v1.0.0

What's Changed

• CI gate: golangci-lint v2.14.0 (go1.27), v2 config, lint fixes; e2e deploys with CONTROLLER_IMG by @VolodymyrPorokhniak in #2
• Minimal inputs: one release tag, one name per setting, constants baked in by @VolodymyrPorokhniak in #3
• Tunables are optional again; the WireGuard port of the VPN pod is closed to the lab side by @VolodymyrPorokhniak in #4
• Smaller image: strip CNI plugin binaries, wider dockerignore by @VolodymyrPorokhniak in #1
• The VPN and gateway pods are transparent: nothing on the lab side can talk to the pod itself by @VolodymyrPorokhniak in #5
• Gateway pods answer a ping on the lab's own interface address only; IPv6 and FORWARD closed from the first moment by @VolodymyrPorokhniak in #6
• Gateway pods fail closed; any lab source may reach the participants; real-iptables tests in CI by @VolodymyrPorokhniak in #7
• ci.sh: delete-rc no longer fails when the last tag does not match by @VolodymyrPorokhniak in #8
• CI: retag the develop image for the rc, buildcache-develop, cache cleanup, manual Cleanup workflow by @VolodymyrPorokhniak in #9
• ci.sh next-version: skip minor PRs already in the last release by @VolodymyrPorokhniak in #10
• Make the interface address optional (nil = no IP) by @VolodymyrPorokhniak in #11
• Proxy: styled error pages for browsers, shared status-page look with the VPN check page by @VolodymyrPorokhniak in #12
• Proxy: a client without access gets 404, the same as an unknown host or removed lab by @VolodymyrPorokhniak in #13
• Status pages: inline favicon, one language per card, clean copy by @VolodymyrPorokhniak in #14
• Agent: LabGroup carries its creation time (created_unix_ms) for cleanup sweeps by @VolodymyrPorokhniak in #15
• Status pages: B4 look, state icon and brand rule instead of the card and top bar by @VolodymyrPorokhniak in #16
• Journal fixes: quiet conflicts and NotFound, pod-not-created reason, conntrack accounting in host-prep, proxy reports role by @VolodymyrPorokhniak in #17
• Route the access port by source, out of the main table by @VolodymyrPorokhniak in #18
• Fast lab teardown: 5 s pod grace, CNI DEL succeeds on a gone netns by @VolodymyrPorokhniak in #19
• test: forbid wrong apostrophe in Ukrainian texts by @VolodymyrPorokhniak in #20
• A lab of only switches becomes Ready: a switch the lab cables to nothing needs just its VNI by @VolodymyrPorokhniak in #21
• Agent tests: wait until envtest serves the CRDs by @VolodymyrPorokhniak in #22
• Release by @VolodymyrPorokhniak in #23

New Contributors

• @VolodymyrPorokhniak made their first contribution in #2

Full Changelog: https://github.com/cybericebox/laboratory/commits/v1.0.0