docker/ingress/v1.0.7

opensandbox-group/OpenSandboxdocker/ingress/v1.0.7May 6, 2026by Pangjiping

AI Summary

Enhanced the ingress component with multi-namespace support and secure access routing capabilities.

Key Highlights

Implemented multi-namespace support
Added secure access routing (OSEP-0011) with signed URL verification

Breaking Changes

Deprecated `--namespace` flag

New Features

Multi-namespace support
Secure access routing
Log rotation via lumberjack

Full Release Notes

## What's New

### ✨ Features

- **Multi-namespace support**: Ingress watches sandbox CRs across all namespaces instead of a single one. `--namespace` flag deprecated. Ambiguous sandbox IDs across namespaces are rejected. (#699)
- **Secure access routing (OSEP-0011)**: Added `--secure-access-keys` flag for signed URL verification. Sandboxes with `opensandbox.io/secure-access` require valid signatures; sandboxes without it continue to work with unsigned routes. (#761)
- **Log rotation**: File log outputs auto-rotate via lumberjack (100MB, 30d, 10 backups default). (#791)

### 🐛 Bug Fixes

- Proxy panic log now includes `uri`, `host`, `method` fields for debugging. (#802)
- CodeQL static analysis fixes (integer conversion hardening in signature package). (#795)

### 📦 Misc

- Bumped OpenTelemetry Go deps for security alerts (#799)
- Repeatable builds: `-trimpath`, `-buildvcs=false`, fixed metadata (#808)
- Added `.dockerignore` to shrink build context (#718)

## 👥 Contributors

Thanks to these contributors ❤️

- @Pangjiping
- @hittyt

---

- Docker Hub: opensandbox/ingress:v1.0.7
- Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/ingress:v1.0.7