github/podinfo
1
0
Fork 0
mirror of https://github.com/stefanprodan/podinfo.git synced 2026-08-19 04:06:27 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,169 Commits 10 Branches 109 Tags
6.13.0
Commit Graph
1169 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Stefan ProdanandGitHub 875ffa9431 Merge pull request #494 from stefanprodan/release-6.13.0 
Release 6.13.0
6.13.0 		2026-06-04 23:41:39 +03:00
Stefan Prodan 73a9a9c81d Release 6.13.0 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-06-04 23:38:30 +03:00
Stefan Prodan 6e7e8f0088 Update dependencies 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-06-04 23:38:01 +03:00
Stefan ProdanandGitHub 24108dde55 Merge pull request #493 from stefanprodan/dependabot/github_actions/actions-f79f29c3ec 
build(deps): bump the actions group across 1 directory with 7 updates
 2026-06-04 00:57:44 +03:00
Stefan ProdanandGitHub 6a83cf4376 Merge pull request #492 from dkulchinsky/feat/fault-injection 
feat(http): add fault injection mode for circuit breaker testing
 2026-06-04 00:48:24 +03:00
Danny Kulchinsky 04fa4f98ac regenerate swagger docs for /fault_injection endpoints 2026-06-03 16:14:43 -04:00
Danny Kulchinsky 6614fe3543 address review comments 2026-06-03 16:04:17 -04:00
Danny Kulchinsky 64c73da55a update Web API with new endpoints 2026-06-03 09:08:51 -04:00
Danny Kulchinsky 18230d8fc5 feat(http): add fault injection mode for circuit breaker testing 
Adds a process-wide toggle that makes podinfo respond with HTTP 500 to all application endpoints while keeping Kubernetes probes, metrics, pprof and the control endpoints functional. This allows a single replica to be made selectively 'sick' to test client-side circuit breakers / outlier detection (Envoy, Istio DestinationRule.outlierDetection, etc.) without Kubernetes evicting the pod.

New endpoints:

  POST /fault_injection/enable

  POST /fault_injection/disable

  GET  /fault_injection/status

Includes unit tests for the handlers, the middleware behavior, and the path exclusion list.
 2026-06-02 23:18:28 -04:00
Stefan ProdanandGitHub 8a12123ba3 Merge pull request #491 from dex4er/feat/prefix 
Add support for configurable URL path prefix in podinfo application
 2026-06-02 18:40:52 +03:00
dependabot[bot]andGitHub 463df46cb7 build(deps): bump the actions group across 1 directory with 7 updates 
Bumps the actions group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [fluxcd/flux2](https://github.com/fluxcd/flux2) | `2.8.6` | `2.8.8` |
| [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `4.0.0` | `4.1.0` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.0.0` | `4.1.0` |
| [docker/login-action](https://github.com/docker/login-action) | `4.1.0` | `4.2.0` |
| [docker/metadata-action](https://github.com/docker/metadata-action) | `6.0.0` | `6.1.0` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `7.1.0` | `7.2.0` |
| [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | `7.2.1` | `7.2.2` |



Updates `fluxcd/flux2` from 2.8.6 to 2.8.8
- [Release notes](https://github.com/fluxcd/flux2/releases)
- [Commits](https://github.com/fluxcd/flux2/compare/04acaec6161ac4fb1a82ffafa88901c03271d34f...1fd61a06264d71cf445ed55c4f14d401d26a1c64)

Updates `docker/setup-qemu-action` from 4.0.0 to 4.1.0
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](https://github.com/docker/setup-qemu-action/compare/ce360397dd3f832beb865e1373c09c0e9f86d70a...06116385d9baf250c9f4dcb4858b16962ea869c3)

Updates `docker/setup-buildx-action` from 4.0.0 to 4.1.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd...d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5)

Updates `docker/login-action` from 4.1.0 to 4.2.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/4907a6ddec9925e35a0a9e82d7399ccc52663121...650006c6eb7dba73a995cc03b0b2d7f5ca915bee)

Updates `docker/metadata-action` from 6.0.0 to 6.1.0
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](https://github.com/docker/metadata-action/compare/030e881283bb7a6894de51c315a6bfe6a94e05cf...80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9)

Updates `docker/build-push-action` from 7.1.0 to 7.2.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/bcafcacb16a39f128d818304e6c9c0c18556b85f...f9f3042f7e2789586610d6e8b85c8f03e5195baf)

Updates `goreleaser/goreleaser-action` from 7.2.1 to 7.2.2
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](https://github.com/goreleaser/goreleaser-action/compare/1a80836c5c9d9e5755a25cb59ec6f45a3b5f41a8...5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89)

