| 217d183 | Marek Siarkowicz | 13 April 2023, 10:08:47 UTC | version: bump up to 3.5.8 | 13 April 2023, 10:08:47 UTC |
| 9d2cda4 | Marek Siarkowicz | 11 April 2023, 10:21:50 UTC | Merge pull request #15676 from ahrtr/jwt_panic_3.5_20230410 [3.5] etcdserver: verify field 'username' and 'revision' present when decoding a JWT token | 11 April 2023, 10:21:50 UTC |
| 3cd07fe | Marek Siarkowicz | 11 April 2023, 08:48:30 UTC | Merge pull request #15695 from ahrtr/3.5_request_progress_20230411 [3.5] etcdserver: guarantee order of requested progress notifications | 11 April 2023, 08:48:30 UTC |
| cd01925 | Benjamin Wang | 11 April 2023, 01:48:00 UTC | etcdserver: Guarantee order of requested progress notifications Progress notifications requested using ProgressRequest were sent directly using the ctrlStream, which means that they could race against watch responses in the watchStream. This would especially happen when the stream was not synced - e.g. if you requested a progress notification on a freshly created unsynced watcher, the notification would typically arrive indicating a revision for which not all watch responses had been sent. This changes the behaviour so that v3rpc always goes through the watch stream, using a new RequestProgressAll function that closely matches the behaviour of the v3rpc code - i.e. 1. Generate a message with WatchId -1, indicating the revision for *all* watchers in the stream 2. Guarantee that a response is (eventually) sent The latter might require us to defer the response until all watchers are synced, which is likely as it should be. Note that we do *not* guarantee that the number of progress notifications matches the number of requests, only that eventually at least one gets sent. Signed-off-by: Benjamin Wang <wachao@vmware.com> | 11 April 2023, 01:51:48 UTC |
| 643e6e1 | Benjamin Wang | 09 April 2023, 22:42:18 UTC | etcdserver: verify field 'username' and 'revision' present when decoding a JWT token Signed-off-by: Benjamin Wang <wachao@vmware.com> | 10 April 2023, 00:21:43 UTC |
| 5872b80 | Benjamin Wang | 07 April 2023, 22:22:37 UTC | Merge pull request #15512 from engow/automated-cherry-pick-of-#15432-origin-release-3.5 [3.5] server/auth: fix auth panic bug when user changes password | 07 April 2023, 22:22:37 UTC |
| 4501fd8 | Marek Siarkowicz | 07 April 2023, 15:47:23 UTC | Merge pull request #15619 from mitake/3.5-backport-15294 [3.5] backport 15294 | 07 April 2023, 15:47:23 UTC |
| 7f4eef0 | Marek Siarkowicz | 07 April 2023, 08:56:46 UTC | Merge pull request #15661 from ahrtr/backport_15447_20230407 [3.5] etcdserver: set zap logging to wsproxy | 07 April 2023, 08:56:46 UTC |
| b31caa3 | Benjamin Wang | 07 April 2023, 05:33:39 UTC | set zap logging to wsproxy Signed-off-by: Benjamin Wang <wachao@vmware.com> | 07 April 2023, 05:33:39 UTC |
| b1df3df | Benjamin Wang | 06 April 2023, 12:41:20 UTC | Merge pull request #15653 from mitake/3.5-backport-15648 [3.5] backport 15648 | 06 April 2023, 12:41:20 UTC |
| e6c2e38 | Benjamin Wang | 06 April 2023, 08:48:57 UTC | security: remove password after authenticating the user fix https://nvd.nist.gov/vuln/detail/CVE-2021-28235 Signed-off-by: Benjamin Wang <wachao@vmware.com> | 06 April 2023, 11:12:02 UTC |
| 291cb71 | Benjamin Wang | 06 April 2023, 04:58:01 UTC | test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235 Signed-off-by: Benjamin Wang <wachao@vmware.com> | 06 April 2023, 11:11:20 UTC |
