* providers/saml: initial SLO implementation Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * providers/saml: add logout request tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * providers/saml: add tests for POST SLO Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * matrix e2e tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * fix import Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * set e2e matrix name Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * fix imports Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * separate oidc and oauth tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * add basic saml slo e2e tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * add better metadata download url Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * kinda prepare release notes Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * sort releases into folders Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * add slo urls to website Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * fix linking Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * add api tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * update docs Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
		
			
				
	
	
		
			67 lines
		
	
	
		
			2.2 KiB
		
	
	
	
		
			Markdown
		
	
	
	
	
	
			
		
		
	
	
			67 lines
		
	
	
		
			2.2 KiB
		
	
	
	
		
			Markdown
		
	
	
	
	
	
---
 | 
						|
title: Release 0.12
 | 
						|
slug: "/releases/0.12"
 | 
						|
---
 | 
						|
 | 
						|
This update brings these headline features:
 | 
						|
 | 
						|
-   Rewrite Outpost state Logic, which now supports multiple concurrent Outpost instances.
 | 
						|
-   Add Kubernetes Integration for Outposts, which deploys and maintains Outposts with High Availability in a Kubernetes Cluster
 | 
						|
-   Add System Task Overview to see all background tasks, their status, the log output, and retry them
 | 
						|
-   Alerts now disappear automatically
 | 
						|
-   Audit Logs are now searchable
 | 
						|
-   Users can now create their own Tokens to access the API
 | 
						|
-   docker-compose deployment now uses traefik 2.3
 | 
						|
 | 
						|
Fixes:
 | 
						|
 | 
						|
-   Fix high CPU Usage of the proxy when Websocket connections fail
 | 
						|
 | 
						|
## Upgrading
 | 
						|
 | 
						|
### docker-compose
 | 
						|
 | 
						|
Docker-compose users should download the latest docker-compose file from [here](https://goauthentik.io/docker-compose.yml). This includes the new traefik 2.3.
 | 
						|
 | 
						|
Afterwards, you can simply run `docker-compose up -d` and then the normal upgrade command of `docker-compose run --rm server migrate`.
 | 
						|
 | 
						|
### Kubernetes
 | 
						|
 | 
						|
For Kubernetes users, there are some changes to the helm values.
 | 
						|
 | 
						|
The values change from
 | 
						|
 | 
						|
```yaml
 | 
						|
config:
 | 
						|
    # Optionally specify fixed secret_key, otherwise generated automatically
 | 
						|
    # secret_key: _k*@6h2u2@q-dku57hhgzb7tnx*ba9wodcb^s9g0j59@=y(@_o
 | 
						|
    # Enable error reporting
 | 
						|
    error_reporting:
 | 
						|
        enabled: false
 | 
						|
        environment: customer
 | 
						|
        send_pii: false
 | 
						|
    # Log level used by web and worker
 | 
						|
    # Can be either debug, info, warning, error
 | 
						|
    log_level: warning
 | 
						|
```
 | 
						|
 | 
						|
to
 | 
						|
 | 
						|
```yaml
 | 
						|
config:
 | 
						|
    # Optionally specify fixed secret_key, otherwise generated automatically
 | 
						|
    # secretKey: _k*@6h2u2@q-dku57hhgzb7tnx*ba9wodcb^s9g0j59@=y(@_o
 | 
						|
    # Enable error reporting
 | 
						|
    errorReporting:
 | 
						|
        enabled: false
 | 
						|
        environment: customer
 | 
						|
        sendPii: false
 | 
						|
    # Log level used by web and worker
 | 
						|
    # Can be either debug, info, warning, error
 | 
						|
    logLevel: warning
 | 
						|
```
 | 
						|
 | 
						|
in order to be consistent with the rest of the settings.
 | 
						|
 | 
						|
There is also a new setting called `kubernetesIntegration`, which controls the Kubernetes integration for authentik. When enabled (the default), a Service Account is created, which allows authentik to deploy and update Outposts.
 |