github.com/bartle-stripe/trillian@v1.2.1/CHANGELOG.md (about)

     1  # TRILLIAN Changelog
     2  
     3  ## v1.2.0 - Signer / Quota fixes. Error mapping fix. K8 improvements
     4  
     5  Published 2018-06-25 10:42:52 +0000 UTC
     6  
     7  The Log Signer now tries to avoid creating roots older than ones that already exist. This issue has been seen occurring on a test system. Important note: If running this code in production allowing clocks to drift out of sync between nodes can cause other problems including for clustering and database replication.
     8  
     9  The Log Signer now publishes metrics for the logs that it is actively signing. In a clustered environment responsibility can be expected to move around between signer instances over time.
    10  
    11  The Log API now allows personalities to explicitly list a vector of identifiers which should be charged for `User` quota. This allows a more nuanced application of request rate limiting across multiple dimensions. Some fixes have also been made to quota handling e.g. batch requests were not reserving the appropriate quota. Consult the corresponding PRs for more details.
    12  
    13  For the log RPC server APIs `GetLeavesByIndex` and `GetLeavesByRange` MySQL storage has been modified to return status codes that match CloudSpanner. Previously some requests with out of range parameters were receiving 5xx error status rather than 4xx when errors were mapped to the HTTP space by CTFE.
    14  
    15  The Kubernetes deployment scripts continue to evolve and improve.
    16  
    17  Commit [aef10347dba1bd86a0fcb152b47989d0b51ba1fa](https://api.github.com/repos/google/trillian/commits/aef10347dba1bd86a0fcb152b47989d0b51ba1fa) Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.2.0)
    18  
    19  ## v1.1.1 - CloudSpanner / Tracing / Health Checks
    20  
    21  Published 2018-05-08 12:55:34 +0000 UTC
    22  
    23  More improvements have been made to the CloudSpanner storage code. CloudSpanner storage has now been tested up to ~3.1 billion log entries.
    24  
    25  Explicit health checks have been added to the gRPC Log and Map servers (and the log signer). The HTTP endpoint must be enabled and the checks will serve on `/healthz` where a non 200 response means the server is unhealthy. The example Kubernetes deployment configuration has been updated to include them. Other improvements have been made to the Kubernetes deployment scripts and docs.
    26  
    27  The gRPC Log and Map servers have been instrumented for tracing with [OpenCensus](https://opencensus.io/). For GCP it just requires the `--tracing` flag to be added and results will be available in the GCP console under StackDriver -> Trace.
    28  
    29  Commit [3a68a845f0febdd36937c15f1d97a3a0f9509440](https://api.github.com/repos/google/trillian/commits/3a68a845f0febdd36937c15f1d97a3a0f9509440) Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.1.1)
    30  
    31  ## v1.1.0 - CloudSpanner Improvements & Log Root structure changes etc.
    32  
    33  Published 2018-04-17 08:02:50 +0000 UTC
    34  
    35  Changes are in progress (e.g. see #1037) to rework the internal signed root format used by the log RPC server to be more useful / interoperable. Currently they are mostly internal API changes to the log and map servers. However, the `signature` and `log_id` fields in SignedLogRoot have been deleted and users must unpack the serialized structure to access these now. This change is not backwards compatible.
    36  
    37  Changes have been made to log server APIs and CT frontends for when a request hits a server that has an earlier version of the tree than is needed to satisfy the request. In these cases the log server used to return an error but now returns an empty proof along with the current STH it has available. This allows clients to detect these cases and handle them appropriately.
    38  
    39  The CloudSpanner schema has changed. If you have a database instance you'll need to recreate it with the new schema. Performance has been noticeably improved since the previous release and we have tested it to approx one billion log entries. Note: This code is still being developed and further changes are possible.
    40  
    41  Support for `sqlite` in unit tests has been removed because of ongoing issues with flaky tests. These were caused by concurrent accesses to the same database, which it doesn't support. The use of `sqlite` in production has never been supported and it should not be used for this.
