mirrord

Added

• Added internal_proxy timeout configurations to allow users specify timeouts
  in edge cases. #1761

Changed

• Change operator / cli version mismatch to show only when mirrord is older
  than operator

Fixed

• Fix grpc errors caused by missing trailers on filtered http responses.
  #1731

Fixed

• macOS - Running Go build with mirrord while Go binary is SIP protected is
  fixed by enabling file hooks on SIP load mode.
  #1764

Fixed

• Try to resolve an issue where internal proxy is under heavy load since bash
  scripts does a lot of fork/exec by:
  1. Increasing internal proxy's listen backlog (might not help on macOS)
  2. Change internal proxy to create the upstream (agent) connection in a
     different task, allowing it to keep accepting.
     #1716
• Fixed detecting skipped processes during layer injection.
  #1752
• Fix fork issues by changing layer runtime to be current thread
  #1759

Added

• Add support for selecting Kubeconfig context to use by either using:
  1. Configuration option kube_context.
  2. mirrord exec argument --context
  3. Environment variable MIRRORD_KUBE_CONTEXT
     #1735

Changed

• Add userextras/prinicipalid to operators cluster role
• Document behavior of deployment in OSS vs mirrord for Teams
• Skip HashiCorp Vault supporting containers

Fixed

• Fix fork issue on macOS
  #1745
• Add access for the operator's cluster role to argoproj rollouts
  #1751
• Fixed warning on using deployment target with no operator

Fixed

• Sometimes the internal proxy doesn't flush before we do redirection then caller can't read port leading to "Couldn't get port of internal proxy"

Added

• Added mirrord-operator-user ClusterRole to operator setup with RBAC
  permissions to use operator.
  #1428

Fixed

• Exclude environment variable COMPLUS_EnableDiagnostics, fixes mirrord
  intellij #67
  #1728

Fixed

• Add jspawnhelper to build-tool list & fix skip_processes detection
  #1709
• Use shellexpand to resolve tilde for kubeconfig.
  #1721

Fixed

• Add automatic skip for build-tools "skip_build_tools": boolean to config
  [default: True] (build-tool list: as, cc, ld, go, air, asm,
  cc1, cgo, dlv, gcc, git, link, math, cargo, hpack, rustc,
  compile, collect2, cargo-watch and debugserver)
  #1478
• Fix feature.env.override documentation "overrides" -> "override".
  mirrord.dev#120
• Specify default value for agent.tolerations in docs as json instead of
  yaml.

Changed

• Changed internal proxy to drop stdout/stderr after it finishes loading

Added

• Add support for agent.tolerations configuraion field for setting agent
  Tolerations to work around Taints in the cluster.
  #1692

Changed

• Added env var exclusion for _JAVA_OPTIONS to avoid loading remote jars or
  settings that wouldn't work locally.
  #1695

Internal

• Added Java Debug port detecting to use in VSCode/IntelliJ
  #1689

3.52.0 - 2023-07-18

Added

• Support for OIDC refresh token
  #1460

Fixed

• Fixed case where proxy can timeout since it holds a stale connection. Added
  heartbeat to the connection handling
• Fixed dynamic pause with operator not working - moved pause request to be
  from internal proxy
• Update the code to reimplement the fix but without moving the pinging source. #1676

Changed

• 'mirrod ls' command now no longer lists crashed pods as targets
  #1617

Added

• Add outgoing traffic filter feature.

  Adds a way of controlling from where outgoing traffic should go, either
  through the remote pod, or from the local app. Can be configured with the
  remote and local options under feature.network.outgoing.
  #702

• mirrord configuration now allows disabling Linux capabilities for the agent
  container. #1662

• Add env to specify operator image

Fixed

• Make sure conntrack flushes the correct port.
  #1655
• Added CAP_NET_RAW Linux capability agent.

Fixed

• Layer now passes detected debugger port down to the child processes.
  #1641

Fixed

• Fixed double slash in uri path on pause/unpause requests in agent
  #1638
• Fix agent steal crash by adding fallback to using only PREROUTING iptable
  chain. #1640

Changed

• Changed agent job definition to tolerate everything
  #1634

Fixed

• Small fix to operator setup command.

Removed

• Removed error capture error trace feature

Added

• Add support for Argo rollout target.
  #1593

Changed

• Agent container is no longer privileged. Instead, it is given a specific set
  of Linux capabilities: CAP_NET_ADMIN, CAP_SYS_PTRACE, CAP_SYS_ADMIN.
  #1615
• Changed agent job definition to include limits
  #1621

Fixed

• Running java 17.0.6-tem with mirrord.
  #1459