| 070341c | Benjamin Wang | 06 April 2023, 07:48:49 UTC | Merge pull request #15651 from ahrtr/bump_go_20230406_3.5 [3.5] bump golang to 1.19.8 to fix four CVEs | 06 April 2023, 07:48:49 UTC |
| f905e2c | Benjamin Wang | 06 April 2023, 06:27:38 UTC | bump golang to 1.19.8 fix CVE https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8/m/OV40vnafAwAJ Signed-off-by: Benjamin Wang <wachao@vmware.com> | 06 April 2023, 06:27:40 UTC |
| e6eeca6 | Hitoshi Mitake | 11 February 2023, 05:51:39 UTC | server/auth: disallow creating empty permission ranges Signed-off-by: Hitoshi Mitake <h.mitake@gmail.com> Co-authored-by: Benjamin Wang <wachao@vmware.com> | 03 April 2023, 13:55:55 UTC |
| 65635e4 | Benjamin Wang | 02 April 2023, 02:34:50 UTC | Merge pull request #15558 from fuweid/3.5-use-strict-mode-for-test [3.5] chore: enable strict mode for test CI | 02 April 2023, 02:34:50 UTC |
| 55bce22 | Wei Fu | 25 March 2023, 08:48:33 UTC | chore: enable strict mode for test CI Signed-off-by: Wei Fu <fuweid89@gmail.com> | 02 April 2023, 00:57:56 UTC |
| 7230b94 | Benjamin Wang | 01 April 2023, 23:17:47 UTC | Merge pull request #15612 from zhangguanzhang/release-3.5 [3.5] Backport fixes all docker images of Architecture show amd64 | 01 April 2023, 23:17:47 UTC |
| 77baf66 | zhangguanzhang | 09 February 2023, 10:38:07 UTC | Fixes: #15266 All docker images of Architecture show amd64 Signed-off-by: zhangguanzhang <zhangguanzhang@qq.com> | 01 April 2023, 15:29:25 UTC |
| 1259884 | Marek Siarkowicz | 01 April 2023, 11:59:36 UTC | Merge pull request #15608 from pchan/automated-cherry-pick-of-#15505-upstream-release-3.5 [3.5] Add testing of etcd in local image in release workflow | 01 April 2023, 11:59:36 UTC |
| 9e50659 | Prasad Chandrasekaran | 18 March 2023, 06:38:49 UTC | scripts: Add testing of etcd in local image in release workflow. Signed-off-by: Prasad Chandrasekaran <prasadc@vmware.com> | 01 April 2023, 11:17:08 UTC |
| c5b670b | Marek Siarkowicz | 31 March 2023, 11:18:02 UTC | Merge pull request #15589 from serathius/separate-grpc-server-3.5 Separate grpc server 3.5 | 31 March 2023, 11:18:02 UTC |
| 073c530 | Marek Siarkowicz | 30 March 2023, 11:37:19 UTC | server: Fix defer function closure escape Signed-off-by: Marek Siarkowicz <siarkowicz@google.com> | 30 March 2023, 14:01:29 UTC |
| 6637aee | Marek Siarkowicz | 27 March 2023, 11:35:29 UTC | tests: Test separate http port connection multiplexing Signed-off-by: Marek Siarkowicz <siarkowicz@google.com> | 30 March 2023, 14:01:28 UTC |
| c0421c7 | Marek Siarkowicz | 10 March 2023, 16:33:46 UTC | server: Add --listen-client-http-urls flag to allow running grpc server separate from http server Difference in load configuration for watch delay tests show how huge the impact is. Even with random write scheduler grpc under http server can only handle 500 KB with 2 seconds delay. On the other hand, separate grpc server easily hits 10, 100 or even 1000 MB within 100 miliseconds. Priority write scheduler that was used in most previous releases is far worse than random one. Tests configured to only 5 MB to avoid flakes and taking too long to fill etcd. Signed-off-by: Marek Siarkowicz <siarkowicz@google.com> | 30 March 2023, 13:53:11 UTC |
| 2d5f48a | Marek Siarkowicz | 13 March 2023, 14:46:42 UTC | server: Pick one address that all grpc gateways connect to Signed-off-by: Marek Siarkowicz <siarkowicz@google.com> | 30 March 2023, 13:11:59 UTC |
