Skip to content
This repository has been archived by the owner on Jul 12, 2023. It is now read-only.

Releases: google/exposure-notifications-server

v0.26.0

12 Apr 14:06
@sethvargo sethvargo
v0.26.0
7f30ac4
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.26.0

Changes since v0.25.0

Operations

Misc

  • Add function for clearing in-memory cache. (#1504, @sethvargo)
  • Add new interface for secret managers than can manage secret versions. (#1503, @sethvargo)

Dependencies

Added

  • github.com/Masterminds/semver/v3: v3.1.1

Changed

Removed

Nothing has changed.

Assets 2
Loading

v0.25.0

29 Mar 18:29
@sethvargo sethvargo
v0.25.0
2f781b9
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.25.0

Changes since v0.24.0

Upgrade notes

  • This release improves the way metrics and alerts are handled to reduce the number of false alerts in favor of forward-progress alerting. When you run Terraform for the first time, you may see errors that an alert cannot be created due to a missing metric. These errors (and only these errors) can be safely ignored for now. Continue with the deployment steps. After all services are deployed, manually invoke each of the services via Cloud Scheduler. Finally, re-run Terraform to create the alerts based on the new metrics.

  • This release contains new services. Run terraform taint module.en.null_resource.build to ensure the new services are built during the Terraform run. This is a one-time operation.

Enhancements

Reliability

  • Add forward-progress alerts for mirror service (#1482, @sethvargo)
  • Add observability exporter to jwks configuration. (#1486, @sethvargo)
  • Add recovery middleware for catching runtime panics in HTTP handlers. (#1479, @sethvargo)
  • Add renderer, forward-progress alerts for generate service, and overridable alerts for forward-progress. (#1481, @sethvargo)
  • Align points every 1m (#1493, @sethvargo)
  • Also always log start and finish in debug mode for background jobs. (#1495, @sethvargo)
  • Introduce a new service: backup. Be sure to taint the null_resource builder during the Terraform apply to get the new service version. (#1483, @sethvargo)
  • Refactor background cleanup jobs for forward-progress alerting. This removes unused metrics about the number of exposures/files deleted and simplifies the logic handling. (#1478, @sethvargo)
  • Refactor cleanup jobs to use server patterns and middleware. (#1480, @sethvargo)
  • Replace CloudSchedulerFailed with ForwardProgressFailed (#1494, @sethvargo)
  • Switch export to forward progress monitoring (#1492, @sethvargo)
  • Switch export-importer to forward-progress alerting (#1490, @sethvargo)
  • Switch to fp alerting for jwks and key-rotation services (#1487, @sethvargo)

Misc

  • Add admin console tests for export import keys (#1468, @sethvargo)
  • Add more tests for admin routes and template (#1474, @sethvargo)
  • Add more tests for database package (#1459, @sethvargo)
  • Add special "_all" key to apply to all service environments. The special key _all will apply to all services. This is useful for common configuration like log-levels. A service-specific configuration overrides a value in _all. There are no default values for _all, so the default behavior is unchanged. (#1496, @sethvargo)
  • Add tests for admin authorized_apps (#1466, @sethvargo)
  • Add tests for admin console exports (#1470, @sethvargo)
  • Add tests for admin export importer (#1469, @sethvargo)
  • Add tests for admin health authorities and keys (#1471, @sethvargo)
  • Add tests for admin index page (#1472, @sethvargo)
  • Add tests for admin mirrors (#1473, @sethvargo)
  • Add tests for cryptorand package (#1458, @sethvargo)
  • Adds placeholder database columns for possible future use of vaccine status (#1463, @mikehelmick)
  • Make database package public to share with verification server (#1456, @sethvargo)
  • Move admin-console CSS to an external file. (#1465, @sethvargo)
  • Remove errorw and upgrade to latest ci lint (#1484, @sethvargo)

