Released on October 19, 2022
Enhancements
- Two Factor Authentication (2FA) can now be activated or deactivated for each user directly in the portal. To change it go to the users details page and set or unset the checkbox.
2FA improves the security of your DevOps toolchain since users will be prompted for an additional one-time password (OTP) in addition to their normal credentials during the login. Users with 2FA enabled will need to use an application that implements the Time-Based One-Time Password Algorithm (TOTP) as defined in RFC 6238. Usually a mobile application like e.g. Google Authenticator or Microsoft Authenticator for Android/Microsoft Authenticator for iOS is used for that. If a user loses it's mobile phone simply disable 2FA, save the user details and afterwards enable 2FA again. This will make sure that the association with the authenticator app is deleted, so that the user can connect a new app. In the Create User dialog 2FA defaults to true. SSO Realm Names have been changed from "DevOps as a Service" to the domain name of your instance, e.g. CUSTOMER.devops.t-systems-service.com or CUSTOMER.devops.t-systems-service.net. This will avoid duplicate entries in mobile apps like Google Authenticator and allows you to easily distinguish between multiple instances if necessary.
- A column was added to the list of organizations which shows when the organizations were created.
Improvements
- To improve the support for your users we are now offering the possibility to change the contact link in the portal footer. Please create a service request to have it changed.
- Automated notification emails sent by the DevOps portal will no longer mention the T-Systems DevOps support email address, but instead link to your DevOps portal. This will ensure that users with questions e.g. about role changes will be able to contact the right people.
- To avoid problems in some of the DevOps tools the length of the firstname and lastname for users as well as the length of organization names was limited to 64 characters.
- The description field for technical users was limited to 1024 characters.
- The term Global Role was renamed to Portal Role to more clearly specify to what ADMIN and USER refer to.
- Activated date and unlocked date are now only viewable by portal ADMINs or for the own user to keep this information more private.
Bugfixes
- A bug was fixed which could prevent organization name changes in some cases.
- Work-around for Jira problem: the auto-provision code for Jira can now sucessfully process Jira API replies which in some cases can return already deleted users.
- For locked users the activation timestamp was not shown on the user details page.
- Project counter was not updated immediately for users or technical users when they were assigned or unassigned from a project.
- Fixed a text problem on the metrics page.
Known Issues
- User update/lock action can be stuck when the user was assigned to another organization after the user's first project role assignment. The ops team can automatically repair it for you. Will be fixed when the Rancher in customer's toolchain is updated from v1.6 to v2.x.