v0.22.0

Release Notes for v0.22.0

Mandatory migration tasks

N/A

Optional migration tasks

• db-manager's cleanup and migrate commands no longer override the application name parameter. To tag these connections, use the datastore_application_name flag, which is now honoured by these commands (defaults to dss).

Important information

• The timeout configuration flag is now enforced consistently on all HTTP calls. This means that some slow calls that were previously successful will now be cancelled. Please review the value to be applied (the default is 10 seconds) and, if needed, update it to suit your needs.
• --datastore_db_name (and the deprecated version, --cockroach_db_name) has been removed. It was not used except for tests and can be removed if you use it.
• Datastore initialization has been normalized throughout the codebase, with the following changes:
  • Error messages of db-manager's cleanup command are now the same as the core-service command.
  • AUX database is regularly pinged (before that was only the case for the RID and SCD databases).

Minimal database schema version

Schema	CockroachDB	Yugabyte
AUX	1.1.0	1.1.0
RID	4.0.0	1.0.1
SCD	3.3.0	1.1.0

Validation

USS qualifier version: v0.28.0
Test configuration and report: See attachments

What's Changed

• Cleanup next release notes following 0.21 release by @the-glu in #1396
• [monitoring] Add telemetry in router by @the-glu in #1391
• Fix documentation link to CockroachDB install by @the-glu in #1400
• [auth] Remove token signatures in logs by @the-glu in #1398
• Bump google.golang.org/grpc from 1.78.0 to 1.79.3 by @dependabot[bot] in #1399
• Apply server timeout globally, remove hardcoded datastore timeout by @the-glu in #1397
• [core-server] Cleanup getDBStats by @the-glu in #1406
• [db-manager] Honor datastore_application_name flag instead of overriding it by @the-glu in #1407
• [datastore]: Remove unused datastore_db_name by @the-glu in #1404
• [store] Use a common interface for scd/rid/aux stores by @the-glu in #1405
• [datastore] Use a generic datastore by @the-glu in #1408
• [CI] Upgrade cosign; Wait 30s between signing and verifying signature by @mickmis in #1412
• Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @dependabot[bot] in #1414
• [datastore] Normalize datastore initialization across the codebase with a generic dial function by @the-glu in #1409
• [datastore] Stop crons on ctx's cancels, cancel ctx when error occur during RunHTTPServer by @the-glu in #1410
• [datastore] Remove cleanup functions by @the-glu in #1413
• [datastore] Make CheckCurrentMajorSchemaVersion internal, move parameters to NewStore by @the-glu in #1415
• [scd] Validate Volume4D when parsing by @RustedBones in #1380
• Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 by @dependabot[bot] in #1421
• [ci] Update 'actions/checkout''s version by @the-glu in #1417
• Check authorization in SCD global lock by @the-glu in #1422
• [scd] Factorize volume4D union from rest by @RustedBones in #1381
• [datastore] Move flags and ConnectParameters to a dedicated package, merge datastoreutils into datastore by @the-glu in #1416
• [deploy] Fix enable_scd parameter ignored by @the-glu in #1424
• [deploy] Add enable_scd_global_lock setting to terrafrom, helm and tanka by @the-glu in #1423
• Upgrade monitoring image to v0.28.0 by @the-glu in #1426

Full Changelog: interuss/dss/v0.21.1...interuss/dss/v0.22.0

v0.22.0-rc1

Release Notes for v0.22.0-rc1

⚠️ This is a release candidate and has not been tested yet in production and may be insecure.

Mandatory migration tasks

N/A

Optional migration tasks

• db-manager's cleanup and migrate commands no longer override the application name parameter. To tag these connections, use the datastore_application_name flag, which is now honoured by these commands (defaults to dss).

Important information

• The timeout configuration flag is now enforced consistently on all HTTP calls. This means that some slow calls that were previously successful will now be cancelled. Please review the value to be applied (the default is 10 seconds) and, if needed, update it to suit your needs.
• --datastore_db_name (and the deprecated version, --cockroach_db_name) has been removed. It was not used except for tests and can be removed if you use it.
• Datastore initialization has been normalized throughout the codebase, with the following changes:
  • Error messages of db-manager's cleanup command are now the same as the core-service command.
  • AUX database is regularly pinged (before that was only the case for the RID and SCD databases).

