v0.26.0

Upgrading

kubectl apply -k github.com/pomerium/ingress-controller/config/default\?ref=v0.26.0

See docs for further details.

What's Changed

Breaking

• remove cookie secure option by @calebdoxsey in #872
• envoy: set explicit hostname on cluster endpoints by @kenjenkins in pomerium/pomerium#5018

New

• Support for empty host in ingress rules (#941) by @kralicky in #945

Fixes

• fix disabled set response headers by @calebdoxsey in #877

Changed

• See summary of Pomerium Core changes: https://github.com/pomerium/pomerium/releases/tag/v0.26.0
• ingress-controller/ci: check docker base images by @calebdoxsey in #871
• docker: use distroless noroot user/group by @wasaga in #878
• logs: set default log level to info by @wasaga in #950

Dependency Updates

• go: upgrade Go to 1.22 by @wasaga in #898
• ingress-controller/mock: switch to uber mock by @calebdoxsey in #939
• envoy: upgrade to v1.30.1 by @kenjenkins in #943
• build(deps): bump google.golang.org/grpc from 1.60.1 to 1.61.0 by @dependabot in #883
• build(deps): bump docker/metadata-action from 5.4.0 to 5.5.1 by @dependabot in #893
• build(deps): bump golang.org/x/sync from 0.5.0 to 0.6.0 by @dependabot in #892
• build(deps): bump github.com/google/uuid from 1.5.0 to 1.6.0 by @dependabot in #882
• build(deps): bump github.com/go-playground/validator/v10 from 10.16.0 to 10.17.0 by @dependabot in #884
• build(deps): bump github.com/open-policy-agent/opa from 0.60.0 to 0.61.0 by @dependabot in #885
• build(deps): bump actions/cache from 3.3.2 to 4.0.0 by @dependabot in #894
• deps: upgrade k8s api version and controller-runtime by @wasaga in #896
• build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in #916
• build(deps): bump github.com/gosimple/slug from 1.13.1 to 1.14.0 by @dependabot in #915
• build(deps): bump google.golang.org/grpc from 1.61.0 to 1.62.0 by @dependabot in #913
• build(deps): bump sigs.k8s.io/controller-runtime from 0.17.0 to 0.17.2 by @dependabot in #912
• build(deps): bump pre-commit/action from 3.0.0 to 3.0.1 by @dependabot in #908
• build(deps): bump actions/cache from 4.0.0 to 4.0.1 by @dependabot in #907
• build(deps): bump k8s.io/apimachinery from 0.29.0 to 0.29.2 by @dependabot in #909
• build(deps): bump github.com/rs/zerolog from 1.31.0 to 1.32.0 by @dependabot in #901
• build(deps): bump distroless/base-debian12 from 8548e30 to 530b451 by @dependabot in #899
• build(deps): bump go.uber.org/zap from 1.26.0 to 1.27.0 by @dependabot in #911
• build(deps): bump github.com/go-playground/validator/v10 from 10.17.0 to 10.18.0 by @dependabot in #914
• build(deps): bump golangci/golangci-lint-action from 3.7.0 to 4.0.0 by @dependabot in #905
• build(deps): bump docker/setup-buildx-action from 3.0.0 to 3.1.0 by @dependabot in #904
• build(deps): bump github.com/open-policy-agent/opa from 0.61.0 to 0.62.0 by @dependabot in #902
• chore(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0 by @kenjenkins in #917
• build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 by @dependabot in #918
• build(deps): bump the docker group with 1 update by @dependabot in #920
• build(deps): bump the github-actions group with 2 updates by @dependabot in #921
• build(deps): bump github.com/jackc/pgx/v5 from 5.5.2 to 5.5.4 by @dependabot in #924
• build(deps): bump the github-actions group with 5 updates by @dependabot in #933
• build(deps): bump the docker group with 1 update by @dependabot in #934
• build(deps): bump the go group with 4 updates by @dependabot in #935
• build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0 by @dependabot in #940
• build(deps): bump the github-actions group with 3 updates by @dependabot in #948
• build(deps): bump the go group with 6 updates by @dependabot in #946
• build(deps): bump distroless/base-debian12 from 08baf3b to 8aa9165 in the docker group by @dependabot in #949
• Upgrade controller-runtime to v0.15.0 and k8s api to v0.30.0 by @kralicky in #953

New Contributors

• @kralicky made their first contribution in #945

Full Changelog: v0.25.2...v0.26.0