docker/ingress/v1.0.10

zaidmukaddam/sciradocker/ingress/v1.0.10Jul 12, 2026by Pangjiping

AI Summary

Fixes security vulnerabilities by preventing transitive dependencies from exposing endpoints and improves metrics normalization.

Key Highlights

Dedicated `http.ServeMux` prevents exposure of debug endpoints like `/debug/pprof`.
OTel metrics normalized with delta temporality.
Removes redundant HTTP request metrics.

New Features

Dedicated ServeMux to prevent transitive exposure
OTel metrics normalization
Removal of redundant metrics

Full Release Notes

## What's New

### 🐛 Bug Fixes

- **Dedicated `http.ServeMux` instead of `http.DefaultServeMux`.** Prevents transitive dependencies from silently exposing endpoints (e.g. `net/http/pprof`, `expvar`) via `init()`-time `http.Handle` on the global mux. Only `/` and `/status.ok` are reachable now; `/debug/pprof/` correctly returns 404. (#1224)

### 🔧 Improvements

- **OTel metrics normalized.** Attribute keys `.` → `_` (`http_method`, `http_status_code`, `routing_result`); OTLP export switched to **delta temporality**; removed redundant `ingress.proxy.http.requests_total` and `ingress.proxy.websocket.connections_total` (already covered by generic HTTP request metrics from v1.0.9). Update dashboards/alerts accordingly. (#1209)

## 👥 Contributors

Thanks to these contributors ❤️

- @Pangjiping

---
- Docker Hub: opensandbox/ingress:v1.0.10
- GHCR: ghcr.io/opensandbox-group/opensandbox/ingress:v1.0.10
- Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/ingress:v1.0.10