Release Notes for API Portal releases in bottom-up order (latest first).
The Release Notes state changes from release to release, possibly also giving upgrade instructions.
Official Release of the API Portal.
Docker Tag: tba
Date: January 13th 2018 (2018-01-13)
Docker Tag: 0.12.4
(-alpine
)
Regression bugfix release. Sorry for the inconvenience.
Date: January 12th 2018 (2018-01-12)
Docker Tag: 0.12.3
(-alpine
)
Bugfixes, and a couple of features, contributed by @santokhsingh and @maksimlikharev. Thanks! (Sorry it took so long to merge your PRs).
- Feature: It should be possible to retrieve the Swagger information from a service endpoint
- Feature: Kong container should use Kong's logging features to stdout and stderr
- Bugfix: makeHealthEntry fails in portal-api if external apiHost points to other location
- Feature: Generic OAuth2 support for logging in to the Portal
- Feature (Kickstarter): AWS Lambda configuration support (Kong plugin)
- Feature (Kong Adapter/Kickstarter): Kong Adapter support for ignoring a list of plugins
- Bugfix (Kickstarter): Fixed issue with
strip_uri
for Authorization Servers
- @santokhsingh
- @maksimlikharev
- @donmartin76
Date: November 27th, 2017 (2017-11-27)
Docker Tag: 0.12.2
(-alpine
)
Bugfixes.
- 500 response when taking redis as session store
- Failing kong adapter due to "config.origin" error 400
- If user is logged in, the email validation does not have immediate effect
- Fix of Kickstarter removing the
strip_uri
flag if set tofalse
, cause a faulty behavior of Kong (which defaults totrue
)
- @donmartin76
- @santokhsingh
Date: September 25th, 2017 (2017-09-25)
Docker Tag: 0.12.1
This release is dedicated to the Kubernetes Helm Chart adaptions. The kickstarter now by default creates an environment k8s
which is adapted for use with the new Helm Chart, which can be found in the wicked.haufe.io/wicked repository. The Helm chart is now the default and recommended way to run wicked on Kubernetes; it has a lot of things already built in, like liveness and readiness probes, plus handling Kong updates correctly. Please give it a shot on a non-production environment and feedback, it would be much appreciated.
Additionally, the micro site wicked.haufe.io was updated to reflect these changes/additions.
- @donmartin76
Date: September 17th, 2017 (2017-09-17)
Docker Tag: 0.12.0
It has been a while since the last wicked update, and this release gets you a couple of things which have been asked for since a while, most notably the following issues have been resolved, which are in part internal, in part with external impact:
- Support Kong 0.11.0
- Provide support for Redis as session store for portal-ui
- Move to Jenkins as a CI tool
- x-forwarded-proto set incorrect on outgoing API calls
This time, upgrading is not 100% as easy as usual, therefore we are providing some upgrade notes below. Please read carefully for best upgrade experience.
Under the hood we have now moved to using Kong 0.11.0, and that upgrade has to be done a little more carefully than you are perhaps used to with wicked before. Follow these recommendations for a glitch-free upgrade:
- If you are still using
postgres:9.4
as a Postgres image, consider upgrading topostgres:9.6
; please note that the database formats are not compatible, so that we advise you to discard the Postgres data completely when upgrading. The only downside of this is that currently active access tokens are also discarded, but other than that there are no downsides. - When starting the
wicked.kong
container the first time with the wicked 0.12.0, please- Shut down all previous Kong instances, or even better, use a completely new environment
- Start just one single Kong instance at first, and wait until it has settled (created database schemas etc.); when everything is working again, you may now scale up to the desired amount of Kong instances again (when using Kubernetes, the readiness probe can be used to decide this)
- If you are using the deployment via
docker-compose.yml
file as proposed by the Kickstarter, theenv
variableEXCLUDE_PORTS
has to be extended with the port8444
; otherwise HAproxy will pick up that this (new) port is available on the Kong container, and will start to route traffic to it (you will end up with error messages fromopenResty
if this is the case).
If you find anything else which does not work correctly, please do not hesitate to notify the project via GitHub Issues. Thanks.
Please upgrade your test/dev instances first to make sure your upgrade process works correctly.
Code for this release was contributed by the following developers, THANKS FOR CONTRIBUTING!