---
updated-dependencies:
- dependency-name: fluxcd/flux2
  dependency-version: 2.8.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: docker/login-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: docker/metadata-action
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: docker/build-push-action
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: goreleaser/goreleaser-action
  dependency-version: 7.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-01 22:14:49 +00:00
Piotr Roszatycki 51f14f8fc5 Add support for configurable URL path prefix in podinfo application 2026-05-25 12:47:45 +02:00
Stefan ProdanandGitHub a547e00b6c Merge pull request #488 from stefanprodan/release-6.12.0 
Release 6.12.0
6.12.0 		2026-05-20 12:59:46 +03:00
Stefan Prodan 30ac3ce042 Release 6.12.0 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-05-20 12:50:34 +03:00
Stefan ProdanandGitHub ac38ccf245 Merge pull request #487 from stefanprodan/refactor-release 
Unify docker build and drop support for `linux/arm/v7`
 2026-05-20 12:45:35 +03:00
Stefan Prodan 5751cab6b3 Update docs to Cosign v3 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-05-20 12:41:38 +03:00
Stefan Prodan 47dbd328d6 Unify e2e tests 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-05-20 12:41:32 +03:00
Stefan Prodan 466cd65931 Unify docker build 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-05-20 12:27:19 +03:00
Stefan Prodan b642d28e57 Drop support for linux/arm/v7 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-05-20 11:39:41 +03:00
Stefan Prodan f2c02b6ade Update Redis to 8.6.3 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-05-20 11:36:45 +03:00
Stefan ProdanandGitHub fc9a372e3d Merge pull request #486 from stefanprodan/test-http-api 
Improve test coverage of the HTTP API
 2026-05-20 11:18:59 +03:00
Stefan Prodan 2ca58cf0a4 Migrate JWT to registered claims 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-05-20 11:11:58 +03:00
Stefan Prodan 4920afdafb Improve test coverage of the HTTP API 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-05-20 11:07:35 +03:00
Stefan ProdanandGitHub 5799a248d8 Merge pull request #485 from stefanprodan/refactor-headers 
Refactor response header settings
 2026-05-20 10:57:56 +03:00
Stefan Prodan 7d8e7005b1 Refactor response header settings 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-05-20 10:50:31 +03:00
Stefan ProdanandGitHub 473f808b28 Merge pull request #483 from stefanprodan/flux-schema 
ci: Validate manifests with Flux Schema CLI
 2026-05-20 10:30:26 +03:00
Stefan Prodan 720a592d93 ci: Validate manifests with Flux Schema CLI 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-05-20 10:26:14 +03:00
Stefan ProdanandGitHub ceabb6441a Merge pull request #481 from stefanprodan/update-deps 
Update dependencies
 2026-05-20 10:05:12 +03:00
Stefan Prodan 0f43c95ba9 Add SLSA badge 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-05-20 09:38:32 +03:00
Stefan Prodan 7ea88003c6 Update release workflow actions 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-05-20 09:37:59 +03:00
Stefan Prodan 448199b45a Update dependencies 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-05-20 09:25:33 +03:00
Stefan ProdanandGitHub cbebb20fd4 Merge pull request #480 from Niccolo10/fix/cve-2026-43644-echo-content-type 
fix: set Content-Type to prevent MIME-sniff XSS (CVE-2026-43644)
 2026-05-19 14:13:37 +03:00
Niccolò ParlantiandClaude Opus 4.7 6210e0a920 test(echo): assert nosniff Content-Type on echo direct-response 
Regression test for CVE-2026-43644, mirroring the TestStoreReadHandler_ContentType
test added in #463. Verifies the echoHandler direct-response branch returns
application/octet-stream, X-Content-Type-Options: nosniff, and a restrictive CSP
so an HTML payload cannot be MIME-sniffed and executed.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-16 23:47:28 +02:00
Niccolò Parlanti b65271f0d9 fix(echo): set Content-Type to prevent MIME-sniff XSS (CVE-2026-43644) 
Use tab indentation to match gofmt.

