From c441c67e6fb104e45eff4a932cf6cebc82d7aa53 Mon Sep 17 00:00:00 2001 From: Karol Szwaj Date: Wed, 15 Apr 2026 13:05:41 +0200 Subject: [PATCH 1/2] [release/v1.7] bump envoy to 1.37.2 and ratelimit to 05c08d03 Signed-off-by: Karol Szwaj --- VERSION | 2 +- api/v1alpha1/shared_types.go | 4 ++-- charts/gateway-helm/README.md | 3 +-- charts/gateway-helm/values.tmpl.yaml | 2 +- .../config/loader/testdata/default.yaml | 2 +- .../testdata/daemonsets/component-level.yaml | 2 +- .../proxy/testdata/daemonsets/default.yaml | 2 +- .../daemonsets/disable-prometheus.yaml | 2 +- .../daemonsets/gateway-namespace-mode.yaml | 2 +- .../override-labels-and-annotations.yaml | 2 +- .../override-prometheus-annotations.yaml | 2 +- .../testdata/daemonsets/patch-daemonset.yaml | 2 +- .../testdata/daemonsets/shutdown-manager.yaml | 2 +- .../testdata/daemonsets/with-annotations.yaml | 2 +- .../testdata/daemonsets/with-concurrency.yaml | 2 +- .../testdata/daemonsets/with-extra-args.yaml | 2 +- .../daemonsets/with-image-pull-secrets.yaml | 2 +- .../proxy/testdata/daemonsets/with-name.yaml | 2 +- .../daemonsets/with-node-selector.yaml | 2 +- .../daemonsets/with-priority-class-name.yaml | 2 +- .../with-topology-spread-constraints.yaml | 2 +- .../proxy/testdata/deployments/bootstrap.yaml | 2 +- .../testdata/deployments/component-level.yaml | 2 +- .../proxy/testdata/deployments/custom-sa.yaml | 2 +- .../proxy/testdata/deployments/default.yaml | 2 +- .../deployments/disable-prometheus.yaml | 2 +- .../testdata/deployments/dual-stack.yaml | 2 +- .../deployments/gateway-namespace-mode.yaml | 2 +- .../proxy/testdata/deployments/ipv6.yaml | 2 +- .../override-labels-and-annotations.yaml | 2 +- .../override-prometheus-annotations.yaml | 2 +- .../deployments/patch-deployment.yaml | 2 +- .../deployments/shutdown-manager.yaml | 2 +- .../deployments/with-annotations.yaml | 2 +- .../deployments/with-concurrency.yaml | 2 +- .../deployments/with-empty-memory-limits.yaml | 2 +- .../testdata/deployments/with-extra-args.yaml | 2 +- .../deployments/with-image-pull-secrets.yaml | 2 +- .../proxy/testdata/deployments/with-name.yaml | 2 +- .../deployments/with-node-selector.yaml | 2 +- .../deployments/with-priority-class-name.yaml | 2 +- .../with-topology-spread-constraints.yaml | 2 +- .../gateway-namespace-mode/deployment.yaml | 4 ++-- .../testdata/deployments/default.yaml | 2 +- .../deployments/disable-prometheus.yaml | 2 +- .../deployments/enable-tracing-custom.yaml | 2 +- .../testdata/deployments/enable-tracing.yaml | 2 +- .../deployments/merge-annotations.yaml | 2 +- .../testdata/deployments/merge-labels.yaml | 2 +- .../patch-deployment-containers.yaml | 2 +- .../deployments/patch-deployment.yaml | 2 +- .../deployments/with-node-selector.yaml | 2 +- .../with-topology-spread-constraints.yaml | 2 +- release-notes/v1.7.2.yaml | 23 +++++++++++++++++++ .../en/latest/install/gateway-helm-api.md | 1 - .../gateway-helm/certgen-annotations.out.yaml | 2 +- test/helm/gateway-helm/certgen-args.out.yaml | 2 +- .../helm/gateway-helm/certgen-labels.out.yaml | 2 +- .../certjen-custom-scheduling.out.yaml | 2 +- .../control-plane-with-pdb.out.yaml | 2 +- .../helm/gateway-helm/default-config.out.yaml | 2 +- .../deployment-annotations.out.yaml | 2 +- .../deployment-custom-topology.out.yaml | 2 +- .../deployment-images-config.out.yaml | 2 +- .../deployment-priorityclass.out.yaml | 2 +- .../deployment-repo-no-registry.out.yaml | 2 +- .../deployment-securitycontext.out.yaml | 2 +- ...ay-gateway-namespace-config-watch.out.yaml | 2 +- ...-gateway-gateway-namespace-config.out.yaml | 2 +- ...teway-namespace-namespaceselector.out.yaml | 2 +- ...al-pullsecrets-override-deployment.in.yaml | 2 +- ...l-pullsecrets-override-deployment.out.yaml | 2 +- ...global-pullsecrets-override-global.in.yaml | 2 +- ...lobal-pullsecrets-override-global.out.yaml | 2 +- ...lobal-registry-override-deployment.in.yaml | 2 +- ...obal-registry-override-deployment.out.yaml | 2 +- .../global-registry-override-global.in.yaml | 2 +- .../global-registry-override-global.out.yaml | 2 +- ...orizontal-pod-autoscaler-disabled.out.yaml | 2 +- .../horizontal-pod-autoscaler.out.yaml | 2 +- .../service-customization.out.yaml | 2 +- .../gateway-helm/webhook-disabled.out.yaml | 2 +- 82 files changed, 105 insertions(+), 84 deletions(-) create mode 100644 release-notes/v1.7.2.yaml diff --git a/VERSION b/VERSION index a97fc4411a..3b34d22941 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -v1.7.1 +v1.7.2 diff --git a/api/v1alpha1/shared_types.go b/api/v1alpha1/shared_types.go index 16c74c7f29..73686b400c 100644 --- a/api/v1alpha1/shared_types.go +++ b/api/v1alpha1/shared_types.go @@ -23,7 +23,7 @@ const ( // DefaultDeploymentMemoryResourceRequests for deployment memory resource DefaultDeploymentMemoryResourceRequests = "512Mi" // DefaultEnvoyProxyImage is the default image used by envoyproxy - DefaultEnvoyProxyImage = "docker.io/envoyproxy/envoy:distroless-v1.37.1" + DefaultEnvoyProxyImage = "docker.io/envoyproxy/envoy:distroless-v1.37.2" // DefaultShutdownManagerCPUResourceRequests for shutdown manager cpu resource DefaultShutdownManagerCPUResourceRequests = "10m" // DefaultShutdownManagerMemoryResourceRequests for shutdown manager memory resource @@ -31,7 +31,7 @@ const ( // DefaultShutdownManagerImage is the default image used for the shutdown manager. DefaultShutdownManagerImage = "docker.io/envoyproxy/gateway-dev:latest" // DefaultRateLimitImage is