Released on March 27, 2023
Enhancements
- The Technical Users page can now be used by all Portal users. In general, only these Tech Users will be listed which share a project with the user. In addition, the roles for these Tech Users can be changed, but of course limited to the Projects where the user has an Admin role. Creating, Deleting and Editing of Tech Users is still limited to Portal admins.
- Due to updated PSA statements of compliance, the minimum length for passwords of technical users has been increased to 32.
- Resync roles as found in a Project's more menu has been replaced by Resync. The new Project Resync combines saving a Project and resending the roles. Therefore, the Resync guarantees at any time that all Project details including defined member roles are properly set-up in all the tools. When you've ordered additional tools, like e.g. SonarQube, it's advised to call Resync on the Projects which should get support for the new tool.
When a role is added to a locker user, the role is added only on the portal, but not inside the tools. If the user is later unlocked, all roles are automatically restored in the tools.
- Additional icons like shown in the example screenshot below now give a fast feed-back if the entered content was ok or not. Since the icons can be clearly distinguished from each other just by their shape, it's also an improvement for color-blind users.
Improvements
- Developed code that will be later used by the portal to allow removal of non-standard roles or individual permissions that have been set by Project admins directly in tools. This will allow in the future to improve the resync feature for projects in the portal.
- Improved display of timestamps and empty strings in pending syncs.
- Improved keyboard control as well as the contrast of the colors for all pages to improve accessability of the Portal.
- Improved support for screen readers.
- Two back-end components have been merged to simplify development.
- Base image and all dependencies used by the back-end have been updated to latest versions.
- Automated tests now run faster and don't unnecessarily block Jenkins agents when waiting for test environments.
- Shifted automated testing to new clusters based on the Rancher-Longhorn architecture.
Bugfixes
- Fixed problems in the LDAP server when handling more than 1000 users.
- Relaxed time-outs between the portal server and the auto-provisioning back-end to avoid pending syncs showing up with error message "I/O error clap-api:5000 failed to respond". This was necessary since some operations of the auto-provisioning can take longer since multiple tools have to be configured.
- Locking and deletion of users were not properly working on Rancher1.6, if the user had a personal default environment.
- In rare cases, e.g. after a timed-out session, the Portal can show its own login dialog instead of the SSO login page. That has been fixed for most cases. If it happens to you, simply reload the page to get to the correct login page.
- Vulnerability fixed which would have allowed an authenticated portal admin to change the userid/email of a user, leading to problems in the tools.
- For users that never logged in to SonarQube, a harmless pending sync could show up when a role was saved.
- A timeout was added to a query all projects call towards Jenkins to avoid hanging requests due to possible Jenkins malfunctions.
- Fixed a problem related to multi-threading in the back-end.
Known Issues
- User update/lock action can be stuck when the user was assigned to another organization after the user's first project role assignment. The ops team will automatically repair it for you. Problem is fixed for customers which have Rancher v2.6 in their toolchain as it happens only with Rancher 1.6.