| a9e0a04 | Marek Siarkowicz | 28 March 2023, 09:47:57 UTC | server: Extract resolveUrl helper function Signed-off-by: Marek Siarkowicz <siarkowicz@google.com> | 30 March 2023, 13:11:59 UTC |
| 245067b | Marek Siarkowicz | 10 March 2023, 13:06:44 UTC | server: Separate client listener grouping from serving Signed-off-by: Marek Siarkowicz <siarkowicz@google.com> | 30 March 2023, 13:11:59 UTC |
| 63576a2 | Marek Siarkowicz | 10 March 2023, 12:35:18 UTC | refactor: Use proper variable names for urls Signed-off-by: Marek Siarkowicz <siarkowicz@google.com> | 30 March 2023, 13:11:58 UTC |
| 8b4549d | Marek Siarkowicz | 30 March 2023, 12:39:30 UTC | Merge pull request #15443 from ArkaSaha30/automated-cherry-pick-of-#14860-upstream-release-3.5 [3.5] Automated cherry-pick of #14860: Trigger release in current branch for github workflow case | 30 March 2023, 12:39:30 UTC |
| f7ac9df | engow | 20 March 2023, 03:37:35 UTC | sever/auth: fix addUserWithNoOption of store_test Signed-off-by: engow <engow@hotmail.com> | 30 March 2023, 11:13:33 UTC |
| dcb1bf6 | tangcong | 09 March 2023, 04:21:50 UTC | server/auth: fix auth panic bug when user changes password Signed-off-by: tangcong <tangcong506@foxmail.com> Signed-off-by: engow <engow@hotmail.com> | 30 March 2023, 11:13:33 UTC |
| 44d78bf | Benjamin Wang | 26 November 2022, 11:17:52 UTC | Automated cherry-pick of #14860: Trigger release in current branch for github workflow case Signed-off-by: ArkaSaha30 <arkasaha30@gmail.com> | 30 March 2023, 11:09:08 UTC |
| fe37277 | Benjamin Wang | 20 March 2023, 13:45:59 UTC | Merge pull request #15517 from fuweid/cp-15509-to-3.5 [3.5] server/embed: fix data race when start insecure grpc | 20 March 2023, 13:45:59 UTC |
| 9e97479 | Wei Fu | 18 March 2023, 13:28:34 UTC | server/embed: fix data race when start insecure grpc There are two goroutines accessing the `gs` grpc server var. Before insecure `gs` server start, the `gs` can be changed to secure server and then the client will fail to connect to etcd with insecure request. It is data-race. We should use argument for reference in the new goroutine. fix: #15495 Signed-off-by: Wei Fu <fuweid89@gmail.com> (cherry picked from commit a9988e2625eede1af81d189b5f2ecf7d4af3edf1) Signed-off-by: Wei Fu <fuweid89@gmail.com> | 20 March 2023, 12:41:49 UTC |
| 15b3756 | Marek Siarkowicz | 20 March 2023, 12:08:31 UTC | Merge pull request #15515 from serathius/fix-issue15271-3.5 [v3.5] Fix issue15271 | 20 March 2023, 12:08:31 UTC |
| 92e56ab | Marek Siarkowicz | 16 March 2023, 20:23:52 UTC | server: Test watch restore Signed-off-by: Marek Siarkowicz <siarkowicz@google.com> | 20 March 2023, 11:04:43 UTC |
| dafdaae | Bogdan Kanivets | 09 March 2023, 22:11:37 UTC | mvcc: update minRev when watcher stays synced Problem: during restore in watchableStore.Restore, synced watchers are moved to unsynced. minRev will be behind since it's not updated when watcher stays synced. Solution: update minRev fixes: https://github.com/etcd-io/etcd/issues/15271 Signed-off-by: Bogdan Kanivets <bkanivets@apple.com> Signed-off-by: Marek Siarkowicz <siarkowicz@google.com> | 20 March 2023, 11:02:49 UTC |
| 930a450 | Marek Siarkowicz | 18 March 2023, 12:23:36 UTC | Merge pull request #15491 from serathius/test-cmux-3.5 Connection multiplexing regression tests for v3.5 | 18 March 2023, 12:23:36 UTC |
| 86101d3 | Marek Siarkowicz | 16 March 2023, 16:24:15 UTC | tests: Add v2 API to connection multiplexing test Signed-off-by: Marek Siarkowicz <siarkowicz@google.com> | 17 March 2023, 09:51:36 UTC |
