helm-charts-1.3.14

[1.3.14 - 29.08.2023]

Added

• Init pods on backend startup to check dependant services readiness status ( irs, edc-controlplane )

Changed

• app version 7.1.0

An umbrella Helm chart for eclipse-tractusx/traceability-foss project

7.0.0

Added

• OAuth2 client credentials rest template interceptor
• Configuration for left and right policies to use registry client library
• Add support for JustInSequence aspect model
• TRG Github Action Pipeline for quality checks
• ErrorMessage field to investigation and alerts
• Cucumber tests for quality investigations
• Refactored asset structure to allow new API for assets-as-planned
• Optional parameter "receiverBpn" to /investigations endpoint
• NEW API /api/assets/as-planned
• NEW API DELETE /api/registry
• NEW API GET /api/shelldescriptors
• cascading sorting functionality by allowing multiple sort query parameters on APIs
• cascading sorting functionality for Parts and OtherParts tables in FE
• NEW API GET /api/assets/as-planned/distinctFilterValues
• NEW API GET /api/assets/as-built/distinctFilterValues
• Added Batch 2.0.0 support
• Updated some patch version for used dependencies.

Changed

• API BREAKING CHANGE: /api/assets changed to /api/assets/as-built
• Changed digitalTwinRegistryRestTemplate to use token in requests
• Update asBuild test data to 1.5.3 and asPlanned to 1.5.1
• Changed transfer notification logic not to break iteration loop when sending notifications to bpn with more than 1 connector endpoints
• Decentral flow only using bpn for resolving globalAssetIds
• Logic of commitId retrieval by frontend has changed
• Readme / Docker Notice information as required in TRGs
• Removed references to GitHub registry and added docker hub for tractusx instead
• Removed UX breaking black status box
• Updated cypress-io/github-action from 5.8.4 to 6.0.0
• Updated asciidoctor-maven-plugin from 2.2.3 to 2.2.4
• Updated owasp:dependency-check from 8.3.1 to 8.4.0
• Updated commons-io from 2.11.0 to 2.13.0
• Updated snakeyaml from 2.0 to 2.1
• Split up Parts View in Frontend to parts asBUilt and asPlanned
• Replaced own implementation of getCatalog, negotiateAgreement, and validatePolicy with irs-client-library implementation.
• Updated irs-registry-client from 1.1.0-SNAPSHOT to 1.2.0-SNAPSHOT
• Updated irs-helm from 6.4.1 to 6.5.0
• Migrated groovy integration tests to SpringBootTests
• API GET/api/assets/as-built allow Search criteria to be provided
• API GET/api/assets/as-planned allow Search criteria to be provided
• Upgraded aquasecurity/trivy-action from 0.11.2 to 0.12.0
• Upgraded actions/checkout from 3 to 4
• Upgraded maven-checkstyle-plugin from 3.2.1 to 3.3.0
• Upgraded swagger-annotations from 1.6.10 to 1.6.11
• Upgraded spring-boot-maven-plugin from 3.0.2 to 3.1.3
• Upgraded shedlock.version from 5.5.0 to 5.7.0
• Upgraded mikefarah/yq from 4.34.2 to 4.35.1
• Upgraded snakeyaml from 2.0 to 2.2
• Upgraded docker/login-action from 2 to 3
• Upgraded cypress-io/github-action 6.0.0 to 6.5.0

Known knowns

• Backend [TRACEFOSS-1458]: AdminView: No validation of BPN for BPN EDC URL mapping
• Backend [TRACEFOSS-589]: Backend API access without login returns incorrect HTTP status code (500 instead of 401)
• Backend [TRACEFOSS-2148]: Endpoints for parts and notifications returns unsorted list

---

• Frontend [TRACEFOSS-2149]: Sorting on empty table causes unhandled error view

---

• Security [TRACEFOSS-829]: CVE Strict-Transport-Security header - The HSTS Warning and Error may allow attackers to bypass HSTS
• Security [TRACEFOSS-830]: CVE one stack trace disclosure (Java) in the target web server's HTTP response
• Security [TRACEFOSS-919]: Authorization Bypass Through User-Controlled SQL Primary Key CWE ID 566
• Security [TRACEFOSS-984]: Improper Output Neutralization for Logs CWE ID 117
• Security [TRACEFOSS-1313]: Using components with known vulnerabilities
• Security [TRACEFOSS-1314]: Open Redirect - host header injection
• Security [TRACEFOSS-1315]: No additional authentication component (MFA) during login process

---

• Environment [TRACEFOSS-2164]: HTTP Requests for syncing the submodel server inoperable~~

Full Changelog: 6.0.1-rc3...7.0.0

6.0.1-rc3

[6.0.1-rc3] - 2023-08-31

Changed

• Updated irs-registry-client from 1.1.0-SNAPSHOT to 1.2.0-SNAPSHOT
• Updated irs-helm from 6.4.1 to 6.5.0

Full Changelog: 6.0.1-rc2...6.0.1-rc3

helm-charts-1.3.13

An umbrella Helm chart for eclipse-tractusx/traceability-foss project

6.0.1-rc2

6.0.1-rc2

Added

• OAuth2 client credentials rest template interceptor
• Configuration for left and right policies to use registry client library
• TRG Github Action Pipeline for quality checks
• ErrorMessage field to investigation and alerts

