Release 0.29.0
What's New
Deprecated Binary Removal
This release removes the following deprecated binaries from the release archives.
ziti-controller- replaced byziti controllerziti-router- replaced byziti routerziti-tunnel- replaced byziti tunnel
The release archives now only contain the ziti executable. This executable is now at the root of the archive instead of nested under a ziti directory.
Ziti CLI Demo Consolidation
The ziti CLI functions under ziti learn, namely ziti learn demo and ziti learn tutorial have been consolidated under ziti demo.
Continued Quickstart Changes
The quickstart continues to evolve. A breaking change has occurred as numerous environment variables used to customize the quickstart
have changed again. A summary of changes is below
- All
ZITI_EDGE_ROUTER_variables have been changed to justZITI_ROUTER_.ZITI_EDGE_ROUTER_NAME->ZITI_ROUTER_NAMEZITI_EDGE_ROUTER_PORT->ZITI_ROUTER_PORTZITI_EDGE_ROUTER_ADVERTISED_HOST->ZITI_ROUTER_ADVERTISED_HOSTZITI_EDGE_ROUTER_IP_OVERRIDE->ZITI_ROUTER_IP_OVERRIDEZITI_EDGE_ROUTER_ENROLLMENT_DURATION->ZITI_ROUTER_ENROLLMENT_DURATIONZITI_EDGE_ROUTER_ADVERTISED_HOST->ZITI_ROUTER_ADVERTISED_HOSTZITI_EDGE_ROUTER_LISTENER_BIND_PORT->ZITI_ROUTER_LISTENER_BIND_PORT
- Additional variables have been added to support "alternative addresses" and "alternative PKI", for example
to support using Let's Encrypt certificates easily in the quickstarts. - New variables were introduced to allow automatic generation of the
alt_server_certssection. Both variables
must be supplied for the variables to impact the configurations.ZITI_PKI_ALT_SERVER_CERT- "Alternative server certificate. Must be specified with ZITI_PKI_ALT_SERVER_KEY"ZITI_PKI_ALT_SERVER_KEY- "Key to use with the alternative server certificate. Must be specified with ZITI_PKI_ALT_SERVER_CERT"
- New variables were introduced to allow one to override and customize the CSR section of routers which is used during enrollment.
ZITI_ROUTER_CSR_C- "The country (C) to use for router CSRs"ZITI_ROUTER_CSR_ST- "The state/province (ST) to use for router CSRs"ZITI_ROUTER_CSR_L- "The locality (L) to use for router CSRs"ZITI_ROUTER_CSR_O- "The organization (O) to use for router CSRs"ZITI_ROUTER_CSR_OU- "The organization unit to use for router CSRs"ZITI_ROUTER_CSR_SANS_DNS- "The DNS name used in the CSR request"
- New variable
ZITI_CTRL_EDGE_BIND_ADDRESSallows controlling the IP the edge API uses
Component Updates and Bug Fixes
-
github.com/openziti/channel/v2: v2.0.81 -> v2.0.84
-
github.com/openziti/edge: v0.24.348 -> v0.24.364
- Issue #1543 - controller ca normalization can go into infinite loop on startup with bad certs
-
github.com/openziti/edge-api: v0.25.29 -> v0.25.30
-
github.com/openziti/fabric: v0.23.39 -> v0.23.45
-
github.com/openziti/foundation/v2: v2.0.26 -> v2.0.28
-
github.com/openziti/identity: v1.0.57 -> v1.0.59
-
github.com/openziti/runzmd: v1.0.26 -> v1.0.28
-
github.com/openziti/sdk-golang: v0.20.67 -> v0.20.78
-
github.com/openziti/storage: v0.2.8 -> v0.2.11
-
github.com/openziti/transport/v2: v2.0.91 -> v2.0.93
-
github.com/openziti/metrics: v1.2.27 -> v1.2.30
-
github.com/openziti/secretstream: v0.1.9 -> v0.1.10
-
github.com/openziti/ziti: v0.28.4 -> v0.29.0
- Issue #1180 - Add ability to debug failed smoketests
- Issue #1169 - Consolidate demo and tutorial under demo
- Issue #1168 - Remove ziti-controller, ziti-router and ziti-tunnel executables from build
- Issue #1158 - Add iperf tests to ziti smoketest