| eb614c3 | Marek Siarkowicz | 14 March 2023, 14:44:16 UTC | tests: Add connection muiltiplexer testing Signed-off-by: Marek Siarkowicz <siarkowicz@google.com> | 17 March 2023, 09:51:35 UTC |
| 2eeb260 | Marek Siarkowicz | 16 March 2023, 12:53:17 UTC | tests: Backport RunUtilCompletion Signed-off-by: Marek Siarkowicz <siarkowicz@google.com> | 17 March 2023, 09:50:21 UTC |
| 00e1e5d | Marek Siarkowicz | 16 March 2023, 12:47:34 UTC | tests: Backport tls for etcdctl Signed-off-by: Marek Siarkowicz <siarkowicz@google.com> | 17 March 2023, 09:50:19 UTC |
| 46d6c1d | Marek Siarkowicz | 14 March 2023, 15:35:32 UTC | tests: Extract e2e test utils Consider creating generic testutils for both e2e and integration tests. Signed-off-by: Marek Siarkowicz <siarkowicz@google.com> | 16 March 2023, 16:24:42 UTC |
| 2f4d75f | Marek Siarkowicz | 14 March 2023, 14:43:59 UTC | tests: Allow specifying http version in curl Signed-off-by: Marek Siarkowicz <siarkowicz@google.com> | 16 March 2023, 16:24:42 UTC |
| 4e9911e | Marek Siarkowicz | 14 March 2023, 14:43:45 UTC | tests: Refactor newClient args Signed-off-by: Marek Siarkowicz <siarkowicz@google.com> | 16 March 2023, 16:24:42 UTC |
| 64bc55e | Marek Siarkowicz | 14 March 2023, 11:12:32 UTC | tests: Refactor CURLPrefixArgs Signed-off-by: Marek Siarkowicz <siarkowicz@google.com> | 16 March 2023, 16:24:42 UTC |
| 11ca1d3 | Benjamin Wang | 15 March 2023, 22:06:45 UTC | Merge pull request #15483 from jmhbnz/release-3.5-backport [3.5] Backport tls 1.3 support | 15 March 2023, 22:06:45 UTC |
| 358bcf3 | James Blair | 15 March 2023, 01:10:14 UTC | Backport tls 1.3 support. Signed-off-by: James Blair <mail@jamesblair.net> | 15 March 2023, 01:10:14 UTC |
| 3a63da9 | Marek Siarkowicz | 14 March 2023, 09:25:26 UTC | Merge pull request #15452 from serathius/watch-random-scheduler-3.5 [3.5] Use random scheduler Watch | 14 March 2023, 09:25:26 UTC |
| 55bfad9 | Marek Siarkowicz | 08 March 2023, 14:07:25 UTC | server: Switch back to random scheduler to improve resilience to watch starvation Signed-off-by: Marek Siarkowicz <siarkowicz@google.com> | 14 March 2023, 08:16:46 UTC |
| 3f96014 | Marek Siarkowicz | 02 March 2023, 11:31:13 UTC | test: Test etcd watch stream starvation under high read response load when sharing the same connection Signed-off-by: Marek Siarkowicz <siarkowicz@google.com> | 14 March 2023, 08:16:46 UTC |
| 9886141 | Marek Siarkowicz | 02 February 2023, 10:37:54 UTC | tests: Allow configuring progress notify interval in e2e tests Signed-off-by: Marek Siarkowicz <siarkowicz@google.com> | 14 March 2023, 08:16:46 UTC |
| 6ddb23c | Benjamin Wang | 14 March 2023, 02:05:38 UTC | Merge pull request #15454 from serathius/gomodtidy-3.5 Run go mod tidy | 14 March 2023, 02:05:38 UTC |
| e44995e | Marek Siarkowicz | 13 March 2023, 13:44:50 UTC | Run go mod tidy Signed-off-by: Marek Siarkowicz <siarkowicz@google.com> | 13 March 2023, 15:56:11 UTC |
| b10adb6 | Benjamin Wang | 08 March 2023, 11:07:11 UTC | Merge pull request #15428 from jmhbnz/release-3.5-backport [3.5] Backport update to latest go 1.19.7 release | 08 March 2023, 11:07:11 UTC |
| f0aa228 | James Blair | 08 March 2023, 09:33:13 UTC | Updated go to 1.19.7. Mitigates CVE-2023-24532. Signed-off-by: James Blair <mail@jamesblair.net> | 08 March 2023, 09:33:13 UTC |
