github/podinfo
1
0
Fork 0
mirror of https://github.com/stefanprodan/podinfo.git synced 2026-08-19 12:16:34 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,176 Commits 10 Branches 109 Tags
25593e1e3b43116d40978eaabeee8a50ecc3daed
Commit Graph
1176 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Stefan ProdanandGitHub 25593e1e3b Merge pull request #498 from stefanprodan/dependabot/github_actions/actions-7d2ff52373 
build(deps): bump the actions group across 1 directory with 2 updates
 2026-06-18 09:52:19 +03:00
dependabot[bot]andGitHub cd2c14aaf9 build(deps): bump the actions group across 1 directory with 2 updates 
Bumps the actions group with 2 updates in the / directory: [actions/checkout](https://github.com/actions/checkout) and [fluxcd/flux-schema](https://github.com/fluxcd/flux-schema).


Updates `actions/checkout` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...df4cb1c069e1874edd31b4311f1884172cec0e10)

Updates `fluxcd/flux-schema` from 5420d0e69becd86581765cf2fc42b6f6a9ac65fe to b8dc6ef4ee4cc3d244bd3595ac5654bf1c344b76
- [Release notes](https://github.com/fluxcd/flux-schema/releases)
- [Commits](https://github.com/fluxcd/flux-schema/compare/5420d0e69becd86581765cf2fc42b6f6a9ac65fe...b8dc6ef4ee4cc3d244bd3595ac5654bf1c344b76)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: fluxcd/flux-schema
  dependency-version: b8dc6ef4ee4cc3d244bd3595ac5654bf1c344b76
  dependency-type: direct:production
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-15 06:45:03 +00:00
Stefan ProdanandGitHub 13e4ded71d Merge pull request #497 from stefanprodan/harden-web 
Harden web server against resource exhaustion
 2026-06-09 00:06:41 +03:00
Stefan Prodan 5037beda6c Cap HTTP request and websocket message sizes 
Unauthenticated clients could exhaust process memory (and, for /store,
disk) by posting arbitrarily large bodies, and could OOM or pin
goroutines via the /ws/echo websocket.

- Wrap request bodies in http.MaxBytesReader (10 MiB) on the echo,
  store, cache and token handlers via a shared readLimitedBody helper
- Bound /ws/echo: per-message read limit, idle read deadline with
  ping/pong keepalive, and write deadlines
- Add regression tests for both limits
 2026-06-08 23:58:43 +03:00
Stefan Prodan 302c092cce Fix panic on GET /chunked from integer overflow 
HttpServerTimeout is a time.Duration (nanoseconds); the default-delay
branch scaled it by time.Second again, overflowing int64 to a negative
value and passing it to rand.Intn, which panics. The bare /chunked route
(no wait param) hit this on every request.

Convert the timeout to whole seconds in a guarded helper that keeps
rand.Intn's argument positive, and add a regression test.
 2026-06-08 23:58:36 +03:00
Stefan ProdanandGitHub 349544d100 Merge pull request #496 from matheuscscp/upgrade-flux-schema 
Upgrade to flux-schema 0.4
 2026-06-08 22:22:04 +03:00
Matheus Pimenta 120c415a9f Upgrade to flux-schema 0.4 
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
 2026-06-08 14:55:54 +01:00
Stefan ProdanandGitHub 875ffa9431 Merge pull request #494 from stefanprodan/release-6.13.0 
Release 6.13.0
6.13.0 		2026-06-04 23:41:39 +03:00
Stefan Prodan 73a9a9c81d Release 6.13.0 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-06-04 23:38:30 +03:00
Stefan Prodan 6e7e8f0088 Update dependencies 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-06-04 23:38:01 +03:00
Stefan ProdanandGitHub 24108dde55 Merge pull request #493 from stefanprodan/dependabot/github_actions/actions-f79f29c3ec 
build(deps): bump the actions group across 1 directory with 7 updates
 2026-06-04 00:57:44 +03:00
Stefan ProdanandGitHub 6a83cf4376 Merge pull request #492 from dkulchinsky/feat/fault-injection 
feat(http): add fault injection mode for circuit breaker testing
 2026-06-04 00:48:24 +03:00
Danny Kulchinsky 04fa4f98ac regenerate swagger docs for /fault_injection endpoints 2026-06-03 16:14:43 -04:00
Danny Kulchinsky 6614fe3543 address review comments 2026-06-03 16:04:17 -04:00
Danny Kulchinsky 64c73da55a update Web API with new endpoints 2026-06-03 09:08:51 -04:00
Danny Kulchinsky 18230d8fc5 feat(http): add fault injection mode for circuit breaker testing 
Adds a process-wide toggle that makes podinfo respond with HTTP 500 to all application endpoints while keeping Kubernetes probes, metrics, pprof and the control endpoints functional. This allows a single replica to be made selectively 'sick' to test client-side circuit breakers / outlier detection (Envoy, Istio DestinationRule.outlierDetection, etc.) without Kubernetes evicting the pod.