Minimal database schema version

Schema	CockroachDB	Yugabyte
AUX	1.1.0	1.1.0
RID	4.0.0	1.0.1
SCD	3.3.0	1.1.0

Validation

USS qualifier version: v0.28.0
Test configuration and report: See attachments

What's Changed

• Cleanup next release notes following 0.21 release by @the-glu in #1396
• [monitoring] Add telemetry in router by @the-glu in #1391
• Fix documentation link to CockroachDB install by @the-glu in #1400
• [auth] Remove token signatures in logs by @the-glu in #1398
• Bump google.golang.org/grpc from 1.78.0 to 1.79.3 by @dependabot[bot] in #1399
• Apply server timeout globally, remove hardcoded datastore timeout by @the-glu in #1397
• [core-server] Cleanup getDBStats by @the-glu in #1406
• [db-manager] Honor datastore_application_name flag instead of overriding it by @the-glu in #1407
• [datastore]: Remove unused datastore_db_name by @the-glu in #1404
• [store] Use a common interface for scd/rid/aux stores by @the-glu in #1405
• [datastore] Use a generic datastore by @the-glu in #1408
• [CI] Upgrade cosign; Wait 30s between signing and verifying signature by @mickmis in #1412
• Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @dependabot[bot] in #1414
• [datastore] Normalize datastore initialization across the codebase with a generic dial function by @the-glu in #1409
• [datastore] Stop crons on ctx's cancels, cancel ctx when error occur during RunHTTPServer by @the-glu in #1410
• [datastore] Remove cleanup functions by @the-glu in #1413
• [datastore] Make CheckCurrentMajorSchemaVersion internal, move parameters to NewStore by @the-glu in #1415
• [scd] Validate Volume4D when parsing by @RustedBones in #1380
• Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 by @dependabot[bot] in #1421
• [ci] Update 'actions/checkout''s version by @the-glu in #1417
• Check authorization in SCD global lock by @the-glu in #1422
• [scd] Factorize volume4D union from rest by @RustedBones in #1381
• [datastore] Move flags and ConnectParameters to a dedicated package, merge datastoreutils into datastore by @the-glu in #1416
• [deploy] Fix enable_scd parameter ignored by @the-glu in #1424
• [deploy] Add enable_scd_global_lock setting to terrafrom, helm and tanka by @the-glu in #1423
• Upgrade monitoring image to v0.28.0 by @the-glu in #1426

Full Changelog: interuss/dss/v0.21.1...interuss/dss/v0.22.0-rc1

v0.21.1

Release Notes for v0.21.1

Performance improvements

Mandatory migration tasks

None

Optional migration tasks

None

Important information

None

Minimal database schema version

Schema	CockroachDB	Yugabyte
AUX	1.1.0	1.1.0
RID	4.0.0	1.0.1
SCD	3.3.0	1.1.0

Validation

USS qualifier version: v0.26.0
Test configuration and report: See attachments

What's Changed

• [monitoring] Add OpenTelemetry option by @the-glu in #1365
• [openapi-to-go-server] Switch to UV by @the-glu in #1388
• [openapi-to-go-server] Add & apply formatting by @the-glu in #1389
• Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 by @dependabot[bot] in #1392
• [scd] Time-bound subscription locks and add lock diagnostics by @ashishjsharda in #1384
• Fix core-service healthcheck port and add health verification by @kylehodgson in #1394
• [openapi-to-go-server] Fix old TODO for go >1.17 by @the-glu in #1390

New Contributors

• @ashishjsharda made their first contribution in #1384
• @kylehodgson made their first contribution in #1394

Full Changelog: interuss/dss/v0.21.0...interuss/dss/v0.21.1

v0.21.0

Release Notes for v0.21.0

First stable release supporting Yugabyte.

