v1.7.0 — Admin web console

v1.7.0 — Admin web console

Adds a restricted admin console for diagnostics inside the step-ui container.

Changes

• Added /admin/console POST flow for admin-only command execution.
• Free shell input is disabled; only predefined allowlist commands are available.
• Commands run through exec.CommandContext without /bin/sh.
• Added 8-second timeout and 16 KB output limit.
• Added audit log entries for successful runs and denied command IDs.
• Added 2FA status warning on the console page.
• Removed the old console stub badge from admin navigation.
• Updated README badges, current release notes and project history.

Available diagnostics

• date, hostname, id
• disk usage, process list, app directories
• step version, step-ca health
• OpenSSL version
• PostgreSQL readiness

Verification

• bash -n install.sh
• bash -n step-ca-bootstrap.sh
• docker compose config --quiet
• go test ./...
• docker compose build step-ui
• local /admin/console login + command run check
• local allowlist denial check
• local audit log check