| c602942 | Piotr Tabor | 03 March 2023, 10:08:36 UTC | Merge pull request #15337 from jmhbnz/release-3.5 [3.5] Backport bump to go 1.19.6 and golang.org/x/net to v0.7.0 | 03 March 2023, 10:08:36 UTC |
| 1ea808b | James Blair | 24 February 2023, 09:01:41 UTC | Backport go_srcs_in_module changes and fix goword failures. Signed-off-by: James Blair <mail@jamesblair.net> | 24 February 2023, 09:01:41 UTC |
| 183af50 | James Blair | 20 February 2023, 08:33:59 UTC | Formatted source code for go 1.19.6. Signed-off-by: James Blair <mail@jamesblair.net> | 20 February 2023, 08:33:59 UTC |
| 1bd8353 | James Blair | 19 February 2023, 23:52:43 UTC | Bump to go 1.19.6 Signed-off-by: James Blair <mail@jamesblair.net> | 19 February 2023, 23:52:43 UTC |
| 5996b5f | James Blair | 19 February 2023, 23:51:17 UTC | Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571. Signed-off-by: James Blair <mail@jamesblair.net> | 19 February 2023, 23:51:17 UTC |
| d41d8ac | Benjamin Wang | 10 February 2023, 12:15:01 UTC | test:enhance the test case TestV3WatchProgressOnMemberRestart Signed-off-by: Benjamin Wang <wachao@vmware.com> | 10 February 2023, 13:03:43 UTC |
| e896cc7 | Benjamin Wang | 10 February 2023, 01:41:52 UTC | clientv3: correct the nextRev on receving progress notification response Signed-off-by: Benjamin Wang <wachao@vmware.com> | 10 February 2023, 08:47:49 UTC |
| 346f1d3 | Marek Siarkowicz | 09 February 2023, 12:45:30 UTC | Merge pull request #15240 from jmhbnz/release-3.5 [3.5] Backport adjusting time resolution to microseconds | 09 February 2023, 12:45:30 UTC |
| bc5445c | Marek Siarkowicz | 09 February 2023, 08:10:05 UTC | Merge pull request #15264 from ahrtr/3.5_walSync_failpoint_20230209 [3.5] etcdserver: add failpoints walBeforeSync and walAfterSync | 09 February 2023, 08:10:05 UTC |
| 452164a | Benjamin Wang | 08 February 2023, 23:03:04 UTC | etcdserver: add failpoints walBeforeSync and walAfterSync Signed-off-by: Benjamin Wang <wachao@vmware.com> | 08 February 2023, 23:03:04 UTC |
| 1664b4f | Marek Siarkowicz | 03 February 2023, 09:52:54 UTC | Merge pull request #15187 from Kidsan/fix/ipv6-comparisons-release-3.5 [3.5] Backport: netutil: consistently format ipv6 addresses | 03 February 2023, 09:52:54 UTC |
| b9568db | James Blair | 03 February 2023, 08:45:45 UTC | Fix regression in timestamp resolution Historic capnslog timestamps are in microsecond resolution. We need to match that when we migrate to the zap logger. Signed-off-by: James Blair <mail@jamesblair.net> | 03 February 2023, 08:45:45 UTC |
| 238da4b | Marek Siarkowicz | 31 January 2023, 07:51:28 UTC | Merge pull request #15225 from pacoxu/update-cockroachdb/datadriven-etcd3.5 upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies | 31 January 2023, 07:51:28 UTC |
| 2a0ecd4 | Paco Xu | 31 January 2023, 06:19:25 UTC | upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies Signed-off-by: Paco Xu <paco.xu@daocloud.io> | 31 January 2023, 06:42:15 UTC |
| 78e7390 | Benjamin Wang | 30 January 2023, 22:44:51 UTC | bump github.com/stretchr/testify to v1.8.1 Signed-off-by: Benjamin Wang <wachao@vmware.com> | 30 January 2023, 23:12:46 UTC |
| 747de58 | Benjamin Wang | 30 January 2023, 22:32:22 UTC | bump bbolt to v1.3.7 for release-3.5 Signed-off-by: Benjamin Wang <wachao@vmware.com> | 30 January 2023, 23:12:46 UTC |
| 41ed809 | kidsan | 20 January 2023, 15:12:06 UTC | netutil: consistently format ipv6 addresses This formats ipv6 addresses to ensure they can be compared safely Signed-off-by: kidsan <8798449+Kidsan@users.noreply.github.com> | 26 January 2023, 10:11:25 UTC |