Mandatory migration tasks

• Ensure RID schema has been migrated to version 4.0.0 since the datastore doesn't fallback anymore on the default database. If that not the case, please use the previous release and upgrade to schema 4.0.0 first.
• The RID cronjob has been moved to an external command, see #1261
  • If you want to continue to cleanup old entries regularly, run the evict command as needed:
    • Running the following command each 30 minutes will be equivalent to the previous situation
    • db-manager evict --rid_isa=True --rid_sub=True --rid_ttl=30m --scd_oir=False --scd_sub=False
  • Helm charts, tanka files and terraform files has been updated with defaults that run RID cleanup as before and disable SCD cleanup
    • Please review new parameters in each module specific documentation and update them as needed.
• The test certificate build/test-certs/auth2 public and private keys have been changed, see #1178. Please update your configuration if you used that public key.
• A new aux store has been added, which implies a new migration job using schema-manager. If you ran migration jobs manually, make sure you run the migration for this new schema. Schemas are stored in the aux_ folder.
• Upgrade terraform version to 12.2 if lower.
• The terraform variable crdb_hostname_suffix has been renamed to db_hostname_suffix, please update your configuration accordingly.
• The terraform variable crdb_locality has been renamed to locality and is now mandatory, please update your configuration accordingly.
• public_endpoint parameter has been added as a mandatory argument. Please set it to the public endpoint of your DSS instance in order to register this instance as a participant in the pool information.
• A immutable field has been changed in terraform / tanka
  • Please remove any *-schema-manager-* jobs before upgrading chart / applying tanka configuration.
  • The job is only used for migrations and can be removed.
• Minimal support for kubernetes version have been bumped from 1.24 to 1.28.
  • If you're using a version <1.28, please upgrade your cluster first

Optional migration tasks

• Datastores parameters have been renamed to be more vendor-agnostic. The old ones have been deprecated but will continue to work for the time being.
  • If you call the dss executable directly, you will need to update parameters as below.
  • If you use helm/tanka to deploy the DSS, parameters have been renamed internally, you don't have to do anything.

Old parameter name	New parameter name	Description
cockroach_application_name	datastore_application_name	application name for tagging the connection to the database
cockroach_db_name	datastore_db_name	database name to connect to
cockroach_host	datastore_host	database host to connect to
cockroach_port	datastore_port	database port to connect to
cockroach_ssl_mode	datastore_ssl_mode	database sslmode
cockroach_ssl_dir	datastore_ssl_dir	directory to ssl certificates. Must contain files: ca.crt, client..crt, client..key
cockroach_user	datastore_user	database user to authenticate as
max_open_conns	datastore_max_open_conns	maximum number of open connections to the database, default is 4
max_conn_idle_secs	datastore_max_conn_idle_secs	maximum amount of time in seconds a connection may be idle, default is 30 seconds
cockroach_max_retries	datastore_max_retries	maximum number of attempts to retry a query in case of contention, default is 100

Important information

• Yugabyte support has been added to terraform, tanka and helm files.
• The RID evict task is now deleting all expired entries instead of stopping after the first one, see #1253.
  • The initial run may take longer than expected when deleting entries that may have been accumulating.
• Published images are now signed with sigstore, see how to verify it.
• Deployment documentation has been moved to a new website instead of various README in the repository tree.
• Prometheus (deployed if using tanka) has been upgraded to version 3. If you customized / used Prometheus outside of provided configuration, please follow upgrade guide.

Minimal database schema version

Schema	CockroachDB	Yugabyte
AUX	1.1.0	1.1.0
RID	4.0.0	1.0.1
SCD	3.3.0	1.1.0

Validation

USS qualifier version: v0.26.0
Test configuration and report: See attachments

What's Changed

• Upgrade go version to 1.24; Upgrade golint-ci to 2.1.5; Fix linting issues; Generate new dummy keys for DummyOAuth by @mickmis in #1178
• Bump golang.org/x/crypto from 0.32.0 to 0.35.0 by @dependabot[bot] in #1173
• Bump golang.org/x/net from 0.33.0 to 0.38.0 by @dependabot[bot] in #1183
• [docs] Add DSS pool verification docs by @BenjaminPelletier in #1180
• [helm] Add basic support for yugabyte to helm charts by @the-glu in #1159
• [terraform-commons-dss] Better defaults for terraform-google-dss by @the-glu in #1187
• [yugabyte] certificates management by @the-glu in #1186
• [helm] Add TLS support on yugabyte by @the-glu in #1182
• [ci] extract unit & integration test coverage report by @Shastick in #1185
• [aux] Add CAs endpoint by @the-glu in #1194
• [ci] publish coverage data as an artifact for all master builds by @Shastick in #1193
• Yugabyte: Working GCP implementation by @the-glu in #1190
• [yugabyte] remove useless variable file by @the-glu in #1200
• [yugabyte] Working AWS implementation by @the-glu in #1191
• [yugabyte] Partially improve documentation by @the-glu in #1201
• [aux] Add DAR ID on yugabyte deployments by @the-glu in #1195
• [cmd] Add public endpoint flag by @the-glu in #1197
• [terraform] Fix cockroachdb condition by @the-glu in #1204
• [aux] Add store and basic pool instance informations by @the-glu in #1198
• [helm] Fix error with aux_ migration script by @the-glu in #1208
• [terraform] Rename crdb_hostname_suffix to db_hostname_suffix by @the-glu in #1203
• [terraform] Update example files for yugabyte by @the-glu in #1205
• Update Deprecated Terraform resources and set TF provider versions by @ZachHubbs in #1209
• [helm] Improve public endpoint setting with backward compatiblity by @the-glu in #1211
• [dss] sort cell ids in queries by @Shastick in #1112
• [tests] update monitoring image to latest release 0.16.0 by @Shastick in #1223
• [deploy] Move locality to a common variable and make it mandatory by @the-glu in #1212
• [tanka] Improve tanka configuration file to work with minikube by @the-glu in #1216
• [tanka] Add aux migrations by @the-glu in #1217
• [tanka] Make job uniques + add way for cleanup by @the-glu in #1218
• [tanka] Add public_endpoint argument by @the-glu in #1219
• [yugabyte] New pooling documentation by @the-glu in #1207
• [tanka] Add parameters to always enable schema manager by @the-glu in #1221
• [aux] Add heartbeat functionnality by @the-glu in #1213
• [tanka] Yugabyte, preparation by @the-glu in #1222
• [tanka] Yugabyte: base service and migrations...