the default image used by ratelimit. - DefaultRateLimitImage = "docker.io/envoyproxy/ratelimit:c8765e89" + DefaultRateLimitImage = "docker.io/envoyproxy/ratelimit:05c08d03" // HTTPProtocol is the common-used http protocol. HTTPProtocol = "http" // GRPCProtocol is the common-used grpc protocol. diff --git a/charts/gateway-helm/README.md b/charts/gateway-helm/README.md index f3fb772df6..eae0cd74c4 100644 --- a/charts/gateway-helm/README.md +++ b/charts/gateway-helm/README.md @@ -103,7 +103,7 @@ helm uninstall eg -n envoy-gateway-system | global.images.envoyGateway.image | string | `nil` | | | global.images.envoyGateway.pullPolicy | string | `nil` | | | global.images.envoyGateway.pullSecrets | list | `[]` | | -| global.images.ratelimit.image | string | `"docker.io/envoyproxy/ratelimit:c8765e89"` | | +| global.images.ratelimit.image | string | `"docker.io/envoyproxy/ratelimit:05c08d03"` | | | global.images.ratelimit.pullPolicy | string | `"IfNotPresent"` | | | global.images.ratelimit.pullSecrets | list | `[]` | | | hpa.behavior | object | `{}` | | @@ -118,4 +118,3 @@ helm uninstall eg -n envoy-gateway-system | service.type | string | `"ClusterIP"` | Service type. Can be set to LoadBalancer with specific IP, e.g.: type: LoadBalancer loadBalancerIP: 10.236.90.20 | | topologyInjector.annotations | object | `{}` | | | topologyInjector.enabled | bool | `true` | | - diff --git a/charts/gateway-helm/values.tmpl.yaml b/charts/gateway-helm/values.tmpl.yaml index 9bcffc144b..a311beb70f 100644 --- a/charts/gateway-helm/values.tmpl.yaml +++ b/charts/gateway-helm/values.tmpl.yaml @@ -19,7 +19,7 @@ global: pullSecrets: [] ratelimit: # This is the full image name including the hub, repo, and tag. - image: "docker.io/envoyproxy/ratelimit:c8765e89" + image: "docker.io/envoyproxy/ratelimit:05c08d03" # Specify image pull policy if default behavior isn't desired. # Default behavior: latest images will be Always else IfNotPresent. pullPolicy: IfNotPresent diff --git a/internal/envoygateway/config/loader/testdata/default.yaml b/internal/envoygateway/config/loader/testdata/default.yaml index d0a3652fad..3c03f42224 100644 --- a/internal/envoygateway/config/loader/testdata/default.yaml +++ b/internal/envoygateway/config/loader/testdata/default.yaml @@ -9,7 +9,7 @@ provider: kubernetes: rateLimitDeployment: container: - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 patch: type: StrategicMerge value: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/component-level.yaml b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/component-level.yaml index 2192ae7b77..84943e088f 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/component-level.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/component-level.yaml @@ -71,7 +71,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/default.yaml b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/default.yaml index d1dd6b3df4..1f9ad12b5f 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/default.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/default.yaml @@ -234,7 +234,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/disable-prometheus.yaml b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/disable-prometheus.yaml index d71b7810e9..e24a3f1d6d 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/disable-prometheus.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/disable-prometheus.yaml @@ -183,7 +183,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/gateway-namespace-mode.yaml b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/gateway-namespace-mode.yaml index 8f174182b2..6ca35b45e0 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/gateway-namespace-mode.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/gateway-namespace-mode.yaml @@ -249,7 +249,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/override-labels-and-annotations.yaml b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/override-labels-and-annotations.yaml index 60c356433a..f95abe35a8 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/override-labels-and-annotations.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/override-labels-and-annotations.yaml @@ -243,7 +243,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/override-prometheus-annotations.yaml b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/override-prometheus-annotations.yaml index 6c008d5e38..01e558069c 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/override-prometheus-annotations.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/override-prometheus-annotations.yaml @@ -234,7 +234,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/patch-daemonset.yaml b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/patch-daemonset.yaml index 5c9dd5f9ab..b8d5b8eb1b 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/patch-daemonset.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/patch-daemonset.yaml @@ -234,7 +234,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/shutdown-manager.yaml b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/shutdown-manager.yaml index f3dc8c626b..a1151128f1 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/shutdown-manager.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/shutdown-manager.yaml @@ -234,7 +234,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-annotations.yaml b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-annotations.yaml index 5517116a87..6cb4362850 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-annotations.