Releases: MAIF/otoroshi
16.9.1
Otoroshi version 16.9.1
https://github.com/MAIF/otoroshi/milestone/77?closed=1
v16.9.0...v16.9.1
https://github.com/MAIF/otoroshi/releases/tag/v16.9.1
Added
- make optional Extism runtime for launching the wasm manager (#1727)
- add button in plugin view to download WASM binaries (#1729)
Fixed
- bad overhead out computing in case of circuit breaker opening (#1731)
Contributors
16.9.0
Otoroshi version 16.9.0
https://github.com/MAIF/otoroshi/milestone/74?closed=1
v16.8.1...v16.9.0
https://github.com/MAIF/otoroshi/releases/tag/v16.9.0
Major announcements in this release are :
- support for the Infisical project as secrets vault
- add JDK21 docker images
- customization of the ALPN phase to blacklist possible protocols
- split WASM specific code into a separate library
Added
- support entity validators per admin api consumer (user or apikey) using opa rules (#1629)
- support Infisical as secret vault (#1688)
- add JDK21 docker image (#1705)
- add support for custom vaults in admin extensions (#1708)
- restore request size computation if not too sluggish (#1710)
- ALPN customization per domain name (#1720)
- remove protocol specific headers when backend target use lower protocol version (#1721)
Changed
- split wasm runtime into a separate library (#1702)
- rework on the cluster protocol (#1713)
- react-select 1.2.1 -> 5.x (#1718)
Fixed
- WasmManager : it should be launched with pm2 or similar tool (#1698)
- Wasm manager docker image build warnings (#1699)
- wasm manager project query param sometimes has bad value (#1703)
- wasm manager is not built with a version (#1707)
- Backend : Cannot reach HTTP/1.1 (no SSL) Backend ? (#1711)
- admin rights sometimes fails when super admin (#1712)
Contributors
16.8.1
Otoroshi version 16.8.1
https://github.com/MAIF/otoroshi/milestone/72?closed=1
v16.8.0...v16.8.1
https://github.com/MAIF/otoroshi/releases/tag/v16.8.1
Changed
- update coraza to 0.1.2 (#1697)
Fixed
- force elastic version read from server even if applyTemplate not checked (#1700)
- update default elastic version in code with 8.0.0 (#1701)
Contributors
16.8.0
Otoroshi version 16.8.0
https://github.com/MAIF/otoroshi/milestone/71?closed=1
v16.7.0...v16.8.0
https://github.com/MAIF/otoroshi/releases/tag/v16.8.0
Major announcements in this release are :
- fix tls 1.3 handshake that was broken in some cases
Added
- allow different mutual auth. settings on play server and netty server (#1691)
- add endpoints to get otoroshi version and cluster infos (#1696)
Fixed
- tls session issue with first request using TLS 1.3 (#1695)
- issue when consuming backoffice with the netty backend and tls (#1694)
- issue in el add on 16.7.0 with this kind of EL '${now.plus_ms(300000).epoch_ms}' (#1689)
Contributors
16.7.0
Otoroshi version 16.7.0
https://github.com/MAIF/otoroshi/milestone/70?closed=1
v16.6.0...v16.7.0
https://github.com/MAIF/otoroshi/releases/tag/v16.7.0
Major features announcements in this release are
- new kind of data exporter that support OpenTelemetry Logs
- new kind of data exporter that support OpenTelemetry Metrics
- full OpenTelemetry compatibility for otoroshi internals
- date manipulations in expression language
- better SAMLv2 support
Added
- X-Forwarded-Prefix not send with other X-Forwarded-* (#1626)
- new kind of data exporter for opentelemetry metrics (#1637)
- new kind of data exporter for opentelemetry logs (#1636)
- integration with opentelemetry logs (#1635)
- add new endpoint to get one simple admin at a time (#1681)
- support opentelemetry for internal metrics (#1686)
- support date manipulation in expression language (#1682)
- Allow to access script by url (#1670)
- SAMLv2 improvements (#1685)
Fixed
- updating admin with api leads to an error because its expected to provide a backoffice user (#1684)
- Auth module - SAML : Authentication successfull, but loop to login page (#1671)
- bad SAML2 url composition in some cases (#1683)
- circuit breaker help labels broken (#1687)
Contributors
16.6.0
Otoroshi version 16.6.0
https://github.com/MAIF/otoroshi/milestone/67?closed=1
v16.5.2...v16.6.0
https://github.com/MAIF/otoroshi/releases/tag/v16.6.0
Major features announcements in this release are
- complete rewrite of the wasm runtime to dramatically improve performances using double priority queue and vm pools
- new view to test data exporter expressions
- new build optimizations in wasm-manager
- new
$jq
operator in data exporter projections
Added
- add generic pooling support for mono-threaded WASM VMs (#1642)