Dependencies

Added

  • github.com/OneOfOne/xxhash: v1.2.2
  • github.com/armon/consul-api: eb2c6b5
  • github.com/cespare/xxhash: v1.1.0
  • github.com/checkpoint-restore/go-criu/v4: v4.1.0
  • github.com/cilium/ebpf: v0.2.0
  • github.com/coreos/bbolt: v1.3.2
  • github.com/coreos/etcd: v3.3.10+incompatible
  • github.com/coreos/go-systemd/v22: v22.1.0
  • github.com/cyphar/filepath-securejoin: v0.2.2
  • github.com/dgryski/go-sip13: e10d5fe
  • github.com/godbus/dbus/v5: v5.0.3
  • github.com/magiconair/properties: v1.8.0
  • github.com/moby/sys/mountinfo: v0.4.0
  • github.com/mrunalp/fileutils: v0.5.0
  • github.com/oklog/ulid: v1.3.1
  • github.com/opencontainers/selinux: v1.8.0
  • github.com/pelletier/go-toml: v1.2.0
  • github.com/prometheus/tsdb: v0.7.1
  • github.com/seccomp/libseccomp-golang: v0.9.1
  • github.com/spaolacci/murmur3: f09979e
  • github.com/spf13/afero: v1.1.2
  • github.com/spf13/cast: v1.3.0
  • github.com/spf13/jwalterweatherman: v1.0.0
  • github.com/spf13/viper: v1.4.0
  • github.com/syndtr/gocapability: 42c35b4
  • github.com/vishvananda/netlink: v1.1.0
  • github.com/vishvananda/netns: 0a2b9b5
  • github.com/willf/bitset: v1.1.11
  • github.com/xordataexchange/crypt: b2862e3

Changed

Read more
Assets 2
Loading

v0.24.0

15 Mar 15:14
@mikehelmick mikehelmick
v0.24.0
9080053
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.24.0

Release notes for v0.24.0

Changelog since v0.23.0

Changes by Kind

Breaking

  • Breaking change! This release disables the v1alpha1 API by default. If your clients depend on the v1alpha1 API, you *must- set ENABLE_V1ALPHA1_API=true on the exposure service. (#1427, @sethvargo)

Enhancement

  • Add additional metrics for background jobs: cleanup, import-export, mirror (#1451, @mikehelmick)
  • Export-importer can set traveller status to true (for the whole import) (#1443, @mikehelmick)
  • Add a new metric export_file_downloaded, which is emitted when a device downloads an export. The metric extracts the export path (for multi-tenant installations) and the platform via labels for further aggregation. This is on by default but can be disabled by setting capture_export_file_downloads to false. This only applies to Google Cloud. (#1447, @sethvargo)
  • Add import file public keys to admin console and manipulation of traveler status (#1444, @mikehelmick)
  • Add uptime checks for known hosts (#1413, @mariliamelo)
  • Add utility methods to simplify CSV marshaling. (#1409, @mikehelmick)
  • Only log server-side errors when creating a revision token and return a 500 response when making a revision token fails (previously this was undefined behavior). (#1416, @sethvargo)
  • Use more structured logging for errors (#1418, @sethvargo)

Docs

Test-Coverage

Infrastructure

  • Allow customizing global log retention period for all services in the project. The default value is 14 days. Note: this differs from the unconfigured value of 30 days!. To retain the existing behavior, set log_retention_period to 30 in the Terraform configuration. However, we strongly recommend using a 14-day retention period instead. (#1419, @sethvargo)
  • Set Binary Authorization service annotations on Cloud Run services. (#1446, @sethvargo)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Assets 2
Loading

v0.23.0

01 Mar 17:16
@mikehelmick mikehelmick
v0.23.0
f7b7f86
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.23.0

Release notes for v0.23.0

Changelog since v0.22.0

Notice The version of golang used in this proejct has been upgraded to Go
1.16.

Changes by Kind

Bug Fixes and Improvements

  • Add utility methods to simplify CSV marshaling. (#1409, @mikehelmick)
  • Better handling of parallel requests in JWKS service. (#1387, @mikehelmick)
  • BREAKING Enforce that STATS_UPLOAD_MINIMUM is set to a value >= 10 (#1396, @mikehelmick)
  • Remove timeout on jwks context (it's set on the http client) (#1381, @sethvargo)
  • Set blobstore, key manager, and secret manager in migrate (#1377, @sethvargo)
  • Set blobstore, key manager, and secret manager on services (#1378, @sethvargo)
  • Update accuracy for security alerts for HumanAccessSecret and HumanDecryptedValue (#1384, @sethvargo)
  • Upgrade to Go 1.16 (#1402, @sethvargo)
  • Use a random prefix instead of hard-coding "parent" in key manager test helper. (#1389, @sethvargo)

Infrastructure

Dependencies

Added

Nothing has changed.

