Changelog 1.15.2#7136
Merged
Merged
Conversation
Signed-off-by: Marcos Yacob <marcosyacob@gmail.com>
MarcosDY
requested review from
amartinezfayo,
evan2645,
rturner3 and
sorindumitru
as code owners
July 9, 2026 14:20
There was a problem hiding this comment.
Pull request overview
Updates the project release notes by adding the v1.15.2 entry to CHANGELOG.md, documenting new features, behavior changes, and fixes included in the 1.15.2 release.
Changes:
- Added a new
## [1.15.2] - 2026-07-09section with “Added”, “Changed”, and “Fixed” subsections. - Documented notable new capabilities (e.g., rate limiting, Prometheus TLS, SPIFFE Broker) and multiple bug fixes across plugins and agent/server behavior.
Comment on lines
+17
to
+31
| - Configurable batch size for pruning attested nodes (#7100) | ||
|
|
||
| ### Changed | ||
|
|
||
| - Deprecation warnings now use dedicated log markers, making them easier to detect in logs (#6908) | ||
| - The OIDC Discovery Provider now warns when `allow_insecure_scheme` is enabled (#6970) | ||
| - The post-quantum cryptography policy is now applied to the bundle endpoint and Prometheus server (#6995) | ||
| - Attested nodes are now fetched in bulk, reducing database load in large deployments (#7022) | ||
| - Agent health check loopback calls no longer emit RPC metrics, reducing metrics noise (#6929) | ||
| - Pod and container IDs are now preferably determined from the cgroup file (#7060) | ||
| - Optimized the MySQL list entries query to reduce database CPU usage under load (#7113) | ||
| - Added AWS CA certificates for new regions to the `aws_iid` node attestor (#6879) | ||
| - Migrated `github.com/docker/docker` dependencies to their `github.com/moby/moby` equivalents to resolve CVEs (#7078) | ||
| - Documented `URISanSelectors` for the agent SPIFFE ID template (#6872) | ||
| - Datastore configuration documentation updates (#7023) |
sorindumitru
reviewed
Jul 9, 2026
|
|
||
| ### Added | ||
|
|
||
| - JWT-SVID audience policy configuration with JTI claim support (#6514) |
Member
There was a problem hiding this comment.
Maybe something like this?
Suggested change
| - JWT-SVID audience policy configuration with JTI claim support (#6514) | |
| - Support for configuring JTI claim inclusion in JWT-SVIDs at entry level (#6514) |
| ### Added | ||
|
|
||
| - JWT-SVID audience policy configuration with JTI claim support (#6514) | ||
| - Per-caller rate limiting for the agent Workload API and Envoy SDS (#6724) |
Member
There was a problem hiding this comment.
Do we want to mention that this is experimental?
Suggested change
| - Per-caller rate limiting for the agent Workload API and Envoy SDS (#6724) | |
| - Experimental per-caller rate limiting for the agent Workload API and Envoy SDS (#6724) |
|
|
||
| - `azure_imds` node attestation for standalone VMs (#6807) | ||
| - `azure_imds` plugin signature validation (#6960) | ||
| - Registered entries are now cascade-deleted when an attested node is deleted (#6946) |
Member
There was a problem hiding this comment.
Did we limit this to just the special join token entry?
Collaborator
Author
There was a problem hiding this comment.
you are right lets me udpate this one
Signed-off-by: Marcos Yacob <marcosyacob@gmail.com>
sorindumitru
previously approved these changes
Jul 9, 2026
amartinezfayo
previously approved these changes
Jul 9, 2026
MarcosDY
dismissed stale reviews from amartinezfayo and sorindumitru
July 9, 2026 18:38
The base branch was changed.
amartinezfayo
approved these changes
Jul 9, 2026
sorindumitru
approved these changes
Jul 9, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Update CHANGELOG for v1.15.2