0.3.0

What's Changed

• connection management for load_balancer. by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#286
• Reduce spin features and pin it by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#291
• switch conn_events to mpsc from broadcast channel by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#290
• Switch to local ciborium. Pin some deps by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#292
• Deploy health check by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#293
• dedicated service checker tool by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#297
• Remove entrust bindgen output by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#296
• capture HSM idle time by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#298
• User accounting by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#295
• increase session cache size by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#299
• remove manual From's for OpError by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#300
• fix missing hsm metrics by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#302
• refactor common agent service hosting by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#303
• Dependency updates by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#304
• record recovery events in GCP pub/sub by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#305
• Move builds to new bucket in project juicebox-infra by @abochannek in juicebox-systems/juicebox-hsm-realm-private#308
• limit WARN log spew in logging subscriber by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#309
• set timeouts for grpc clients by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#307
• Use http2 keep-alives on grpc connections by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#310
• Update to Codesafe 13.4.3 release by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#311
• remove unused next_is_leader var by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#313
• Add scope to auth token by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#306
• Switch ciborium and gcp_auth to submodules by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#314
• restart_watching needs to retry on failure to get HSM status by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#315
• capture more info in service checker by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#317
• Instrument pub/sub methods by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#318
• rev sdk hash by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#319
• Add user prefix and forever options to service_checker by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#320
• rememeber to actually use tracer options by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#321
• Update depencencies by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#322
• improve tracing usage by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#323
• Rename entrust-hsm.sar to entrust_hsm.sar by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#316
• Allow trace rate to be set for lb by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#325
• retry pub/sub 502 errors by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#327
• Add testing endpoint to load balancer by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#328
• Add entrust-specific CI job with codesafe iso zip by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#329
• Service checker: capture cdn info for debugging by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#330
• report network latency metric from service checker by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#332
• Change histogram metrics to distributions by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#333
• Update Debian/Ubuntu by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#326
• Add entrust_ops tool (adapted from ceremony tool) by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#335
• add http client timeouts and metrics by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#336
• remove service bind on reqwest::Client by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#338
• service_checker: Check TLS expiration date by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#341
• verify/fixup message string in ServiceCheckOptions by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#344
• cluster manager should rebalance group leadership if needed. by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#342
• Use larger CI runners by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#346
• testing: Improve logging when launching pubsub by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#347
• Expand parse_duration to accept units by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#348
• move cargo audit to separate workflow by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#350
• Some clean-up before starting compaction by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#351
• Use a secret key to randomize record IDs by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#331
• Become leader logging / retry not captured by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#349
• ensure tags are valid by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#353
• Tighten/clarify some mutex guard lifetimes by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#354
• Improve metrics_tag macro by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#358
• Test hsm realm against released versions of the client by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#357
• fix "hang" in read_log_entry when log entry doesn't exist by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#356
• Update parse_duration to require explicit units by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#355
• Add big panic header when output is going to a terminal by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#360
• Add metric for gcp token getting time by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#362
• Hsm cross version testing by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#361
• Add git and host build info to /livez and --version by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#363
• Update Rust to 1.74 and update SDK to latest with Rust 1.74 by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#364
• CI: Upgrade cross_version_hsm to larger runner by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#366
• build_info: Add rustc version by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#367
• Pick up gcp_auth improvements by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#368
• watchdog/panic on bad hsm/agent leadership state by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#369
• cycle to a new warmed up bigtable connection every 55 mins by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#365
• add software_hsm & service_checker to build scripts by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#370
• CI: Set a timeout of 20 minutes on each job by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#373
• use more than one core in cluster_bench by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#374
• extend pubsub/bigtable startup timeouts by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#375
