v23.47

🗒️ Changelog (since v23.44-beta)

Breaking changes

Kibana and Elastic integration (Batman)

• Configuration is moved to batman:elasticsearch section with a fallback to the standard elasticsearch section. (#333, #326)
• It is now required to specify kibana_url in the configuration. (#281)
• Kibana spaces and Elasticsearch roles are now automatically created and synced with Seacat tenants. (#281)

Public URL configuration

• Public URL config changed. See #330 for details and configuration guide.

Other

• Remove access token from websocket protocol header during introspection (#324, v23.47-alpha2)

Fix

• Impersonation error handling (#339, v23.47-alpha7)
• Initialize batman service regardless of configuration (#337, v23.47-alpha7)
• Well-known endpoints in the private container are available without auth (#335, v23.47-alpha6)
• Check suspended credentials before login and password reset (#334, v23.47-alpha6)
• Fixed Batman Kibana component initialization (#333, v23.47-alpha5)

Features

• Access token Batman introspection (#333, v23.47-alpha5)
• Replace audit service with audit logger (#329, v23.47-alpha5)
• Hash password reset codes in the database (#329, v23.47-alpha5)
• Batman configuration for Kibana can be also loaded from the [elasticsearch] section (#326, v23.47-alpha4)
• Public URL config now requires only one option in canonical deployments (#328, #330, v23.47-alpha4)
• Kibana spaces and roles are now synchronized with Seacat tenants (#281, v23.47-alpha)

Refactoring

• Modular login session (#336, v23.47-alpha7)
• Multiple ElasticSearch node URLs are supported (#326, v23.47-alpha4)
• Separate login factors in session object (#325, v23.47-alpha3)