2021-12-14 release

What's Changed

• Staging-facil: bump container versions 0.6.18 -> 0.6.19. by @branlwyd in #1190
• terraform: configure cluster-autoscaler in EKS by @tgeoghegan in #1191
• terraform: configure pod autoscaling in staging by @tgeoghegan in #1194
• terraform: configure on demand node group for EKS by @tgeoghegan in #1195
• terraform: update Grafana, Prometheus, exporters by @tgeoghegan in #1198
• build(deps): bump golang from 1.17.4 to 1.17.5 in /workflow-manager by @dependabot in #1202
• build(deps): update requirement from ~> 3.68.0 to ~> 3.69.0 in /terraform by @dependabot in #1203
• build(deps): bump hyper from 0.14.15 to 0.14.16 in /facilitator by @dependabot in #1206
• build(deps): bump google.golang.org/api from 0.61.0 to 0.62.0 in /workflow-manager by @dependabot in #1208
• build(deps): bump k8s.io/client-go from 0.22.4 to 0.23.0 in /deploy-tool by @dependabot in #1210
• build(deps): bump serde from 1.0.130 to 1.0.131 in /facilitator by @dependabot in #1212
• build(deps): bump github.com/aws/aws-sdk-go from 1.42.19 to 1.42.22 in /workflow-manager by @dependabot in #1213
• build(deps): bump google.golang.org/api from 0.60.0 to 0.62.0 in /deploy-tool by @dependabot in #1209
• build(deps): bump serde_test from 1.0.130 to 1.0.131 in /facilitator by @dependabot in #1214
• terraform: configure alert for prometheus disk by @tgeoghegan in #1199
• build(deps): bump async-trait from 0.1.51 to 0.1.52 in /facilitator by @dependabot in #1215
• Configure Key Rotator to back up secrets to AWS/GCP secret store. by @branlwyd in #1201