    42  
    43  Commit [9a5dc6223bab0e1061b66b49757c2418c47b9f29](https://api.github.com/repos/google/trillian/commits/9a5dc6223bab0e1061b66b49757c2418c47b9f29) Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.1.0)
    44  
    45  ## v1.0.8 - Docker Updates / Freezing Logs  / CloudSpanner Options
    46  
    47  Published 2018-03-08 13:42:11 +0000 UTC
    48  
    49  The Docker image files have been updated and the database has been changed to `MariaDB 10.1`.
    50  
    51  A `ReadOnlyStaleness` option has been added to the experimental CloudSpanner storage. This allows for tuning that might increase performance in some scenarios by issuing read transactions with the `exact_staleness` option set rather than `strong_read`. For more details see the [CloudSpanner TransactionOptions](https://cloud.google.com/spanner/docs/reference/rest/v1/TransactionOptions) documentation.
    52  
    53  The `LogVerifier` interface has been removed from the log client, though the functionality is still available. It is unlikely that there were implementations by third-parties.
    54  
    55  A new `TreeState DRAINING` has been added for trees with `TreeType LOG`. This is to support logs being cleanly frozen. A log tree in this state will not accept new entries via `QueueLeaves` but will continue to integrate any that were previously queued. When the queue of pending entries has been emptied the tree can be set to the `FROZEN` state safely. For MySQL storage this requires a schema update to add `'DRAINING'` to the enum of valid states.
    56  
    57  A command line utility `updatetree` has been added to allow tree states to be changed. This is also to support cleanly freezing logs.
    58  
    59  A 'howto' document has been added that explains how to freeze a log tree using the features added in this release.
    60  
    61  Commit [0e6d950b872d19e42320f4714820f0fe793b9913](https://api.github.com/repos/google/trillian/commits/0e6d950b872d19e42320f4714820f0fe793b9913) Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.0.8)
    62  
    63  ## v1.0.7 - Storage API Changes, Schema Tweaks
    64  
    65  Published 2018-03-01 11:16:32 +0000 UTC
    66  
    67  Note: A large number of storage related API changes have been made in this release. These will probably only affect developers writing their own storage implementations.
    68  
    69  A new tree type `ORDERED_LOG` has been added for upcoming mirror support. This requires a schema change before it can be used. This change can be made when convenient and can be deferred until the functionality is available and needed. The definition of the `TreeType` column enum should be changed to `ENUM('LOG', 'MAP', 'PREORDERED_LOG') NOT NULL`
    70  
    71  Some storage interfaces were removed in #977 as they only had one implementation. We think this won't cause any impact on third parties and are willing to reconsider this change if it does.
    72  
    73  The gRPC Log and Map server APIs have new methods `InitLog` and `InitMap` which prepare newly created trees for use. Attempting to use trees that have not been initialized will return the `FAILED_PRECONDITION` error `storage.ErrTreeNeedsInit`.
    74  
    75  The gRPC Log server API has new methods `AddSequencedLeaf` and `AddSequencedLeaves`. These are intended to support mirroring applications and are not yet implemented.
    76  
    77  Storage APIs have been added such as `ReadWriteTransaction` which allows the underlying storage to manage the transaction and optionally retry until success or timeout. This is a more natural fit for some types of storage API such as [CloudSpanner](https://cloud.google.com/spanner/docs/transactions) and possibly other environments with managed transactions.
    78  
    79  The older `BeginXXX` methods were removed from the APIs. It should be fairly easy to convert a custom storage implementation to the new API format as can be seen from the changes made to the MySQL storage.
    80  
    81  The `GetOpts` options are no longer used by storage. This fixed the strange situation of storage code having to pass manufactured dummy instances to `GetTree`, which was being called in all the layers involved in request processing. Various internal APIs were modified to take a `*trillian.Tree` instead of an `int64`.