- @achwie
- @santokhsingh
- @maksimlikharev
- @donmartin76
Date: July 18th, 2017 (2017-07-18)
Docker Tag: 0.11.7
The main topic for this release is the bug fix for a login problem some installations of wicked have experienced in the last couple of weeks. This turned out to be due to an upstream change in a dependency of a dependency, and that was rather unexpected. We have addressed the topic for fixing, and meanwhile reverted to an older version. Further some minor things in the Kickstarter have been fixed, and a lot of work has gone into writing a Helm Chart for wicked. This is still in an experimental phase and perhaps not yet production ready, but we will continue to focus on that. Contributions are more than welcome.
- Login/registration broken in localdev
- Kickstarter: removing the last chat webhook breaks the editor.
- Kickstarter: Adding Authorization Server with "auth-server" in name break the API! dialog
- Remove run-unit-tests.sh from wicked.portal-api
- Enables GIT_REPOs with other protocols (
http
instead ofhttps
) (thanks, @ehirsch) - Fixing docker-start to actually find the new create-git-url script
Date: May 24th, 2017 (2017-05-24)
Docker Tag: 0.11.6
Lots of minor and medium changes, including a very appreciated Pull Request from pifleo (thanks again!), dealing with customization options of the portal UI. Additionally, we now build (experimental) Alpine based images (based on node:6-alpine
) in addition to the usual Debian based node:6
images we have had so far. The demo portal already runs on Alpine, and it seems smooth. If you want to give it a spin, go ahead, append -alpine
to the image tags to pull the Alpine images. Please note that wicked.kong
does not have an Alpine image, it's quite small as is anyway.
Another notable change is that the Kong Adapter now can revoke access tokens, which can be useful for logout functionality. Last, but not least, wicked now allows for application IDs of up to 50 characters (instead of 20 before).
- Portal UI Customization
- Provide Alpine Images
- It should be possible to revoke access tokens
- Allow a longer name in the kickstarter for applications
Date: March 31st, 2017 (2017-03-31)
Docker Tag: 0.11.5
Minor bugfix release mainly concerning the Kickstarter. The template for the docker-compose.yml
created by the Kickstarter container an error (double environment
sections) which prevented HAproxy (in the default configuration) to pick up the portal end point. Except for the YAML being syntactically wrong, this always just rendered a 503 return code for the portal end point.
Date: March 20th, 2017 (2017-03-20)
Docker Tag: 0.11.4
Another minor release with two relevant changes: Firstly make sure that all calls to wicked's portal-api
timeout quickly; this posed a a problem when e.g. running in Kubernetes, and the portal-api
container was updated. Most depending containers check for the state of the portal API every ten seconds, and if the container is down, the call to the API will time out. The standard timeout is 120 seconds on Debian, which meant that e.g. the portal itself could hang for around two minutes before recovering. This should happen a lot faster now.
Another measure to increase deployment safety is that the portal API now checks whether the PORTAL_CONFIG_KEY
is correctly configured. To make use of this new feature, open your static configuration once with the updated (0.11.4+) kickstarter; this will introduce a new property in the globals.json
containing a check for the valid configuration key.
- Deploying with faulty PORTAL_CONFIG_KEY renders strange results
- Portal starts slow in Kubernetes sometimes
- /docker-entrypoint.sh: line 7: exec: dockerize: not found on wicked.kong container
Date: February 15th, 2017 (2017-02-15)
Docker Tag: 0.11.3
Minor release with two parts, running wicked as non-root inside Docker, and surfacing the Kong version and cluster information inside the system health page. Other minor things in the kickstarter, like enabling Ctrl-C for stopping it (by leveraging dumb-init
again).
- Surface Kong version and cluster Status in System health
- wicked containers should not run as "root"
- kickstarter - volume permission problem inside container
- Upgrade Kong to 0.9.9
Did you see our Kubernetes Documentation?
When updating, please first update the wicked.kong
containers, then continue with the rest of the containers.
Date: January 9th, 2017 (2017-01-09)
Docker Tag: 0.11.2
Minor release containing some bugfixes and further a minor feature which enables redirection after login in case a user tries to open a page which renders a 403 and is not logged in.
