Release v0.15.14

Changelog

Added

• Added openrun_admin plugin with apis to manage sync jobs, for use by manage_sync app

Changed

• Changed app authentication setting and git auth setting to be stored in app metadata instead of in app settings. This allows those properties to be updated through declarative config. The property is moved over as part of a migration. Also, app update-metadata CLI command is renamed to app update.
• Changed app update-settings CLI command to app settings.

Other

• ca50bb2: Add deprecated label (@akclace)
• 9278865: Added openrun_admin plugin with apis to manage sync jobs, for use by manage_sync app (@akclace)
• 8ed867d: Changed 'app update-settings' CLI command to 'app settings' (@akclace)
• cbcba27: Moved app auth and git-auth settings to app metadata instead of app settings (@akclace)

Release v0.15.13

Changelog

Other

• 1777ba7: Added AWS Systems Manager (SSM) based secrets provider (@akclace)

Release v0.15.12

Changelog

Other

• b82bd78: HTTP early hints is disabled by default since that seems to cause issues with HTTP/2 proxies (@akclace)

Release v0.15.11

Changelog

Other

• 194b153: Added /_openrun/health health check endpoint (@akclace)
• 869763c: Updated changelog (@akclace)

Release v0.15.10

Changelog

Added

• Support for passing X-Openrun-Rbac-Enabled header to the proxied downstream service. Value is true if RBAC is enabled for app, false otherwise.
• Added update_time field to listapps output, app listing will display that info

Other

• 6f46dff: Added FAQ to README (@akclace)
• 4751b9c: Added X-Openrun-Rbac-Enabled header to indicate whether RBAC is enabled (@akclace)
• 7d9ac96: Added update_time to listapps output (@akclace)
• 8d0f6c7: Refactor RBAC code to remove callback functions (@akclace)
• 509083f: Update FAQ (@akclace)

Release v0.15.9

Changelog

Added

• Regex support in user value for RBAC. Regex can be used in grant.users and group values, Regex has to be prefixed with regex:
• Support for passing X-Openrun-User header to the proxied downstream service. Value is the user making the request.
• Support for passing X-Openrun-Perms header to the proxied downstream service. Value is comma separated list of all custom perms granted for the user on that app. custom: prefix is trimmed from the passed values.

Fixed

• Fixed an issue where the source path was not set to $OPENRUN_HOME/app_src when running apply in dev mode.

Changes

• 0fd4956: Added API to fetch custom perms available for user (@akclace)
• a13bf44: Added labels (@akclace)
• 98874d2: Added regex support for user name match in RBAC (@akclace)
• 2c333cb: Added testimonial template (@akclace)
• 2e8946c: Fix Makefile (@akclace)
• 9f48561: Fix source path for apply in dev mode (@akclace)
• a69457d: Pass X-Openrun-User and X-Openrun-Perm headers in proxy (@akclace)
• 5483e33: Update Makefile (@akclace)
• 20b7a15: Update changelog (@akclace)
• 89a38f6: Update user template (@akclace)
• c8fb9af: Updated chagelog (@akclace)
• 8656a65: Updated issue templates (@akclace)
• 87ddce4: Updated templates (@akclace)
• e278e05: Updated templates (@akclace)

Release v0.15.8

Changelog

• Enable CSRF protection for internal APIs and for apps. App level CSRF protection is enabled by default.
  Use security.disable_csrf_protection = true to disable. Disable in app metadata by running
  openrun app update-metadata conf --promote 'security.disable_csrf_protection=true' /myapp

Other

• 55bfca0: Added ChangeLog.md file (@akclace)
• f7723f4: Added OpenSSF badge (@akclace)
• e484bb7: Enabled CSRF check middleware (@akclace)
• 8f556e0: Fix date (@akclace)
• 8cc9a98: Renamed to CHANGELOG.md (@akclace)
• 85dc94e: Updated config file (@akclace)

Release v0.15.7

Changelog

Other

• 568e1c5: Fix #69: Support nested groups and subgroups in GitLab urls (@akclace)
• c918de1: Fixed links (@akclace)
• fdc3b1f: Updated readme (@akclace)

Release v0.15.6

Changelog

Other

• 568e1c5: Fix #69: Support nested groups and subgroups in GitLab urls (@akclace)
• c918de1: Fixed links (@akclace)
• fdc3b1f: Updated readme (@akclace)

Release v0.15.5

Changelog

Other

• e11bfbd: Fix #68: Track websocket activity for container idle check (@akclace)