v1.1.8

What's Changed

• Update envoyproxy/envoy Docker tag to v1.31.0 by @renovate in #43
• Update dependency go to v1.22.6 by @renovate in #44
• Update dependency go to v1.23.1 by @renovate in #45
  • Fixes security issues: CVE-2024-34155, CVE-2022-30635, CVE-2024-34158

Full Changelog: v1.1.7...v1.1.8

v1.1.7

What's Changed

• Configure Renovate by @renovate in #33
• Renovate: Group all non major updates by @kvij in #37
• Update all non-major dependencies by @renovate in #38
• Update actions/setup-go action to v5 by @renovate in #39
• Update softprops/action-gh-release action to v2 by @renovate in #41
• Update docker/build-push-action action to v6 by @renovate in #40
• Deduplicate actions in pull requests by @kvij in #42

New Contributors

• @renovate made their first contribution in #33

Full Changelog: v1.1.6...v1.1.7

v1.1.6

What's Changed

• Update Go version to 1.22.4 by @kvij in #32
  Go 1.22.4 fixes CVEs:
  • CVE-2024-24790

Full Changelog: v1.1.5...v1.1.6

v1.1.5

What's Changed

• Update Go version to 1.22.3 by @kvij in #31
  Go 1.22.3 fixes CVEs:
  • [https://github.com/advisories/GHSA-2jwv-jmq4-4j3r] https://nvd.nist.gov/vuln/detail/CVE-2024-24788
  • [https://github.com/advisories/GHSA-4v7x-pqxf-cx7m] https://nvd.nist.gov/vuln/detail/CVE-2023-45288

Thanks for reporting #30 @vitalii-buchyn-exa!

Full Changelog: v1.1.4...v1.1.5

v1.1.4

What's Changed

• Update Go version to 1.22.1 by @kvij in #29
  Go 1.22.1 fixes CVEs:
  • [CVE-2024-24783] https://nvd.nist.gov/vuln/detail/CVE-2024-24783
  • [CVE-2023-45290] https://nvd.nist.gov/vuln/detail/CVE-2023-45290
  • [CVE-2023-45289] https://nvd.nist.gov/vuln/detail/CVE-2023-45289

Full Changelog: v1.1.3...v1.1.4

v1.1.3

What's Changed

• Update Go version to 1.21.5 by @kvij in #28
  Go 1.21.5 fixes CVEs:
  • CVE-2023-39326
  • CVE-2023-45283

Full Changelog: v1.1.2...v1.1.3

v1.1.2

What's Changed

• Fix pipeline by @kvij in #20
  • Added ARM64 version
  • Fixed issue where Github release artifacts are not build with intended Go version.
    NOTE: Go version is now managed in .github/workflows/release.yaml
• Update Go version to 1.21.4 by @kvij in #21

Full Changelog: v1.1.1...v1.1.2

v1.1.1

What's Changed

• Update golang base image from 1.21.1 to 1.21.3 by @kvij in #19
  • CVE-2023-44487
  • CVE-2023-39325

Full Changelog: v1.1.0...v1.1.1

v1.1.0

Feature release with behavior changes

What's new

• ISTIO_QUIT_API is configured automatically using ENVOY_ADMIN_API as a base if it is configured with the default port. Setting ISTIO_QUIT_API manually to anything but "" will take precedence.
• Introduced QUIT_REQUEST_TIMEOUT config variable to time out quit requests to ISTIO_QUIT_API and GENERIC_QUIT_ENDPOINTS
• Introduced GENERIC_QUIT_ONLY config variable to send a request to the configured GENERIC_QUIT_ENDPOINTS but not to ISTIO_QUIT_API when the wrapped application exits.

Behavior changes

ISTIO_QUIT_API set by default in most configurations
If the ENVOY_ADMIN_API is set to the default port 15000 the ISTIO_QUIT_API configured correctly by default.
On deployments that restart the containers the shutdown behavior might be undesirable.
The envoy proxy will be restarted but when the pod has multiple containers that means that meaningful work in the containers that did not crash could be interrupted.
So for pods that have multiple containers that need traffic through the service mesh, it is recommended to set NEVER_KILL_ISTIO to true.

Default timeout of 5 seconds on quit requests
Request to the /quitquitquit endpoint on the pilot agent and requests to GENERIC_QUIT_ENDPOINTS by default time out after 5 seconds. Change the newly introduced QUIT_REQUEST_TIMEOUT variable to override the 5 second default.

Generic quit endpoints called concurrently
When multiple GENERIC_QUIT_ENDPOINTS are configured the requests are no longer waiting on each other but all send at the same time. This might matter if you rely on a configured order for orchestration.

Switched to stdlib HTTP client
All save one dependencies have been cleaned up but that does mean that some fancy http2 stuff that monzo/typhon used to do has also been removed.

What's Changed

• Update base image to 1.21.1 by @kvij in #16
• Remove github.com/monzo/typhon dependency by @kvij in #12
• Add quit request timeout by @kvij in #18
• Remove PKILL implementation for Istio versions < 1.3 by @kvij in #17
• Generic quit only by @kvij in #7

Full Changelog: v1.0.4...v1.1.0

v1.0.4

What's Changed

• Update base image to 1.20.7 by @kvij in #11
  • CVE-2023-29409

Full Changelog: v1.0.3...v1.0.4