Athenz v1.11.21 Release

This release includes a required schema update:
https://github.com/AthenZ/athenz/blob/master/servers/zms/schema/updates/update-20230207.sql

What's Changed

• update rdl install step for latest go by @havetisyan in #2062
• Extend zms-cli to set delete-protection flag for roles by @mendi160 in #2068
• Override the nested dependencies got and qs by @mendi160 in #2066
• fix ScrollWatch test by @mendi160 in #2070
• extends group with deleteProtection attribute and pending group membe… by @mendi160 in #2067
• add gcp project id to domain ui by @noy93845 in #2065
• change zpe log level to warn when it fails to get keys from preconfigured sources by @TakuyaMatsu in #2074
• add audit enable to role by @noy93845 in #2055
• AssertionCondition - scope by @OferLevi85 in #2063
• Add delete role functional test by @jimmytsang in #2071
• update dev jest dependency version by @havetisyan in #2077
• clarify the deprecation of role members attribute in rdl by @havetisyan in #2078
• update go dependencies to their latest releases by @havetisyan in #2076

Full Changelog: v1.11.20...v1.11.21

Athenz v1.11.20 Release

This release includes a required schema update:
https://github.com/AthenZ/athenz/blob/master/servers/zms/schema/updates/update-20230124.sql
https://github.com/AthenZ/athenz/blob/master/servers/zms/schema/updates/update-20230203.sql

What's Changed

• support multiple domains when requesting oidc id tokens by @havetisyan in #2054
• update maven plugin versions by @havetisyan in #2052
• Add a requirement for admin approval to delete members in review-enabled roles by @mendi160 in #2053
• correct handling of token/role cert if dirs are not default by @havetisyan in #2057
• missing primary key definition from principal_group_member table by @havetisyan in #2061

Full Changelog: v1.11.19...v1.11.20

Athenz v1.11.19 Release

What's Changed

• separate agent dir/process setup into a separate method by @havetisyan in #2044
• move cloud provider role generation logic out of dbstore library to dbservice by @havetisyan in #2043
• Bump cookiejar from 2.1.3 to 2.1.4 in /ui by @dependabot in #2046
• Bump ua-parser-js from 1.0.32 to 1.0.33 in /ui by @dependabot in #2047
• replace zmsTestInitializer references with local variables by @havetisyan in #2048
• adding support for user access management profile option in sia eks by @abvaidya in #2049
• update package dependencies by @havetisyan in #2051
• support pod based dns hostname for eks by @havetisyan in #2050

Full Changelog: v1.11.18...v1.11.19

Athenz v1.11.18 Release

What's Changed

• setup functional test with webdriverio by @jimmytsang in #2028
• use correct role prefix when filtering tenant resource group roles by @havetisyan in #2037
• support role audit enabled set for domain admins using zms-cli by @havetisyan in #2038
• sia config option to update key/cert file directly instead of using rename by @havetisyan in #2039
• Add build version to sia-ec2 by @tokle in #2041
• update package-lock.json to match package dependencies by @havetisyan in #2042
• provide configuration options for sia key/cert/token/backup directories by @havetisyan in #2040

Full Changelog: v1.11.17...v1.11.18

Athenz v1.11.17 Release

What's Changed

• validate ssh hostcertificate line including cert filename by @havetisyan in #2026
• just run the fix_lint by @mendi160 in #2030
• Delete Instance from UI by @OferLevi85 in #1984
• Bump json5 from 2.2.1 to 2.2.3 in /ui by @dependabot in #2031
• support sandns_hostname for aws ec2 by @havetisyan in #2029
• allow domain admins to enable audit flag for new roles/groups by @havetisyan in #2032
• update pkg dependencies to their latest releases by @havetisyan in #2033
• Add SIA AWS option for certificate expirty threshold check by @chandrasekhar1996 in #2035
• update zms go auto-generated code for audit enabled flag by @havetisyan in #2036

Full Changelog: v1.11.16...v1.11.17

Athenz v1.11.16 Release

What's Changed

• improve messaging for groups in admin roles and detect error sooner by @mendi160 in #2007
• Fix the table overflow in the email notification's body by @mendi160 in #2016
• Bump decode-uri-component from 0.2.0 to 0.2.2 in /ui by @dependabot in #2015
• fix review tab by @mendi160 in #2006
• Bump qs from 6.5.2 to 6.5.3 in /ui by @dependabot in #2017
• remove netty override version from syncer pom.xml by @havetisyan in #2018
• update jetty + deps to their latest release by @havetisyan in #2021
• Return the correct response from putMembership/putGroupMembership onc… by @mendi160 in #2023
• Separate members and pending members into 2 different maps in the … by @mendi160 in #2020
• simplify way to change user's expiry/reminder dates by @mendi160 in #2011
• support ssh host key type attribute in sia config options by @havetisyan in #2025

Full Changelog: v1.11.15...v1.11.16

Athenz v1.11.15 Release

This release includes a required schema update: https://github.com/AthenZ/athenz/blob/master/servers/zms/schema/updates/update-20221122.sql

What's Changed

• upgrade examples to use the latest athenz libs by @havetisyan in #2000
• Upgrade node by @mendi160 in #1971
• Bump d3-color from 3.0.1 to 3.1.0 in /ui by @dependabot in #1974
• Bump @xmldom/xmldom from 0.7.5 to 0.7.9 in /ui by @dependabot in #2002
• ignore errors when adding a new user to an empty admin role by @havetisyan in #2001
• Fix showing in role users page the full role name by @royelbaum in #2003
• replace golang ioutil deprecated calls by @havetisyan in #2004
• add gcp project attribute for domains by @havetisyan in #2005
• Upgrade protobuf java to fix vulnerabilities warning by @MartinTrojans in #2009
• Bump minimatch and recursive-readdir in /ui by @dependabot in #2010
• Display input for entering justification when needed by @mendi160 in #2012
• switch from keep_privileges to drop_privileges for service identity agents by @havetisyan in #2013
• update dependency packages by @havetisyan in #2014

Full Changelog: v1.11.14...v1.11.15

Athenz v1.11.14 Release

What's Changed

• aws sia: pass correct key flags to the save key method by @havetisyan in #1996
• Change the api file in the ui by @royelbaum in #1991
• update go dependencies to their latest releases by @havetisyan in #1997
• during role delete check policy usage against primary db by @havetisyan in #1999

Full Changelog: v1.11.13...v1.11.14

Athenz v1.11.13 Release

What's Changed

• fix role key filemode in sia by @havetisyan in #1993
• deps update - address jackson databind and protobuf CVEs by @havetisyan in #1994

Full Changelog: v1.11.12...v1.11.13

Athenz v1.11.12 Release

What's Changed

• Fix UI pipeline by @royelbaum in #1985
• Change the api file in the ui by @royelbaum in #1986
• extend role support in identity agent to specify service ownership by @havetisyan in #1987
• support new expiry threshold setting for access token refresh by @havetisyan in #1988
• Delete static workload expects resource name and not instanceId by @OferLevi85 in #1972
• expose getRdlSchema api endpoint in clients by @havetisyan in #1990

Full Changelog: v1.11.11...v1.11.12