- Error handling in kickstarter is a bit rough
- The confighash does not change after only deploying a new static configuration
- Usability: When logged out, accessing a page should redirect back after logging in
Date: December 19th 2016 (2016-12-19)
Docker Tag: 0.11.1
Very minor update just to get an annoying behaviour of the portal-api
container out: The portal-api
did not react to SIGTERM, and thus had to be "killed" by docker stop
after a certain grace period. This was due to the fact that portal-api
has a shell script as CMD
, which gets PID 1, but does not forward the SIGTERM to the actual node process. This is now fixed by using dumb-init
in the entrypoint, which propagates signals to child processes.
Oh, coming soon: Guidance on running wicked on Kubernetes. Stay tuned on deploying to kubernetes.
portal-api
does not react on SIGTERM, should shut down- Upgrade to Kong 0.9.6
Date: December 9th 2016 (2016-12-09)
Docker Tag: 0.11.0
Some substantial improvements to running in production. Many small details which enable deployments to other runtime environments than a pure docker host, such as Kubernetes. All components of wicked now check their configuration status and quit (trigger restart, depending on your orchestration) whenever a configuration change is detected. This means that the different components can be treated more like individual microservices. The wicked core components (portal
, kong-adapter
, mailer
, chatbot
) will still require a version which is equal to the version the portal API (portal-api
) is running. Anyone using a newer node SDK version for wicked is benefiting from this feature, as it's implemented in the node SDK which is used by all the core components (and also by wicked.auth-passport and wicked.auth-saml)
The documentation has been updated to reflect the changes. A very notable changes is the possibility to now retrieve the configuration automatically from a git repository instead on having to clone it in and building a data-only container to mount into the portal API container. This is still possible, but the recommended way is injecting the static configuration via the git clone method.
Detailed list of changes:
Features and Improvements:
- Improved documentation, preparation of documentation for running in Kubernetes
- How to read static configuration from git repository without building data only container?
- Let Kong Adapter, Mailer, Chatbot check for changed configuration
- Implement sanity check regarding versions for depending components (Mailer, Chatbot,...)
Bugfixes:
- Portal doesn't reject fragment in redirect URI (#)
- Kickstarter: Drop down boxes should be marked as such (using a » or similar)
Date: November 27th 2016 (2016-11-27)
Mostly minor bug fixes and one major addition to the OAuth2 support; the Kong Adapter now also makes it easier to implement the Authorization Code Flow. Still missing is support for Scopes and persisting Scope grants, which will possibly be done over the next couple of weeks. Let's see.
Detailed list of changes:
- Move to
kong:0.9.5
as API Gateway - Remove standard configuration of
file-log
plugin for new APIs - Support mutual SSL by making the used proxy certificate configurable
- For new projects, the default value for
PORTAL_CHATBOT_URL
was wrong - wicked 0.10.0 did not start without an
auth-servers
directory (introduced by calling kickstarter once) - Make it less difficult to create new multi-line environment variables
Docker Tag: 0.10.1
Date: November 7th 2016 (2016-11-07)
Docker Tag: 0.10.0
Quite some features under the hood for this release. You will still be able to simply upgrade from any configuration version to version 0.10.0 without any changes to your configuration. It is recommended to start the new Kickstarter once with your previous configuration to see which changes are done automatically.
Detailed list of changes:
- Display version information of components on system health page
- Support for the OAuth 2.0 Implicit Grant Flow
- Support for the OAuth 2.0 Resource Owner Password Grant Flow
- Bugfix: Github login fails if user does not have a display name
- Integration tests for Kong and Kong Adapter
- Upgrade to Kong 0.9.4 as a standard API Gateway
- Feature: API Lifecycle support (deprecating, deleting all subscriptions)
Date: October 14th (2016-10-14)
Docker Tag: 0.9.2
- Integration tests in docker can now be run locally in a much simpler way
- Fixed issue #18 (sending mails fails if user has been deleted in the meantime)
Date: September 14th (2016-09-14)
Docker Tag: 0.9.2
- Developer Experience: Make setup of development environment a lot easier (Haufe-Lexware#5)
- Enhancement: Allow (recursive) environment variables in
PORTAL_API_DYNAMIC_CONFIG
andPORTAL_API_STATIC_CONFIG
. - Work on documentation
Date: August 12th 2016 (2016-08-12)
Docker Tag 0.9.1
- Internal refactoring of git repositories (one repository per service now)
- Work on documentation
- Extended Kickstarter to be able to write
docker-compose.yml
andDockerfile
for the static config - Experimental SSL helper page in Kickstarter
- No new features in Portal
Date: August 3rd 2016 (2016-08-03)
Docker Tag 0.9.0