v0.21.0-rc2

Release Notes for v0.21.0-rc2

⚠️ This is a release candidate and has not been tested yet in production and may be insecure.

Mandatory migration tasks

• Ensure RID schema has been migrated to version 4.0.0 since the datastore doesn't fallback anymore on the default database. If that not the case, please use the previous release and upgrade to schema 4.0.0 first.
• The RID cronjob has been moved to an external command, see #1261
  • If you want to continue to cleanup old entries regularly, run the evict command as needed:
    • Running the following command each 30 minutes will be equivalent to the previous situation
    • db-manager evict --rid_isa=True --rid_sub=True --rid_ttl=30m --scd_oir=False --scd_sub=False
  • Helm charts, tanka files and terraform files has been updated with defaults that run RID cleanup as before and disable SCD cleanup
    • Please review new parameters in each module specific documentation and update them as needed.
• The test certificate build/test-certs/auth2 public and private keys have been changed, see #1178. Please update your configuration if you used that public key.
• A new aux store has been added, which implies a new migration job using schema-manager. If you ran migration jobs manually, make sure you run the migration for this new schema. Schemas are stored in the aux_ folder.
• Upgrade terraform version to 12.2 if lower.
• The terraform variable crdb_hostname_suffix has been renamed to db_hostname_suffix, please update your configuration accordingly.
• The terraform variable crdb_locality has been renamed to locality and is now mandatory, please update your configuration accordingly.
• public_endpoint parameter has been added as a mandatory argument. Please set it to the public endpoint of your DSS instance in order to register this instance as a participant in the pool information.
• A immutable field has been changed in terraform / tanka
  • Please remove any *-schema-manager-* jobs before upgrading chart / applying tanka configuration.
  • The job is only used for migrations and can be removed.

Optional migration tasks

• Datastores parameters have been renamed to be more vendor-agnostic. The old ones have been deprecated but will continue to work for the time being.
  • If you call the dss executable directly, you will need to update parameters as below.
  • If you use helm/tanka to deploy the DSS, parameters have been renamed internally, you don't have to do anything.

Old parameter name	New parameter name	Description
cockroach_application_name	datastore_application_name	application name for tagging the connection to the database
cockroach_db_name	datastore_db_name	database name to connect to
cockroach_host	datastore_host	database host to connect to
cockroach_port	datastore_port	database port to connect to
cockroach_ssl_mode	datastore_ssl_mode	database sslmode
cockroach_ssl_dir	datastore_ssl_dir	directory to ssl certificates. Must contain files: ca.crt, client..crt, client..key
cockroach_user	datastore_user	database user to authenticate as
max_open_conns	datastore_max_open_conns	maximum number of open connections to the database, default is 4
max_conn_idle_secs	datastore_max_conn_idle_secs	maximum amount of time in seconds a connection may be idle, default is 30 seconds
cockroach_max_retries	datastore_max_retries	maximum number of attempts to retry a query in case of contention, default is 100

Important information

• Yugabyte support has been added to terraform, tanka and helm files.
• The RID evict task is now deleting all expired entries instead of stopping after the first one, see #1253.
  • The initial run may take longer than expected when deleting entries that may have been accumulating.
• Published images are now signed with sigstore, see how to verify it.
• Deployment documentation has been moved to a new website instead of various README in the repository tree.

