What's Changed
Bug Fixes
- Update agentgateway for split actor and ateom identities by @EItanya in #1923
- atelet: pin the multi-actor stats fold and keep CPU baselines across pending sweeps by @baizhenyu in #1885
- Snapshot path validation by @BenTheElder in #1950
- fix(benchmarking): make the SWE-Perf ActorTemplate deployable by @roycaihw in #1889
- nighthawk-ingress: let run-dev.sh run more actors than workers by @haiyanmeng in #1982
- ateom-microvm: reseed the guest CRNG on restore by @eliranw in #1524
- Pin envoy-dataplane from the release on a pre-built install by @annapendleton in #1964
Features: Networking and Egress
- ateom/actor ID split: Ateom uses MintAteomActorCertificate by @ahmedtd in #1809
- egress policy enhancements for GA by @LiorLieberman in #1751
- e2e: add test for egress credential injection cujs by @yufan-su in #1795
- Egress policy plumbing by @yanavlasov in #1978
- kubectl-ate: add delete egress-policy by @ygao-g in #1808
- envoy dyn module followup by @LiorLieberman in #1995
Features: Security and Identity
- ateapi: make the actor JWT issuer configurable and add typ to the header by @thompsonmax in #1834
- ateapi: [Part 1] Runtime Authorization check for Atespace CRUD by @SHRUTI6991 in #1702
- ateapi: require an actor JWT lifetime and align the subject with the SPIFFE ID by @thompsonmax in #1902
Features: Observability
- actorevent: define the actor usage event and the activation epoch by @baizhenyu in #1881
- benchmarking: actor telemetry for the sweperf workload by @Nishanth29 in #1848
Features: Install and Operations
- CI: create JUnit artifacts and gate on all tests passing by @stshrive in #1873
- benchmark(atelet, ateom-microvm): log per-actor checkpoint and restor… by @Oneimu in #1941
- ate-setup: add deploy subcommands for podcertificate-controller and SandboxConfig by @HavenXia in #2010
Features: Workers and Actors
- Add
ActorDirsmessage to carry per-actor directories and and split the path packages by owner by @HavenXia in #1730 - ateapi: release a suspend's replaced snapshot after committing SUSPENDED by @haiyanmeng in #2006
Documentation
- docs: add a star history chart to the README by @botengyao in #1894
- doc: egress credential injection with sample k8s secret credential pr… by @yufan-su in #1805
- Fix several broken links to CODE_OF_CONDUCT.md by @timflannagan in #1987
Other Changes
- ateom/actor ID split: Clean up purpose from MintActorCertificate by @ahmedtd in #1810
- Remove unnecessary fsync during ResumeActor by @msau42 in #1883
- serverboot.Fatal: Allow additional slog arguments by @ahmedtd in #1908
- ate-api: Move authn package into server-specific internal package by @ahmedtd in #1909
- ateletpb: carry the Restore base snapshot as a typed source, dropping golden_snapshot_uri by @dberkov in #1602
- Clean up packages in ateomnet by @bowei in #1897
- nodepath: move the node state root to /var/lib/ate by @dims in #1926
- move agw tests to post-merge and release-* branches by @LiorLieberman in #1949
- upgrade otel log to 0.21 by @BenTheElder in #1958
- ateom-gvisor: take the actor directories from the request by @HavenXia in #1865
- ateom-microvm: take the actor directories from the request and remove ateompath package by @HavenXia in #1872
- atelet: introduce declarative validation for the AteomSupport RPCs by @shrutiyam-glitch in #1903
- atelet: add CAP_DAC_OVERRIDE to reset dirs a non-root container wrote by @dims in #1910
- ateapi: rename --egress-gateway-address to --default-egress-gateway-address by @LiorLieberman in #1858
- Clean up vestigial metadata setting in atepg by @thockin in #1992
- Move DV validators under
apivalidations. by @juli4n in #2007
New Contributors
- @roycaihw made their first contribution in #1889
- @timflannagan made their first contribution in #1987
Full Changelog: v0.2.0...v0.3.0
Committers in this release
- @ahmedtd
- @annapendleton
- @baizhenyu
- @BenTheElder
- @botengyao
- @bowei
- @dberkov
- @dependabot[bot]
- @dims
- @dubin555
- @EItanya
- @eliranw
- @haiyanmeng
- @HavenXia
- @Jefftree
- @juli4n
- @LiorLieberman
- @msau42
- @Nishanth29
- @Oneimu
- @roycaihw
- @SHRUTI6991
- @shrutiyam-glitch
- @stshrive
- @thockin
- @thompsonmax
- @timflannagan
- @yanavlasov
- @ygao-g
- @yufan-su