mirrord

Removed

• Removed problematic DNS cache from internal proxy.

Fixed

• Fixed a bug with handling hints passed to getaddrinfo function.

3.92.0 - 2024-03-13

Added

• Added support for statx function.
  #2204

Fixed

• Fix incoming network interception via port-forward when "stealing" traffic
  with a mesh like linkerd or istio (Using the same OUTPUT iptable rules for
  both meshed and not meshed networks)
  #2255
• Add Kuma mesh detection and support to mirrord-agent.
  #2296
• Added sidecar exclusion for kuma mesh, fixing issues running in that setup

3.91.0 - 2024-03-05

Added

• Adds operator session management commands to mirrord-cli, these are: mirrord operator session kill-all, mirrord operator session kill --id {id}, and
  the hidden mirrrod operator session retain-active.
  #217
• Notify user on license validity.
  #382

Changed

• Adds a new PolicyRule for delete and deletecollection of sessions for
  mirrord operator setup.
  #456
• Change pause feature from unstable to deprecated
• Increased size of buffers used by TCP steal to read incoming streams (from 4k
  to 64k in the agent, from 1k to 64k in the internal proxy).
• Increased size of buffers used by outgoing feature to read streams (from 4k
  to 64k in the agent, from 1k to 64k in the internal proxy).

Fixed

• Fixed a bug where gethostbyname calls where intercepted regardless of the
  remote dns feature status.
  #2281
• Fixed a bug where non-existent hosts in outgoing filter would prevent the
  application from initiating outgoing connections.
  #2283
• Remove special handling for DNS when dealing with UDP outgoing sockets
  (manual UDP resolving).
  #2289

3.90.0 - 2024-02-27

Added

• Add agent configuration to use nftables instead of iptables-legacy to make it
  work in mesh that uses nftables.
  #2272
• The agent now processes all DNS queries concurrently. Also, client sessions
  in the agent do not block on the DNS queries.

Changed

• change kubeconfig path expansion to use env as well
  #2262
• Increase internal proxy timeout from 5 seconds to 10 seconds to fix long
  agent ops

3.89.1 - 2024-02-22

Fixed

• Fixed issue with Golang calling fstat on Linux causing crash
  #2254

3.89.0 - 2024-02-22

Changed

• Change intproxy log to append
• use_proxy configuration now applies to mirrord operator status, and mirrord
  ls

Added

• Add log level and log destination for int proxy
  #2246

Changed

• 1. mirrord CLI now does not check target type when the copy_target feature
     is enabled. The check is now done only in the operator.
  2. mirrord operator setup not includes permissions to read and change
     rollouts scale.

Fixed

• Incoming traffic was being mirrord when set to false.

Added

• Changed internal proxy to allow for HTTP upgrades with filtered HTTP steal.
  #2224
• Added support for selecting malfunctioning targets with copy_target
  feature. #2239
• Added configuration option feature.env.load_from_process, which allows for
  changing the way mirrord loads environment variables from the remote target.

Fixed

• Add missing permissions needed by operator for copy and scaledown

Fixed

• Added runAsNonRoot: false and runAsUser: 0 to the security context of an
  epheremal agent when running privileged (to prevent overriding these values
  with values from the pod spec).
• Disabled unix sockets being wrongfully sent to the agent when socket isn't
  connected

Changed

• JAVA_TOOL_OPTIONS is excluded by default from the environment variables
  that are fetched from the target.

Fixed

• Running mirrod exec go run EXECUTABLE on macOS with go1.21.
  #2202
• Fixed a compilation bug in mirrord-operator crate tests.

3.85.0 - 2024-01-24

Added

• Added license subscription id to operator status CRD. Adjusted
  CredentialStore to preserve signing key pair for the same operator license
  subscription id. #2190
• CLI now sends machine host + username to show in mirrord operator status
  (not sent to our cloud!)
• Report port locks and filters in operator status

Changed

• Change configuration parsing to be strict unallowing unknown fields
• Cluster DNS resolving now happens by nameserver order rather by statistics

Fixed

• Running R on macOS.
  #2186
• Running scripts with whitespaces in the shebang.
  #2193

Fixed

• Add support for shebang containing spaces like asdf's node does
  #2181

Added

• Report namespace for operator sessions

Fixed

• add preadv and readv to fix erlang file reading
  #2178

3.83.0 - 2024-01-11

Changed

• Filesystem: File not found default filter happens after checking local filter
• The copy_target feature is now officialy stable.
• mirrord operator status reports active copy targets.

Fixed

• Remove guard from dlopen, making calls from within dlopen hookable,
  potentially fixing issues

Removed

• Removed http_header_filter. Please use http_filter with key
  header_filter instead.

Added

• mirrord operator setup defines a MirrordPolicy CRD so that admins can
  block certain features by creating policies. When recieving a forbidden error
  from the operator for trying to steal traffic, mirrord shows an error and
  exits.

Fixed

• Added userextras/oid to mirrord operator role to solve issues in some AKS
  clusters #2152

Changed

• Changed setup to not create self signed, letting operator fallback to it
  automatically on runtime
• Update dependencies

Fixed

• Fix opendir not being hooked on macOS arm64

3.80.0 - 2023-12-27

Changed

• Remove unstable from ignore localhost

Fixed

• Allow license key that starts with -
  #2140
• Fix job lingering by exiting always successfuly on agent

Fixed

• Added hook for realpath function, fixing issues on files not found in Java

Fixed

• Fix dirfd crashing on macOS