Full Changelog: 0.6.19...0.6.20

2021-12-07 release

What's Changed

• Bump all environments 0.6.17 -> 0.6.18. by @branlwyd in #1060
• Avoid a common race, fix gosec G601 errors by @jmhodges in #1061
• run gofmt -s on the codebase by @jmhodges in #1062
• correct a typo in Enqueuer comment by @jmhodges in #1063
• use not-deprecated zap APIs by @jmhodges in #1064
• GH actions: work around grcov build break by @tgeoghegan in #1078
• facilitator: add rust-toolchain.toml by @tgeoghegan in #1079
• key rotator: implement basic Key data type & rotation logic. by @branlwyd in #1067
• key-rotator: add key.Raw type, serialize/deserialize key.Key including a key.Raw. by @branlwyd in #1081
• correct error usage in manifest-tests by @jmhodges in #1086
• terraform: deploy prod-intl/mx-{coa,jal,yuc,pue} by @tgeoghegan in #1087
• prod-intl: force node group to 6 nodes by @tgeoghegan in #1092
• add Go linters using golangci-lint by @jmhodges in #1066
• Move manifest data definitions from manifest-updater to key-rotator, add UpdateKeys functionality. by @branlwyd in #1082
• Make key.Key immutable, rename key.Raw to key.Material. by @branlwyd in #1096
• Key rotator: introduce storage.Manifest, stolen & adapted from manifest-updater's storage. by @branlwyd in #1084
• Implement storage.Key, based on Kubernetes secret store. by @branlwyd in #1098
• Delete manifest updater. by @branlwyd in #1090
• build(deps): bump elliptic-curve from 0.10.5 to 0.10.6 in /facilitator by @dependabot in #1004
• build(deps): bump serde from 1.0.126 to 1.0.130 in /facilitator by @dependabot in #1018
• build(deps): bump bytes from 1.0.1 to 1.1.0 in /facilitator by @dependabot in #1019
• build(deps): bump google.golang.org/api from 0.51.0 to 0.60.0 in /deploy-tool by @dependabot in #1076
• build(deps): bump rust from 1.55.0-alpine to 1.56.1-alpine in /facilitator by @dependabot in #1100
• build(deps): bump golang from 1.17.2 to 1.17.3 in /workflow-manager by @dependabot in #1099
• build(deps): update hashicorp/aws requirement from ~> 3.62.0 to ~> 3.64.2 in /terraform by @dependabot in #1102
• build(deps): bump thiserror from 1.0.26 to 1.0.30 in /facilitator by @dependabot in #1117
• build(deps): bump anyhow from 1.0.44 to 1.0.45 in /facilitator by @dependabot in #1118
• build(deps): bump pem from 0.8.3 to 1.0.1 in /facilitator by @dependabot in #1070
• build(deps): bump hyper from 0.14.11 to 0.14.14 in /facilitator by @dependabot in #1120
• build(deps): bump serde_json from 1.0.68 to 1.0.69 in /facilitator by @dependabot in #1121
• build(deps): bump sha2 from 0.9.5 to 0.9.8 in /facilitator by @dependabot in #1122
• build(deps): bump serde_test from 1.0.126 to 1.0.130 in /facilitator by @dependabot in #1123
• build(deps): bump tokio from 1.9.0 to 1.13.0 in /facilitator by @dependabot in #1124
• build(deps): bump ureq from 2.1.1 to 2.3.0 in /facilitator by @dependabot in #1125
• build(deps): bump prometheus from 0.12.0 to 0.13.0 in /facilitator by @dependabot in #1126
• Key rotator binary by @branlwyd in #1114
• Remove deploy-operator. by @branlwyd in #1115
• build(deps): update hashicorp/aws requirement from ~> 3.64.2 to ~> 3.65.0 in /terraform by @dependabot in #1130
• build(deps): bump serde_json from 1.0.69 to 1.0.70 in /facilitator by @dependabot in #1131
• build(deps): bump ureq from 2.3.0 to 2.3.1 in /facilitator by @dependabot in #1132
• build(deps): update hashicorp/helm requirement from ~> 2.3.0 to ~> 2.4.1 in /terraform by @dependabot in #1129
• Add validations to key.Key type. by @branlwyd in #1128
• prod-intl: bump Kubernetes cluster from 6 -> 9 nodes. by @branlwyd in #1137
• Key rotator: fix bug with packet encryption key deserialization. by @branlwyd in #1148
• Workflow manager: bounds-check date components. by @branlwyd in #1149
• Terraform: add key-rotator cron job by @branlwyd in #1138
• build(deps): bump serde_json from 1.0.70 to 1.0.72 in /facilitator by @dependabot in #1157
• build(deps): update hashicorp/aws requirement from ~> 3.65.0 to ~> 3.67.0 in /terraform by @dependabot in #1156
• build(deps): bump alpine from 3.14 to 3.15.0 in /facilitator by @dependabot in #1155
• build(deps): bump google.golang.org/grpc from 1.40.0 to 1.42.0 in /deploy-tool by @dependabot in #1146
• build(deps): bump k8s.io/apimachinery from 0.22.3 to 0.22.4 in /deploy-tool by @dependabot in #1144
• build(deps): bump hyper from 0.14.14 to 0.14.15 in /facilitator by @dependabot in #1142
• build(deps): bump tokio from 1.13.0 to 1.14.0 in /facilitator by @dependabot in #1141
• build(deps): update hashicorp/kubernetes requirement from ~> 2.5.0 to ~> 2.6.1 in /terraform by @dependabot in #1048
• Docker CI fixes by @tgeoghegan in #1158
• build(deps): bump k8s.io/api from 0.22.3 to 0.22.4 in /deploy-tool by @dependabot in #1145
• Fix Clippy complaint about mismatched format args. by @branlwyd in #1160
• GH actions: push key-rotator from build step by @tgeoghegan in #1164
• Remove task-replayer. by @branlwyd in #1166
• build(deps): bump anyhow from 1.0.45 to 1.0.51 in /facilitator by @dependabot in #1159
• build(deps): bump github.com/rs/zerolog from 1.23.0 to 1.26.0 in /workflow-manager by @dependabot in #1093
• build(deps): bump k8s.io/client-go from 0.22.3 to 0.22.4 in /deploy-tool by @dependabot in #1163
• build(deps): bump github.com/aws/aws-sdk-go from 1.40.2 to 1.42.15 in /workflow-manager by @dependabot in #1167
• build(deps): bump google.golang.org/api from 0.51.0 to 0.60.0 in /workflow-manager by @dependabot in #1071
• build(deps): bump cloud.google.com/go/pubsub from 1.12.2 to 1.17.1 in /workflow-manager by @dependabot in #1074
• build(deps): bump cloud.google.com/go/storage from 1.16.0 to 1.18.2 in /workflow-manager by @dependabot in #1095
• Key rotator: add sanity checks to parsed keys. by @branlwyd in #1150
• Add (bogus) expiry date to manifests' batch signing public key. by @branlwyd in #1151
• Key rotator: add Key.Diff, use it to describe why we are writing keys. by @branlwyd in #1152
• Facilitator: allow workers to self-terminate after working too long. by @branlwyd in #1168
• Key rotator: describe diffs that cause manifest writes. by @branlwyd in #1153
• Key rotator: add basic metrics. by @branlwyd in #1154
• prod-intl: replace mn-mn with mn by @tgeoghegan in #117...