Changed

  • github.com/mikehelmick/go-chaff: v0.4.1 → v0.5.0
  • honnef.co/go/tools: v0.0.1-2020.1.4 → v0.1.1

Removed

Nothing has changed.

Assets 2
Loading

v0.22.1

15 Feb 16:37
@sethvargo sethvargo
v0.22.1
3abe429
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.22.1

Changes since v0.22.0

Operations

See also: changes since v0.21.0.

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Assets 2
Loading

v0.22.0

15 Feb 14:31
@sethvargo sethvargo
v0.22.0
43c3ac9
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.22.0

Changes since v0.21.0

Upgrade notes

  • This upgrade includes multiple database migrations that improve performance and indexing. While the migrations run (~5min), the exposures table will be locked. We recommend putting the servers into maintenance mode before running the migrations, and scheduling this upgrade off peak hours.

  • Cloud-specific dependencies are now a compile-time dependency. When building the binary, you must specify the build tag for your target environments to compile the appropriate Key Manager, Secret Manager, and Blobstore support for that target platform.

  • Introduce paging and non-paging alert types. This requires an update to the alerting channels in the Terraform configuration.

Build and CI/CD

  • Switch cloud dependencies to a compile-time dependency. When building the binary, you must specify the build tag for your target environments to compile the appropropriate Key Manager, Secret Manager, and Blobstore support for that target platform. (#1363, @sethvargo)
  • Switch linting to GitHub Actions (#1373, @sethvargo)

Observability and reliability

  • Add logic to recover from panics in service entrypoints. A panic will still terminate the service with a non-zero exit code, but it will cleanup existing connections and log the panic before doing so. (#1340, @sethvargo)
  • Always check if a connection is valid after acquiring it from the pool. (#1345, @sethvargo)
  • Check database connection in health check (#1362, @sethvargo)
  • Paging and non-paging email channels should be configured in the Terraform files for each individual project. (#1354, @mariliamelo)
  • Move DEBUG SERVER message to warning level (#1327, @sethvargo)
  • Do not log lock acquisition failure when the lock is already held (#1337, @sethvargo)
  • Only log internal errors on publish, move others to debug level (#1330, @sethvargo)

Database

  • Improve database indexes to maximize search and delete performance
  • DB migrations will have a 15 minute timeout by default (was 15 seconds) (#1332, @mikehelmick)
  • Drop usage of serializable transactions (#1325, @sethvargo)
  • Switch to ReadCommitted isolation level for locking (#1324, @sethvargo)
  • Update database types to their larger values (VARCHAR -> TEXT and INT -> BIGINT) and add indices to common fields to improve performance. (#1326, @sethvargo)

Key Management

  • Wait up to 5 seconds for Google Cloud KMS keys to become ready when generating new keys (#1338, @sethvargo)

Service: publish

  • Fix lower bound of the accepted key set when validating keys. (#1372, @mikehelmick)

Service: jwks

  • Use a custom http client with a separate request timeout for the jwks service. Operators can customize the timeout by setting REQUEST_TIMEOUT on the jwks service. The default value is 5 seconds. (#1342, @sethvargo)

Terraform

  • Update ignore_changes to avoid recurring diff in Terraform (#1343, @sethvargo)

Misc

Dependencies

Added

Nothing has changed.

Changed

Read more
Assets 2
Loading

v0.21.0

01 Feb 16:05
@whaught whaught
v0.21.0
This tag was signed with the committer’s verified signature. The key has expired.
whaught Weston Haught
GPG key ID: 9B55058D16F23ED6
Expired
Learn about vigilant mode.
94d16a0
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.21.0

Release notes for main

Documentation

⚠️ Upgrade notes

Deployment notes

This version introduces both Binary Authorization. To help ensure a successful upgrade, operators should taint the build step before running Terraform. This will ensure existing services are attested with the proper signatures for authorization. This impacts deployments on Google Cloud Platform using the provided terraform configuration only.

terraform taint module.en.null_resource.build

Note this will increase the duration of the Terraform run to about 10 minutes. Upon a successful run, continue with the upgrade process as normal.

