Skip to content

Cerebro v0.11.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 30 Jul 22:51
v0.11.0
49f17f8
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v0.11.0 - 2026-07-31

Breaking Changes

  • Replaced the old auth.type + auth.settings configuration format with provider-specific sections: auth.basic, auth.ldap, auth.proxy, auth.entra_id and auth.oauth.
  • Basic auth users now live under auth.basic.users; LDAP settings now live under auth.ldap; trusted proxy, Microsoft Entra ID and generic OAuth/OIDC are separate provider sections.

Security

  • Added configurable YAML RBAC policies backed by Casbin for backend API authorization.
  • Added per-cluster RBAC objects and feature-oriented permissions for Cerebro actions.
  • Added profile page visibility for authenticated user, groups, roles and effective permissions.
  • Added multi-user basic authentication with backend-only password storage.
  • Added bcrypt password hashing for basic authentication checks.
  • Added session max lifetime, idle timeout and cookie max-age controls.
  • Added LDAP group discovery for RBAC bindings and LDAPS e2e coverage.
  • Added trusted proxy authentication for oauth2-proxy and similar reverse proxies.
  • Added generic OAuth/OIDC authentication provider support.
  • Added direct Microsoft Entra ID authentication through OIDC authorization-code flow.
  • Reworked authentication config into independent auth.basic, auth.ldap, auth.proxy, auth.entra_id and auth.oauth provider sections.
  • Added short-form single auth providers and named provider maps.
  • Added support for multiple named auth providers with globally unique provider IDs.
  • Returned both auth provider type and provider ID in auth status/profile responses.
  • Added OpenSSF Scorecard analysis with published reports and Code Scanning integration.

Frontend

  • Added an overview filter for hiding ILM rolled-over indices marked with index.lifecycle.indexing_complete (#13).
  • Added login buttons for configured external auth providers.
  • Added user menu in the navbar with profile and logout actions.
  • Fixed frontend API client session-cookie handling for Vite and generated-client requests.
  • Cleared frontend auth/session stores on login and logout transitions.

Development

  • Enabled dev RBAC - admin has full access and user has read-only access.
  • docker-compose oauth2-proxy development setup
  • Updated the Go toolchain, CI and build images to Go 1.26.5.

Documentation

  • Added dedicated RBAC documentation and updated authentication examples to the provider-based config format.
  • Added dedicated authentication docs for basic auth, LDAP, trusted proxy, Microsoft Entra ID and generic OAuth/OIDC.
  • Added short example READMEs for auth-related example configs.

Chore

  • Bump the go-dependencies group with 4 updates (#18)
  • Bump the npm-dependencies group with 4 updates (#19)
  • Bump actions/download-artifact from 4 to 8 (#21)
  • Bump node from 24-alpine to 26-alpine (#22)
  • Bump actions/upload-artifact from 4 to 7 (#20)
  • Bump actions/setup-go from 6 to 7 (#29)
  • Bump actions/setup-node from 6 to 7 (#30)
  • Bump postcss from 8.5.16 to 8.5.23 (#32)
  • Bump the go-dependencies group across 1 directory with 10 updates (#31)
  • Bump the npm-dependencies group across 1 directory with 13 updates (#33)
  • Bump actions/setup-go from 6 to 7 (#37)
  • Bump lucide-react from 1.26.0 to 1.27.0 in the npm-minor-patch group (#40)
Assets 11
Loading