- add routine to automatically kill unused vm, vm with too much memory consumed, etc (#1649)
- tweak extism to provide efficient vm instanciation with scoped host functions (#1621)
- include
$jq
operator in Projection utils (#1656) - documentation fo jsonpath based projections (#1662)
- documentation for matcher operators (#1631)
- add the ability to test filtering and projection from data-exporter view (#1675)
- use wasm-opt in the wasm manager to cleanup produced wasm (#1630)
- doc: add circuit breaker topic (#1641)
Changed
- remove lifetime from wasm vm config. (#1654)
- support wasm vm pool on non wasm plugin configs. (#1652)
- support coraza calls in wasm vm pools (#1643)
- support OPA calls in wasm vm pools (#1646)
- rewrite wasm plugins to use vm pools (#1645)
- rewrite coraza plugin to avoid blocking (#1644)
- rewrite wasm data exporters to use vm pools (#1647)
- rewrite wasm auth plugins to use vm pools (#1653)
Fixed
- make template update work in multi-thread env. (#1648)
- handle requests burst on wasm plugin (#1650)
- auth module - SAML : Using wizard, Single Logout URL is mandatory? (#1663)
- removing all lines from a file make it impossible to edit (#1673)
- saml request should be deflated before base64 encoding (#1678)
Contributors
16.5.2
Otoroshi version 16.5.2
https://github.com/MAIF/otoroshi/milestone/69?closed=1
v16.5.1...v16.5.2
https://github.com/MAIF/otoroshi/releases/tag/v16.5.2
Fixed
- ServiceDescriptor to route conversion does not copy IP whitelist (#1639)
- fix bad value resolution in cluster config (#1640)
Contributors
16.5.1
Otoroshi version 16.5.1
https://github.com/MAIF/otoroshi/milestone/68?closed=1
v16.5.0...v16.5.1
https://github.com/MAIF/otoroshi/releases/tag/v16.5.1
Fixed
- Plugins that synchronously transform response are not merged correctly (#1632)
- Chaos monkey body length related faults does not work propertly (#1634)
Contributors
16.5.0
Otoroshi version 16.5.0
https://github.com/MAIF/otoroshi/milestone/66?closed=1
v16.4.0...v16.5.0
https://github.com/MAIF/otoroshi/releases/tag/v16.5.0
Major features announcements in this release are
- plugins can now ship their own UI
- you can add entity validators on users based on Json Path expressions
- new grpc plugins available
Added
- support plugins thats ships their own custom UI (#1300)
- Externals vault - Support getting certificates (#1364)
- support entity validators per admin api consumer (user or apikey) (#1617)
Changed
Fixed
- user rights check is broken on the admin api (#1618)
- add more validation to avoid data override in the admin api (#1619)
- fix opa execution crash on second invocation (#1623)
- play framework add default content-type on response with no content-type (#1624)
- otoroshi does not support
application/json
mediatype with open charset (#1625)
Contributors
16.4.0
Otoroshi version 16.4.0
https://github.com/MAIF/otoroshi/milestone/63?closed=1
v16.3.2...v16.4.0
https://github.com/MAIF/otoroshi/releases/tag/v16.4.0
Major features announcements in this release are
- a brand new WAF plugin based on OWASP Coraza
- a brand new Brotli compression plugin
- now authentication modules are pluggable and can be deployed as third party plugins
- now you can write data exporter in WASM
- now you can write authentication modules in WASM
Added
- provide a Brotli compression plugin (#1289)
- support OWASP Coraza WAF (#1497)
- support wasm data exporters (#1565)
- support wasm auth. modules (#1598)
- handle ctrl+s shortcut to save route (#1594)
- enable anonymous reporting (#1595)
- make authentication modules pluggable (#1285)
Fixed
- add the ability to extract informations from apikeys as jwt tokens (#1584)
- avoid creating linear memory instance when non OPA plugin (#1586)
- discard invitation link expired (#1587)
- config. validation happens before configuration merge (#1588)
- better concurrency handling when fetching wasm sources (#1589)
- better handling of wasm resources to enhance performances at scale (#1590)
- route events view does not allow filtering (#1591)
- prohibit creation of new User with empty informations (#1596)
- Content-Length missing due to akka-http-client model (#1597)
- bad conversion of service descriptor to route for info. token (#1600)
- host functions around attributes does not work when lifetime is forever (#1604)
- data exporter duplication (#1610)
- regex routing is broken (#1611)
- handle target from service name and port in kubernetes crds for a route (#1612)
- add otoroshi.mesh domains on route in kubernetes crds (#1613)