    82  
    83  A new storage implementation has been added for CloudSpanner. This is currently experimental and does not yet support Map trees. We have also added Docker examples for running Trillian in Google Cloud with CloudSpanner.
    84  
    85  The maximum size of a `VARBINARY` column in MySQL is too small to properly support Map storage. The type has been changed in the schema to `MEDIUMBLOB`. This can be done in place with an `ALTER TABLE` command but this could very be slow for large databases as it is a change to the physical row layout. Note: There is no need to make this change to the database if you are only using it for Log storage e.g. for Certificate Transparency servers.
    86  
    87  The obsolete programs `queue_leaves` and `fetch_leaves` have been deleted.
    88  
    89  Commit [7d73671537ca2a4745dc94da3dc93d32d7ce91f1](https://api.github.com/repos/google/trillian/commits/7d73671537ca2a4745dc94da3dc93d32d7ce91f1) Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.0.7)
    90  
    91  ## v1.0.6 - GetLeavesByRange. 403 Permission Errors. Signer Metrics.
    92  
    93  Published 2018-02-05 16:00:26 +0000 UTC
    94  
    95  A new log server RPC API has been added to get leaves in a range. This is a more natural fit for CT type applications as it more closely follows the CT HTTP API.
    96  
    97  The server now returns 403 for permission denied where it used to return 500 errors. This follows the behaviour of the C++ implementation.
    98  
    99  The log signer binary now reports metrics for the number it has signed and the number of errors that have occurred. This is intended to give more insight into the state of the queue and integration processing.
   100  
   101  Commit [b20b3109af7b68227c83c5d930271eaa4f0be771](https://api.github.com/repos/google/trillian/commits/b20b3109af7b68227c83c5d930271eaa4f0be771) Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.0.6)
   102  
   103  ## v1.0.5 - TLS, Merge Delay Metrics, Easier Admin Tests
   104  
   105  Published 2018-02-07 09:41:08 +0000 UTC
   106  
   107  The API protos have been rebuilt with gRPC 1.3.
   108  
   109  Timestamps have been added to the log leaves in the MySQL database. Before upgrading to this version you **must** make the following schema changes:
   110  
   111  * Add the following column to the `LeafData` table. If you have existing data in the queue you might have to remove the NOT NULL clause: `QueueTimestampNanos  BIGINT NOT NULL`
   112  
   113  * Add the following column to the `SequencedLeafData` table: `IntegrateTimestampNanos BIGINT NOT NULL`
   114  
   115  The above timestamps are used to export metrics via monitoring that give the merge delay for each tree that is in use. This is a good metric to use for alerting on.
   116  
   117  The Log and Map RPC servers now support TLS.
   118  
   119  AdminServer tests have been improved.
   120  
   121  
   122  Commit [dec673baf984c3d22d7b314011d809258ec36821](https://api.github.com/repos/google/trillian/commits/dec673baf984c3d22d7b314011d809258ec36821) Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.0.5)
   123  
   124  ## v1.0.4 - Fix election issue. Large vendor updates.
   125  
   126  Published 2018-02-05 15:42:25 +0000 UTC
   127  
   128  An issue has been fixed where the master for a log could resign from the election while it was in the process of integrating a batch of leaves. We do not believe this could cause any issues with data integrity because of the versioned tree storage.
   129  
   130  This release includes a large number of vendor commits merged to catch up with etcd 3.2.10 and gRPC v1.3.
   131  
   132  
   133  Commit [1713865ecca0dc8f7b4a8ed830a48ae250fd943b](https://api.github.com/repos/google/trillian/commits/1713865ecca0dc8f7b4a8ed830a48ae250fd943b) Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.0.4)
   134  
   135  ## v1.0.3 - Auth API. Interceptor fixes. Request validation + More
   136  
   137  Published 2018-02-05 15:33:08 +0000 UTC
   138  
   139  An authorization API has been added to the interceptors. This is intended for future development and integration.
   140  
   141  Issues where the interceptor would not time out on `PutTokens` have been fixed. This should make the quota system more robust.