2021-10-28 release

• Fix determination of aggregatable batches in workflow-manager (#1058)

2021-10-20 release

• Numerous improvements to alerting (67b4fa3, b70f34b, 84c6cf4)
• Metrics for EKS clusters are stored in EBS (#857)
• Infrastructure for autoscaling intake/aggregate workers, disabled by default. (#1042)
• Facilitators no longer write validations to their own buckets, instead recomputing them as-needed, saving on storage space & IO. (#997)
• Numerous dependency updates

2021-08-02 release

• shrink prio-facilitator container from ~2 GB to ~29 MB (#868)
• correctly handle RUST_LOG environment variable (#869)
• numerous dependency updates via dependabot

2021-07-29 release

Updated prio-facilitator image contains fixes to support international deployment (#838):

• fix handling of --*-identity parameters
• skip crypto self check for instances whose manifests aren't yet available
• move routine task queue logging to debug from info

2021-07-21 release

This release is intended to support bringup and testing of the international deployment of ENPA.

• logging improvements (#614)
• crypto self-check at startup (#770)
• changes to support deployment on AWS Elastic Kubernetes Service and international deployment (#728, #795, #796, #798, #799)
• code cleanup (#605, #801)
• numerous dependency updates via DependaBot

2021-04-30 release

• facilitator: Adopt slog for structured logging (#559, #564, #566, #579, #586, #595, #602, #604, #607, #608, #609)
• facilitator: retries with exponential backoff in clients for AWS PubSub, AWS S3, Google Cloud Storage, GCP PubSub and GCP IAM (#578, #597)
• facilitator: detect S3 upload failures more reliably (#615)
• deploy-tool: add key backups to GCP secrets storage (#572)
• numerous dependency updates via DependaBot

2021-04-13 release

• reverts multi-threaded aggregation (#516)
• extra fields in facilitator structured log messages (#540)
• workflow-manager Prometheus metrics are now labeled by aggregation ID (#547)
• facilitator now has --permit-malformed-batch argument or PERMIT_MALFORMED_BATCH environment variable to relax batch signature and digest checks (#548)
• facilitator prints a better error message on packet decryption failure (#551)
• numerous dependency updates via Dependabot

2021-03-22 release

• Overhaul how AWS authentication works (#462)
• Multi-threaded aggregation task handler (#486)
• Numerous dependency version bumps in workflow-manager and facilitator via Dependabot