From 69de679a143331a3f890d435c8cf00b56b6bbe4b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C5=82=20Smolarek?= <34063647+Razz4780@users.noreply.github.com> Date: Mon, 5 Feb 2024 14:59:05 +0100 Subject: [PATCH] Update to 3.86.1 (#2219) --- CHANGELOG.md | 11 ++++ Cargo.lock | 54 +++++++++---------- Cargo.toml | 2 +- changelog.d/+ephemeral-spec.fixed.md | 1 - .../+unix-socket-falsely-sent.fixed.md | 1 - 5 files changed, 39 insertions(+), 30 deletions(-) delete mode 100644 changelog.d/+ephemeral-spec.fixed.md delete mode 100644 changelog.d/+unix-socket-falsely-sent.fixed.md diff --git a/CHANGELOG.md b/CHANGELOG.md index 800020a07d3..2126a08bff1 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -8,6 +8,17 @@ This project uses [*towncrier*](https://towncrier.readthedocs.io/) and the chang +## [3.86.1](https://github.com/metalbear-co/mirrord/tree/3.86.1) - 2024-02-05 + + +### Fixed + +- Added `runAsNonRoot: false` and `runAsUser: 0` to the security context of an + epheremal agent when running privileged (to prevent overriding these values + with values from the pod spec). +- Disabled unix sockets being wrongfully sent to the agent when socket isn't + connected + ## [3.86.0](https://github.com/metalbear-co/mirrord/tree/3.86.0) - 2024-01-29 diff --git a/Cargo.lock b/Cargo.lock index d1b87398dbe..173c03e0b2a 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1877,7 +1877,7 @@ dependencies = [ [[package]] name = "fileops" -version = "3.86.0" +version = "3.86.1" dependencies = [ "libc", ] @@ -2725,7 +2725,7 @@ dependencies = [ [[package]] name = "issue1317" -version = "3.86.0" +version = "3.86.1" dependencies = [ "actix-web", "env_logger", @@ -2737,7 +2737,7 @@ dependencies = [ [[package]] name = "issue1776" -version = "3.86.0" +version = "3.86.1" dependencies = [ "errno 0.3.8", "libc", @@ -2746,7 +2746,7 @@ dependencies = [ [[package]] name = "issue1776portnot53" -version = "3.86.0" +version = "3.86.1" dependencies = [ "libc", "socket2 0.5.5", @@ -2754,14 +2754,14 @@ dependencies = [ [[package]] name = "issue1899" -version = "3.86.0" +version = "3.86.1" dependencies = [ "libc", ] [[package]] name = "issue2001" -version = "3.86.0" +version = "3.86.1" dependencies = [ "libc", ] @@ -3060,7 +3060,7 @@ checksum = "c4cd1a83af159aa67994778be9070f0ae1bd732942279cabb14f86f986a21456" [[package]] name = "listen_ports" -version = "3.86.0" +version = "3.86.1" [[package]] name = "local-channel" @@ -3277,7 +3277,7 @@ dependencies = [ [[package]] name = "mirrord" -version = "3.86.0" +version = "3.86.1" dependencies = [ "actix-codec", "anyhow", @@ -3321,7 +3321,7 @@ dependencies = [ [[package]] name = "mirrord-agent" -version = "3.86.0" +version = "3.86.1" dependencies = [ "actix-codec", "async-trait", @@ -3374,7 +3374,7 @@ dependencies = [ [[package]] name = "mirrord-analytics" -version = "3.86.0" +version = "3.86.1" dependencies = [ "assert-json-diff", "base64 0.21.7", @@ -3388,7 +3388,7 @@ dependencies = [ [[package]] name = "mirrord-auth" -version = "3.86.0" +version = "3.86.1" dependencies = [ "chrono", "fs4", @@ -3408,7 +3408,7 @@ dependencies = [ [[package]] name = "mirrord-config" -version = "3.86.0" +version = "3.86.1" dependencies = [ "bimap", "bitflags 2.4.1", @@ -3430,7 +3430,7 @@ dependencies = [ [[package]] name = "mirrord-config-derive" -version = "3.86.0" +version = "3.86.1" dependencies = [ "proc-macro2", "proc-macro2-diagnostics", @@ -3440,7 +3440,7 @@ dependencies = [ [[package]] name = "mirrord-console" -version = "3.86.0" +version = "3.86.1" dependencies = [ "bincode", "drain", @@ -3456,7 +3456,7 @@ dependencies = [ [[package]] name = "mirrord-intproxy" -version = "3.86.0" +version = "3.86.1" dependencies = [ "bytes", "http-body-util", @@ -3478,7 +3478,7 @@ dependencies = [ [[package]] name = "mirrord-intproxy-protocol" -version = "3.86.0" +version = "3.86.1" dependencies = [ "bincode", "mirrord-protocol", @@ -3488,7 +3488,7 @@ dependencies = [ [[package]] name = "mirrord-kube" -version = "3.86.0" +version = "3.86.1" dependencies = [ "actix-codec", "base64 0.21.7", @@ -3515,7 +3515,7 @@ dependencies = [ [[package]] name = "mirrord-layer" -version = "3.86.0" +version = "3.86.1" dependencies = [ "actix-codec", "anyhow", @@ -3571,7 +3571,7 @@ dependencies = [ [[package]] name = "mirrord-layer-macro" -version = "3.86.0" +version = "3.86.1" dependencies = [ "proc-macro2", "quote", @@ -3580,7 +3580,7 @@ dependencies = [ [[package]] name = "mirrord-macros" -version = "3.86.0" +version = "3.86.1" dependencies = [ "proc-macro2", "proc-macro2-diagnostics", @@ -3590,7 +3590,7 @@ dependencies = [ [[package]] name = "mirrord-operator" -version = "3.86.0" +version = "3.86.1" dependencies = [ "actix-codec", "async-trait", @@ -3624,7 +3624,7 @@ dependencies = [ [[package]] name = "mirrord-progress" -version = "3.86.0" +version = "3.86.1" dependencies = [ "enum_dispatch", "indicatif", @@ -3656,7 +3656,7 @@ dependencies = [ [[package]] name = "mirrord-sip" -version = "3.86.0" +version = "3.86.1" dependencies = [ "apple-codesign", "memchr", @@ -3975,7 +3975,7 @@ dependencies = [ [[package]] name = "outgoing" -version = "3.86.0" +version = "3.86.1" [[package]] name = "overload" @@ -4962,21 +4962,21 @@ dependencies = [ [[package]] name = "rust-bypassed-unix-socket" -version = "3.86.0" +version = "3.86.1" dependencies = [ "tokio", ] [[package]] name = "rust-e2e-fileops" -version = "3.86.0" +version = "3.86.1" dependencies = [ "libc", ] [[package]] name = "rust-unix-socket-client" -version = "3.86.0" +version = "3.86.1" dependencies = [ "tokio", ] diff --git a/Cargo.toml b/Cargo.toml index bd445a44de7..2fb5a6bbc50 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -23,7 +23,7 @@ resolver = "2" # latest commits on rustls suppress certificate verification [workspace.package] -version = "3.86.0" +version = "3.86.1" edition = "2021" license = "MIT" readme = "README.md" diff --git a/changelog.d/+ephemeral-spec.fixed.md b/changelog.d/+ephemeral-spec.fixed.md deleted file mode 100644 index cbbc5a7eb1a..00000000000 --- a/changelog.d/+ephemeral-spec.fixed.md +++ /dev/null @@ -1 +0,0 @@ -Added `runAsNonRoot: false` and `runAsUser: 0` to the security context of an epheremal agent when running privileged (to prevent overriding these values with values from the pod spec). diff --git a/changelog.d/+unix-socket-falsely-sent.fixed.md b/changelog.d/+unix-socket-falsely-sent.fixed.md deleted file mode 100644 index 8ef92856db9..00000000000 --- a/changelog.d/+unix-socket-falsely-sent.fixed.md +++ /dev/null @@ -1 +0,0 @@ -Disabled unix sockets being wrongfully sent to the agent when socket isn't connected \ No newline at end of file