Merge pull request #12 from selectel/add-envoy-gateway-v1.7.1

update to v1.7.1

Author: penzinav

charts/gateway-helm/Chart.lock

@@ -3,8 +3,8 @@ name: gateway-helm
 description: The Helm chart for Envoy Gateway
 type: application
 
-version: v0.0.0-latest
-appVersion: "latest"
+version: v1.7.1
+appVersion: 1.7.1
 icon: https://raw.githubusercontent.com/envoyproxy/gateway/main/site/assets/icons/logo.svg
 
 maintainers:
@@ -23,7 +23,3 @@ home: https://gateway.envoyproxy.io/
 
 sources:
   - https://github.com/envoyproxy/gateway
-
-dependencies:
-  - name: crds
-    version: "0.0.0"

charts/gateway-helm/Chart.yaml

@@ -17,12 +17,6 @@ The Helm chart for Envoy Gateway
 
 * <https://github.com/envoyproxy/gateway>
 
-## Requirements
-
-| Repository | Name | Version |
-|------------|------|---------|
-|  | crds | 0.0.0 |
-
 ## Usage
 
 [Helm](https://helm.sh) must be installed to use the charts.
@@ -66,7 +60,6 @@ helm uninstall eg -n envoy-gateway-system
 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
 | certgen | object | `{"job":{"affinity":{},"annotations":{},"args":[],"nodeSelector":{},"pod":{"annotations":{},"labels":{}},"resources":{},"securityContext":{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"privileged":false,"readOnlyRootFilesystem":true,"runAsGroup":65532,"runAsNonRoot":true,"runAsUser":65532,"seccompProfile":{"type":"RuntimeDefault"}},"tolerations":[],"ttlSecondsAfterFinished":30},"rbac":{"annotations":{},"labels":{}}}` | Certgen is used to generate the certificates required by EnvoyGateway. If you want to construct a custom certificate, you can generate a custom certificate through Cert-Manager before installing EnvoyGateway. Certgen will not overwrite the custom certificate. Please do not manually modify `values.yaml` to disable certgen, it may cause EnvoyGateway OIDC,OAuth2,etc. to not work as expected. |
-| commonLabels | object | `{}` | Labels to apply to all resources |
 | config.envoyGateway | object | `{"extensionApis":{},"gateway":{"controllerName":"gateway.envoyproxy.io/gatewayclass-controller"},"logging":{"level":{"default":"info"}},"provider":{"type":"Kubernetes"}}` | EnvoyGateway configuration. Visit https://gateway.envoyproxy.io/docs/api/extension_types/#envoygateway to view all options. |
 | createNamespace | bool | `false` |  |
 | deployment.annotations | object | `{}` |  |
@@ -110,7 +103,7 @@ helm uninstall eg -n envoy-gateway-system
 | global.images.envoyGateway.image | string | `nil` |  |
 | global.images.envoyGateway.pullPolicy | string | `nil` |  |
 | global.images.envoyGateway.pullSecrets | list | `[]` |  |
-| global.images.ratelimit.image | string | `"docker.io/envoyproxy/ratelimit:master"` |  |
+| global.images.ratelimit.image | string | `"docker.io/envoyproxy/ratelimit:c8765e89"` |  |
 | global.images.ratelimit.pullPolicy | string | `"IfNotPresent"` |  |
 | global.images.ratelimit.pullSecrets | list | `[]` |  |
 | hpa.behavior | object | `{}` |  |
@@ -119,7 +112,6 @@ helm uninstall eg -n envoy-gateway-system
 | hpa.metrics | list | `[]` |  |
 | hpa.minReplicas | int | `1` |  |
 | kubernetesClusterDomain | string | `"cluster.local"` |  |
-| namespaceOverride | string | `""` | Override the namespace for resources deployed by the chart. Defaults to the release namespace. |
 | podDisruptionBudget.minAvailable | int | `0` |  |
 | service.annotations | object | `{}` |  |
 | service.trafficDistribution | string | `""` |  |

charts/gateway-helm/README.md

@@ -241,8 +241,6 @@ spec:
                     description: |-
                       Ciphers specifies the set of cipher suites supported when
                       negotiating TLS 1.0 - 1.2. This setting has no effect for TLS 1.3.
-                      For the list of supported ciphers, please refer to the Envoy documentation:
-                      https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/transport_sockets/tls/v3/common.proto#extensions-transport-sockets-tls-v3-tlsparameters
                       In non-FIPS Envoy Proxy builds the default cipher list is:
                       - [ECDHE-ECDSA-AES128-GCM-SHA256|ECDHE-ECDSA-CHACHA20-POLY1305]
                       - [ECDHE-RSA-AES128-GCM-SHA256|ECDHE-RSA-CHACHA20-POLY1305]
@@ -312,26 +310,6 @@ spec:
                     items:
                       type: string
                     type: array
-                  fingerprints:
-                    description: |-
-                      Fingerprints specifies TLS client fingerprinting.
-                      When specified, a JAX fingerprint derived from the client’s TLS handshake
-                      is generated. The fingerprint can be logged in access logs or
-                      forwarded to upstream services using request headers.
-
-                      Fingerprinting is disabled if not specified.
-
-                      Supported values are:
-                      - JA3
-                      - JA4
-                    items:
-                      description: TLSFingerprintType specifies the TLS client fingerprinting
-                        mode.
-                      enum:
-                      - JA3
-                      - JA4
-                      type: string
-                    type: array
                   insecureSkipVerify:
                     default: false
                     description: |-
@@ -389,9 +367,8 @@ spec:
                       If WellKnownCACertificates is unspecified or empty (""), then CACertificateRefs
                       must be specified with at least one entry for a valid configuration. Only one of
                       CACertificateRefs or WellKnownCACertificates may be specified, not both.
-                    maxLength: 253
-                    minLength: 1
-                    pattern: ^(System|([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/([A-Za-z0-9][-A-Za-z0-9_.]{0,61})?[A-Za-z0-9]))$
+                    enum:
+                    - System
                     type: string
                 type: object
                 x-kubernetes-validations: