Skip to content

Releases: openziti/zrok

v0.4.41

03 Oct 16:47
d050fb9
Compare
Choose a tag to compare

CHANGELOG

FIX: Fixed crash when invoking zrok share reserved with no arguments (#740)

FIX: zrok-share.service on Linux failed to start with a private share in closed permission mode

FIX: Update gopkg.in/go-jose/go-jose.v2 to v2.6.3 to fix vulnerability around compressed data (#761)

v0.4.40

16 Sep 19:10
c110f86
Compare
Choose a tag to compare

CHANGELOG

FEATURE: New endpoint for synchronizing grants for an account (#744). Useful for updating the zrok.proxy.v1 config objects containing interstitial setting when the skip_interstitial_grants table has been updated.

FIX: prune incorrect troubleshooting advice about listing Caddy's certificates

v0.4.39

20 Aug 14:49
9dce9b7
Compare
Choose a tag to compare

CHANGELOG

FEATURE: New API endpoint allowing direct creation of accounts in the zrok database. Requires an admin token (specified in the controller configuration yaml) for authentication. See the OpenAPI spec for details of the API endpoint. The zrok admin create account CLI was also updated to call the API endpoint, rather than directly operating on the underlying database (#734). The Docker and Kubernetes zrok instance deployments were adapted to the new CLI parameter shape.

FEATURE: Support html_path directive in interstitial stanza of public frontend configuration to support using an external HTML file for the interstitial page (#716)

FEATURE: zrok access private now includes a --response-header flag to add headers to the response for HTTP-based backends. Add flag multiple times to add multiple headers to the response. Expects key:value header definitions in this format: --response-header "Access-Control-Allow-Origin: *" (#522)

CHANGE: Update github.com/openziti/sdk-golang (and related dependencies) to version v0.23.40.

CHANGE: upgrade to ziti v1.1.7 CLI in zrok container image

v0.4.38

31 Jul 18:25
bf7b8ec
Compare
Choose a tag to compare

CHANGELOG

FEATURE: Conditionally enable interstitial page based on User-Agent prefix list. See the frontend configuration template at etc/frontend.yml for details on the new configuration structure (#715)

CHANGE: The interstitial configuration has been modified from a simple interstitial: <bool> to a richer structure, but the config version has not been incremented; this feature has not been widely adopted yet. See the frontend configuration template at etc/frontend.yml for details on the new structure.

CHANGE: The registration page where a new user's password is set now includes a required checkbox, asking them to acknowledge the terms and conditions presented above the checkbox (#669)

FIX: The registration page where a new user's password is set now includes better styling of the error message <div/> to prevent the entire page from jumping when the message changes.

v0.4.37

29 Jul 18:59
ed09ab2
Compare
Choose a tag to compare

CHANGELOG

FIX: Fix for setting the zrok_interstitial cookie on Chrome-based browsers.

FIX: Fix for store.IsAccountGrantedSkipInterstitial to respect the deleted flag.

FIX: When an error occurs connecting to the proxied endpoint, the proxy backend should return HTTP status 502 (#703)

v0.4.36

26 Jul 19:27
ab4132c
Compare
Choose a tag to compare

CHANGELOG

FEATURE: New interstitial pages that can be enabled per-frontend, and disabled per-account (#704)

CHANGE: Enable "declaration": true in tsconfig.json for Node SDK.

FIX: target the 32bit build for armhf to fix the FPE issue and the missing link issue

CHANGE: add cross-build instructions (includes new snapshot build target armel)

v0.4.35

17 Jul 17:45
cee6186
Compare
Choose a tag to compare

CHANGELOG

FEATURE: Added import for github.com/greenpau/caddy-security to include that Caddy plugin to enable authentication, authorization, and credentials extensions for the caddy backend (#506)

FEATURE: Closed permission mode for Docker and Linux private shares

CHANGE: add example in ./etc/caddy to set X-Real-IP header to public share client IP

CHANGE: auto-update the ziti CLI version that is built in to the openziti/zrok container image

CHANGE: Docker examples set HOME to enable running CLI commands in the container

FIX: Fix for environment count inheritance when using a resource count class to override global environment count (#695)

v0.4.34

27 Jun 17:22
9bb3212
Compare
Choose a tag to compare

CHANGELOG

FEATURE: Linux service support for all private share modes (contribution from Stefan Adelbert @stefanadelbert) (See: https://openziti.discourse.group/t/cant-forward-to-a-dedicated-custom-domain-name/2541)

FIX: Fix for mixing limited and unlimited (-1) resource counts in the limits system (#680)

FIX: Fix for sending multiple warning emails when a warning is applied to an account (#685)

CHANGE: add Docker compose example for multiple share containers using the same enabled environment in compose.override.yml

CHANGE: bump many GitHub Actions that were using deprecated distributions of Node.js

CHANGE: bump macOS runner for Node SDK from macos-11 to macos-12

v0.4.33

25 Jun 18:54
5fe2530
Compare
Choose a tag to compare

CHANGELOG

FIX: Fix for log message in Agent.CanAccessShare ("account '#%d' over frontends per share limit '%d'"), which was not returning the correct limit value.

FIX: Properly set permission_mode in frontends when createing a private frontend using zrok access private (#677)

CHANGE: Updated react-bootstrap to version 2.10.2 (web console).

CHANGE: Updated @mui/material to version 5.15.18 (web console).

CHANGE: Updated react and react-dom to version 18.3.1 (web console).

CHANGE: Updated recharts to version 2.12.7 (web console).

CHANGE: Updated react-router-dom to version 6.23.1 (web console).

CHANGE: Updated axios to version 1.7.2 for (node SDK).

CHANGE: Updated @openziti/ziti-sdk-nodejs to version 0.17.0 (node SDK).

v0.4.32

21 Jun 15:18
941b296
Compare
Choose a tag to compare

CHANGELOG

FEATURE: New permission mode support for public frontends. Open permission mode frontends are available to all users in the service instance. Closed permission mode frontends reference the new frontend_grants table that can be used to control which accounts are allowed to create shares using that frontend. zrok admin create frontend now supports --closed flag to create closed permission mode frontends (#539)

FEATURE: New config defaultFrontend that specifies the default frontend to be used for an environment. Provides the default --frontend for zrok share public and zrok reserve public (#663)

FEATURE: Resource count limits now include share_frontends to limit the number of frontends that are allowed to make connections to a share (#650)

CHANGE: The frontend selection flag used by zrok share public and zrok reserve public has been changed from --frontends to --frontend

FIX: use controller config spec v4 in the Docker instance