Additions since v0.21.0-rc1

• Prometheus (deployed if using tanka) has been upgraded to version 3. If you customized / used Prometheus outside of provided configuration, please follow upgrade guide.

Minimal database schema version

Schema	CockroachDB	Yugabyte
AUX	1.0.0	1.0.0
RID	4.0.0	1.0.1
SCD	3.2.0	1.0.1

Validation

USS qualifier version: v0.25.0
Test configuration and report: see attachments

What's Changed

• Upgrade go version to 1.24; Upgrade golint-ci to 2.1.5; Fix linting issues; Generate new dummy keys for DummyOAuth by @mickmis in #1178
• Bump golang.org/x/crypto from 0.32.0 to 0.35.0 by @dependabot[bot] in #1173
• Bump golang.org/x/net from 0.33.0 to 0.38.0 by @dependabot[bot] in #1183
• [docs] Add DSS pool verification docs by @BenjaminPelletier in #1180
• [helm] Add basic support for yugabyte to helm charts by @the-glu in #1159
• [terraform-commons-dss] Better defaults for terraform-google-dss by @the-glu in #1187
• [yugabyte] certificates management by @the-glu in #1186
• [helm] Add TLS support on yugabyte by @the-glu in #1182
• [ci] extract unit & integration test coverage report by @Shastick in #1185
• [aux] Add CAs endpoint by @the-glu in #1194
• [ci] publish coverage data as an artifact for all master builds by @Shastick in #1193
• Yugabyte: Working GCP implementation by @the-glu in #1190
• [yugabyte] remove useless variable file by @the-glu in #1200
• [yugabyte] Working AWS implementation by @the-glu in #1191
• [yugabyte] Partially improve documentation by @the-glu in #1201
• [aux] Add DAR ID on yugabyte deployments by @the-glu in #1195
• [cmd] Add public endpoint flag by @the-glu in #1197
• [terraform] Fix cockroachdb condition by @the-glu in #1204
• [aux] Add store and basic pool instance informations by @the-glu in #1198
• [helm] Fix error with aux_ migration script by @the-glu in #1208
• [terraform] Rename crdb_hostname_suffix to db_hostname_suffix by @the-glu in #1203
• [terraform] Update example files for yugabyte by @the-glu in #1205
• Update Deprecated Terraform resources and set TF provider versions by @ZachHubbs in #1209
• [helm] Improve public endpoint setting with backward compatiblity by @the-glu in #1211
• [dss] sort cell ids in queries by @Shastick in #1112
• [tests] update monitoring image to latest release 0.16.0 by @Shastick in #1223
• [deploy] Move locality to a common variable and make it mandatory by @the-glu in #1212
• [tanka] Improve tanka configuration file to work with minikube by @the-glu in #1216
• [tanka] Add aux migrations by @the-glu in #1217
• [tanka] Make job uniques + add way for cleanup by @the-glu in #1218
• [tanka] Add public_endpoint argument by @the-glu in #1219
• [yugabyte] New pooling documentation by @the-glu in #1207
• [tanka] Add parameters to always enable schema manager by @the-glu in #1221
• [aux] Add heartbeat functionnality by @the-glu in #1213
• [tanka] Yugabyte, preparation by @the-glu in #1222
• [tanka] Yugabyte: base service and migrati...

v0.20.2

Release Notes for v0.20.2

What's Changed

• [rid] Fix garbage collector by deleting multiples entries at a time by @the-glu in #1253
• Lock potentially used subscriptions by @the-glu in #1318

Full Changelog: interuss/dss/v0.20.1...interuss/dss/v0.20.2

Important information

• The RID evict task is now deleting all expired entries instead of stopping after the first one, see #1253.
  • The initial run may take longer than expected when deleting entries that may have been accumulating.

Minimal database schema version

Schema	CockroachDB	Yugabyte
RID	4.0.0	1.0.1
SCD	3.2.0	1.0.1
AUX	N/A	N/A

Validation

USS qualifier version: v0.24.0
Test configuration and report: see attachment

v0.21.0-rc1

Release Notes for v0.21.0-rc1

⚠️ This is a release candidate and has not been tested yet in production and may be insecure.

