docker/ingress/v1.0.10

opensandbox-group/OpenSandboxdocker/ingress/v1.0.10Jul 12, 2026by Pangjiping

AI Summary

Ingress component v1.0.10 improves security by using a dedicated ServeMux and normalizes OTel metrics.

Key Highlights

Dedicated http.ServeMux to prevent transitive dependency exposure
OTel metrics normalization with delta temporality

New Features

Dedicated http.ServeMux
OTel metrics normalization (key renaming, delta temporality)

Full Release Notes

## What's New

### 🐛 Bug Fixes

- **Dedicated `http.ServeMux` instead of `http.DefaultServeMux`.** Prevents transitive dependencies from silently exposing endpoints (e.g. `net/http/pprof`, `expvar`) via `init()`-time `http.Handle` on the global mux. Only `/` and `/status.ok` are reachable now; `/debug/pprof/` correctly returns 404. (#1224)

### 🔧 Improvements

- **OTel metrics normalized.** Attribute keys `.` → `_` (`http_method`, `http_status_code`, `routing_result`); OTLP export switched to **delta temporality**; removed redundant `ingress.proxy.http.requests_total` and `ingress.proxy.websocket.connections_total` (already covered by generic HTTP request metrics from v1.0.9). Update dashboards/alerts accordingly. (#1209)

## 👥 Contributors

Thanks to these contributors ❤️

- @Pangjiping

---
- Docker Hub: opensandbox/ingress:v1.0.10
- GHCR: ghcr.io/opensandbox-group/opensandbox/ingress:v1.0.10
- Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/ingress:v1.0.10