Skip to content

v0.7.0: Identity, RBAC & Enterprise Security Engine

Choose a tag to compare

View all tags
@Foshati Foshati released this 12 Sep 09:48
· 342 commits to main since this release
v0.7.0
cef544c

Kuben v0.7.0 — Identity, RBAC & Enterprise Security Engine

Kuben v0.7.0 brings comprehensive security hardening, modern cryptographic authentication, fine-grained access tokens, and administrative diagnostic tooling.

Security & Operational Enhancements

  • Modern Cryptographic Authentication:
    • Password hashing utilizing the memory-hard Argon2id algorithm with per-user cryptographic salts.
    • HttpOnly, SameSite, and Secure session cookies preventing session hijacking and credential leakage.
    • Scoped Personal Access Tokens (kbn_pat_...) designed for CI/CD pipelines and deployment automation.
  • Distributed Brute-Force Protection:
    • Database-backed login throttling enforcing rate limits per IP address and target account across all running replicas.
    • Constant-time comparison on credentials prevents timing attacks.
  • Auditing & Traceability:
    • Immutable audit trail capturing every mutation, user action, and deployment lifecycle event.
  • Operator CLI Diagnostics:
    • kuben doctor: Validates cluster connectivity, RBAC permissions, and database latency.
    • kuben admin: Bootstraps initial administrative credentials and resets forgotten tokens securely.
Assets 2
Loading