What's Changed
Bug Fixes
- Update agentgateway for split actor and ateom identities by Eitan Yarmush (@EItanya) in #1923
- atelet: pin the multi-actor stats fold and keep CPU baselines across pending sweeps by Tim Bai (@baizhenyu) in #1885
- Snapshot path validation by Benjamin Elder (@BenTheElder) in #1950
- fix(benchmarking): make the SWE-Perf ActorTemplate deployable by Haowei Cai (Roy) (@roycaihw) in #1889
- nighthawk-ingress: let run-dev.sh run more actors than workers by haiyanmeng in #1982
- ateom-microvm: reseed the guest CRNG on restore by eliranw in #1524
- Pin envoy-dataplane from the release on a pre-built install by Anna Pendleton (@annapendleton) in #1964
Features: Networking and Egress
- ateom/actor ID split: Ateom uses MintAteomActorCertificate by Taahir Ahmed (@ahmedtd) in #1809
- egress policy enhancements for GA by Lior Lieberman (@LiorLieberman) in #1751
- e2e: add test for egress credential injection cujs by Yufan Su (@yufan-su) in #1795
- Egress policy plumbing by yanavlasov in #1978
- kubectl-ate: add delete egress-policy by Yuan Gao (@ygao-g) in #1808
- envoy dyn module followup by Lior Lieberman (@LiorLieberman) in #1995
Features: Security and Identity
- ateapi: make the actor JWT issuer configurable and add typ to the header by Max Thompson (@thompsonmax) in #1834
- ateapi: [Part 1] Runtime Authorization check for Atespace CRUD by Shruti Nair (@SHRUTI6991) in #1702
- ateapi: require an actor JWT lifetime and align the subject with the SPIFFE ID by Max Thompson (@thompsonmax) in #1902
Features: Observability
- actorevent: define the actor usage event and the activation epoch by Tim Bai (@baizhenyu) in #1881
- benchmarking: actor telemetry for the sweperf workload by Nishanth Kotla (@Nishanth29) in #1848
Features: Install and Operations
- CI: create JUnit artifacts and gate on all tests passing by Steven Shriver (@stshrive) in #1873
- benchmark(atelet, ateom-microvm): log per-actor checkpoint and restor… by Lucky Abolorunke (@Oneimu) in #1941
- ate-setup: add deploy subcommands for podcertificate-controller and SandboxConfig by Haven Xia (@HavenXia) in #2010
Features: Workers and Actors
- Add
ActorDirsmessage to carry per-actor directories and and split the path packages by owner by Haven Xia (@HavenXia) in #1730 - ateapi: release a suspend's replaced snapshot after committing SUSPENDED by haiyanmeng in #2006
Documentation
- docs: add a star history chart to the README by botengyao in #1894
- doc: egress credential injection with sample k8s secret credential pr… by Yufan Su (@yufan-su) in #1805
- Fix several broken links to CODE_OF_CONDUCT.md by Tim Flannagan (@timflannagan) in #1987
Other Changes
- ateom/actor ID split: Clean up purpose from MintActorCertificate by Taahir Ahmed (@ahmedtd) in #1810
- Remove unnecessary fsync during ResumeActor by Michelle Au (@msau42) in #1883
- serverboot.Fatal: Allow additional slog arguments by Taahir Ahmed (@ahmedtd) in #1908
- ate-api: Move authn package into server-specific internal package by Taahir Ahmed (@ahmedtd) in #1909
- ateletpb: carry the Restore base snapshot as a typed source, dropping golden_snapshot_uri by Dmitry Berkovich (@dberkov) in #1602
- Clean up packages in ateomnet by Bowei Du (@bowei) in #1897
- nodepath: move the node state root to /var/lib/ate by Davanum Srinivas (@dims) in #1926
- move agw tests to post-merge and release-* branches by Lior Lieberman (@LiorLieberman) in #1949
- upgrade otel log to 0.21 by Benjamin Elder (@BenTheElder) in #1958
- ateom-gvisor: take the actor directories from the request by Haven Xia (@HavenXia) in #1865
- ateom-microvm: take the actor directories from the request and remove ateompath package by Haven Xia (@HavenXia) in #1872
- atelet: introduce declarative validation for the AteomSupport RPCs by shrutiyam-glitch in #1903
- atelet: add CAP_DAC_OVERRIDE to reset dirs a non-root container wrote by Davanum Srinivas (@dims) in #1910
- ateapi: rename --egress-gateway-address to --default-egress-gateway-address by Lior Lieberman (@LiorLieberman) in #1858
- Clean up vestigial metadata setting in atepg by Tim Hockin (@thockin) in #1992
- Move DV validators under
apivalidations. by Julian Gutierrez Oschmann (@juli4n) in #2007
New Contributors
- Haowei Cai (Roy) (@roycaihw) made their first contribution in #1889
- Tim Flannagan (@timflannagan) made their first contribution in #1987
Full Changelog: v0.2.0...v0.3.0
Committers in this release
- Taahir Ahmed (@ahmedtd)
- Anna Pendleton (@annapendleton)
- Tim Bai (@baizhenyu)
- Benjamin Elder (@BenTheElder)
- botengyao
- Bowei Du (@bowei)
- Dmitry Berkovich (@dberkov)
- Dependabot (@dependabot)[bot]
- Davanum Srinivas (@dims)
- Du Bin (@dubin555)
- Eitan Yarmush (@EItanya)
- eliranw
- haiyanmeng
- Haven Xia (@HavenXia)
- Jeffrey Ying (@Jefftree)
- Julian Gutierrez Oschmann (@juli4n)
- Lior Lieberman (@LiorLieberman)
- Michelle Au (@msau42)
- Nishanth Kotla (@Nishanth29)
- Lucky Abolorunke (@Oneimu)
- Haowei Cai (Roy) (@roycaihw)
- Shruti Nair (@SHRUTI6991)
- shrutiyam-glitch
- Steven Shriver (@stshrive)
- Tim Hockin (@thockin)
- Max Thompson (@thompsonmax)
- Tim Flannagan (@timflannagan)
- yanavlasov
- Yuan Gao (@ygao-g)
- Yufan Su (@yufan-su)