New endpoints:

  POST /fault_injection/enable

  POST /fault_injection/disable

  GET  /fault_injection/status

Includes unit tests for the handlers, the middleware behavior, and the path exclusion list.
 2026-06-02 23:18:28 -04:00
Stefan ProdanandGitHub 8a12123ba3 Merge pull request #491 from dex4er/feat/prefix 
Add support for configurable URL path prefix in podinfo application
 2026-06-02 18:40:52 +03:00
dependabot[bot]andGitHub 463df46cb7 build(deps): bump the actions group across 1 directory with 7 updates 
Bumps the actions group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [fluxcd/flux2](https://github.com/fluxcd/flux2) | `2.8.6` | `2.8.8` |
| [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `4.0.0` | `4.1.0` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.0.0` | `4.1.0` |
| [docker/login-action](https://github.com/docker/login-action) | `4.1.0` | `4.2.0` |
| [docker/metadata-action](https://github.com/docker/metadata-action) | `6.0.0` | `6.1.0` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `7.1.0` | `7.2.0` |
| [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | `7.2.1` | `7.2.2` |



Updates `fluxcd/flux2` from 2.8.6 to 2.8.8
- [Release notes](https://github.com/fluxcd/flux2/releases)
- [Commits](https://github.com/fluxcd/flux2/compare/04acaec6161ac4fb1a82ffafa88901c03271d34f...1fd61a06264d71cf445ed55c4f14d401d26a1c64)

Updates `docker/setup-qemu-action` from 4.0.0 to 4.1.0
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](https://github.com/docker/setup-qemu-action/compare/ce360397dd3f832beb865e1373c09c0e9f86d70a...06116385d9baf250c9f4dcb4858b16962ea869c3)

Updates `docker/setup-buildx-action` from 4.0.0 to 4.1.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd...d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5)

Updates `docker/login-action` from 4.1.0 to 4.2.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/4907a6ddec9925e35a0a9e82d7399ccc52663121...650006c6eb7dba73a995cc03b0b2d7f5ca915bee)

Updates `docker/metadata-action` from 6.0.0 to 6.1.0
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](https://github.com/docker/metadata-action/compare/030e881283bb7a6894de51c315a6bfe6a94e05cf...80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9)

Updates `docker/build-push-action` from 7.1.0 to 7.2.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/bcafcacb16a39f128d818304e6c9c0c18556b85f...f9f3042f7e2789586610d6e8b85c8f03e5195baf)

Updates `goreleaser/goreleaser-action` from 7.2.1 to 7.2.2
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](https://github.com/goreleaser/goreleaser-action/compare/1a80836c5c9d9e5755a25cb59ec6f45a3b5f41a8...5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89)