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-annotations.yaml @@ -239,7 +239,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-concurrency.yaml b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-concurrency.yaml index 160ce5595a..fdb4d51aa9 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-concurrency.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-concurrency.yaml @@ -73,7 +73,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-extra-args.yaml b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-extra-args.yaml index d4f9c8953d..e50dff7956 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-extra-args.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-extra-args.yaml @@ -238,7 +238,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-image-pull-secrets.yaml b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-image-pull-secrets.yaml index 9037dad0fa..2b91f78ce5 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-image-pull-secrets.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-image-pull-secrets.yaml @@ -234,7 +234,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-name.yaml b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-name.yaml index 4f01080d00..db10a33ce5 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-name.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-name.yaml @@ -234,7 +234,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-node-selector.yaml b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-node-selector.yaml index db613e8043..389b0dfc4b 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-node-selector.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-node-selector.yaml @@ -234,7 +234,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-priority-class-name.yaml b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-priority-class-name.yaml index 7610efac3b..6926fa5ad9 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-priority-class-name.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-priority-class-name.yaml @@ -234,7 +234,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-topology-spread-constraints.yaml b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-topology-spread-constraints.yaml index 4f0787f683..7ed39130ee 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-topology-spread-constraints.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/daemonsets/with-topology-spread-constraints.yaml @@ -234,7 +234,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/bootstrap.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/bootstrap.yaml index d13cb435aa..c1cb08f5aa 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/deployments/bootstrap.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/deployments/bootstrap.yaml @@ -75,7 +75,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/component-level.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/component-level.yaml index 8c0ab19993..d2f6bf04f6 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/deployments/component-level.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/deployments/component-level.yaml @@ -75,7 +75,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/custom-sa.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/custom-sa.yaml index 48a39db628..a884233830 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/deployments/custom-sa.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/deployments/custom-sa.yaml @@ -253,7 +253,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/default.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/default.yaml index 3019988cd8..2e7ad98c34 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/deployments/default.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/deployments/default.yaml @@ -238,7 +238,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/disable-prometheus.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/disable-prometheus.yaml index e2100ad08b..0432d1db5b 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/deployments/disable-prometheus.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/deployments/disable-prometheus.yaml @@ -187,7 +187,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/dual-stack.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/dual-stack.yaml index 4ce1db5424..b44e6fc9d4 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/deployments/dual-stack.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/deployments/dual-stack.yaml @@ -239,7 +239,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/gateway-namespace-mode.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/gateway-namespace-mode.yaml index d7d3a2b4c0..2cd2ab3de7 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/deployments/gateway-namespace-mode.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/deployments/gateway-namespace-mode.yaml @@ -253,7 +253,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/ipv6.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/ipv6.yaml index 7910cbbd18..0d94623635 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/deployments/ipv6.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/deployments/ipv6.yaml @@ -239,7 +239,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/override-labels-and-annotations.