Release Highlights
Gorouter open file handles now configurable
The number of open file handles for the gorouter job is now configurable and defaults to its previous value. Thank you @h0nIg for the contribution (PR #213) 🎉 🎉 🎉
⚠️ Foundation TLS certificates encouraged to have Subject Alternative Names (SANs) as soon as possible
Certificates used by the foundation to serve TLS traffic, either by gorouter directly or via a Load Balancer in front of the foundation, will require at least one Subject Alternative Name due to a deprecation in golang 1.15 that will be permanent after golang 1.17 is released. By default, the routing-release jobs will not strictly check certificates for the existence of a SAN unless operators opt-in to the feature by configuring the golang.x509ignoreCN flag to false.
For more information on the context of this change and what operators need to do, please refer to the golang 1.15 X.509 CommonName deprecation doc.
Manifest Property Changes
| Job | Property | 0.219.0 | 0.220.0 |
|---|---|---|---|
gorouter
| router.max_open_files
| did not exist | configurable and defaults to 100000
|
gorouter
| golang.x509ignoreCN
| did not exist | configurable and defaults to true
|
route_registrar
| golang.x509ignoreCN
| did not exist | configurable and defaults to true
|
routing-api
| golang.x509ignoreCN
| did not exist | configurable and defaults to true
|
tcp_router
| golang.x509ignoreCN
| did not exist | configurable and defaults to true
|