Changed

• Changed digitalTwinRegistryRestTemplate to use token in requests
• Update asBuild test data to 1.5.3 and asPlanned to 1.5.1
• Changed transfer notification logic not to break iteration loop when sending notifications to bpn with more than 1 connector endpoints

6.0.0

Added

• Moved all parts of app config to helm charts to be fully configurable
• Helmignore config params for wrong values.yaml files
• Home / Source URL in Helm Chart
• Name Overrides in Helmchart for pgadmin, irs-helm and tractusx-connector
• Added decentral registry approach
• Added discovery finder / edc discovery service for looking up edc urls of receiver of notifications
• Added about component with additional Workflow to load repo info into the component
• Add Transformer to support new EDC constraint operator format

Changed

• Modified IRS Policies support to handle multiple policies
• Readme titles to match TRGs
• Updated Irs helm chart to 6.3.1
• Update EDC dependencies to 0.1.3
• Update implementation to use EDC 0.5.0
• Spring Security Config Update from 6.0.3 to 6.0.5

Removed

• unused classes and methods

Known knowns

• Backend [TRACEFOSS-1458]: AdminView: No validation of BPN for BPN EDC URL mapping
• Backend [TRACEFOSS-589]: Backend API access without login returns incorrect HTTP status code (500 instead of 401)
• Backend [TRACEFOSS-2148]: Endpoints for parts and notifications returns unsorted list

---

• Frontend [TRACEFOSS-2149]: Sorting on empty table causes unhandled error view

---

• Security [TRACEFOSS-829]: CVE Strict-Transport-Security header - The HSTS Warning and Error may allow attackers to bypass HSTS
• Security [TRACEFOSS-830]: CVE one stack trace disclosure (Java) in the target web server's HTTP response
• Security [TRACEFOSS-919]: Authorization Bypass Through User-Controlled SQL Primary Key CWE ID 566
• Security [TRACEFOSS-984]: Improper Output Neutralization for Logs CWE ID 117
• Security [TRACEFOSS-1313]: Using components with known vulnerabilities
• Security [TRACEFOSS-1314]: Open Redirect - host header injection
• Security [TRACEFOSS-1315]: No additional authentication component (MFA) during login process

---

• Environment [TRACEFOSS-2164]: HTTP Requests for syncing the submodel server inoperable~~

Full Changelog: 5.0.0...6.0.0

helm-charts-1.3.12

An umbrella Helm chart for eclipse-tractusx/traceability-foss project

6.0.0-rc2

Added

Helmignore config params for wrong values.yaml files
Home / Source URL in Helm Chart
Name Overrides in Helmchart for pgadmin, irs-helm and tractusx-connector
Added decentral registry approach
Added discovery finder / edc discovery service for looking up edc urls of receiver of notifications
Added about component with additional Workflow to load repo info into the component
Add Transformer to support new EDC constraint operator format

Changed

Modified IRS Policies support to handle multiple policies
Readme titles to match TRGs
Updated Irs helm chart to 6.3.0
Update EDC dependencies to 0.1.3
Update implementation to use EDC 0.5.0

Removed

unused classes and methods

Known knowns

• Backend [TRACEFOSS-1458]: AdminView: No validation of BPN for BPN EDC URL mapping
• Backend [TRACEFOSS-589]: Backend API access without login returns incorrect HTTP status code (500 instead of 401)
• Backend [TRACEFOSS-2148]: Endpoints for parts and notifications returns unsorted list

---

• Frontend [TRACEFOSS-2149]: Sorting on empty table causes unhandled error view

---

• Security [TRACEFOSS-829]: CVE Strict-Transport-Security header - The HSTS Warning and Error may allow attackers to bypass HSTS
• Security [TRACEFOSS-830]: CVE one stack trace disclosure (Java) in the target web server's HTTP response
• Security [TRACEFOSS-919]: Authorization Bypass Through User-Controlled SQL Primary Key CWE ID 566
• Security [TRACEFOSS-984]: Improper Output Neutralization for Logs CWE ID 117
• Security [TRACEFOSS-1313]: Using components with known vulnerabilities
• Security [TRACEFOSS-1314]: Open Redirect - host header injection
• Security [TRACEFOSS-1315]: No additional authentication component (MFA) during login process

---

• Environment [TRACEFOSS-2164]: HTTP Requests for syncing the submodel server inoperable~~

6.0.0-rc1

[6.0.0-rc1 - 2023-07-21]

Added

• Helmignore config params for wrong values.yaml files
• Home / Source URL in Helm Chart
• Name Overrides in Helmchart for pgadmin, irs-helm and tractusx-connector
• Added decentral registry approach
• Added discovery finder / edc discovery service for looking up edc urls of receiver of notifications
• Added about component with additional Workflow to load repo info into the component
• Add Transformer to support new EDC constraint operator format

Changed

• Modified IRS Policies support to handle multiple policies
• Readme titles to match TRGs
• Updated Irs helm chart to 6.3.0
• Update EDC dependencies to 0.1.3
• Update implementation to use EDC 0.5.0

Removed

• unused classes and methods

Full Changelog: 5.0.0...6.0.0-rc1

helm-charts-1.3.11

An umbrella Helm chart for eclipse-tractusx/traceability-foss project