3.113.0

3.113.0 - 2024-08-12

Added

• Add new api to run mirrord inside container

  mirrord container [options] -- <docker/podman> run ...
  

  Because we need to run internal proxy process on the same network as the
  process loaded with mirrord-layer, to keep config and kubernetes
  comparability the communication to mirrord agent is made via external proxy
  that will run on the host machine.

                     ┌────────────────┐
                 k8s │ mirrord agent  │
                     └─────┬────▲─────┘
                           │    │
                           │    │
                     ┌─────▼────┴─────┐
      container host │ external proxy │
                     └─────┬────▲─────┘
                           │    │
                           │    │
                     ┌─────▼────┴─────┐◄──────┐
   sidecar container │ internal proxy │       │
                     └──┬─────────────┴──┐    │
          run container │ mirrord-layer  ├────┘
                        └────────────────┘
  

  #1658

Fixed

• Add custom handling for istio ambient mode where we set
  /proc/sys/net/ipv4/conf/all/route_localnet to 1 so it does require
  agent.privileged = true to work. (See
  #2456)
  #2456
• Fix issue introduced in #2612 that broke configs with one-value definition
  for IncomingConfig for network feature.
  #2647