HQ Changelog

Added support for certificate / signature verification

In case SAML IdP requires certificate verification, same can be now provided.

lensesHq:
  auth:
    saml:
      authnRequestSignature:
        enabled: false
        authnRequestSigningCert:
          referenceFromSecret: true
          secretName: hq-agent-test-authority
          secretKeyName: hq-tls-test.crt.pem
        authnRequestSigningKey:
          secret:
            name: saml-test
            key: privatekey.key

lensesHq:
  auth:
    saml:
      authnRequestSignature:
        enabled: false
        authnRequestSigningCert:
          stringData: |
            -----BEGIN CERTIFICATE-----
            ....
            -----END CERTIFICATE-----
        authnRequestSigningKey:
          secret:
            name: saml-test
            key: privatekey.key

Small bugfixes

• HQ on AutnRequest does not send self-signed certificate to avoid validation issues

Packages

• We have made new alpha release 18:

  • Agent image:

    • Copy

      lensting/lenses-agent:6.0.0-alpha.4

  • HQ image:

    • Copy

      lensting/lenses-hq:6.0.0-alpha.19

  • HQ CLI image

    • Copy

      lensting/lenses-cli:6.0.0-alpha.19

• New Helm version 19 for agent and for the HQ: https://lenses.jfrog.io/ui/native/helm-charts-preview/

HQ

New features

• Permissions IntelliSense
• New admin permissions to control who can access Lenses Logs

name: nologs
policy:
  - action: administration:GetLensesLogs
    resource: administration:lenses-logs:*
    effect: deny

• SQL Studio redesigned view

  • added bad records view

  • scanned partitions progress

  • additional statistics

Improvements

• Policy changes are now effective as soon as they are saved, re-login is not necessary anymore