• fix some rustdoc issues by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#376
• Add log compaction by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#372
• Fix bigtable read retries by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#377
• change secret manager auth scope by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#378
• Compaction metrics and lb /livez name by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#379
• Update Rust, SDK, googleapis by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#381
• Add ScopedTask (a tokio JoinHandle that aborts on Drop) by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#380
• Remove LOG_COMPACTION_ENABLED flag by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#382
• Dependency update by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#384
• Format panic messages as JSON for better Datadog ingestion by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#385
• move transfer to own file by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#387
• clamp commit_index during stepdown by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#388
• Deal with hsm/agent role state synchronization issues by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#383
• agent: Store the latest commit index in the leader state by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#389
• Add "level":"ERROR" to JSON panic messages by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#391
• Move ownership transfer into cluster manager, with lease by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#390
• fix transfer grant being ignored by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#393
• Transfer protocol updates by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#392
• Add retry_loop and use it for Bigtable by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#394
• Switch more things to retry_loop by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#395
• Add support for AuthKeyAlgorithm specified within JSON secrets by @Imperiopolis in juicebox-systems/juicebox-hsm-realm-private#386
• fix+tests for cancel_prepare_transfer by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#396
• Update google_secret_manager to use retry_loop by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#397
• Request only secrets that are not DISABLED by @Imperiopolis in juicebox-systems/juicebox-hsm-realm-private#398
• Refresh secrets from Google Secrets Manager less often by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#399
• Simplify demo_runner with cluster_gen by @diego-juicebox in juicebox-systems/juicebox-hsm-realm-private#400
• Make transfer coordinator not suck by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#401
• mermaid & svg's for ownership transfer protocol by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#404
• don't regen localhost certs for every test by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#406
• add recordId/ownedRange formatters that remove trailing 0000/ffff's by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#402
• CI release build of everything by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#403
• Add merkle tree table to table-stats command by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#407
• Bigtable merkle delete by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#413
• Dont spam merkle cache by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#414
• report service uptime metric by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#427
• cluster_bench: report stats on a regular basis by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#429
• Use a queue to manage deferred merkle deletes. by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#416
• force agent to panic after recovering a crashed SEEWorld by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#430
• Allow specifying just an unambiguous prefix for realms/groups in cluster_cli commands. by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#432
• Allow bigtable-instance & -project args to be set from env by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#433
• Pad SecretsResponse before Noise encryption by @Imperiopolis in juicebox-systems/juicebox-hsm-realm-private#405
• Initial chaos puppy by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#434
• publish build to gcp bucket by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#438
• Fix transfer allowing invalid range by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#437
• enable hsm metrics for CI builds by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#441
• tenant rate limiting by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#443
• Add option to write cluster bench results to json file by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#444
• log git hash at service startup by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#445
• cluster_bench: allow setting number of http client instances to use by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#446
• Add metric for size of merkle write batch by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#450
• Pef Improvements for interacting with an entrust hsm. by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#449
• limit number of concurrent expensive merkle reads by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#451
• don't needlessly wait for all captures to arrive during commit by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#453
• update script for build folder changes by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#452
• Wrap Url to improve debug output by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#454
• Add some agent info to StatusResult / cluster tool by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#456
• make agent status not optional by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#458
• Add version tag to traces/metrics by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#459
• minor readme updates by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#460
• Fix wrong group clock in cancel prepared transfer by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#462
• add cluster_cli transfer & partition commands by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#466
• Adopt new RecordID/OwnedRange methods by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#467
• Reduce lock contention by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#468
• Rate limiter scale improvements for larger clusters by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#469
• remove some fields from #[instrument!] by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#470
• Hsm bench improvements by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#471
• improve perf of hex formatted Debug impls by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#472
• Add AGPL v3 license by @Imperiopolis in juicebox-systems/juicebox-hsm-realm-private#473
• Doc, comment & merkle paper updates. by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#474
• rev version to 0.3.0 by @simon-4242 in juicebox-systems/juicebox-hsm-realm-private#475

New Contributors

• @abochannek made their first contribution in juicebox-systems/juicebox-hsm-realm-private#308

Full Changelog: juicebox-systems/juicebox-hsm-realm-private@0.2.3...0.3.0