v1.4.2

Release Announcement

Check out the v1.4.2 release announcement to learn more about the release.

Security Updates

• Disabled automountServiceAccountToken for proxy and ratelimit deployments and serviceAccounts.

Bug Fixes

• Fixed issue where EnvoyExtensionPolicy ExtProc body processing mode was set to FullDuplexStreamed, but trailers were not sent.
• Fixed validation issue where EnvoyExtensionPolicy ExtProc with failOpen set to true did not reject the FullDuplexStreamed body processing mode.
• Fixed issue where EnvoyPatchPolicy could not replace the telemetry cluster.
• Added validation for section names in Gateway listeners.
• Added ConfigMap indexers for EnvoyExtensionPolicies to reconcile Lua changes.
• Fixed issue where the default access log format was not working.
• Fixed bug where backendRequestTimeout was incorrectly set when retries were enabled.
• Fixed certificate SANs overlap detection in listeners.
• Fixed issue where telemetry did not work when using host port.
• Fixed bug where BackendTLSPolicy incorrectly referenced ConfigMaps or Secrets across namespaces.

What's Changed

• [release/v1.4] cherry pick v1.4.2 by @shawnh2 in #6452
• [release/1.4] release note for 1.4.2 by @zhaohuabing in #6465

Full Changelog: v1.4.1...v1.4.2