github.com/mre-fog/trillianxx@v1.1.2-0.20180615153820-ae375a99d36a/CHANGELOG.md (about)

     1  # TRILLIAN Changelog
     2  
     3  ## v1.1.1 - CloudSpanner / Tracing / Health Checks
     4  
     5  Published 2018-05-08 12:55:34 +0000 UTC
     6  
     7  More improvements have been made to the CloudSpanner storage code. CloudSpanner storage has now been tested up to ~3.1 billion log entries.
     8  
     9  Explicit health checks have been added to the gRPC Log and Map servers (and the log signer). The HTTP endpoint must be enabled and the checks will serve on `/healthz` where a non 200 response means the server is unhealthy. The example Kubernetes deployment configuration has been updated to include them. Other improvements have been made to the Kubernetes deployment scripts and docs.
    10  
    11  The gRPC Log and Map servers have been instrumented for tracing with [OpenCensus](https://opencensus.io/). For GCP it just requires the `--tracing` flag to be added and results will be available in the GCP console under StackDriver -> Trace.
    12  
    13  Commit [3a68a845f0febdd36937c15f1d97a3a0f9509440](https://api.github.com/repos/google/trillian/commits/3a68a845f0febdd36937c15f1d97a3a0f9509440) Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.1.1)
    14  
    15  ## v1.1.0 - CloudSpanner Improvements & Log Root structure changes etc.
    16  
    17  Published 2018-04-17 08:02:50 +0000 UTC
    18  
    19  Changes are in progress (e.g. see #1037) to rework the internal signed root format used by the log RPC server to be more useful / interoperable. Currently they are mostly internal API changes to the log and map servers. However, the `signature` and `log_id` fields in SignedLogRoot have been deleted and users must unpack the serialized structure to access these now. This change is not backwards compatible.
    20  
    21  Changes have been made to log server APIs and CT frontends for when a request hits a server that has an earlier version of the tree than is needed to satisfy the request. In these cases the log server used to return an error but now returns an empty proof along with the current STH it has available. This allows clients to detect these cases and handle them appropriately.
    22  
    23  The CloudSpanner schema has changed. If you have a database instance you'll need to recreate it with the new schema. Performance has been noticeably improved since the previous release and we have tested it to approx one billion log entries. Note: This code is still being developed and further changes are possible.
    24  
    25  Support for `sqlite` in unit tests has been removed because of ongoing issues with flaky tests. These were caused by concurrent accesses to the same database, which it doesn't support. The use of `sqlite` in production has never been supported and it should not be used for this.
    26  
    27  Commit [9a5dc6223bab0e1061b66b49757c2418c47b9f29](https://api.github.com/repos/google/trillian/commits/9a5dc6223bab0e1061b66b49757c2418c47b9f29) Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.1.0)
    28  
    29  ## v1.0.8 - Docker Updates / Freezing Logs  / CloudSpanner Options
    30  
    31  Published 2018-03-08 13:42:11 +0000 UTC
    32  
    33  The Docker image files have been updated and the database has been changed to `MariaDB 10.1`.
    34  
    35  A `ReadOnlyStaleness` option has been added to the experimental CloudSpanner storage. This allows for tuning that might increase performance in some scenarios by issuing read transactions with the `exact_staleness` option set rather than `strong_read`. For more details see the [CloudSpanner TransactionOptions](https://cloud.google.com/spanner/docs/reference/rest/v1/TransactionOptions) documentation.
    36  
    37  The `LogVerifier` interface has been removed from the log client, though the functionality is still available. It is unlikely that there were implementations by third-parties.
    38  
    39  A new `TreeState DRAINING` has been added for trees with `TreeType LOG`. This is to support logs being cleanly frozen. A log tree in this state will not accept new entries via `QueueLeaves` but will continue to integrate any that were previously queued. When the queue of pending entries has been emptied the tree can be set to the `FROZEN` state safely. For MySQL storage this requires a schema update to add `'DRAINING'` to the enum of valid states.
    40  
    41  A command line utility `updatetree` has been added to allow tree states to be changed. This is also to support cleanly freezing logs.
    42  
    43  A 'howto' document has been added that explains how to freeze a log tree using the features added in this release.
    44  
    45  Commit [0e6d950b872d19e42320f4714820f0fe793b9913](https://api.github.com/repos/google/trillian/commits/0e6d950b872d19e42320f4714820f0fe793b9913) Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.0.8)
    46  
    47  ## v1.0.7 - Storage API Changes, Schema Tweaks
    48  
    49  Published 2018-03-01 11:16:32 +0000 UTC
    50  
    51  Note: A large number of storage related API changes have been made in this release. These will probably only affect developers writing their own storage implementations.
