes` field is now automatic, which
225225
should reduce Envoy memory requirements for installations with many `AmbassadorHost`s
226226

227227
- Bugfix: Each `AmbassadorHost` can specify its `requestPolicy.insecure.action` independently of any other
@@ -258,8 +258,8 @@ installations, reduce memory footprint, and improve performance. We welcome feed
258258
or, e.g., Zipkin's V1 collector protocol. Further details are available in the <a
259259
href="about/changes-2.0.0">2.0.0 Changes</a> document.
260260

261-
- Change: The `tls` module and the `tls` field in the Ambassador module are no longer supported. Please use
262-
`TLSContext` resources instead.
261+
- Change: The `tls` module and the `tls` field in the `ambassador` `Module` are no longer supported. Please
262+
use `TLSContext` resources instead.
263263

264264
- Change: The environment variable `AMBASSADOR_FAST_RECONFIGURE` is now set by default, enabling the
265265
higher-performance implementation of the code that Ambassador Edge Stack uses to generate and
@@ -305,7 +305,7 @@ installations, reduce memory footprint, and improve performance. We welcome feed
305305

306306
- Change: Update from Envoy 1.15 to 1.17.3
307307

308-
- Feature: You can now set `allow_chunked_length` in the Ambassador Module to configure the same value in
308+
- Feature: You can now set `allow_chunked_length` in the `ambassador` `Module` to configure the same value in
309309
Envoy.
310310

311311
- Change: `AMBASSADOR_ENVOY_API_VERSION` now defaults to `V3`
@@ -394,9 +394,8 @@ installations, reduce memory footprint, and improve performance. We welcome feed
394394

395395
## Ambassador Edge Stack
396396

397-
- Security: Ambassador Edge Stack has been updated to Envoy 1.15.5, which addresses a high severity security
398-
vulnerability (CVE-2021-29492). Ambassador Edge Stack can now be configured to reject client
399-
requests that contain escaped slashes.
397+
- Security: Incorporate the Envoy 1.15.5 security update by adding the `reject_requests_with_escaped_slashes`
398+
option to the `ambassador` `Module`.
400399

401400

402401
## [1.13.3] May 03, 2021

‎charts/edge-stack/CHANGELOG.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,10 @@ numbering uses [semantic versioning](http://semver.org).
77

88
(no changes yet)
99

10+
## v7.1.10
11+
12+
- Switch Edge Stack CRDs to API version `v3alpha1`.
13+
1014
## v7.1.9
1115

1216
- Update Edge Stack chart image to version v2.0.4: [CHANGELOG](https://github.com/emissary-ingress/emissary/blob/master/CHANGELOG.md)

‎charts/edge-stack/Chart.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ apiVersion: v2
22
appVersion: 2.0.4
33
description: A Helm chart for Ambassador Edge Stack
44
name: edge-stack
5-
version: 7.1.9
5+
version: 7.1.10
66
# TODO: change these to whatever the appropriate things are
77
icon: https://www.getambassador.io/images/logo.png
88
home: https://www.getambassador.io/

‎charts/edge-stack/crds/filter.yaml

Lines changed: 10 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
# Source: edge-stack/charts/emissary-ingress/crds/filter.yaml
2+
# Source: edge-stack/charts/edge-stack/crds/filter.yaml
33
apiVersion: apiextensions.k8s.io/v1
44
kind: CustomResourceDefinition
55
metadata:
@@ -22,14 +22,22 @@ spec:
2222
scope: Namespaced
2323
versions:
2424
- name: v1beta2
25-
served: true
25+
served: false
2626
storage: false
2727
schema:
2828
openAPIV3Schema:
2929
description: Filter specifies an Ambassador Edge Stack filter
3030
type: object
3131
x-kubernetes-preserve-unknown-fields: true
3232
- name: v2
33+
served: false
34+
storage: false
35+
schema:
36+
openAPIV3Schema:
37+
description: Filter specifies an Ambassador Edge Stack filter
38+
type: object
39+
x-kubernetes-preserve-unknown-fields: true
40+
- name: v3alpha1
3341
served: true
3442
storage: true
3543
schema:

