v2.14.2
📦 kumaView on GitHub →
✨ 4 features🐛 16 fixes🔧 10 symbols
Summary
This release introduces a pluggable per-route metadata provider and unified naming conventions for various XDS components. It also includes numerous bug fixes related to gateway handling, authentication, Kubernetes integration, and XDS configurations.
✨ New Features
- Added pluggable per-route metadata provider to the API server.
- Introduced unified-name for empty listener tags in XDS.
- Introduced unified naming for zone egress in MTP.
- Introduced unified naming for zone-proxy admin cluster in XDS.
🐛 Bug Fixes
- Kept delegated gateways when meshServices.mode is Exclusive.
- Ensured return after HandleError in inspect handlers.
- Required workload-bound token for workload-derived identity.
- Copied node labels to Dataplane labels in Kubernetes.
- Attributed zone-to-global synced resources by the connecting zone's client-id.
- Restricted readiness reporter to /ready in kuma-dp.
- Fixed gateway tag not being required for tagless configurations.
- Fixed meshaccesslog to match rule-scoped route ids.
- Fixed meshproxypatch to match unified listener names.
- Fixed meshservice identities fallback to tagless.
- Fixed mTLS to derive identity without tags.
- Fixed inbound cluster name lookup in XDS.
- Fixed unified naming detection for zone proxies in XDS.
- Fixed probe fallback route to use unified cluster name in XDS.
- Throttled dataplane cert issuance on CA failure.
- Fixed zone fallback for tagless dataplanes in XDS.