v0.6.3

🔖 Release 0.6.3

What's New

• Staging docker environment by @javuto in #1131
• Adding --prepare mode to provision.sh by @javuto in #1132
• Frontend and API under a configurable URL prefix by @javuto in #1133
• Optional DB read replica for dashboard and node list reads by @javuto in #1134
• Route more staleness-tolerant reads to the DB read replica by @javuto in #1135
• Route osctrl-tls lag-tolerant reads to the DB read replica by @javuto in #1136
• Cache use improvements in osctrl-api and osctrl-tls by @javuto in #1137
• Fixes for high severity issues found in audit by @javuto in #1138
• Fixes for medium severity issues found in audit by @javuto in #1139
• Console: help on open, Tab completion, command history by @javuto in #1140
• Fix: Hide node Alert button from environment admins by @javuto in #1141
• Replace stale permission TODO in query/carve target resolution by @javuto in #1143
• Add global RBAC roles: user management, env management, read-only, alert admin by @javuto in #1144
• Never orphan nodes on environment rename or delete by @javuto in #1145
• Granular RBAC part 2: query/carve tiers and node visibility by @javuto in #1146
• Granular RBAC part 3: sensitive nodes by @javuto in #1147
• Keep query results readable after an environment rename by @javuto in #1148
• Granular RBAC part 4: sensitive carve paths by @javuto in #1149
• Sensitive carve paths: catch macOS alias parents, fix carve list page overflow by @javuto in #1150
• Granular RBAC part 5: frontend for roles, tiers, sensitive tags and paths by @javuto in #1151
• RBAC frontend: environment lookup by UUID on the nodes page, accurate users-page label by @javuto in #1152
• Harden osctrl-tls: random node keys, bounded query-result processing by @javuto in #1153
• osctrl-tls: answer unknown environments like bad credentials by @javuto in #1154
• osctrl-api: default request body cap and query length limit by @javuto in #1155
• Fix query/carve targeting widening on an empty selector; remove unused CheckCarve by @javuto in #1156
• Keep queries consistent when pending targets are cancelled by @javuto in #1157
• osctrl-cli and API client RBAC new permissions by @javuto in #1158
• osctrl-cli shell: keep tag type on API-mode edit, save tags on DB-mode add by @javuto in #1159
• Drop 'Super-admin view' from page subtitles other roles can now open by @javuto in #1160
• Make osctrl act as a Santa sync server by @javuto in #1161
• Upgrade osquery 5.24.1 by @javuto in #1182
• Prepare for release 0.6.3 by @javuto in #1183

Full Changelog: v0.6.2...v0.6.3