‎charts/edge-stack/crds/filterpolicy.yaml

Lines changed: 10 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
# Source: edge-stack/charts/emissary-ingress/crds/filterpolicy.yaml
2+
# Source: edge-stack/charts/edge-stack/crds/filterpolicy.yaml
33
apiVersion: apiextensions.k8s.io/v1
44
kind: CustomResourceDefinition
55
metadata:
@@ -22,14 +22,22 @@ spec:
2222
scope: Namespaced
2323
versions:
2424
- name: v1beta2
25-
served: true
25+
served: false
2626
storage: false
2727
schema:
2828
openAPIV3Schema:
2929
description: Filter specifies an Ambassador Edge Stack filter
3030
type: object
3131
x-kubernetes-preserve-unknown-fields: true
3232
- name: v2
33+
served: false
34+
storage: false
35+
schema:
36+
openAPIV3Schema:
37+
description: Filter specifies an Ambassador Edge Stack filter
38+
type: object
39+
x-kubernetes-preserve-unknown-fields: true
40+
- name: v3alpha1
3341
served: true
3442
storage: true
3543
schema:

‎charts/edge-stack/crds/ratelimit.yaml

Lines changed: 10 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
# Source: edge-stack/charts/emissary-ingress/crds/ratelimit.yaml
2+
# Source: edge-stack/charts/edge-stack/crds/ratelimit.yaml
33
apiVersion: apiextensions.k8s.io/v1
44
kind: CustomResourceDefinition
55
metadata:
@@ -22,14 +22,22 @@ spec:
2222
scope: Namespaced
2323
versions:
2424
- name: v1beta1
25-
served: true
25+
served: false
2626
storage: false
2727
schema:
2828
openAPIV3Schema:
2929
description: Filter specifies an Ambassador Edge Stack filter
3030
type: object
3131
x-kubernetes-preserve-unknown-fields: true
3232
- name: v2
33+
served: false
34+
storage: false
35+
schema:
36+
openAPIV3Schema:
37+
description: Filter specifies an Ambassador Edge Stack filter
38+
type: object
39+
x-kubernetes-preserve-unknown-fields: true
40+
- name: v3alpha1
3341
served: true
3442
storage: true
3543
schema:

‎docs/releaseNotes.yml

Lines changed: 20 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -34,17 +34,18 @@ items:
3434
- version: 2.0.4
3535
date: '2021-10-19'
3636
notes:
37-
- title: General availability for new installations!
37+
- title: General availability!
3838
type: feature
3939
body: >-
40-
We're pleased to introduce $productName$ 2.0.4 for general availability for new
41-
installations! The 2.X family introduces a number of changes to allow $productName$
42-
to more gracefully handle larger installations, reduce global configuration to better
40+
We're pleased to introduce $productName$ 2.0.4 for general availability! The
41+
2.X family introduces a number of changes to allow $productName$ to more
42+
gracefully handle larger installations, reduce global configuration to better
4343
handle multitenant or multiorganizational installations, reduce memory footprint, and
4444
improve performance. We welcome feedback!! Join us on
4545
<a href="https://a8r.io/slack">Slack</a> and let us know what you think.
4646
isHeadline: true
4747
docs: about/changes-2.0.0
48+
image: ./edge-stack-ga.png
4849

4950
- title: API version getambassador.io/v3alpha1
5051
type: change
@@ -56,13 +57,17 @@ items:
5657
is the only supported API version for 2.0.4</b> &mdash; full support for
5758
<code>getambassador.io/v2</code> will arrive soon in a later 2.X version.
5859
docs: about/changes-2.0.0
60+
image: ./v2.0.4-v3alpha1.png
5961

6062
- title: Support for Kubernetes 1.22
6163
type: feature
6264
body: >-
6365
The <code>getambassador.io/v3alpha1</code> API version and the published chart
64-
and manifests have been updated to support Kubernetes 1.22.
66+
and manifests have been updated to support Kubernetes 1.22. Thanks to
67+
<a href="https://github.com/imoisharma">Mohit Sharma</a> for contributions to
68+
this feature!
6569
docs: about/changes-2.0.0
70+
image: ./v2.0.4-k8s-1.22.png
6671

