Athenz v1.11.41 Release

What's Changed

• [skip ci] use better env variable to get just the tag name by @abvaidya in #2286
• create sbom for athenz components by @abvaidya in #2287
• add constructor to allow proxy configuration by @ysknkd in #2284
• fix review group page error with expiry settings by @jimmytsang in #2289
• include assertion conditions in get policy response by @mendi160 in #2285
• consolidate all email notifications so the user gets only one email p… by @havetisyan in #2288
• support getting SIA access token config from env variable by @havetisyan in #2290
• new buildSSLContext method based on ca/cert/key pem strings by @havetisyan in #2291
• dump description in zms-cli show-role command by @dvirguttman in #2293
• update jetty/java/go dependencies to their latest releases by @havetisyan in #2292

Full Changelog: v1.11.40...v1.11.41

Athenz v1.11.40 Release

What's Changed

• add a new static validator type in msd by @abvaidya in #2278
• ability to add members by searching for their names by @dvirguttman in #2272
• improve error logging when validating role cert csr by @havetisyan in #2279
• Add search capability for Add Group component by @dvirguttman in #2280
• libs/go/sia/agent/devel/ztsmock: fix dropped error by @alrs in #2283

New Contributors

• @alrs made their first contribution in #2283

Full Changelog: v1.11.39...v1.11.40

Athenz v1.11.39 Release

What's Changed

• include gcp instance name in identity cert uri by @havetisyan in #2270
• Update product Id link by @jimmytsang in #2271
• allow aws attestion role only include service name by @havetisyan in #2273
• [skip ci] docker build using actions by @abvaidya in #2274
• provide config option to specify external creds providers by @havetisyan in #2275
• remove item from fetch queue if zts reports bad request by @havetisyan in #2276
• avoid ConcurrentModificationExceptions when processing domain updates by @havetisyan in #2277

Full Changelog: v1.11.38...v1.11.39

Athenz v1.10.56 Release

What's Changed

• set the locale to be used for log testing by @ysknkd in #2257
• update bouncy castle library by @ysknkd in #2259

Athenz v1.11.38 Release

What's Changed

• new optional attribute in instance identity register/refresh request … by @abvaidya in #2262
• skip tests if -DskipTests=true is provided by @abvaidya in #2263
• support adding cert to secret manager by @havetisyan in #2264
• support external gcp access token support from registered projects by @havetisyan in #2266
• Generic Kubernetes provider for Athenz by @abvaidya in #2265
• add wildcard support for ServiceSkipDomains by @ricordanza in #2267
• fix for deploying Athenz UI container locally by @WindzCUHK in #2268

New Contributors

• @ricordanza made their first contribution in #2267

Full Changelog: v1.11.37...v1.11.38

Athenz v1.11.37 Release

What's Changed

• fix policy tags fetch + increase unit test coverage by @havetisyan in #2248
• introduce shutdown method for connection logger by @havetisyan in #2249
• introduce feature-flags system attribute for domains by @havetisyan in #2250
• support new allow service underscore feature flag by @havetisyan in #2251
• Add test for get policy by @royelbaum in #2254
• allow specifying cipher suites for the ui server via config by @abvaidya in #2252
• add set-role-description option in zms-cli by @havetisyan in #2255
• use read replica when fetching domain change list in read-only mode by @havetisyan in #2256
• support proxy auth with gcp http transport by @havetisyan in #2261

Full Changelog: v1.11.36...v1.11.37

Athenz v1.11.36 Release

What's Changed

• Adding policy tags by @royelbaum in #2219
• update deps and move from sun.jakarta.mail to angus-mail by @havetisyan in #2240
• Bump word-wrap from 1.2.3 to 1.2.4 in /ui by @dependabot in #2243
• Add support in service tags by @royelbaum in #2195
• for go gcp function sia - provide method to store identity in secret manager by @havetisyan in #2244
• add support for new spiffe format in gcp java cloud function support by @havetisyan in #2246

Full Changelog: v1.11.35...v1.11.36

Athenz v1.11.35 Release

What's Changed

• update zms-cli getDomain call to use JWS domain by @chandrasekhar1996 in #2230
• Bump semver from 5.7.1 to 5.7.2 in /ui by @dependabot in #2233
• extend principal role lookup api with expand option by @havetisyan in #2232
• extend GetSanUri method to take spiffe trust domain/namespace arguments by @havetisyan in #2234
• Initiate AthenzSslContextFactory as part of AthenzJettyContainer by @dvirguttman in #2235
• Make the properties of functions.SiaCertData public (Capitalized) by @gilad-bendor in #2236
• support numeric and string product ids in zms-cli by @havetisyan in #2239

Full Changelog: v1.11.34...v1.11.35

Athenz v1.11.34 Release

What's Changed

• excluce bc jdk15on from pom in favor of jdk18on by @havetisyan in #2221
• Go code to get SIA certs from a CGF (Google Cloud Function) by @gilad-bendor in #2220
• config options to specify preferred key algorithms for zts sign operations by @havetisyan in #2222
• Support PKCS#8-formatted private key by @haruyama480 in #2223
• improve error reporting from gcp identity provider by @havetisyan in #2224
• introduce trust-domain/namesparce components into service spiffe uri by @havetisyan in #2228

New Contributors

• @haruyama480 made their first contribution in #2223

Full Changelog: v1.11.33...v1.11.34

Athenz v1.11.33 Release

What's Changed

• increased/configure json string limit for jackson by @havetisyan in #2203
• UI: apply timezone settings by @ysknkd in #2124
• refactor out request pkg in zts client by @jimmytsang in #2211
• Prevent buffer overflow by @tokle in #2212
• log Athenz principal as part of the JettyConnectionLogger by @dvirguttman in #2207
• Generic way to handle tags by @dvirguttman in #2204
• add wildcard support for ServiceMemberSkipDomains by @hiragi-gkuth in #2202
• provide capability to provide proxy host details for gcp-zts-creds by @havetisyan in #2214
• correct handling of role cert key path when service key filename is user-specified by @havetisyan in #2213
• update dependency libraries to their latest releases by @havetisyan in #2215
• GCF support for Java by @gilad-bendor in #2209
• add license headers + full code coverage by @havetisyan in #2216

Full Changelog: v1.11.32...v1.11.33