v0.12.4: Authorization Bearer, bump dependencies

• Key changes:
  • From now on, Authorization header will be considered only if it's of Bearer type:
    • In practical terms, it means that requests in a misconfigured setup will fail earlier than before;
    • There's no change for properly configured setups.
• Runtime and dependencies:
  • Go: 1.18.2 -> 1.19.5;
  • Alpine: 3.15.4 -> 3.17.1;
  • VictoriaMetrics/metrics: v1.18.1 -> v1.23.0;
  • VictoriaMetrics/metricsql v0.43.0 -> v0.51.1;
  • coreos/go-oidc/v3: v3.2.0 -> v3.5.0;
  • rs/zerolog v1.26.1: -> v1.28.0;
  • stretchr/testify: v1.7.1 -> v1.8.1;
  • urfave/cli/v2: v2.6.0 -> v2.23.7.

v0.12.3: more metrics and tests

• Key changes:
  • Added more metrics:
    • requests_total;
    • request_duration_seconds{path="/federate"};
    • request_duration_seconds{path="/api/v1/query"};
    • request_duration_seconds{path="/api/v1/query_range"};
  • Added more tests.

v0.12.2: more tests

• Key changes:
  • Minor improvements in docs;
  • Minor improvements in logging;
  • Added more tests;
  • VictoriaMetrics/metricsql bumped from 0.42.0 to 0.43.0.

v0.12.1: improved docs

• Key changes:
  • Minor changes in CLI help;
  • Improved docs.

v0.12.0: urfave CLI

• Key changes:
  • Migrated to urfave CLI;
  • VictoriaMetrics/metricsql bumped from 0.41.0 to 0.42.0.

v0.11.3: fix deduplication

• Key changes:
  • Fixed deduplication for negative non-regexp filters (previously, some of those would be let through without request modifications);
  • Internal refactoring:
    • Moved acl + lf logic to a new internal package querymodifier;
  • Added more tests.

v0.11.2: all HTTP methods

• Key changes:
  • All HTTP methods are allowed now (previously, only POST/GET requests were supported due to technical reasons);
  • VictoriaMetrics/metricsql bumped from 0.40.0 to 0.41.0.

v0.11.1: skip predefined roles

• Key changes:
  • Added an option to skip the file with predefined roles through setting ACL_PATH to an empty value. This might be useful in environments that fully rely on Assumed Roles (=autoconfiguration).

v0.11.0: GOMAXPROCS

• Key changes:
  • Automatically set GOMAXPROCS to match Linux container CPU quota via uber-go/automaxprocs. Enabled by default, can be turned off via SET_GOMAXPROCS: false.

v0.10.0: assumed roles (autoconfiguration)

• Key changes:
  • Added support for autoconfiguration through Assumed roles (disabled by default, can be enabled through ASSUMED_ROLES: true):
    • In environments, where OIDC-role names match names of namespaces, ACLs can be constructed on the fly (e.g. ["role1", "role2"] will give access to metrics from namespaces role1 and role2; kube.* - to namespaces starting with kube.*, .* - to all metrics). The roles specified in acl.yaml are still considered and get merged with assumed roles;
    • Thanks to @aberestyak for the idea;
  • Logs:
    • Log OIDC roles when debug is enabled. The field will contain all roles present in the token, not only those that are considered during ACL generation process.