diff --git a/VERSION b/VERSION index 81fd7ba08..d4dfa5639 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -v0.2.0 \ No newline at end of file +v0.3.0 \ No newline at end of file diff --git a/docs/docs/CHANGELOG.md b/docs/docs/CHANGELOG.md index e109d907c..99a62d28e 100644 --- a/docs/docs/CHANGELOG.md +++ b/docs/docs/CHANGELOG.md @@ -1,26 +1,36 @@ # Changelog -## vUNRELEASED +## v0.3.0 ### New -- GRPC Improvements. [#261](https://github.com/pomerium/pomerium/pull/261) and [#69](https://github.com/pomerium/pomerium/issues/69) +- GRPC Improvements. [GH-261] / [GH-69] - Enable WaitForReady to allow background retries through transient failures - Expose a configurable timeout for backend requests to Authorize and Authenticate - Enable DNS round_robin load balancing to Authorize and Authenticate services by default -- Add ability to set client certificates for downstream connections. [GH-259](https://github.com/pomerium/pomerium/pull/259) +- Add ability to set client certificates for downstream connections. [GH-259] ### Fixed -- HTTP status codes now better adhere to [RFC7235](https://tools.ietf.org/html/rfc7235). In particular, authentication failures reply with [401 Unauthorized](https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/401) while authorization failures reply with [403 Forbidden](https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/403). [GH-272](https://github.com/pomerium/pomerium/pull/272) +- Fixed non-`amd64` based docker images.[GH-284] +- Fixed an issue where stripped cookie headers would result in a cookie full of semi-colons (`Cookie: ;;;`). [GH-285] +- HTTP status codes now better adhere to [RFC7235](https://tools.ietf.org/html/rfc7235). In particular, authentication failures reply with [401 Unauthorized](https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/401) while authorization failures reply with [403 Forbidden](https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/403). [GH-272] ### Changed -- A policy's custom certificate authority can set as a file or a base64 encoded blob(`tls_custom_ca`/`tls_custom_ca_file`). [GH-259](https://github.com/pomerium/pomerium/pull/259) +- Pomerium will now strip `_csrf` cookies in addition to session cookies. [GG-285] +- Disabled gRPC service config. [GH-280] +- A policy's custom certificate authority can set as a file or a base64 encoded blob(`tls_custom_ca`/`tls_custom_ca_file`). [GH-259] -- Remove references to [service named ports](https://golang.org/src/net/lookup.go) and instead use their numeric equivalent. [GH-266](https://github.com/pomerium/pomerium/pull/266) +- Remove references to [service named ports](https://golang.org/src/net/lookup.go) and instead use their numeric equivalent. [GH-266] + +## v0.2.0 + +### Security + +- Fixes vulnerabilities fixed in [Go 1.12.8](https://groups.google.com/forum/#!topic/golang-nuts/fCQWxqxP8aA) including CVE-2019-9512, CVE-2019-9514 and CVE-2019-14809. ## v0.2.0 @@ -179,3 +189,59 @@ [certificates documentation]: ../reference/certificates.md [synology tutorial]: ./quick-start/synology.md +[gh-35]: https://github.com/pomerium/pomerium/issues/35 +[gh-58]: https://github.com/pomerium/pomerium/issues/58 +[gh-69]: https://github.com/pomerium/pomerium/issues/69 +[gh-73]: https://github.com/pomerium/pomerium/issues/73 +[gh-74]: https://github.com/pomerium/pomerium/pull/74 +[gh-79]: https://github.com/pomerium/pomerium/pull/79 +[gh-81]: https://github.com/pomerium/pomerium/pull/81 +[gh-83]: https://github.com/pomerium/pomerium/pull/83 +[gh-92]: https://github.com/pomerium/pomerium/pull/92 +[gh-93]: https://github.com/pomerium/pomerium/pull/93 +[gh-95]: https://github.com/pomerium/pomerium/pull/95 +[gh-96]: https://github.com/pomerium/pomerium/pull/96 +[gh-97]: https://github.com/pomerium/pomerium/issues/97 +[gh-100]: https://github.com/pomerium/pomerium/issues/100 +[gh-101]: https://github.com/pomerium/pomerium/pull/101 +[gh-103]: https://github.com/pomerium/pomerium/issues/103 +[gh-108]: https://github.com/pomerium/pomerium/pull/108 +[gh-110]: https://github.com/pomerium/pomerium/issues/110 +[gh-115]: https://github.com/pomerium/pomerium/issues/115 +[gh-116]: https://github.com/pomerium/pomerium/issues/116 +[gh-121]: https://github.com/pomerium/pomerium/pull/121 +[gh-123]: https://github.com/pomerium/pomerium/pull/123 +[gh-128]: https://github.com/pomerium/pomerium/issues/128 +[gh-129]: https://github.com/pomerium/pomerium/issues/129 +[gh-131]: https://github.com/pomerium/pomerium/pull/131 +[gh-132]: https://github.com/pomerium/pomerium/issues/132 +[gh-144]: https://github.com/pomerium/pomerium/pull/144 +[gh-150]: https://github.com/pomerium/pomerium/pull/150 +[gh-151]: https://github.com/pomerium/pomerium/pull/151 +[gh-153]: https://github.com/pomerium/pomerium/issues/153 +[gh-177]: https://github.com/pomerium/pomerium/pull/177 +[gh-179]: https://github.com/pomerium/pomerium/issues/179 +[gh-181]: https://github.com/pomerium/pomerium/issues/181 +[gh-181]: https://github.com/pomerium/pomerium/issues/188 +[gh-183]: https://github.com/pomerium/pomerium/pull/183 +[gh-190]: https://github.com/pomerium/pomerium/issues/190 +[gh-204]: https://github.com/pomerium/pomerium/issues/204 +[gh-205]: https://github.com/pomerium/pomerium/issues/205 +[gh-211]: https://github.com/pomerium/pomerium/issues/211 +[gh-212]: https://github.com/pomerium/pomerium/pull/212 +[gh-218]: https://github.com/pomerium/pomerium/pull/218 +[gh-219]: https://github.com/pomerium/pomerium/pull/219 +[gh-220]: https://github.com/pomerium/pomerium/pull/220 +[gh-227]: https://github.com/pomerium/pomerium/pull/227 +[gh-230]: https://github.com/pomerium/pomerium/pull/230 +[gh-230]: https://github.com/pomerium/pomerium/pull/230 +[gh-233]: https://github.com/pomerium/pomerium/issues/233 +[gh-240]: https://github.com/pomerium/pomerium/pull/240 +[gh-259]: https://github.com/pomerium/pomerium/pull/259 +[gh-259]: https://github.com/pomerium/pomerium/pull/259 +[gh-261]: https://github.com/pomerium/pomerium/pull/261 +[gh-266]: https://github.com/pomerium/pomerium/pull/266 +[gh-272]: https://github.com/pomerium/pomerium/pull/272 +[gh-280]: https://github.com/pomerium/pomerium/issues/280 +[gh-284]: https://github.com/pomerium/pomerium/pull/284 +[gh-285]: https://github.com/pomerium/pomerium/issues/285 diff --git a/docs/docs/reference/examples/docker/basic.docker-compose.yml b/docs/docs/reference/examples/docker/basic.docker-compose.yml index 57046fcaa..ddc5c3d52 100644 --- a/docs/docs/reference/examples/docker/basic.docker-compose.yml +++ b/docs/docs/reference/examples/docker/basic.docker-compose.yml @@ -1,7 +1,7 @@ version: "3" services: pomerium: - image: pomerium/pomerium:latest + image: pomerium/pomerium:v0.3.0 environment: # Generate new secret keys. e.g. `head -c32 /dev/urandom | base64` - COOKIE_SECRET=V2JBZk0zWGtsL29UcFUvWjVDWWQ2UHExNXJ0b2VhcDI= diff --git a/docs/docs/reference/examples/docker/nginx.docker-compose.yml b/docs/docs/reference/examples/docker/nginx.docker-compose.yml index 66b731c9f..bbeadf072 100644 --- a/docs/docs/reference/examples/docker/nginx.docker-compose.yml +++ b/docs/docs/reference/examples/docker/nginx.docker-compose.yml @@ -12,7 +12,7 @@ services: - /var/run/docker.sock:/tmp/docker.sock:ro pomerium-authenticate: - image: pomerium/pomerium:latest # or `build: .