| 82004d0 | Iavael | 20 January 2023, 20:55:44 UTC | docker: remove nsswitch.conf Signed-off-by: Iavael <905853+iavael@users.noreply.github.com> | 24 January 2023, 18:46:11 UTC |
| 215b53c | Marek Siarkowicz | 20 January 2023, 10:15:12 UTC | version: bump up to 3.5.7 | 20 January 2023, 10:15:12 UTC |
| 638c6f1 | Marek Siarkowicz | 17 January 2023, 09:23:03 UTC | Merge pull request #15096 from ahrtr/3.5_promote_non_exist_id_20230113 [3.5] etcdserver: return membership.ErrIDNotFound when the memberID not found | 17 January 2023, 09:23:03 UTC |
| 53300ec | Benjamin Wang | 13 January 2023, 07:07:07 UTC | etcdserver: return membership.ErrIDNotFound when the memberID not found Backport https://github.com/etcd-io/etcd/pull/15095. When promoting a learner, we need to wait until the leader's applied ID catches up to the commitId. Afterwards, check whether the learner ID exist or not, and return `membership.ErrIDNotFound` directly in the API if the member ID not found, to avoid the request being unnecessarily delivered to raft. Signed-off-by: Benjamin Wang <wachao@vmware.com> | 16 January 2023, 22:24:27 UTC |
| 816c2e2 | Benjamin Wang | 11 January 2023, 08:37:43 UTC | Merge pull request #15069 from ahrtr/last_wal_rec_corrupt_3.5_20230108 [3.5] etcdserver: process the scenaro of the last WAL record being partially synced to disk | 11 January 2023, 08:37:43 UTC |
| e1fc545 | Benjamin Wang | 07 January 2023, 21:30:01 UTC | etcdserver: process the scenaro of the last WAL record being partially synced to disk We need to return io.ErrUnexpectedEOF in the error chain, so that etcdserver can repair it automatically. Backport https://github.com/etcd-io/etcd/pull/15068 Signed-off-by: Benjamin Wang <wachao@vmware.com> | 07 January 2023, 21:30:01 UTC |
| 9e3966f | Benjamin Wang | 23 December 2022, 23:13:18 UTC | Merge pull request #15041 from ahrtr/update_nsswitch_3.5 [3.5] Update nsswitch.conf for 3.5 | 23 December 2022, 23:13:18 UTC |
| cff3045 | Benjamin Wang | 23 December 2022, 12:30:23 UTC | update nsswitch.conf for 3.5 Signed-off-by: Benjamin Wang <wachao@vmware.com> | 23 December 2022, 12:30:23 UTC |
| dd30268 | Benjamin Wang | 23 December 2022, 11:27:46 UTC | Merge pull request #15037 from ahrtr/remove_busybox_3.5_20221223 3.5: remove the dependency on busybox | 23 December 2022, 11:27:46 UTC |
| 1293f5d | Benjamin Wang | 23 December 2022, 10:38:40 UTC | 3.5: remove the dependency on busybox Signed-off-by: Benjamin Wang <wachao@vmware.com> | 23 December 2022, 10:38:40 UTC |
| f12f162 | Benjamin Wang | 19 December 2022, 09:41:52 UTC | Merge pull request #15018 from ahrtr/deps_3.5_20221219 [3.5] Security: address HIGH Vulnerabilities | 19 December 2022, 09:41:52 UTC |
| cf379a7 | Piotr Tabor | 19 December 2022, 08:24:56 UTC | Merge pull request #14920 from andy-js/andy-js/release-3.5 client/pkg/v3: fixes Solaris build of transport | 19 December 2022, 08:24:56 UTC |
| 4e03851 | Benjamin Wang | 19 December 2022, 08:23:15 UTC | Merge pull request #15016 from ahrtr/use_distroless_3.5_20221219 [3.5] Security: use distroless base image to address critical Vulnerabilities | 19 December 2022, 08:23:15 UTC |
| 925c061 | Benjamin Wang | 19 December 2022, 06:20:45 UTC | Remove dependency on gobin Signed-off-by: Benjamin Wang <wachao@vmware.com> | 19 December 2022, 08:16:55 UTC |
