Skip to content

v2.0.0

Choose a tag to compare

View all tags
@seitzbg seitzbg released this 03 Sep 07:54
· 15 commits to main since this release
v2.0.0
42662d2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

⚠️ Breaking change — re-onboard your vantages

The per-vantage API key is gone, replaced by mutual-TLS federation. smoke-agent's -key flag and the config key: field no longer exist; agents now authenticate with a CA-signed client certificate and connect straight to the hub's -agent-addr mTLS listener (the reverse proxy's /agent/v1/* path is removed). Every existing federated vantage must be re-onboarded with a certificate bundle: run smoked vantage add <name> (or use the dashboard's Add vantage) and redeploy the agent with the new agent.yaml.

Added

  • Opt-in mutual-TLS federation — a dedicated mTLS listener (-agent-addr :8443 -agent-hostname <domain>), self-bootstrapped CA, per-vantage client certs whose CommonName is the vantage identity (revoke takes effect on the next request).
  • One-click vantage onboarding — Add vantage downloads a ready-to-run <name>-vantage.tar.gz (agent.yaml + docker-compose.yml + README); CLI equivalent smoked vantage add <name> -out ….
  • Copyable example stacks under examples/ (standalone/ and federation/).

Security

  • Minting a vantage requires HTTPS — POST /api/admin/vantages refuses to mint over plaintext (403) so the embedded private key never crosses the wire in the clear (reads X-Forwarded-Proto: https from the proxy; loopback exempt; CLI is the local escape hatch).
  • Open config reads redact credentials embedded anywhere in a probe URL (userinfo, query, and path).

Changed

  • The Graphs vantage selector caps at 4 simultaneous overlaid vantages (palette size).

Fixed

  • Overview no longer reports a target down from a vantage that doesn't measure it; a batch of Graphs correctness/robustness fixes — peak clipping, blank-on-refresh, stalled-body aborts, overlay color collisions, narrow-viewport overflow, and refusing to mint an onboarding bundle when no agent listener is configured.

Full changelog: CHANGELOG.md · compare v1.0.16...v2.0.0

Image: ghcr.io/seitzbg/heliograph:v2.0.0

Assets 2
Loading