v1.7.2

Changes

• Add opt-in decryption fallback for objects whose DEK cannot be unwrapped with the configured KEK.
• Expose fallback activation through generic Helm extraEnv.
• Add configurable Helm Deployment strategy, supporting RollingUpdate and Recreate.

Helm usage

extraEnv:
  - name: S3PROXY_DECRYPTION_FALLBACK
    value: "true"

deploymentStrategy:
  type: Recreate

Validation

• go test ./...
• golangci-lint run
• CGO_ENABLED=0 GOOS=linux go build -o /tmp/s3proxy-release-1.7.2 ./s3proxy/cmd
• helm template test charts/s3proxy --set deploymentStrategy.type=Recreate --set-string extraEnv[0].name=S3PROXY_DECRYPTION_FALLBACK --set-string extraEnv[0].value=true

v1.7.1

Changes

• Fix liveness/readiness probes bypassing request throttling under load.
• Reduce object body memory copies for large S3 GET/PUT flows.
• Use the router KEK for object encryption/decryption, fixing the zero-KEK issue from #21.
• Add golangci-lint CI coverage.
• Update vulnerable dependencies reported by Dependabot:
  • github.com/aws/aws-sdk-go-v2/service/s3 to v1.97.3
  • github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream to v1.7.8
  • golang.org/x/crypto to v0.45.0

Validation

• go test ./...
• golangci-lint run
• CGO_ENABLED=0 GOOS=linux go build -o /tmp/s3proxy-release-1.7.1 ./s3proxy/cmd

v1.7.0

v1.7.0

• Upgrade to golang 1.25.3 + deps
• Fix TLS error #20 & #29

v1.6.0

v1.6.0

• Upgrade to golang 1.24.5

v1.5.2

v1.5.2

• Update helm app version

v1.5.1

v1.5.1

• fix ".Value.args" in helm charts

v1.5.0

v1.5.0

• Fix error forward request
• Upgrade deps

v1.4.0

v1.4.0

v1.3.0

v1.3.0

v1.2.0

Merge pull request #16 from Intrinsec/helm-certmanager-config

Change helm cert param + prepare 1.2.0