    52  
    53  A new tree type `ORDERED_LOG` has been added for upcoming mirror support. This requires a schema change before it can be used. This change can be made when convenient and can be deferred until the functionality is available and needed. The definition of the `TreeType` column enum should be changed to `ENUM('LOG', 'MAP', 'PREORDERED_LOG') NOT NULL`
    54  
    55  Some storage interfaces were removed in #977 as they only had one implementation. We think this won't cause any impact on third parties and are willing to reconsider this change if it does.
    56  
    57  The gRPC Log and Map server APIs have new methods `InitLog` and `InitMap` which prepare newly created trees for use. Attempting to use trees that have not been initialized will return the `FAILED_PRECONDITION` error `storage.ErrTreeNeedsInit`.
    58  
    59  The gRPC Log server API has new methods `AddSequencedLeaf` and `AddSequencedLeaves`. These are intended to support mirroring applications and are not yet implemented.
    60  
    61  Storage APIs have been added such as `ReadWriteTransaction` which allows the underlying storage to manage the transaction and optionally retry until success or timeout. This is a more natural fit for some types of storage API such as [CloudSpanner](https://cloud.google.com/spanner/docs/transactions) and possibly other environments with managed transactions. 
    62  
    63  The older `BeginXXX` methods were removed from the APIs. It should be fairly easy to convert a custom storage implementation to the new API format as can be seen from the changes made to the MySQL storage.
    64  
    65  The `GetOpts` options are no longer used by storage. This fixed the strange situation of storage code having to pass manufactured dummy instances to `GetTree`, which was being called in all the layers involved in request processing. Various internal APIs were modified to take a `*trillian.Tree` instead of an `int64`.
    66  
    67  A new storage implementation has been added for CloudSpanner. This is currently experimental and does not yet support Map trees. We have also added Docker examples for running Trillian in Google Cloud with CloudSpanner.
    68  
    69  The maximum size of a `VARBINARY` column in MySQL is too small to properly support Map storage. The type has been changed in the schema to `MEDIUMBLOB`. This can be done in place with an `ALTER TABLE` command but this could very be slow for large databases as it is a change to the physical row layout. Note: There is no need to make this change to the database if you are only using it for Log storage e.g. for Certificate Transparency servers.
    70  
    71  The obsolete programs `queue_leaves` and `fetch_leaves` have been deleted.
    72  
    73  Commit [7d73671537ca2a4745dc94da3dc93d32d7ce91f1](https://api.github.com/repos/google/trillian/commits/7d73671537ca2a4745dc94da3dc93d32d7ce91f1) Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.0.7)
    74  
    75  ## v1.0.6 - GetLeavesByRange. 403 Permission Errors. Signer Metrics.
    76  
    77  Published 2018-02-05 16:00:26 +0000 UTC
    78  
    79  A new log server RPC API has been added to get leaves in a range. This is a more natural fit for CT type applications as it more closely follows the CT HTTP API.
    80  
    81  The server now returns 403 for permission denied where it used to return 500 errors. This follows the behaviour of the C++ implementation.
    82  
    83  The log signer binary now reports metrics for the number it has signed and the number of errors that have occurred. This is intended to give more insight into the state of the queue and integration processing.
    84  
    85  Commit [b20b3109af7b68227c83c5d930271eaa4f0be771](https://api.github.com/repos/google/trillian/commits/b20b3109af7b68227c83c5d930271eaa4f0be771) Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.0.6)
    86  
    87  ## v1.0.5 - TLS, Merge Delay Metrics, Easier Admin Tests
    88  
    89  Published 2018-02-07 09:41:08 +0000 UTC
    90  
    91  The API protos have been rebuilt with gRPC 1.3.
    92  
    93  Timestamps have been added to the log leaves in the MySQL database. Before upgrading to this version you **must** make the following schema changes:
    94  
    95  * Add the following column to the `LeafData` table. If you have existing data in the queue you might have to remove the NOT NULL clause: `QueueTimestampNanos  BIGINT NOT NULL`
    96  
    97  * Add the following column to the `SequencedLeafData` table: `IntegrateTimestampNanos BIGINT NOT NULL`
    98  
    99  The above timestamps are used to export metrics via monitoring that give the merge delay for each tree that is in use. This is a good metric to use for alerting on.
   100  
   101  The Log and Map RPC servers now support TLS. 
   102  
   103  AdminServer tests have been improved.
   104  
   105  
   106  Commit [dec673baf984c3d22d7b314011d809258ec36821](https://api.github.com/repos/google/trillian/commits/dec673baf984c3d22d7b314011d809258ec36821) Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.0.5)
   107  
   108  ## v1.0.4 - Fix election issue. Large vendor updates.