6772
- title: Mappings support configuring strict or logical DNS
6873
type: feature
@@ -71,6 +76,7 @@ items:
7176
<code>logical_dns</code> in a <code>Mapping</code> to configure the Service
7277
Discovery Type.
7378
docs: topics/using/mappings/#dns-configuration-for-mappings
79+
image: ./v2.0.4-mapping-dns-type.png
7480

7581
- title: Mappings support controlling DNS refresh with DNS TTL
7682
type: feature
@@ -97,6 +103,7 @@ items:
97103
- title: "#3854"
98104
link: https://github.com/emissary-ingress/emissary/issues/3854
99105
docs: https://github.com/emissary-ingress/emissary/issues/3854
106+
image: ./v2.0.4-version.png
100107

101108
- title: Large configurations work correctly with Ambassador Cloud
102109
type: bugfix
@@ -114,6 +121,7 @@ items:
114121
The <code>l7Depth</code> element of the <code>Listener</code> CRD is
115122
properly supported.
116123
docs: topics/running/listener#l7depth
124+
image: ./v2.0.4-l7depth.png
117125

118126
- version: 2.0.3-ea
119127
date: '2021-09-16'
@@ -163,7 +171,7 @@ items:
163171

164172
- title: Expose Envoy's allow_chunked_length HTTPProtocolOption
165173
type: feature
166-
body: "You can now set <code>allow_chunked_length</code> in the Ambassador Module to configure the same value in Envoy."
174+
body: "You can now set <code>allow_chunked_length</code> in the <code>ambassador</code> <code>Module</code> to configure the same value in Envoy."
167175
docs: topics/running/ambassador/#content-length-headers
168176

169177
- title: Envoy-configuration snapshots saved
@@ -260,7 +268,7 @@ items:
260268
type: feature
261269

262270
- title: Memory usage improvements for installations with many AmbassadorHosts
263-
body: The behavior of the Ambassador module <code>prune_unreachable_routes</code> field is now automatic, which should reduce Envoy memory requirements for installations with many <code>AmbassadorHost</code>s
271+
body: The behavior of the <code>ambassador</code> <code>Module</code> <code>prune_unreachable_routes</code> field is now automatic, which should reduce Envoy memory requirements for installations with many <code>AmbassadorHost</code>s
264272
docs: topics/running/ambassador/#prune-unreachable-routes
265273
image: ./edge-stack-2.0.0-prune_routes.png
266274
type: feature
@@ -311,7 +319,7 @@ items:
311319
docs: about/changes-2.0.0/#envoy-v3-api-by-default
312320

313321
- title: Module-based TLS no longer supported
314-
body: The <code>tls</code> module and the <code>tls</code> field in the Ambassador module are no longer supported. Please use <code>TLSContext</code> resources instead.
322+
body: The <code>tls</code> module and the <code>tls</code> field in the <code>ambassador</code> <code>Module</code> are no longer supported. Please use <code>TLSContext</code> resources instead.
315323
docs: about/changes-2.0.0/#tls-the-ambassador-module-and-the-tls-module
316324
image: ./edge-stack-2.0.0-tlscontext.png
317325
type: change
@@ -386,7 +394,7 @@ items:
386394
- title: Expose Envoy's allow_chunked_length HTTPProtocolOption
387395
type: feature
388396
body: >-
389-
You can now set <code>allow_chunked_length</code> in the Ambassador Module to configure
397+
You can now set <code>allow_chunked_length</code> in the <code>ambassador</code> <code>Module</code> to configure
390398
the same value in Envoy.
391399
docs: topics/running/ambassador/#content-length-headers
392400

@@ -529,7 +537,9 @@ items:
529537
date: '2021-05-11'
530538
notes:
531539
- title: Envoy 1.15.5
532-
body: $productName$ has been updated to Envoy 1.15.5, which addresses a high severity security vulnerability (CVE-2021-29492). $productName$ can now be configured to reject client requests that contain escaped slashes.
540+
body: >-
541+
Incorporate the Envoy 1.15.5 security update by adding the
542+
<code>reject_requests_with_escaped_slashes</code> option to the <code>ambassador</code> <code>Module</code>.
533543
image: ../images/edge-stack-1.13.4.png
534544
docs: topics/running/ambassador/#rejecting-client-requests-with-escaped-slashes
535545
type: security

0 commit comments

Comments
 (0)