- Remove invalid --upload flag from cosign sign in release workflow
- Prevent client‑supplied X-Forwarded-Authorization from shadowing service‑account-token
- Harden CSRF token handling
- Stop trusting X-Forwarded-* headers in same-origin check
- Support forwarded host in same-origin check
- Relax hex requirement for session key-pairs
- Trigger publish workflows only on stable releases
Full changelog
What's Changed
- ✨ Support forwarded host in same-origin check by @amorey in https://github.com/kubetail-org/kubetail/pull/1103
- 🎣 Relax hex requirement for session key-pairs by @amorey in https://github.com/kubetail-org/kubetail/pull/1107
- ✨ Trigger publish workflows only on stable releases by @amorey in https://github.com/kubetail-org/kubetail/pull/1110
- ✨ Add CSRF token support to GraphiQL page by @amorey in https://github.com/kubetail-org/kubetail/pull/1111
- 🎣 Fix CSRF rejection of legitimate same-origin POSTs by @amorey in https://github.com/kubetail-org/kubetail/pull/1112
- 🎣 Prevent client-supplied X-Forwarded-Authorization from shadowing service-account-token by @amorey in https://github.com/kubetail-org/kubetail/pull/1113
- 🎣 Harden CSRF token handling by @amorey in https://github.com/kubetail-org/kubetail/pull/1114
- 🎣 Stop trusting X-Forwarded-* headers in same-origin check by @amorey in https://github.com/kubetail-org/kubetail/pull/1117
- ✨ Add allowed-origins config for proxied deployments by @amorey in https://github.com/kubetail-org/kubetail/pull/1118
- ✨ Consolidate publish-guru workflow and add pkgcheck by @amorey in https://github.com/kubetail-org/kubetail/pull/1120
- 🎣 Fix context cancellation in mergeLogStreams by @jerome-wilson in https://github.com/kubetail-org/kubetail/pull/1121
- ✨ Add end-to-end test suite by @amorey in https://github.com/kubetail-org/kubetail/pull/1127
- ✨ Put cluster-api behind kube-apiserver aggregation layer by @amorey in https://github.com/kubetail-org/kubetail/pull/1125
- ✨ Simplify e2e suite by dropping env/backend parametrization by @amorey in https://github.com/kubetail-org/kubetail/pull/1129
- ✨ Migrate e2e cluster tool from k3d to kind by @amorey in https://github.com/kubetail-org/kubetail/pull/1130
- ✨ Bump grpc-dispatcher-go to v0.1.6 by @amorey in https://github.com/kubetail-org/kubetail/pull/1132
- 🐋 Add Kubetail API backend to
kubetail logsby @amorey in https://github.com/kubetail-org/kubetail/pull/1133 - 🎣 Remove invalid --upload flag from cosign sign in release workflow by @amorey in https://github.com/kubetail-org/kubetail/pull/1134
- 🎣 Fix kubetail logs backend fallback, filters, and pagination by @amorey in https://github.com/kubetail-org/kubetail/pull/1135
- ✨ Add background update check with notification by @amorey in https://github.com/kubetail-org/kubetail/pull/1137
Full Changelog: https://github.com/kubetail-org/kubetail/compare/cli/v0.15.0...cli/v0.17.0