   109  
   110  Published 2018-02-05 15:42:25 +0000 UTC
   111  
   112  An issue has been fixed where the master for a log could resign from the election while it was in the process of integrating a batch of leaves. We do not believe this could cause any issues with data integrity because of the versioned tree storage.
   113  
   114  This release includes a large number of vendor commits merged to catch up with etcd 3.2.10 and gRPC v1.3.
   115  
   116  
   117  Commit [1713865ecca0dc8f7b4a8ed830a48ae250fd943b](https://api.github.com/repos/google/trillian/commits/1713865ecca0dc8f7b4a8ed830a48ae250fd943b) Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.0.4)
   118  
   119  ## v1.0.3 - Auth API. Interceptor fixes. Request validation + More
   120  
   121  Published 2018-02-05 15:33:08 +0000 UTC
   122  
   123  An authorization API has been added to the interceptors. This is intended for future development and integration.
   124  
   125  Issues where the interceptor would not time out on `PutTokens` have been fixed. This should make the quota system more robust.
   126  
   127  A bug has been fixed where the interceptor did not pass the context deadline through to other requests it made. This would cause some failing requests to do so after longer than the deadline with a misleading reason in the log. It did not cause request failures if they would otherwise succeed.
   128  
   129  Metalinter has been added and the code has been cleaned up where appropriate.
   130  
   131  Docker and Kubernetes scripts have been available and images are now built with Go 1.9.
   132  
   133  Sqlite has been introduced for unit tests where possible. Note that it is not multi threaded and cannot support all our testing scenarios. We still require MySQL for integration tests. Please note that Sqlite **must not** be used for production deployments as RPC servers are multi threaded database clients.
   134  
   135  The Log RPC server now applies tighter validation to request parameters than before. It's possible that some requests will be rejected. This should not affect valid requests.
   136  
   137  The admin server will only create trees for the log type it is hosted in. For example the admin server running in the Log server will not create Map trees. This may be reviewed in future as applications can legitimately use both tree types.
   138  
   139  
   140  Commit [9d08b330ab4270a8e984072076c0b3e84eb4601b](https://api.github.com/repos/google/trillian/commits/9d08b330ab4270a8e984072076c0b3e84eb4601b) Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.0.3)
   141  
   142  ## v1.0.2 - TreeGC, Go 1.9, Update Private Keys.
   143  
   144  Published 2018-02-05 15:18:40 +0000 UTC
   145  
   146  Go 1.9 is required.
   147  
   148  It is now possible to update private keys via the admin API and this was added to the available field masks. The key storage format has not changed so we believe this change is transparent.
   149  
   150  Deleted trees are now garbage collected after an interval. This hard deletes them and they cannot be recovered. Be aware of this before upgrading if you have any that are in a soft deleted state.
   151  
   152  The Admin RPC API has been extended to allow trees to be undeleted - up to the point where they are  hard deleted as set out above.
   153  
   154  Commit [442511ad82108654033c9daa4e72f8a79691dd32](https://api.github.com/repos/google/trillian/commits/442511ad82108654033c9daa4e72f8a79691dd32) Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.0.2)
   155  
   156  ## v1.0.1 - Batched Queue Option Added
   157  
   158  Published 2018-02-05 14:49:33 +0000 UTC
   159  
   160  Apart from fixes this release includes the option for a batched queue. This has been reported to allow faster sequencing but is not enabled by default.
   161  
   162  If you want to switch to this you must build the code with the `--tags batched_queue` option. You must then also apply a schema change if you are running with a previous version of the database.  Add the following column to the `Unsequenced` table:
   163  
   164  `QueueID VARBINARY(32) DEFAULT NULL`
   165  
   166  If you don't plan to switch to the `batched_queue` mode then you don't need to make the above change.
   167  
   168  Commit [afd178f85c963f56ad2ae7d4721d139b1d6050b4](https://api.github.com/repos/google/trillian/commits/afd178f85c963f56ad2ae7d4721d139b1d6050b4) Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.0.1)
   169  
   170  ## v1.0 - First Log version we believe was ready for use. To support CT.
   171  
   172  Published 2018-02-05 13:51:55 +0000 UTC
   173  
   174  Quota metrics published. Quota admin api + server implemented. Improvements to local / AWS deployment. Map fixes and further development. ECDSA key handling improvements. Key factory improvements. Code coverage added. Quota integration test added. Etcd quota support in log and map connected up. Incompatibility with C++ code fixed where consistency proof requests for first == second == 0 were rejected.
   175  
   176  Commit [a6546d092307f6e0d396068066033b434203824d](https://api.github.com/repos/google/trillian/commits/a6546d092307f6e0d396068066033b434203824d) Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.0)
   177