Skip to content

Release v4.227.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 07 Nov 12:10
v4.227.0
622d73d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Summary

Stage can now run in an opt-in published mode for real users. Sandbox stays the default and is unchanged.

Added

  • Published hosting mode, selected with Stage:Mode=Published or --published. The host leaves Scalar and OpenAPI, the Workbench proxy, the read-model browser, /stage/load, admission, spec runs and lifecycle routes unmapped, refuses warm mode and the EventModel engine, and ignores sandbox persona headers. Unknown or contradictory mode settings stop the host at startup (part of #917)
  • In-process OIDC sign-in for published hosts as a second option beside AuthProxy, reusing the Cratis:Authentication:* settings. The host refuses to start without valid authentication configuration, and policies are enforced against the real principal (part of #917)
  • Startup checks for published hosts that refuse an unauthenticated or non-loopback kernel connection and missing persistent storage (part of #917)

Fixed

  • The published container no longer refuses to start because of a missing sandbox forwarded-identity setting (part of #917)
Assets 2
Loading