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/override-labels-and-annotations.yaml index d8f96aeb6f..d84ccae702 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/deployments/override-labels-and-annotations.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/deployments/override-labels-and-annotations.yaml @@ -247,7 +247,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/override-prometheus-annotations.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/override-prometheus-annotations.yaml index 3504873a6d..2030e3ee4a 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/deployments/override-prometheus-annotations.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/deployments/override-prometheus-annotations.yaml @@ -240,7 +240,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/patch-deployment.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/patch-deployment.yaml index 226ab5c1ff..cbaed225b3 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/deployments/patch-deployment.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/deployments/patch-deployment.yaml @@ -238,7 +238,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/shutdown-manager.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/shutdown-manager.yaml index 896d5cc4fa..5ccfcace4c 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/deployments/shutdown-manager.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/deployments/shutdown-manager.yaml @@ -238,7 +238,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-annotations.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-annotations.yaml index 2eb45eae89..6d37e1ca86 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-annotations.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-annotations.yaml @@ -243,7 +243,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-concurrency.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-concurrency.yaml index fd4d70f7f5..9e92b72fdb 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-concurrency.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-concurrency.yaml @@ -77,7 +77,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-empty-memory-limits.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-empty-memory-limits.yaml index be20ee36cf..23f20ba400 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-empty-memory-limits.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-empty-memory-limits.yaml @@ -238,7 +238,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-extra-args.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-extra-args.yaml index 2b4544ea30..9231af98d6 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-extra-args.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-extra-args.yaml @@ -242,7 +242,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-image-pull-secrets.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-image-pull-secrets.yaml index e5ae957a47..476dc1ad7f 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-image-pull-secrets.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-image-pull-secrets.yaml @@ -238,7 +238,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-name.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-name.yaml index dbec5ca778..3cfd96a316 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-name.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-name.yaml @@ -238,7 +238,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-node-selector.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-node-selector.yaml index 74f4ba7bb3..0f055c2597 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-node-selector.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-node-selector.yaml @@ -238,7 +238,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-priority-class-name.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-priority-class-name.yaml index 1f59f586e7..1d7b17410b 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-priority-class-name.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-priority-class-name.yaml @@ -238,7 +238,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-topology-spread-constraints.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-topology-spread-constraints.yaml index a620571748..3ae03cea96 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-topology-spread-constraints.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/deployments/with-topology-spread-constraints.yaml @@ -238,7 +238,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/proxy/testdata/gateway-namespace-mode/deployment.yaml b/internal/infrastructure/kubernetes/proxy/testdata/gateway-namespace-mode/deployment.yaml index a3eef881d0..e07b05c263 100644 --- a/internal/infrastructure/kubernetes/proxy/testdata/gateway-namespace-mode/deployment.yaml +++ b/internal/infrastructure/kubernetes/proxy/testdata/gateway-namespace-mode/deployment.yaml @@ -253,7 +253,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -686,7 +686,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['topology.kubernetes.io/zone'] - image: docker.io/envoyproxy/envoy:distroless-v1.37.1 + image: docker.io/envoyproxy/envoy:distroless-v1.37.2 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/default.yaml b/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/default.yaml index c347f5d945..5a7d2cab31 100644 --- a/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/default.yaml +++ b/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/default.yaml @@ -84,7 +84,7 @@ spec: value: :19001 - name: PROMETHEUS_MAPPER_YAML value: /etc/statsd-exporter/conf.yaml - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 diff --git a/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/disable-prometheus.yaml b/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/disable-prometheus.yaml index 220ff09fca..6c3836d704 100644 --- a/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/disable-prometheus.yaml +++ b/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/disable-prometheus.yaml @@ -74,7 +74,7 @@ spec: value: tcp - name: REDIS_URL value: redis.redis.svc:6379 - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 diff --git a/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/enable-tracing-custom.yaml b/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/enable-tracing-custom.yaml index 780cfb9cc6..afe556a514 100644 --- a/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/enable-tracing-custom.yaml +++ b/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/enable-tracing-custom.yaml @@ -99,7 +99,7 @@ spec: value: "0.6" - name: OTEL_EXPORTER_OTLP_ENDPOINT value: http://trace-collector.envoy-gateway-system.svc.cluster.local:4317 - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 diff --git a/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/enable-tracing.yaml b/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/enable-tracing.yaml index ef0bac44ab..df92c185e1 100644 --- a/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/enable-tracing.yaml +++ b/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/enable-tracing.yaml @@ -99,7 +99,7 @@ spec: value: "1.0" - name: OTEL_EXPORTER_OTLP_ENDPOINT value: http://trace-collector.envoy-gateway-system.svc.cluster.local:4318 - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 diff --git a/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/merge-annotations.yaml b/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/merge-annotations.yaml index e3972405d1..bb606f7375 100644 --- a/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/merge-annotations.yaml +++ b/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/merge-annotations.yaml @@ -86,7 +86,7 @@ spec: value: :19001 - name: PROMETHEUS_MAPPER_YAML value: /etc/statsd-exporter/conf.yaml - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 diff --git a/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/merge-labels.yaml b/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/merge-labels.yaml index 67659b50aa..81070009de 100644 --- a/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/merge-labels.yaml +++ b/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/merge-labels.yaml @@ -86,7 +86,7 @@ spec: value: :19001 - name: PROMETHEUS_MAPPER_YAML value: /etc/statsd-exporter/conf.yaml - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 diff --git a/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/patch-deployment-containers.yaml b/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/patch-deployment-containers.yaml index 5190913705..0f1454aeb0 100644 --- a/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/patch-deployment-containers.yaml +++ b/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/patch-deployment-containers.yaml @@ -86,7 +86,7 @@ spec: value: :19001 - name: PROMETHEUS_MAPPER_YAML value: /etc/statsd-exporter/conf.yaml - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 imagePullPolicy: Always livenessProbe: failureThreshold: 3 diff --git a/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/patch-deployment.yaml b/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/patch-deployment.yaml index 60eb929804..1131cd7916 100644 --- a/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/patch-deployment.yaml +++ b/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/patch-deployment.yaml @@ -84,7 +84,7 @@ spec: value: :19001 - name: PROMETHEUS_MAPPER_YAML value: /etc/statsd-exporter/conf.yaml - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 diff --git a/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/with-node-selector.yaml b/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/with-node-selector.yaml index ce916b7544..f6bbe5e4c2 100644 --- a/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/with-node-selector.yaml +++ b/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/with-node-selector.yaml @@ -84,7 +84,7 @@ spec: value: :19001 - name: PROMETHEUS_MAPPER_YAML value: /etc/statsd-exporter/conf.yaml - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 diff --git a/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/with-topology-spread-constraints.yaml b/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/with-topology-spread-constraints.yaml index d61bdf445c..53d7067868 100644 --- a/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/with-topology-spread-constraints.yaml +++ b/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/with-topology-spread-constraints.yaml @@ -84,7 +84,7 @@ spec: value: :19001 - name: PROMETHEUS_MAPPER_YAML value: /etc/statsd-exporter/conf.yaml - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 diff --git a/release-notes/v1.7.2.yaml b/release-notes/v1.7.2.yaml new file mode 100644 index 0000000000..f42487900b --- /dev/null +++ b/release-notes/v1.7.2.yaml @@ -0,0 +1,23 @@ +date: April 16, 2026 + +# Changes that are expected to cause an incompatibility