| 413ec16 | Benjamin Wang | 19 December 2022, 05:28:25 UTC | resolve build error: parameter may not start with quote character ' Signed-off-by: Benjamin Wang <wachao@vmware.com> | 19 December 2022, 05:28:25 UTC |
| bf1b902 | Benjamin Wang | 19 December 2022, 05:27:19 UTC | remove .travis.yml Signed-off-by: Benjamin Wang <wachao@vmware.com> | 19 December 2022, 05:27:19 UTC |
| a612b92 | Benjamin Wang | 19 December 2022, 05:26:59 UTC | format the source code and tidy the dependencies using go 1.17.13 Signed-off-by: Benjamin Wang <wachao@vmware.com> | 19 December 2022, 05:26:59 UTC |
| 69ee8a8 | Benjamin Wang | 19 December 2022, 05:23:16 UTC | bump go version to 1.17.13 Signed-off-by: Benjamin Wang <wachao@vmware.com> | 19 December 2022, 05:23:16 UTC |
| 3337f35 | Benjamin Wang | 19 December 2022, 01:28:04 UTC | deps: bump golang.org/x/net to v0.4.0 to address CVEs CVE-2021-44716 CVE-2022-27664 Signed-off-by: Benjamin Wang <wachao@vmware.com> | 19 December 2022, 01:28:07 UTC |
| b766840 | Benjamin Wang | 18 December 2022, 23:49:05 UTC | security: use distroless base image to address critical Vulnerabilities Command: trivy image --severity CRITICAL gcr.io/etcd-development/etcd:v3.5.6 -f json -o 3.5.6_image_critical.json Signed-off-by: Benjamin Wang <wachao@vmware.com> | 18 December 2022, 23:59:32 UTC |
| 410a987 | Benjamin Wang | 17 December 2022, 08:13:36 UTC | Merge pull request #15010 from 4everming/fix/Specify_branch_name_for_the_Trivy_Scan_in_release3.5 fix: specify the correct branch name of release-3.5 in workflow for… | 17 December 2022, 08:13:36 UTC |
| d178292 | zsimon | 17 December 2022, 07:30:26 UTC | cidc: specify the correct branch name of release-3.5 in workflow for trivy nightly scan To checkout the corresponding branch in cicd workflow. Specify the correct branch name in each branch. Signed-off-by: zsimon <zsimon@vmware.com> | 17 December 2022, 07:30:26 UTC |
| 3b7248b | Benjamin Wang | 16 December 2022, 05:59:33 UTC | Merge pull request #15006 from ArkaSaha30/trivy-release-3-5 Add trivy nightly scan for `release-3.5` | 16 December 2022, 05:59:33 UTC |
| 4d3c840 | ArkaSaha30 | 16 December 2022, 05:29:14 UTC | Add trivy nightly scan for release-3.5 Signed-off-by: ArkaSaha30 <arkasaha30@gmail.com> | 16 December 2022, 05:29:14 UTC |
| f1842b6 | Hitoshi Mitake | 15 December 2022, 00:39:35 UTC | Merge pull request #14995 from ahrtr/revert_14322_20221215 clientv3: revert the client side change in 14547 | 15 December 2022, 00:39:35 UTC |
| 1fdfb42 | Benjamin Wang | 14 December 2022, 18:12:49 UTC | clientv3: revert the client side change in 14547 In order to fix https://github.com/etcd-io/etcd/issues/12385, PR https://github.com/etcd-io/etcd/pull/14322 introduced a change in which the client side may retry based on the error message returned from server side. This is not good, as it's too fragile and it's also changed the protocol between client and server. Please see the discussion in https://github.com/kubernetes/kubernetes/pull/114403 Note: The issue https://github.com/etcd-io/etcd/issues/12385 only happens when auth is enabled, and client side reuse the same client to watch. So we decided to rollback the change on 3.5, reasons: 1.K8s doesn't enable auth at all. It has no any impact on K8s. 2.It's very easy for client application to workaround the issue. The client just needs to create a new client each time before watching. Signed-off-by: Benjamin Wang <wachao@vmware.com> | 14 December 2022, 18:12:49 UTC |