Mandatory migration tasks

• Ensure RID schema has been migrated to version 4.0.0 since the datastore doesn't fallback anymore on the default database. If that not the case, please use the previous release and upgrade to schema 4.0.0 first.
• The RID cronjob has been moved to an external command, see #1261
  • If you want to continue to cleanup old entries regularly, run the evict command as needed:
    • Running the following command each 30 minutes will be equivalent to the previous situation
    • db-manager evict --rid_isa=True --rid_sub=True --rid_ttl=30m --scd_oir=False --scd_sub=False
  • Helm charts, tanka files and terraform files has been updated with defaults that run RID cleanup as before and disable SCD cleanup
    • Please review new parameters in each module specific documentation and update them as needed.
• The test certificate build/test-certs/auth2 public and private keys have been changed, see #1178. Please update your configuration if you used that public key.
• A new aux store has been added, which implies a new migration job using schema-manager. If you ran migration jobs manually, make sure you run the migration for this new schema. Schemas are stored in the aux_ folder.
• Upgrade terraform version to 12.2 if lower.
• The terraform variable crdb_hostname_suffix has been renamed to db_hostname_suffix, please update your configuration accordingly.
• The terraform variable crdb_locality has been renamed to locality and is now mandatory, please update your configuration accordingly.
• public_endpoint parameter has been added as a mandatory argument. Please set it to the public endpoint of your DSS instance in order to register this instance as a participant in the pool information.
• A immutable field has been changed in terraform / tanka
  • Please remove any *-schema-manager-* jobs before upgrading chart / applying tanka configuration.
  • The job is only used for migrations and can be removed.

Optional migration tasks

• Datastores parameters have been renamed to be more vendor-agnostic. The old ones have been deprecated but will continue to work for the time being.
  • If you call the dss executable directly, you will need to update parameters as below.
  • If you use helm/tanka to deploy the DSS, parameters have been renamed internally, you don't have to do anything.

Old parameter name	New parameter name	Description
cockroach_application_name	datastore_application_name	application name for tagging the connection to the database
cockroach_db_name	datastore_db_name	database name to connect to
cockroach_host	datastore_host	database host to connect to
cockroach_port	datastore_port	database port to connect to
cockroach_ssl_mode	datastore_ssl_mode	database sslmode
cockroach_ssl_dir	datastore_ssl_dir	directory to ssl certificates. Must contain files: ca.crt, client..crt, client..key
cockroach_user	datastore_user	database user to authenticate as
max_open_conns	datastore_max_open_conns	maximum number of open connections to the database, default is 4
max_conn_idle_secs	datastore_max_conn_idle_secs	maximum amount of time in seconds a connection may be idle, default is 30 seconds
cockroach_max_retries	datastore_max_retries	maximum number of attempts to retry a query in case of contention, default is 100

Important information

• Yugabyte support has been added to terraform, tanka and helm files.
• The RID evict task is now deleting all expired entries instead of stopping after the first one, see #1253.
  • The initial run may take longer than expected when deleting entries that may have been accumulating.
• Published images are now signed with sigstore, see how to verify it.
• Deployment documentation has been moved to a new website instead of various README in the repository tree.