Changelog since v0.20.0

Changes by Kind

JWKS fixes

  • Don't save newlines at the end of public keys when importing via JWKS (#1297, @mikehelmick)
  • Thru date on health authority keys will be set correctly when they are synced from JWKS sources. (#1300, @mikehelmick)
  • JWKS Service - fix issue where manually added keys containing \r characters could prevent upgrading a health authority to use JWKS discovery. (#1315, @mikehelmick)
  • Admin Console: Fix form issue when adding new health authority public keys (#1314, @mikehelmick)

Reducing database lock contention

  • *Behavior Change- All transactions with an isolation level of serializable will automatically retry 3 times with a quick exponential backoff period. (#1320, @mikehelmick)
  • Correct database isolation levels on HA key operations (#1304, @mikehelmick)
  • Switch to ReadCommitted isolation level for locking (#1324, @sethvargo)
  • Update locking procedure to be strongly consistent (#1323, @sethvargo)

Build & deploy changes

Other

Dependencies

Added

Nothing has changed.

Changed

  • contrib.go.opencensus.io/exporter/stackdriver: v0.13.4 → v0.13.5
  • github.com/gorilla/mux: v1.7.4 → v1.8.0

Removed

Nothing has changed.

Assets 2
Loading

v0.20.0

17 Jan 19:08
@mikehelmick mikehelmick
v0.20.0
5c9a891
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.20.0

Release notes for exposure-notifications-server v0.20.0

Changelog since v0.19.0

Changes by Kind

Breaking Changes

  • Breaking: [for deployments on Google Cloud Platform using default Terraform] To continue using the Terraform module, the following input variable is needed to avoid introducing a diff (#1260, @yegle):

    revision_annotations = {
  debugger        = { "autoscaling.knative.dev/maxScale" : "10" }
  export          = { "autoscaling.knative.dev/maxScale" : "10" }
  export-importer = { "autoscaling.knative.dev/maxScale" : "10" }
  exposure        = { "autoscaling.knative.dev/maxScale" : "500" }
  federationin    = { "autoscaling.knative.dev/maxScale" : "3" }
  federationout   = { "autoscaling.knative.dev/maxScale" : "5" }
  mirror          = { "autoscaling.knative.dev/maxScale" : "10" }
}

Features

  • Allow stats API to be enabled/disabled on a per HA basis. (#1272, @mikehelmick)
  • Fix race condition in JWKS service (#1270, @mikehelmick)
  • Imported keys will be future dated if they haven't expired yet.
    Published keys will be moved forward one extra interval when they are adjusted. There is no actual issue here with the default configuration because of the additional 2 hour embargo, but this is more technically correct. (#1274, @mikehelmick)
  • Publish statistics are written in the background instead of inline with the publish request. (#1263, @mikehelmick)

Infrastructure Changes and Improvements

Buf fixes and improvements

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Assets 2
Loading

v0.19.3

09 Jan 18:13
@mikehelmick mikehelmick
v0.19.3
7fe61cd
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.19.3

Changelog since v0.19.2

Changes by Kind

Bug fixes and improvements

  • Improve test coverage in export import path, fix bug on future date calculation (#1276, @mikehelmick)
  • Imported keys will be future dated if they haven't expired yet.
    Published keys will be moved forward one extra interval when they are adjusted. There is no actual issue here with the default configuration because of the additional 2 hour embargo, but this is more technically correct. (#1274, @mikehelmick)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Assets 2
Loading

v0.19.2

09 Jan 01:24
@mikehelmick mikehelmick
v0.19.2
acaa052
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.19.2

Release notes for main

Changelog since v0.19.1

Changes by Kind

Bug fixes

  • Imported keys will be future dated if they haven't expired yet.
    Published keys will be moved forward one extra interval when they are adjusted. There is no actual issue here with the default configuration because of the additional 2 hour embargo, but this is more technically correct. (#1274, @mikehelmick)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Assets 2
Loading