What's New
✨ Features
- Multi-namespace support: Ingress watches sandbox CRs across all namespaces instead of a single one.
--namespaceflag deprecated. Ambiguous sandbox IDs across namespaces are rejected. (#699) - Secure access routing (OSEP-0011): Added
--secure-access-keysflag for signed URL verification. Sandboxes withopensandbox.io/secure-accessrequire valid signatures; sandboxes without it continue to work with unsigned routes. (#761) - Log rotation: File log outputs auto-rotate via lumberjack (100MB, 30d, 10 backups default). (#791)
🐛 Bug Fixes
- Proxy panic log now includes
uri,host,methodfields for debugging. (#802) - CodeQL static analysis fixes (integer conversion hardening in signature package). (#795)
📦 Misc
- Bumped OpenTelemetry Go deps for security alerts (#799)
- Repeatable builds:
-trimpath,-buildvcs=false, fixed metadata (#808) - Added
.dockerignoreto shrink build context (#718)
👥 Contributors
Thanks to these contributors ❤️
- Docker Hub: opensandbox/ingress:v1.0.7
- Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/ingress:v1.0.7