Minimal database schema version

Schema	CockroachDB	Yugabyte
AUX	1.0.0	1.0.0
RID	4.0.0	1.0.1
SCD	3.2.0	1.0.1

Validation

USS qualifier version: v0.21.0
Test configuration and report: see attachments

What's Changed

• Upgrade go version to 1.24; Upgrade golint-ci to 2.1.5; Fix linting issues; Generate new dummy keys for DummyOAuth by @mickmis in #1178
• Bump golang.org/x/crypto from 0.32.0 to 0.35.0 by @dependabot[bot] in #1173
• Bump golang.org/x/net from 0.33.0 to 0.38.0 by @dependabot[bot] in #1183
• [docs] Add DSS pool verification docs by @BenjaminPelletier in #1180
• [helm] Add basic support for yugabyte to helm charts by @the-glu in #1159
• [terraform-commons-dss] Better defaults for terraform-google-dss by @the-glu in #1187
• [yugabyte] certificates management by @the-glu in #1186
• [helm] Add TLS support on yugabyte by @the-glu in #1182
• [ci] extract unit & integration test coverage report by @Shastick in #1185
• [aux] Add CAs endpoint by @the-glu in #1194
• [ci] publish coverage data as an artifact for all master builds by @Shastick in #1193
• Yugabyte: Working GCP implementation by @the-glu in #1190
• [yugabyte] remove useless variable file by @the-glu in #1200
• [yugabyte] Working AWS implementation by @the-glu in #1191
• [yugabyte] Partially improve documentation by @the-glu in #1201
• [aux] Add DAR ID on yugabyte deployments by @the-glu in #1195
• [cmd] Add public endpoint flag by @the-glu in #1197
• [terraform] Fix cockroachdb condition by @the-glu in #1204
• [aux] Add store and basic pool instance informations by @the-glu in #1198
• [helm] Fix error with aux_ migration script by @the-glu in #1208
• [terraform] Rename crdb_hostname_suffix to db_hostname_suffix by @the-glu in #1203
• [terraform] Update example files for yugabyte by @the-glu in #1205
• Update Deprecated Terraform resources and set TF provider versions by @ZachHubbs in #1209
• [helm] Improve public endpoint setting with backward compatiblity by @the-glu in #1211
• [dss] sort cell ids in queries by @Shastick in #1112
• [tests] update monitoring image to latest release 0.16.0 by @Shastick in #1223
• [deploy] Move locality to a common variable and make it mandatory by @the-glu in #1212
• [tanka] Improve tanka configuration file to work with minikube by @the-glu in #1216
• [tanka] Add aux migrations by @the-glu in #1217
• [tanka] Make job uniques + add way for cleanup by @the-glu in #1218
• [tanka] Add public_endpoint argument by @the-glu in #1219
• [yugabyte] New pooling documentation by @the-glu in #1207
• [tanka] Add parameters to always enable schema manager by @the-glu in #1221
• [aux] Add heartbeat functionnality by @the-glu in #1213
• [tanka] Yugabyte, preparation by @the-glu in #1222
• [tanka] Yugabyte: base service and migrations by @the-glu in #1224
• [tanka] Yugabyte: add options to prepare for terraform output by @the-glu in #1227
• [tanka/terraform] Update terraform state to support latest tanka files, including yugabyte by @the-glu in #1228
• [tanka/...

v0.20.1

What's Changed

Deployment

• Update Deprecated Terraform resources and set TF provider versions by @ZachHubbs in #1209

New Contributors

• @ZachHubbs made their first contribution in #1209

Full Changelog: interuss/dss/v0.20.0...interuss/dss/v0.20.1

Required database schema versions

Schema	CockroachDB	Yugabyte
RID	4.0.0	1.0.1
SCD	3.2.0	1.0.1
AUX	N/A	N/A

Validation

• USS qualifier version: v0.18.0
• Test configuration and report: see attachment

Known issues and remarks

• DSS v0.20.1 doesn't support OVN Request, therefore it is expected that two tests have been skipped: Skipped: OVN Request Optional Extension to ASTM F3548-21 (Edit: 29-08-2025) Skip was related to a USS qualifier misconfiguration. New test results have been attached. (v0.20.1-test-results-2.zip)

v0.20.0

What's Changed

DSS

• [yugabyte] SQL Migrations by @barroco in #1138
• [cleanup] Remove rid database v3 backward compatibility (RID schema version 4 is required after this commit) by @barroco in #1142
• Bump golang.org/x/net from 0.23.0 to 0.33.0 by @dependabot in #1145
• [yugabyte] Yugabyte compatible implementation by @barroco in #1143
• [yugabyte] Ensure notification_indexes are correctly mapped to subscriptions by @barroco in #1149
• Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 by @dependabot in #1152
• Fix for code scanning alert no. 2: Incorrect conversion between integer types by @BenjaminPelletier in #1147
• [aux] Add empty DSS instances endpoint by @BenjaminPelletier in #1174
• [aux] Add access to DAR ID via aux API by @BenjaminPelletier in #1177