Signed-off-by: Niccolò Parlanti <54103711+Niccolo10@users.noreply.github.com>
 2026-05-15 12:51:00 +02:00
Stefan ProdanandGitHub 9f4969c2c8 Merge pull request #475 from tiesmaster/472/wire-up-priorityClassName 
chart: Add support for setting the priorityClassName
 2026-04-23 10:11:47 +03:00
Thijs Brobbel e2d2b1ca4f feat: add support for setting the priorityClassName 2026-04-22 21:48:22 +02:00
Stefan ProdanandGitHub aa59f2af65 Merge pull request #471 from stefanprodan/dependabot/github_actions/actions-cb5fd4910d 
build(deps): bump docker/login-action from 4.0.0 to 4.1.0 in the actions group
 2026-04-09 20:42:00 +03:00
Stefan ProdanandGitHub c4a4ec078b Merge pull request #473 from stefanprodan/dependabot/go_modules/go.opentelemetry.io/otel/sdk-1.43.0 
build(deps): bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0
 2026-04-09 20:41:33 +03:00
dependabot[bot]andGitHub 7aab5f8352 build(deps): bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 
Bumps [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) from 1.40.0 to 1.43.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.43.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.43.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-08 21:49:30 +00:00
dependabot[bot]andGitHub 660697000a build(deps): bump docker/login-action in the actions group 
Bumps the actions group with 1 update: [docker/login-action](https://github.com/docker/login-action).


Updates `docker/login-action` from 4.0.0 to 4.1.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/b45d80f862d83dbcd57f89517bcf500b2ab88fb2...4907a6ddec9925e35a0a9e82d7399ccc52663121)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-06 06:46:02 +00:00
Stefan ProdanandGitHub b501abd1f0 Merge pull request #470 from stefanprodan/release-6.11.2 
Release 6.11.2
6.11.2 		2026-03-31 22:52:14 +03:00
Stefan Prodan e0a79a4ddd Release 6.11.2 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-03-31 22:47:19 +03:00
Stefan ProdanandGitHub be8baac695 Merge pull request #468 from stefanprodan/dependabot/github_actions/actions-6b017b3799 
build(deps): bump the actions group across 1 directory with 4 updates
 2026-03-31 22:36:36 +03:00
dependabot[bot]andGitHub f539517440 build(deps): bump the actions group across 1 directory with 4 updates 
Bumps the actions group with 4 updates in the / directory: [azure/setup-helm](https://github.com/azure/setup-helm), [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer), [fluxcd/flux2](https://github.com/fluxcd/flux2) and [azure/setup-kubectl](https://github.com/azure/setup-kubectl).


Updates `azure/setup-helm` from 4 to 5
- [Release notes](https://github.com/azure/setup-helm/releases)
- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md)
- [Commits](https://github.com/azure/setup-helm/compare/v4...v5)

Updates `sigstore/cosign-installer` from 4.0.0 to 4.1.1
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v4.0.0...v4.1.1)

Updates `fluxcd/flux2` from 2.8.1 to 2.8.3
- [Release notes](https://github.com/fluxcd/flux2/releases)
- [Commits](https://github.com/fluxcd/flux2/compare/v2.8.1...v2.8.3)

Updates `azure/setup-kubectl` from 4 to 5
- [Release notes](https://github.com/azure/setup-kubectl/releases)
- [Changelog](https://github.com/Azure/setup-kubectl/blob/main/CHANGELOG.md)
- [Commits](https://github.com/azure/setup-kubectl/compare/v4...v5)

---
updated-dependencies:
- dependency-name: azure/setup-helm
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: sigstore/cosign-installer
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: fluxcd/flux2
  dependency-version: 2.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: azure/setup-kubectl
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-31 19:32:43 +00:00
Stefan ProdanandGitHub 01219a196e Merge pull request #469 from stefanprodan/pin-actions 
ci: Pin actions and enable release attentions
 2026-03-31 22:30:33 +03:00
Stefan Prodan b9acae4064 ci: Pin actions and enable release attentions 
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
 2026-03-31 22:27:07 +03:00
Stefan ProdanandGitHub 64a8da1836 Merge pull request #467 from stefanprodan/dependabot/go_modules/google.golang.org/grpc-1.79.3 
build(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3
 2026-03-31 19:08:11 +03:00
dependabot[bot]andGitHub 420d0db8bf build(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.79.1 to 1.79.3.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.79.1...v1.79.3)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.79.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-19 02:41:57 +00:00
Stefan ProdanandGitHub 6b67f2bdd6 Merge pull request #454 from hansbogert/master 
feat: add otlp logging support
 2026-03-17 09:22:56 +02:00
Hans van den Bogert 095b1cd251 feat: add otlp logging support 
- Adds a loggerprovider based on otlp logger
- In demo directory of oltp:
  - Added grafana for unified view of both traces and logs
  - tracing now uses oltp from the collector to the jaeger instance

Signed-off-by: Hans van den Bogert <hansbogert@gmail.com>
 2026-03-14 22:38:14 +01:00