Release 2.5.0 (2023 Q4)

This version is unstable. Version 2.5.1 is recommended!

Infrastructure

  • Updated Kubernetes version to 1.28.3.
  • Added support for SambaDC and FreeIPA directories.
  • Added the ability to switch to external authentication services via OIDC OAuth 2.0 protocol (Blitz, Keycloak). See Platform Administration/Authentication in the platform for details.
  • Added integration with virtualization platforms (providers) Basis.Dynamix and Openstack.

Added and improved interfaces

  • Changed the main page GUI of the “Platform” section. The new GUI contains the most important information about the management cluster.
  • Improved access management GUI: added the ability to manage all scopes from one window. See Platform Administration/Access Management for details.
  • Added management cluster GUI:
    • viewing node data;
    • NCI management;
    • namespace management, including workloads and network.
  • Added SRI-OV management GUI. See Cluster Administration/Additional networks for details.
  • Added graphical network policy editor (Cilium Network Policies) in client cluster GUI. See Cluster Administration/Network policies for details.
  • Added security events display GUI in the cluster. Reports can be downloaded in CSV and PDF formats.
  • Added security events indication GUI for all client clusters in secure configuration.
  • Renamed the page in the client cluster “Security” section. The “Manifests” page is now called “Security Policies”.
  • Added security policy and image analysis report display GUI on the “Namespace” page and client cluster workloads.
  • Added CPU/Memory Usage metrics for the last hour as graphs in Namespaces and Workloads of the management and client clusters.
  • Added last report creation date display on “Security” section pages.
  • Added PDF report download from the “Scan Results” page.
  • “Alert Rules” and “Alert Processing” pages moved to the “Alerts” section. Added “View Alerts” page containing alert records by groups and states. Added alert counter to the client cluster dashboard “Alerting” block. See Cluster Administration/Alerts for details.
  • Added chart, last modification date and time, and modifier information display on installed system service cards and pages.
  • Added last modification date and time and modifier information display on the NCI (node configuration) page.
  • Improved ResourceQuotas and LimitRanges setup logic.
  • Added the ability to import YAML object manifests from the client cluster page. See Cluster Administration/Cluster actions for details.
  • Added the ability to view password during authentication.
  • Changed labels and annotations display on the “Namespace” page and in the “Workloads” section.

Security

  • Added a new platform role — platform security administrator (sec-platform-admin). A user with this access sees all “Security” sections, security event indication, and security event display in client clusters in secure configuration.

Fixed

  • Fixed client cluster repository access provisioning error.
  • Fixed events display in client cluster workloads.
  • Fixed pod list display on the Deployment page.
  • Fixed quota list display error.
  • Fixed deleted cluster display error in the external monitoring module Grafana list.