Skip to content

v0.15.0

Latest
Latest

Choose a tag to compare

View all tags
@scotwells scotwells released this 12 Nov 02:23
v0.15.0
a51f476
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Serving members send far fewer acknowledgements, the DNS MCP server now serves HTTPS, and the CLI refuses to guess between zones that share a name.

Important

Upgrading from v0.14.0

  • Upgrade the Private DNS control plane before, or together with, the serving members. Don't roll the control plane back to v0.13.0 or earlier while members on this release are running.
  • No scale-to-zero is needed: this release doesn't change lease or outbox handling.
  • Members on this release stop reading their acknowledgement feed. The control plane removes those unread consumers after its usual idle period, so they report a growing backlog until then.
  • The DNS MCP server now mounts a cert-manager CSI certificate from the datum-control-plane ClusterIssuer and serves HTTPS on its existing port. Clusters that deploy it need the cert-manager CSI driver and that issuer.
  • agent.publicationAckRefresh is new. Releases before this one reject it, so remove it before rolling back.

What's new

  • Fewer acknowledgements. Serving members re-acknowledge each zone every two minutes instead of every 30 seconds, renew their liveness with a few acknowledgements in between, and no longer read other members' acknowledgements. A zone that fails re-verification is rejected without holding back the member's other zones. (#522)
  • DNS MCP over HTTPS, so clients that only send credentials over TLS can use it. (#525)
  • CLI: no more wrong-zone lookups. datumctl dns commands refuse a zone name that matches more than one zone and take --vpc to pick one. (#474)
  • Dashboards: answer-time heatmaps are coloured by share of answers. (#527, #528)
  • Go toolchain moved to 1.27.4 for a security fix. (#524)

Full changelog: v0.14.0...v0.15.0

Changelog

  • a51f476 Merge pull request #474 from datum-cloud/fix/cli-ambiguous-zone
  • d1d913f Merge pull request #522 from datum-cloud/feat/member-ack-lease
  • 4f246d1 Merge pull request #524 from datum-cloud/renovate/golang-version-go-vulnerability
  • ef6d0bc Merge pull request #525 from datum-cloud/fix/mcp-serve-tls
  • 277a102 Merge pull request #527 from datum-cloud/claude/project-thread-3y3ygg
  • 0762f9d Merge pull request #528 from datum-cloud/claude/project-thread-3y3ygg
  • f8e51a6 Merge remote-tracking branch 'origin/main' into pr474-merge
  • 860833e chore(deps): update go toolchain directive to v1.27.4 [security]
  • ca54c53 feat: Renew members by lease, not per-zone acks
  • e581c2a fix: Deploy dns-mcp with a cert and https URLs
  • 1ee7dec fix: Keep live renewals ahead of withdrawals
  • 6dfa7bf fix: Keep per-zone row expiry, harden renewal
  • 53cc853 fix: Refresh every 2m and renew from any publication
  • 34c14ac fix: Renew the lease from acks that succeed
  • ce3cedc fix: Serve dns-mcp over TLS when given a cert
  • 3b4a276 fix: cap heatmap share colour at 5%
  • af9e4d1 fix: close zone picker gaps found in review
  • 818cd07 fix: colour answer time heatmaps by share
  • 883be4b fix: colour answer time shares blue to red
  • b06cde3 fix: harden the zone picker against review findings
  • 28ff624 fix: keep share heatmaps blue for small shares
  • 8fa60a5 fix: refuse ambiguous zones and add --vpc
  • 08fb750 fix: tighten heatmap colour check and wording
Assets 8
Loading