v1.6.4
Updated Envoy Gateway to v1.6.4
Breaking Changes
- Gateway API CRD has been updated. See the Gateway API changelog for migration details.
Security Updates
- Updated Go runtime to
1.25.7with security patches for the go command and TLS/crypto libraries.
Bug Fixes
- Fixed premature readiness reporting that could route traffic before the controller finished syncing.
- Fixed an issue where invalid EnvoyPatchPolicy blocked processing of remaining xDS resources.
- Fixed TCPRoute with mTLS not working due to incorrect auto HTTP protocol detection on TCP clusters.
- Fixed logging level configuration not being applied correctly in some components.
- Fixed a conflict where route-level idle timeout settings blocked listener-level idle timeout configuration.
- Fixed OAuth2 redirect failures caused by incorrect ordering of custom response filters in the filter chain.
- Fixed shutdown manager incorrectly counting internal listener connections, which could prevent graceful shutdown.
- Fixed BackendTLSPolicy ResolvedRefs status reason to align with Gateway API specification.