` to build from source + image: pomerium/pomerium:v0.3.0 # or `build: .` to build from source restart: always environment: - SERVICES=authenticate @@ -42,7 +42,7 @@ services: - 443 pomerium-proxy: - image: pomerium/pomerium:latest # or `build: .` to build from source + image: pomerium/pomerium:v0.3.0 # or `build: .` to build from source restart: always environment: - SERVICES=proxy @@ -69,7 +69,7 @@ services: - 443 pomerium-authorize: - image: pomerium/pomerium:latest # or `build: .` to build from source + image: pomerium/pomerium:v0.3.0 # or `build: .` to build from source restart: always environment: - SERVICES=authorize diff --git a/docs/docs/reference/examples/kubernetes/pomerium-authenticate.yml b/docs/docs/reference/examples/kubernetes/pomerium-authenticate.yml index 0096365f0..5e6b55249 100644 --- a/docs/docs/reference/examples/kubernetes/pomerium-authenticate.yml +++ b/docs/docs/reference/examples/kubernetes/pomerium-authenticate.yml @@ -29,7 +29,7 @@ spec: app: pomerium-authenticate spec: containers: - - image: pomerium/pomerium:latest + - image: pomerium/pomerium:v0.3.0 name: pomerium-authenticate args: - --config=/etc/pomerium/config.yaml diff --git a/docs/docs/reference/examples/kubernetes/pomerium-authorize.yml b/docs/docs/reference/examples/kubernetes/pomerium-authorize.yml index b00cac16c..e6a03bdb4 100644 --- a/docs/docs/reference/examples/kubernetes/pomerium-authorize.yml +++ b/docs/docs/reference/examples/kubernetes/pomerium-authorize.yml @@ -29,7 +29,7 @@ spec: app: pomerium-authorize spec: containers: - - image: pomerium/pomerium:latest + - image: pomerium/pomerium:v0.3.0 name: pomerium-authorize args: - --config=/etc/pomerium/config.yaml diff --git a/docs/docs/reference/examples/kubernetes/pomerium-proxy.yml b/docs/docs/reference/examples/kubernetes/pomerium-proxy.yml index e7df4a0e6..8ae4c6df5 100644 --- a/docs/docs/reference/examples/kubernetes/pomerium-proxy.yml +++ b/docs/docs/reference/examples/kubernetes/pomerium-proxy.yml @@ -31,7 +31,7 @@ spec: app: pomerium-proxy spec: containers: - - image: pomerium/pomerium:latest + - image: pomerium/pomerium:v0.3.0 name: pomerium-proxy args: - --config=/etc/pomerium/config.yaml diff --git a/docs/docs/releases.md b/docs/docs/releases.md index b990de8dd..85443405e 100644 --- a/docs/docs/releases.md +++ b/docs/docs/releases.md @@ -54,6 +54,7 @@ To see difference between releases, please refer to the changelog and upgrading For convenience, we maintain hosted documentation for each tagged release. The format for which is `https://{MAJOR}-{MINOR}-{PATCH}.docs.pomerium.io`. For example: +- [v0.3.0](https://0-3-0.docs.pomerium.io/) - [v0.2.0](https://0-2-0.docs.pomerium.io/) - [v0.1.0](https://0-1-0.docs.pomerium.io/) - [v0.0.5](https://0-0-5.docs.pomerium.io/) diff --git a/docs/docs/upgrading.md b/docs/docs/upgrading.md index e6268a995..db6b7a402 100644 --- a/docs/docs/upgrading.md +++ b/docs/docs/upgrading.md @@ -7,6 +7,10 @@ description: >- # Upgrade Guide +## Since 0.2.0 + +Pomerium `v0.3.0` has no known breaking changes compared to `v0.2.0`. + ## Since 0.1.0 Pomerium `v0.2.0` has no known breaking changes compared to `v0.1.0`.