with previous versions, such as deletions or modifications to existing APIs. +breaking changes: | + +# Updates addressing vulnerabilities, security flaws, or compliance requirements. +security updates: | + Bump Envoy Proxy image to v1.37.2 for fixing several bugs. For more details, please refer to the [Envoy Proxy v1.37.2 release notes](https://github.com/envoyproxy/envoy/releases/tag/v1.37.2). + Bump Envoy ratelimit image to `05c08d03`. + +# New features or capabilities added in this release. +new features: | + +bug fixes: | + +# Enhancements that improve performance. +performance improvements: | + +# Deprecated features or APIs. +deprecations: | + +# Other notable changes not covered by the above sections. +Other changes: | diff --git a/site/content/en/latest/install/gateway-helm-api.md b/site/content/en/latest/install/gateway-helm-api.md index 5485ddc772..f50fef63d2 100644 --- a/site/content/en/latest/install/gateway-helm-api.md +++ b/site/content/en/latest/install/gateway-helm-api.md @@ -82,4 +82,3 @@ The Helm chart for Envoy Gateway | service.type | string | `"ClusterIP"` | Service type. Can be set to LoadBalancer with specific IP, e.g.: type: LoadBalancer loadBalancerIP: 10.236.90.20 | | topologyInjector.annotations | object | `{}` | | | topologyInjector.enabled | bool | `true` | | - diff --git a/test/helm/gateway-helm/certgen-annotations.out.yaml b/test/helm/gateway-helm/certgen-annotations.out.yaml index a063f1a520..65235034db 100644 --- a/test/helm/gateway-helm/certgen-annotations.out.yaml +++ b/test/helm/gateway-helm/certgen-annotations.out.yaml @@ -38,7 +38,7 @@ data: kubernetes: rateLimitDeployment: container: - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 patch: type: StrategicMerge value: diff --git a/test/helm/gateway-helm/certgen-args.out.yaml b/test/helm/gateway-helm/certgen-args.out.yaml index 84fe4092b0..c552962743 100644 --- a/test/helm/gateway-helm/certgen-args.out.yaml +++ b/test/helm/gateway-helm/certgen-args.out.yaml @@ -38,7 +38,7 @@ data: kubernetes: rateLimitDeployment: container: - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 patch: type: StrategicMerge value: diff --git a/test/helm/gateway-helm/certgen-labels.out.yaml b/test/helm/gateway-helm/certgen-labels.out.yaml index 77a371df7a..5903ba814f 100644 --- a/test/helm/gateway-helm/certgen-labels.out.yaml +++ b/test/helm/gateway-helm/certgen-labels.out.yaml @@ -38,7 +38,7 @@ data: kubernetes: rateLimitDeployment: container: - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 patch: type: StrategicMerge value: diff --git a/test/helm/gateway-helm/certjen-custom-scheduling.out.yaml b/test/helm/gateway-helm/certjen-custom-scheduling.out.yaml index 52ad6698bb..fcff1ec7ef 100644 --- a/test/helm/gateway-helm/certjen-custom-scheduling.out.yaml +++ b/test/helm/gateway-helm/certjen-custom-scheduling.out.yaml @@ -38,7 +38,7 @@ data: kubernetes: rateLimitDeployment: container: - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 patch: type: StrategicMerge value: diff --git a/test/helm/gateway-helm/control-plane-with-pdb.out.yaml b/test/helm/gateway-helm/control-plane-with-pdb.out.yaml index 0cf43a1e8c..0a90491508 100644 --- a/test/helm/gateway-helm/control-plane-with-pdb.out.yaml +++ b/test/helm/gateway-helm/control-plane-with-pdb.out.yaml @@ -53,7 +53,7 @@ data: kubernetes: rateLimitDeployment: container: - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 patch: type: StrategicMerge value: diff --git a/test/helm/gateway-helm/default-config.out.yaml b/test/helm/gateway-helm/default-config.out.yaml index eaf2f3f651..8c7652993a 100644 --- a/test/helm/gateway-helm/default-config.out.yaml +++ b/test/helm/gateway-helm/default-config.out.yaml @@ -38,7 +38,7 @@ data: kubernetes: rateLimitDeployment: container: - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 patch: type: StrategicMerge value: diff --git a/test/helm/gateway-helm/deployment-annotations.out.yaml b/test/helm/gateway-helm/deployment-annotations.out.yaml index ae4db371a2..0f63d144a8 100644 --- a/test/helm/gateway-helm/deployment-annotations.out.yaml +++ b/test/helm/gateway-helm/deployment-annotations.out.yaml @@ -38,7 +38,7 @@ data: kubernetes: rateLimitDeployment: container: - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 patch: type: StrategicMerge value: diff --git a/test/helm/gateway-helm/deployment-custom-topology.out.yaml b/test/helm/gateway-helm/deployment-custom-topology.out.yaml index fe567778cc..73c5061649 100644 --- a/test/helm/gateway-helm/deployment-custom-topology.out.yaml +++ b/test/helm/gateway-helm/deployment-custom-topology.out.yaml @@ -38,7 +38,7 @@ data: kubernetes: rateLimitDeployment: container: - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 patch: type: StrategicMerge value: diff --git a/test/helm/gateway-helm/deployment-images-config.out.yaml b/test/helm/gateway-helm/deployment-images-config.out.yaml index 8e9c32076e..a5be03cf40 100644 --- a/test/helm/gateway-helm/deployment-images-config.out.yaml +++ b/test/helm/gateway-helm/deployment-images-config.out.yaml @@ -38,7 +38,7 @@ data: kubernetes: rateLimitDeployment: container: - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 patch: type: StrategicMerge value: diff --git a/test/helm/gateway-helm/deployment-priorityclass.out.yaml b/test/helm/gateway-helm/deployment-priorityclass.out.yaml index ac15a4207b..3b508d9bb7 100644 --- a/test/helm/gateway-helm/deployment-priorityclass.out.yaml +++ b/test/helm/gateway-helm/deployment-priorityclass.out.yaml @@ -38,7 +38,7 @@ data: kubernetes: rateLimitDeployment: container: - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 patch: type: StrategicMerge value: diff --git a/test/helm/gateway-helm/deployment-repo-no-registry.out.yaml b/test/helm/gateway-helm/deployment-repo-no-registry.out.yaml index 05823550dc..8400497923 100644 --- a/test/helm/gateway-helm/deployment-repo-no-registry.out.yaml +++ b/test/helm/gateway-helm/deployment-repo-no-registry.out.yaml @@ -38,7 +38,7 @@ data: kubernetes: rateLimitDeployment: container: - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 patch: type: StrategicMerge value: diff --git a/test/helm/gateway-helm/deployment-securitycontext.out.yaml b/test/helm/gateway-helm/deployment-securitycontext.out.yaml index 0d7bbddccc..8deae81457 100644 --- a/test/helm/gateway-helm/deployment-securitycontext.out.yaml +++ b/test/helm/gateway-helm/deployment-securitycontext.out.yaml @@ -38,7 +38,7 @@ data: kubernetes: rateLimitDeployment: container: - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 patch: type: StrategicMerge value: diff --git a/test/helm/gateway-helm/envoy-gateway-gateway-namespace-config-watch.out.yaml b/test/helm/gateway-helm/envoy-gateway-gateway-namespace-config-watch.out.yaml index 8a09ebd9ee..07fdd5c2d3 100644 --- a/test/helm/gateway-helm/envoy-gateway-gateway-namespace-config-watch.out.yaml +++ b/test/helm/gateway-helm/envoy-gateway-gateway-namespace-config-watch.out.yaml @@ -40,7 +40,7 @@ data: type: GatewayNamespace rateLimitDeployment: container: - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 patch: type: StrategicMerge value: diff --git a/test/helm/gateway-helm/envoy-gateway-gateway-namespace-config.out.yaml b/test/helm/gateway-helm/envoy-gateway-gateway-namespace-config.out.yaml index 4af0ec2202..deed3bd0af 100644 --- a/test/helm/gateway-helm/envoy-gateway-gateway-namespace-config.out.yaml +++ b/test/helm/gateway-helm/envoy-gateway-gateway-namespace-config.out.yaml @@ -40,7 +40,7 @@ data: type: GatewayNamespace rateLimitDeployment: container: - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 patch: type: StrategicMerge value: diff --git a/test/helm/gateway-helm/envoy-gateway-gateway-namespace-namespaceselector.out.yaml b/test/helm/gateway-helm/envoy-gateway-gateway-namespace-namespaceselector.out.yaml index 4b63f3f763..b76384847d 100644 --- a/test/helm/gateway-helm/envoy-gateway-gateway-namespace-namespaceselector.out.yaml +++ b/test/helm/gateway-helm/envoy-gateway-gateway-namespace-namespaceselector.out.yaml @@ -40,7 +40,7 @@ data: type: GatewayNamespace rateLimitDeployment: container: - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 patch: type: StrategicMerge value: diff --git a/test/helm/gateway-helm/global-pullsecrets-override-deployment.in.yaml b/test/helm/gateway-helm/global-pullsecrets-override-deployment.in.yaml index 64cbd7fc94..6336830dcd 100644 --- a/test/helm/gateway-helm/global-pullsecrets-override-deployment.in.yaml +++ b/test/helm/gateway-helm/global-pullsecrets-override-deployment.in.yaml @@ -12,7 +12,7 @@ global: - key5: "value5" - key6: "value6" ratelimit: - image: "docker.io/envoyproxy/ratelimit:c8765e89" + image: "docker.io/envoyproxy/ratelimit:05c08d03" deployment: envoyGateway: diff --git a/test/helm/gateway-helm/global-pullsecrets-override-deployment.out.yaml b/test/helm/gateway-helm/global-pullsecrets-override-deployment.out.yaml index 15f2913f1c..f80cc127df 100644 --- a/test/helm/gateway-helm/global-pullsecrets-override-deployment.out.yaml +++ b/test/helm/gateway-helm/global-pullsecrets-override-deployment.out.yaml @@ -38,7 +38,7 @@ data: kubernetes: rateLimitDeployment: container: - image: private.registry/envoyproxy/ratelimit:c8765e89 + image: private.registry/envoyproxy/ratelimit:05c08d03 patch: type: StrategicMerge value: diff --git a/test/helm/gateway-helm/global-pullsecrets-override-global.in.yaml b/test/helm/gateway-helm/global-pullsecrets-override-global.in.yaml index 6dea332fb9..691a70b63b 100644 --- a/test/helm/gateway-helm/global-pullsecrets-override-global.in.yaml +++ b/test/helm/gateway-helm/global-pullsecrets-override-global.in.yaml @@ -12,4 +12,4 @@ global: - key5: "value5" - key6: "value6" ratelimit: - image: "docker.io/envoyproxy/ratelimit:c8765e89" + image: "docker.io/envoyproxy/ratelimit:05c08d03" diff --git a/test/helm/gateway-helm/global-pullsecrets-override-global.out.yaml b/test/helm/gateway-helm/global-pullsecrets-override-global.out.yaml index 233b8705de..9309cbc09a 100644 --- a/test/helm/gateway-helm/global-pullsecrets-override-global.out.yaml +++ b/test/helm/gateway-helm/global-pullsecrets-override-global.out.yaml @@ -38,7 +38,7 @@ data: kubernetes: rateLimitDeployment: container: - image: private.registry/envoyproxy/ratelimit:c8765e89 + image: private.registry/envoyproxy/ratelimit:05c08d03 patch: type: StrategicMerge value: diff --git a/test/helm/gateway-helm/global-registry-override-deployment.in.yaml b/test/helm/gateway-helm/global-registry-override-deployment.in.yaml index 100afe340b..22487a3e05 100644 --- a/test/helm/gateway-helm/global-registry-override-deployment.in.yaml +++ b/test/helm/gateway-helm/global-registry-override-deployment.in.yaml @@ -5,7 +5,7 @@ global: image: "docker.io/envoyproxy/gateway-dev:latest" pullPolicy: Always ratelimit: - image: "docker.io/envoyproxy/ratelimit:c8765e89" + image: "docker.io/envoyproxy/ratelimit:05c08d03" deployment: