Release 2022-06-08 - (expected chart version 4.13.0)

[zebot]

[2022-06-08] (Chart Release 4.13.0)

Release notes

• The .cannon.drainTimeout setting on the wire-server helm chart has been
  removed and replaced with .cannon.config.drainOpts. (Cannon: Drain websockets in a controlled fashion on SIGTERM or SIGINT #2416)

• Note for wire.com operators: deploy nginz (Disable rate limiting for /api-version #2439)

API changes

• The back-office (aka stern) team feature API now accenpts an optional TTL parameter (in days), so features can be activated for a limited period. (Added TTL query field to features API. #2417)

• Disable rate limiting for /api-version (Disable rate limiting for /api-version #2439)

Features

• Drain websockets in a controlled fashion when cannon receives a SIGTERM or
  SIGINT. Instead of waiting for connections to close on their own, the websockets
  are now severed at a controlled pace. This allows for quicker rollouts of new
  versions. (Cannon: Drain websockets in a controlled fashion on SIGTERM or SIGINT #2416)

• Optionally allow to run cannon with its own nginz inside the same pod; and connect to a load balancer directly.
  This allows the cannon-slow-drain behaviour implemented in Cannon: Drain websockets in a controlled fashion on SIGTERM or SIGINT #2416 to take effect by not having other intermediate network hops which could break websocket connections all at once.
  Some (internal) context: https://wearezeta.atlassian.net/wiki/spaces/PS/pages/585564424/How+to+gracefully+drain+cannon+but+not+so+slowly
  For details on how to configure this, see docs/src/how-to/install/configuration-options.rst (charts/cannon: Bundle nginz and expose directly to load balancer #2421)

• Support running brig with GeoIP database when using helm charts (charts/brig: Support running brig with GeoIP database #2406)

• charts/nginz: Add upstream configuration for galeb (charts/nginz: Support galeb and allow upstream services to be in another namespace #2444)

• charts/nginz: Allow upstreams to be in other namespaces (charts/nginz: Support galeb and allow upstream services to be in another namespace #2444)

• CSV export in team management now includes the number of devices per user (Sqservices 1546 number of devices in csv export in tm #2407)

Bug fixes and other updates

• charts/nginz: Resolve collision between brig and galeb endpoints. Ensure
  /self/consent and /signatures endpoints are configured in all environments (charts/nginz: Ensure traffic can be routed to galeb correctly #2457)

• When an IdP issuer (aka entity ID) is updated, the old issuer was still marked as "in use". (SQSERVICES-1519 IdP for SAML that was overridden by update cannot be added again #2400)

• On actions that require re-authentication a password is not required if the user has SAML credentials (SQSERVICES-1557-be-unexpected-logic-in-password-verification-for-accounts-with-saml-credentials #2430, SQSERVICES-1557 Added integration test #2434, Fixed check for SAML user #2437)

• Use SCIM's preferred language as a fallback when privisioning users without a locale. (Email localization when provisioning users with SCIM. #2445)

Documentation

• Feature configs should have different swagger schema names (Feature configs should have different swagger schema names #2425)

Internal changes

• AllFeatureConfigs is now typed (SQSERVICES-559 make AllFeatureConfigs typed #2403)

• Type class for default team feature status (SQSERVICES-1560-more-canonical-handling-of-hard-wired-defaults-type-class-have-defaults-for-all-features #2404)

• charts/{redis-ephemeral,legalhold}: Use old index for bitnami repo as the new index doesn't have old versions of postgresql and redis helm charts (Use old bitnami helm repo from git for redis and postgresql #2448)

• Bump haskell/zlib version to 0.6.3.0 (Bump haskell/zlib to 0.6.3.0 #2431)

• New internal brig endpoints for MLS KeyPackage -> Conversation association query/update (KeyPackage -> Conversation Internal API #2375)

• galley: refactor withSettingsOverrides (galley: refactor withSettingsOverrides #2381)

• charts/{nginz,cannon}: Increase map_hash_bucket_size for nginx to 128 (charts/{cannon,nginz}: Increase map_hash_bucket_size for nginx to 128 #2443)

• charts/{cannon,nginz}: values listed in
  nginx_conf.randomport_allowlisted_origins must be full hostnames. Hostnames
  listed here will be allowlisted with and without TLS. (charts/{cannon,nginz}: Allow configuring arbitrary hosts for CORS allowlisting #2438)

• Remove binding of users to saml idps using saml (this has never been picked up by clients; use scim instead) (Remove binding of users to saml idps using saml. #2441)

• Remove golden test case generator

  (Remove golden test case generator #2442)

• Convert Team CSV endpoint to Servant (Servantify Team CSV endpoint #2419)

Federation changes

• Send only the raw welcome message in the Galley "mls-welcome" federation endpoint ([FS-507] Improve the Federated Welcome Message Request #2412)

[smatting]

Let's wait for CI before merging