Skip to main content

Release 7.38.0

· 3 min read
meshcloud

Release period: 2020-10-07 to 2020-10-14

This release includes the following issues:

  • Improves logging on conflicting Azure Blueprint assignments
  • meshUser creation for external meshCustomer registration
  • Required tags are marked as required in the meshPanel
  • Fixes GCP replication for certain empty groups
  • OpenShift platforms with pre-provisioned users
  • Removal of GCP service user impersonation
  • New screen showing policies
  • Fixes identityconnector not starting
  • GCP project labels based on meshProject tags

Ticket Details​

Improves logging on conflicting Azure Blueprint assignments​

Audience: Operator
Component: azure

Description​

Adds better error messages and log statements when Azure Blueprint role assignments fail.

meshUser creation for external meshCustomer registration​

Audience: Operator
Component: meshfed

Description​

The external meshCustomer registration now works as well for new meshUsers, that have not logged in before. To utilize this feature, the userDetails field has to be set.

Required tags are marked as required in the meshPanel​

Audience: User, Customer, Partner

Description​

Before it was not clearly visible when a required tag was not filled in and the user could not save his or her data because of validation errors in the tags. These tags are now marked as required so it is more clear. Additionally a multiselect widget is introduced for the tag-schema for a more visually appealing way of selecting multiple tag values.

Fixes GCP replication for certain empty groups​

Audience: Operator
Component: gcp

Description​

Fixes occasional replication errors on newly created projects with empty user groups.

OpenShift platforms with pre-provisioned users​

Audience: Operator
Component: replicator

Description​

OpenShift clusters using an Identity Provider for example an Active Directory for user authentication are now supported by meshStack. Users will be looked up via their external user id as it is done in public cloud platforms like Azure already. The support for using meshIdB as an IdP in OpenShift has been removed with this change.

Removal of GCP service user impersonation​

Audience: Operator
Component: gcp

Description​

Previous versions of meshStack GCP project replication required Google Admin SDK permissions which were only available by impersonating a dedicated service user. Google recently made these permissions available to GCP Service Accounts. meshStack now integrates with Admin SDK using this new facility and all configuration options for service user impersonation were removed.

How to use​

You need to adapt the Service Account setup in order to not break GCP replication for existing meshStack installations. Please follow this procedure:

  1. Attach the "Group Admin" Role to the existing Service Account.
  2. Upgrade meshStack installation.
  3. Remove the the Service User in Google Cloud Identity Directory which was impersonated before.
  4. Remove the Automated OAuth consent in the G Admin Console for the meshstack Service Account.
  5. Disable the “G Suite Domain-wide Delegation” on the existing GCP Service Account in Google Cloud Console.

For more information please see: https://docs.meshcloud.io/docs/meshstack.gcp.index.html#authorizing-the-service-account

New screen showing policies​

Audience: Customer, Partner
Component: panel

Description​

The new screen 'Policies' is available to visualize all meshPolicies in the application and you can find the information in the Administrator area with a new section called 'Compliance' and Account area with the existing section 'Customer'.

Fixes identityconnector not starting​

Audience: Operator
Component: ident

Description​

Fixes a configuration error which prevented the identityconnector from starting.

GCP project labels based on meshProject tags​

Audience: Partner, Operator
Component: gcp

Description​

During meshProject replication, labels can be automatically added to a GCP project. The tag keys and values can be configured and are extracted from the meshProject tags.