---
updated-dependencies:
- dependency-name: fluxcd/flux2
  dependency-version: 2.8.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: docker/login-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: docker/metadata-action
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: docker/build-push-action
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: goreleaser/goreleaser-action
  dependency-version: 7.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-01 22:14:49 +00:00
Piotr Roszatycki 51f14f8fc5 Add support for configurable URL path prefix in podinfo application 2026-05-25 12:47:45 +02:00
Stefan ProdanandGitHub a547e00b6c Merge pull request #488 from stefanprodan/release-6.12.0 
Release 6.12.0
6.12.0 		2026-05-20 12:59:46 +03:00
Stefan Prodan 30ac3ce042 Release 6.12.0 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-05-20 12:50:34 +03:00
Stefan ProdanandGitHub ac38ccf245 Merge pull request #487 from stefanprodan/refactor-release 
Unify docker build and drop support for `linux/arm/v7`
 2026-05-20 12:45:35 +03:00
Stefan Prodan 5751cab6b3 Update docs to Cosign v3 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-05-20 12:41:38 +03:00
Stefan Prodan 47dbd328d6 Unify e2e tests 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-05-20 12:41:32 +03:00
Stefan Prodan 466cd65931 Unify docker build 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-05-20 12:27:19 +03:00
Stefan Prodan b642d28e57 Drop support for linux/arm/v7 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-05-20 11:39:41 +03:00
Stefan Prodan f2c02b6ade Update Redis to 8.6.3 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-05-20 11:36:45 +03:00
Stefan ProdanandGitHub fc9a372e3d Merge pull request #486 from stefanprodan/test-http-api 
Improve test coverage of the HTTP API
 2026-05-20 11:18:59 +03:00
Stefan Prodan 2ca58cf0a4 Migrate JWT to registered claims 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-05-20 11:11:58 +03:00
Stefan Prodan 4920afdafb Improve test coverage of the HTTP API 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-05-20 11:07:35 +03:00
Stefan ProdanandGitHub 5799a248d8 Merge pull request #485 from stefanprodan/refactor-headers 
Refactor response header settings
 2026-05-20 10:57:56 +03:00
Stefan Prodan 7d8e7005b1 Refactor response header settings 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-05-20 10:50:31 +03:00
Stefan ProdanandGitHub 473f808b28 Merge pull request #483 from stefanprodan/flux-schema 
ci: Validate manifests with Flux Schema CLI
 2026-05-20 10:30:26 +03:00
Stefan Prodan 720a592d93 ci: Validate manifests with Flux Schema CLI 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-05-20 10:26:14 +03:00
Stefan ProdanandGitHub ceabb6441a Merge pull request #481 from stefanprodan/update-deps 
Update dependencies
 2026-05-20 10:05:12 +03:00
Stefan Prodan 0f43c95ba9 Add SLSA badge 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-05-20 09:38:32 +03:00
Stefan Prodan 7ea88003c6 Update release workflow actions 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-05-20 09:37:59 +03:00
Stefan Prodan 448199b45a Update dependencies 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-05-20 09:25:33 +03:00
Stefan ProdanandGitHub cbebb20fd4 Merge pull request #480 from Niccolo10/fix/cve-2026-43644-echo-content-type 
fix: set Content-Type to prevent MIME-sniff XSS (CVE-2026-43644)
 2026-05-19 14:13:37 +03:00
Niccolò ParlantiandClaude Opus 4.7 6210e0a920 test(echo): assert nosniff Content-Type on echo direct-response 
Regression test for CVE-2026-43644, mirroring the TestStoreReadHandler_ContentType
test added in #463. Verifies the echoHandler direct-response branch returns
application/octet-stream, X-Content-Type-Options: nosniff, and a restrictive CSP
so an HTML payload cannot be MIME-sniffed and executed.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-16 23:47:28 +02:00
Niccolò Parlanti b65271f0d9 fix(echo): set Content-Type to prevent MIME-sniff XSS (CVE-2026-43644) 
Use tab indentation to match gofmt.

Signed-off-by: Niccolò Parlanti <54103711+Niccolo10@users.noreply.github.com>
 2026-05-15 12:51:00 +02:00
Stefan ProdanandGitHub 9f4969c2c8 Merge pull request #475 from tiesmaster/472/wire-up-priorityClassName 
chart: Add support for setting the priorityClassName
 2026-04-23 10:11:47 +03:00
Thijs Brobbel e2d2b1ca4f feat: add support for setting the priorityClassName 2026-04-22 21:48:22 +02:00
Stefan ProdanandGitHub aa59f2af65 Merge pull request #471 from stefanprodan/dependabot/github_actions/actions-cb5fd4910d 
build(deps): bump docker/login-action from 4.0.0 to 4.1.0 in the actions group
 2026-04-09 20:42:00 +03:00
Stefan ProdanandGitHub c4a4ec078b Merge pull request #473 from stefanprodan/dependabot/go_modules/go.opentelemetry.io/otel/sdk-1.43.0 
build(deps): bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0
 2026-04-09 20:41:33 +03:00
dependabot[bot]andGitHub 7aab5f8352 build(deps): bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 
Bumps [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) from 1.40.0 to 1.43.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.43.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.43.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-08 21:49:30 +00:00
dependabot[bot]andGitHub 660697000a build(deps): bump docker/login-action in the actions group 
Bumps the actions group with 1 update: [docker/login-action](https://github.com/docker/login-action).


Updates `docker/login-action` from 4.0.0 to 4.1.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/b45d80f862d83dbcd57f89517bcf500b2ab88fb2...4907a6ddec9925e35a0a9e82d7399ccc52663121)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-06 06:46:02 +00:00
Stefan ProdanandGitHub b501abd1f0 Merge pull request #470 from stefanprodan/release-6.11.2 
Release 6.11.2
6.11.2 		2026-03-31 22:52:14 +03:00
Stefan Prodan e0a79a4ddd Release 6.11.2 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-03-31 22:47:19 +03:00
Stefan ProdanandGitHub be8baac695 Merge pull request #468 from stefanprodan/dependabot/github_actions/actions-6b017b3799 
build(deps): bump the actions group across 1 directory with 4 updates
 2026-03-31 22:36:36 +03:00