Release Notes - v0.14.0

Features

• Gateway API Support: Added support for TCPRoute, UDPRoute, and TLSRoute resources (6c55002)
• TLS Termination Mode: Support for TLSRoute with hostname matching in terminate mode (d2e357d, 553d9ee, 9e17fba)
• Gateway CLI Commands: Added gateway CRUD operations and route subcommands (fd1c896, 170fb78)
• Multi-resource Apply: Top-level apply command with server-side apply support (72f588b, 0877506, 9077f67)
• Tunnel TUI: Basic text user interface for tunnel with simplified non-TUI mode (d20aab1, 6d68305)
• Namespace Support: Added namespace support for lwtunnel (807e6d8)
• TunnelNode Table Converter: Added v1alpha.TunnelNode table converter for CLI (a828cdb)

Bug Fixes

• SNAT Panic Fix: Fixed panic when SNAT has no addresses (4e5fc75)
• Tunnel Cleanup: Address cleanup in router on disconnect (2d8c5bd)
• Gateway Extension Server: Fixed nil client bug and improved connection handling (dfec695, 047b05c, 945255e)
• Domain Validation: Fixed domain object validation (1039992)
• ICX Tunnel: Remove relay address from list on shutdown (8542795)
• Build Fix: Fixed borked backplane build (cb4e7b4)

Improvements

• API v1alpha2 Migration: Migrated Proxy to core/v1alpha2 API (7375973, 8fb5dba, 8e23941)
• Logging Enhancements:
  • Added slog support and JSON logging (79e620d, 0f49f84)
  • Moved gRPC logs to debug level and structured subprocess logs (eeb73d5)
  • Verbose tunnel mode automatically disables TUI (00ed474)
• Dashboard Auth: Improved dashboard authentication flow (84533bf)
• Multi-cluster Support: Refactored tunnel and proxy controller for multi-cluster environments (d81cec5, 65435df)
• Tunnel Interface Simplification: Simplified TunnelServer interface and made ClientGetter required (82076a2, be3fbc1, 5a57b27)
• Token Management: Added TokenIssuer interface and consolidated token dependencies (44f9a3d, c154c3e)
• xDS Extensions: Added gateway listener xDS extension hooks with credential options (0b46db0, 1b20997, afc1364)
• Envoy Node Metadata: Set metadata from Proxy reconciler (b57fb03, a3f1f04)
• API Server Updates:
  • Set Proxy replica connectedAt at xDS stream connection (f8e4250)
  • Reconcile missed updates (56a2b4a)
  • Re-enabled GRPC, TLS, TCP and UDP (6c55002)
  • Port override option via APOXY_API_SERVER_PORT (a4997cc)
• Gateway Updates:
  • Pulled upstream TCP/TLS listener refactors from Envoy Gateway (fc199d6, 143f21c)
  • Omit ALPNs on TCP/TLS routes (efd571e)
  • Made controller name configurable (88f3084, fc6e545)

Infrastructure

• CI/CD Enhancements:
  • Added LLM-generated release notes to Dagger pipeline with commit links (a3ab13d, 41ddf88)
  • Fetch full git history for release notes generation (bd7b550)
  • Updated Dagger version to v0.19.10 across all workflows (2dde2ad)

---

Full Changelog: https://github.com/apoxy-dev/apoxy/compare/v0.13.0...v0.14.0

---