 dc1359a763
			
		
	
	dc1359a763
	
	
	
		
			
			* providers/saml: initial SLO implementation Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * providers/saml: add logout request tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * providers/saml: add tests for POST SLO Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * matrix e2e tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * fix import Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * set e2e matrix name Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * fix imports Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * separate oidc and oauth tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * add basic saml slo e2e tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * add better metadata download url Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * kinda prepare release notes Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * sort releases into folders Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * add slo urls to website Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * fix linking Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * add api tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * update docs Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
		
			
				
	
	
		
			67 lines
		
	
	
		
			2.2 KiB
		
	
	
	
		
			Markdown
		
	
	
	
	
	
			
		
		
	
	
			67 lines
		
	
	
		
			2.2 KiB
		
	
	
	
		
			Markdown
		
	
	
	
	
	
| ---
 | |
| title: Release 0.12
 | |
| slug: "/releases/0.12"
 | |
| ---
 | |
| 
 | |
| This update brings these headline features:
 | |
| 
 | |
| -   Rewrite Outpost state Logic, which now supports multiple concurrent Outpost instances.
 | |
| -   Add Kubernetes Integration for Outposts, which deploys and maintains Outposts with High Availability in a Kubernetes Cluster
 | |
| -   Add System Task Overview to see all background tasks, their status, the log output, and retry them
 | |
| -   Alerts now disappear automatically
 | |
| -   Audit Logs are now searchable
 | |
| -   Users can now create their own Tokens to access the API
 | |
| -   docker-compose deployment now uses traefik 2.3
 | |
| 
 | |
| Fixes:
 | |
| 
 | |
| -   Fix high CPU Usage of the proxy when Websocket connections fail
 | |
| 
 | |
| ## Upgrading
 | |
| 
 | |
| ### docker-compose
 | |
| 
 | |
| Docker-compose users should download the latest docker-compose file from [here](https://goauthentik.io/docker-compose.yml). This includes the new traefik 2.3.
 | |
| 
 | |
| Afterwards, you can simply run `docker-compose up -d` and then the normal upgrade command of `docker-compose run --rm server migrate`.
 | |
| 
 | |
| ### Kubernetes
 | |
| 
 | |
| For Kubernetes users, there are some changes to the helm values.
 | |
| 
 | |
| The values change from
 | |
| 
 | |
| ```yaml
 | |
| config:
 | |
|     # Optionally specify fixed secret_key, otherwise generated automatically
 | |
|     # secret_key: _k*@6h2u2@q-dku57hhgzb7tnx*ba9wodcb^s9g0j59@=y(@_o
 | |
|     # Enable error reporting
 | |
|     error_reporting:
 | |
|         enabled: false
 | |
|         environment: customer
 | |
|         send_pii: false
 | |
|     # Log level used by web and worker
 | |
|     # Can be either debug, info, warning, error
 | |
|     log_level: warning
 | |
| ```
 | |
| 
 | |
| to
 | |
| 
 | |
| ```yaml
 | |
| config:
 | |
|     # Optionally specify fixed secret_key, otherwise generated automatically
 | |
|     # secretKey: _k*@6h2u2@q-dku57hhgzb7tnx*ba9wodcb^s9g0j59@=y(@_o
 | |
|     # Enable error reporting
 | |
|     errorReporting:
 | |
|         enabled: false
 | |
|         environment: customer
 | |
|         sendPii: false
 | |
|     # Log level used by web and worker
 | |
|     # Can be either debug, info, warning, error
 | |
|     logLevel: warning
 | |
| ```
 | |
| 
 | |
| in order to be consistent with the rest of the settings.
 | |
| 
 | |
| There is also a new setting called `kubernetesIntegration`, which controls the Kubernetes integration for authentik. When enabled (the default), a Service Account is created, which allows authentik to deploy and update Outposts.
 |