   142  
   143  A bug has been fixed where the interceptor did not pass the context deadline through to other requests it made. This would cause some failing requests to do so after longer than the deadline with a misleading reason in the log. It did not cause request failures if they would otherwise succeed.
   144  
   145  Metalinter has been added and the code has been cleaned up where appropriate.
   146  
   147  Docker and Kubernetes scripts have been available and images are now built with Go 1.9.
   148  
   149  Sqlite has been introduced for unit tests where possible. Note that it is not multi threaded and cannot support all our testing scenarios. We still require MySQL for integration tests. Please note that Sqlite **must not** be used for production deployments as RPC servers are multi threaded database clients.
   150  
   151  The Log RPC server now applies tighter validation to request parameters than before. It's possible that some requests will be rejected. This should not affect valid requests.
   152  
   153  The admin server will only create trees for the log type it is hosted in. For example the admin server running in the Log server will not create Map trees. This may be reviewed in future as applications can legitimately use both tree types.
   154  
   155  
   156  Commit [9d08b330ab4270a8e984072076c0b3e84eb4601b](https://api.github.com/repos/google/trillian/commits/9d08b330ab4270a8e984072076c0b3e84eb4601b) Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.0.3)
   157  
   158  ## v1.0.2 - TreeGC, Go 1.9, Update Private Keys.
   159  
   160  Published 2018-02-05 15:18:40 +0000 UTC
   161  
   162  Go 1.9 is required.
   163  
   164  It is now possible to update private keys via the admin API and this was added to the available field masks. The key storage format has not changed so we believe this change is transparent.
   165  
   166  Deleted trees are now garbage collected after an interval. This hard deletes them and they cannot be recovered. Be aware of this before upgrading if you have any that are in a soft deleted state.
   167  
   168  The Admin RPC API has been extended to allow trees to be undeleted - up to the point where they are  hard deleted as set out above.
   169  
   170  Commit [442511ad82108654033c9daa4e72f8a79691dd32](https://api.github.com/repos/google/trillian/commits/442511ad82108654033c9daa4e72f8a79691dd32) Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.0.2)
   171  
   172  ## v1.0.1 - Batched Queue Option Added
   173  
   174  Published 2018-02-05 14:49:33 +0000 UTC
   175  
   176  Apart from fixes this release includes the option for a batched queue. This has been reported to allow faster sequencing but is not enabled by default.
   177  
   178  If you want to switch to this you must build the code with the `--tags batched_queue` option. You must then also apply a schema change if you are running with a previous version of the database.  Add the following column to the `Unsequenced` table:
   179  
   180  `QueueID VARBINARY(32) DEFAULT NULL`
   181  
   182  If you don't plan to switch to the `batched_queue` mode then you don't need to make the above change.
   183  
   184  Commit [afd178f85c963f56ad2ae7d4721d139b1d6050b4](https://api.github.com/repos/google/trillian/commits/afd178f85c963f56ad2ae7d4721d139b1d6050b4) Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.0.1)
   185  
   186  ## v1.0 - First Log version we believe was ready for use. To support CT.
   187  
   188  Published 2018-02-05 13:51:55 +0000 UTC
   189  
   190  Quota metrics published. Quota admin api + server implemented. Improvements to local / AWS deployment. Map fixes and further development. ECDSA key handling improvements. Key factory improvements. Code coverage added. Quota integration test added. Etcd quota support in log and map connected up. Incompatibility with C++ code fixed where consistency proof requests for first == second == 0 were rejected.
   191  
   192  Commit [a6546d092307f6e0d396068066033b434203824d](https://api.github.com/repos/google/trillian/commits/a6546d092307f6e0d396068066033b434203824d) Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.0)
   193