SILO Console 2.7.2

Coordinated standalone and embedded Console release for SILO Server 20261112, preserving request hostnames during --host 0.0.0.0 HTTP-to-HTTPS TLS redirects (unrolled/secure v1.18.0), carrying forward v2.7.1's tri-state service-account policy editor (SN-2026-025) and strict policy JSON validation, and shipping synchronized 2.7.2 release metadata with optimized frontend assets.

Compatibility notes · 中文兼容性注记 · Changes from 2.7.1

Changes

• TLS redirect host preservation on wildcard bind (11f48e7b5): upgrades github.com/unrolled/secure to v1.18.0 and leaves SSLHost unset when --host is "", 0.0.0.0, or :: unless CONSOLE_SECURE_TLS_HOST explicitly overrides it, so HTTP-to-HTTPS redirects keep the incoming Host header instead of redirecting browsers to https://0.0.0.0:<tls-port>/.
• Release metadata & optimized web assets (0e7953ff5, 9c66a45b2): updates version constants, Helm chart (v2.7.2), OpenAPI specs, and test suites for v2.7.2, compresses embedded PNG/WebP UI assets, and aligns console-2.7.1 historical verification metadata.
• Carried forward from 2.7.1 (SN-2026-025): tracks inherited (ImpliedPolicy: true) and inline session policies separately (1be8a74bf), blocks empty inline-policy variants ({}, {"Statement":[]}, {"Statement":null}) while Restrict beyond user policy is enabled (a1a84cab4, 1fdb279fd, 3825ebc44), renders save errors directly inside the modal, and enforces strict policy JSON validation via silo-pkg v3.16.1.
• Dependencies: built with Go 1.27.4, github.com/pgsty/silo-pkg/v3 v3.16.1, and pgsty/mc RELEASE.2026-11-12T00-00-00Z (v0.0.0-20261111180825-a37a9f054fba), embedded directly in SILO Server 20261112 (RELEASE.2026-11-12T00-00-00Z, commit 44e848fedf8c).

变更摘要（中文）

• 通配监听下 TLS 重定向保留请求主机名（11f48e7b5）： 升级 github.com/unrolled/secure 至 v1.18.0，当 --host 为空、0.0.0.0 或 :: 且未显式配置 CONSOLE_SECURE_TLS_HOST 时不再写入字面量 SSLHost，使 HTTP→HTTPS 重定向保留客户端请求的真实主机名，避免浏览器跳转至不可路由的 https://0.0.0.0:<tls-port>/。
• 发布元数据同步与前端静态资源瘦身（0e7953ff5、9c66a45b2）： 同步更新 v2.7.2 版本标识、Helm Chart、OpenAPI 规范与测试集，并无损压缩内嵌 PNG/WebP 图标与界面图片资源。
• 完整继承 2.7.1 安全与策略修复（SN-2026-025）： 独立跟踪继承策略与内联会话策略、拦截空内联策略变体、在编辑弹窗内直接呈现后端报错，并基于 silo-pkg v3.16.1 执行严格策略 JSON 校验；本版本作为 SILO Server 20261112 的内嵌 Console 协同发布。

Upgrade note: deploy standalone or embedded Console v2.7.2 together with SILO Server 20261112 (RELEASE.2026-11-12T00-00-00Z) and mcli 20261112 so tri-state service-account policy inheritance (omitted/null = preserve, {} = reset to inherited, non-empty = embed) holds end to end. Updating standalone Console does not replace the Console embedded in an older SILO Server binary.

Verification

Source: 0e7953ff59c4a1eb77c7d203b265e6783ff18d01.

• Required matrix
• Required vulnerability checks
• Tag release and artifact verification
• Image promotion

Image: docker.io/pgsty/silo-console:v2.7.2 (latest, Linux amd64/arm64), digest sha256:41ea21e782475e230fc19f59da6c96373387da2974c3cffea0bd4eebf604cb47.

The 44 assets include six platform archives, nine Linux packages (.deb, GPG-signed .rpm, .apk), source archive, SPDX SBOMs, legal notices, and a Cosign-signed SHA-256 manifest. See the verification contract.