Repository navigation
Arca v0.6.0
Added
ARCA_TRUSTED_PROXIESnames the proxies in front of the server.
A comma separated list of CIDR ranges, such as an ingress's pod range.
When a request comes from inside one, the client address is the last
X-Forwarded-Forentry outside every range, and that address is what
the per-address limit counts and what the authorizer is told as
request.ip. Unset, no forwarded header is read, as before.
Fixed
- An oversized
PUTnames the upload route under the installation's
base. Theobject_too_largedetail saidPOST /v1/uploadswhatever
ARCA_BASE_PATHwas; it now names the route the installation serves,
such asPOST /v1/storage/uploads.
Release evidence
- Tag:
v0.6.0 - Commit:
aebf5a7c15c8a5bbb76c6c10739f211dd4719167 - Deploy: https://github.com/latere-ai/arca/actions/runs/39049695892
- Origin: https://api.latere.ai
- Served version:
v0.6.0 - Smoke:
/livez,/readyz,/openapi.jsonand/versioneach answered 200 - Surface:
/v1/storage/files/me/answered 401, so the origin routes the prefix to this build
Conformance
The suite of spec 017 against the published image, on the kind
stack of spec 016.
contract_test.go:103: unverified: TestContract/006/UnlistedIssuer: an expired token and a token for another audience are refused
contract_test.go:103: unverified: TestContract/006/AnotherSpace: a refused space answers as a missing one
contract_test.go:103: unverified: TestContract/005/Stars: a star on an unreadable object is refused as missing
contract_test.go:103: unverified: TestContract/008/Link: a public link serves an unauthenticated caller
contract_test.go:103: unverified: TestContract/012/NotAnAdministrator: an administrative route is a missing object for an ordinary caller
contract_test.go:105: 53 passed, 0 failed, 0 skipped, 96 objects created and deleted
--- PASS: TestContract (1.32s)
--- PASS: TestTheSuiteReachesNoHelperOfThisTree (0.07s)
ok latere.ai/x/arca/test/conformance 1.391s
Release evidence
- Tag:
v0.6.0 - Commit:
unknown - Origin: http://localhost:30180
- Served version:
v0.6.0 - Smoke:
/livez,/readyz,/openapi.jsonand/versioneach answered 200 - Surface:
/v1/storage/files/me/answered 401, so the origin routes the prefix to this build