Deployment

• [security] Clarify dumpRequests and set examples to false by @BenjaminPelletier in #1146
• [security] Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5 by @dependabot in #1148
• [tanka] Set default termination grace period for cockroachdb pod to 5 minutes by @callumdmay in #1151
• [docs] Move pooling.md into deploy/operations by @BenjaminPelletier in #1161
• [docs] Move troubleshooting into operations by @BenjaminPelletier in #1162
• [docs] Clarify documentation flow by @BenjaminPelletier in #1160
• [docs] Move monitoring services into operations by @BenjaminPelletier in #1163
• [docs] Fix image references by @barroco in #1164
• [docs] Fix broken links by @barroco in #1165
• [terraform] Pin python-hcl2 dependency by @barroco in #1166
• [terraform-aws] Unset default disk_size to use default value and allow backward compatibility by @barroco in #1168
• [terraform-aws] Switch to IRSA and upgrade aws-load-balancer-controller to 2.12 by @barroco in #1167
• Helm charts: add configurable imagePullPolicy by @the-glu in #1156
• Helm charts: add gitignore by @the-glu in #1157
• [minikube] Add minikube instructions and update helm charts to work with minikube by @the-glu in #1154
• [terraform-doc] Improve readability of terraform variables documentation by @barroco in #1172
• [terraform] Support Kubernetes up to 1.32 by @barroco in #1169
  ℹ️ Migration instructions to Kubernetes 1.32

Others

• Enable CodeQL analysis by @BenjaminPelletier in #1144

New Contributors

• @callumdmay made their first contribution in #1151
• @the-glu made their first contribution in #1156

Full Changelog: interuss/dss/v0.19.0...interuss/dss/v0.20.0

Required database schema versions

Schema	CockroachDB	Yugabyte
RID	4.0.0	1.0.1
SCD	3.2.0	1.0.1
AUX	N/A	N/A

Validation

• USS qualifier version: v0.18.0
• Test configuration and report: see attachment

Known issues and remarks

• Deployment tooling is outdated and fixed in version 0.20.1.
• DSS v0.20.0 doesn't support OVN Request, therefore it is expected that two tests have been skipped: Skipped: OVN Request Optional Extension to ASTM F3548-21 (Edit: 29-08-2025) Skip was related to a USS qualifier misconfiguration. New test results have been attached. (v0.20.0-test-results-2.zip)

v0.20.0-rc1

What's Changed

DSS

• [yugabyte] SQL Migrations by @barroco in #1138
• [cleanup] Remove rid database v3 backward compatibility (RID schema version 4 is required after this commit) by @barroco in #1142
• Bump golang.org/x/net from 0.23.0 to 0.33.0 by @dependabot in #1145
• [yugabyte] Yugabyte compatible implementation by @barroco in #1143
• [yugabyte] Ensure notification_indexes are correctly mapped to subscriptions by @barroco in #1149
• Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 by @dependabot in #1152
• Fix for code scanning alert no. 2: Incorrect conversion between integer types by @BenjaminPelletier in #1147
• [aux] Add empty DSS instances endpoint by @BenjaminPelletier in #1174
• [aux] Add access to DAR ID via aux API by @BenjaminPelletier in #1177

Deployment

• [security] Clarify dumpRequests and set examples to false by @BenjaminPelletier in #1146
• [security] Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5 by @dependabot in #1148
• [tanka] Set default termination grace period for cockroachdb pod to 5 minutes by @callumdmay in #1151
• [docs] Move pooling.md into deploy/operations by @BenjaminPelletier in #1161
• [docs] Move troubleshooting into operations by @BenjaminPelletier in #1162
• [docs] Clarify documentation flow by @BenjaminPelletier in #1160
• [docs] Move monitoring services into operations by @BenjaminPelletier in #1163
• [docs] Fix image references by @barroco in #1164
• [docs] Fix broken links by @barroco in #1165
• [terraform] Pin python-hcl2 dependency by @barroco in #1166
• [terraform-aws] Unset default disk_size to use default value and allow backward compatibility by @barroco in #1168
• [terraform-aws] Switch to IRSA and upgrade aws-load-balancer-controller to 2.12 by @barroco in #1167
• Helm charts: add configurable imagePullPolicy by @the-glu in #1156
• Helm charts: add gitignore by @the-glu in #1157
• [minikube] Add minikube instructions and update helm charts to work with minikube by @the-glu in #1154
• [terraform-doc] Improve readability of terraform variables documentation by @barroco in #1172
• [terraform] Support Kubernetes up to 1.32 by @barroco in #1169
  ℹ️ Migration instructions to Kubernetes 1.32

Others

• Enable CodeQL analysis by @BenjaminPelletier in #1144

New Contributors

• @callumdmay made their first contribution in #1151
• @the-glu made their first contribution in #1156

Full Changelog: interuss/dss/v0.19.0...interuss/dss/v0.20.0-rc1