envoyGateway: diff --git a/test/helm/gateway-helm/global-registry-override-deployment.out.yaml b/test/helm/gateway-helm/global-registry-override-deployment.out.yaml index 88b1bddac8..9877113dba 100644 --- a/test/helm/gateway-helm/global-registry-override-deployment.out.yaml +++ b/test/helm/gateway-helm/global-registry-override-deployment.out.yaml @@ -38,7 +38,7 @@ data: kubernetes: rateLimitDeployment: container: - image: private.registry/envoyproxy/ratelimit:c8765e89 + image: private.registry/envoyproxy/ratelimit:05c08d03 patch: type: StrategicMerge value: diff --git a/test/helm/gateway-helm/global-registry-override-global.in.yaml b/test/helm/gateway-helm/global-registry-override-global.in.yaml index f465ff9ade..334e55345e 100644 --- a/test/helm/gateway-helm/global-registry-override-global.in.yaml +++ b/test/helm/gateway-helm/global-registry-override-global.in.yaml @@ -5,4 +5,4 @@ global: image: "docker.io/envoyproxy/gateway-dev:latest" pullPolicy: Always ratelimit: - image: "docker.io/envoyproxy/ratelimit:c8765e89" + image: "docker.io/envoyproxy/ratelimit:05c08d03" diff --git a/test/helm/gateway-helm/global-registry-override-global.out.yaml b/test/helm/gateway-helm/global-registry-override-global.out.yaml index ddf7567646..2f96224974 100644 --- a/test/helm/gateway-helm/global-registry-override-global.out.yaml +++ b/test/helm/gateway-helm/global-registry-override-global.out.yaml @@ -38,7 +38,7 @@ data: kubernetes: rateLimitDeployment: container: - image: private.registry/envoyproxy/ratelimit:c8765e89 + image: private.registry/envoyproxy/ratelimit:05c08d03 patch: type: StrategicMerge value: diff --git a/test/helm/gateway-helm/horizontal-pod-autoscaler-disabled.out.yaml b/test/helm/gateway-helm/horizontal-pod-autoscaler-disabled.out.yaml index f3c2c94d49..99373e26d9 100644 --- a/test/helm/gateway-helm/horizontal-pod-autoscaler-disabled.out.yaml +++ b/test/helm/gateway-helm/horizontal-pod-autoscaler-disabled.out.yaml @@ -38,7 +38,7 @@ data: kubernetes: rateLimitDeployment: container: - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 patch: type: StrategicMerge value: diff --git a/test/helm/gateway-helm/horizontal-pod-autoscaler.out.yaml b/test/helm/gateway-helm/horizontal-pod-autoscaler.out.yaml index 2fa508cff2..22bcedda0f 100644 --- a/test/helm/gateway-helm/horizontal-pod-autoscaler.out.yaml +++ b/test/helm/gateway-helm/horizontal-pod-autoscaler.out.yaml @@ -38,7 +38,7 @@ data: kubernetes: rateLimitDeployment: container: - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 patch: type: StrategicMerge value: diff --git a/test/helm/gateway-helm/service-customization.out.yaml b/test/helm/gateway-helm/service-customization.out.yaml index ec612319cd..6c6ac207be 100644 --- a/test/helm/gateway-helm/service-customization.out.yaml +++ b/test/helm/gateway-helm/service-customization.out.yaml @@ -38,7 +38,7 @@ data: kubernetes: rateLimitDeployment: container: - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 patch: type: StrategicMerge value: diff --git a/test/helm/gateway-helm/webhook-disabled.out.yaml b/test/helm/gateway-helm/webhook-disabled.out.yaml index eda0ea7d65..36bcb5603f 100644 --- a/test/helm/gateway-helm/webhook-disabled.out.yaml +++ b/test/helm/gateway-helm/webhook-disabled.out.yaml @@ -38,7 +38,7 @@ data: kubernetes: rateLimitDeployment: container: - image: docker.io/envoyproxy/ratelimit:c8765e89 + image: docker.io/envoyproxy/ratelimit:05c08d03 patch: type: StrategicMerge value: From 294aafa8eb673b35f29e6db23edc11ab8ac0a966 Mon Sep 17 00:00:00 2001 From: Karol Szwaj Date: Wed, 15 Apr 2026 13:26:47 +0200 Subject: [PATCH 2/2] fix generate Signed-off-by: Karol Szwaj --- charts/gateway-helm/README.md | 1 + site/content/en/latest/install/gateway-helm-api.md | 3 ++- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/charts/gateway-helm/README.md b/charts/gateway-helm/README.md index eae0cd74c4..4e2b1a9bcf 100644 --- a/charts/gateway-helm/README.md +++ b/charts/gateway-helm/README.md @@ -118,3 +118,4 @@ helm uninstall eg -n envoy-gateway-system | service.type | string | `"ClusterIP"` | Service type. Can be set to LoadBalancer with specific IP, e.g.: type: LoadBalancer loadBalancerIP: 10.236.90.20 | | topologyInjector.annotations | object | `{}` | | | topologyInjector.enabled | bool | `true` | | + diff --git a/site/content/en/latest/install/gateway-helm-api.md b/site/content/en/latest/install/gateway-helm-api.md index f50fef63d2..08304d5379 100644 --- a/site/content/en/latest/install/gateway-helm-api.md +++ b/site/content/en/latest/install/gateway-helm-api.md @@ -67,7 +67,7 @@ The Helm chart for Envoy Gateway | global.images.envoyGateway.image | string | `nil` | | | global.images.envoyGateway.pullPolicy | string | `nil` | | | global.images.envoyGateway.pullSecrets | list | `[]` | | -| global.images.ratelimit.image | string | `"docker.io/envoyproxy/ratelimit:c8765e89"` | | +| global.images.ratelimit.image | string | `"docker.io/envoyproxy/ratelimit:05c08d03"` | | | global.images.ratelimit.pullPolicy | string | `"IfNotPresent"` | | | global.images.ratelimit.pullSecrets | list | `[]` | | | hpa.behavior | object | `{}` | | @@ -82,3 +82,4 @@ The Helm chart for Envoy Gateway | service.type | string | `"ClusterIP"` | Service type. Can be set to LoadBalancer with specific IP, e.g.: type: LoadBalancer loadBalancerIP: 10.236.90.20 | | topologyInjector.annotations | object | `{}` | | | topologyInjector.enabled | bool | `true` | | +