Release 90.3: OpenID configurability and tenancy performance improvements

Friday, December 2nd 2022 by Factor House

Release Info

Kpow can be found on Dockerhub

docker pull operatr/kpow:90.3

View our Docker quick start here.

Kpow v90.3 improves OpenID Connect SSO configurability and the performance of tenancy materialization.

See the full Kpow Changelog.

OpenID Configurability

In release 90.3 we improve support for generic OpenID Connect integration by providing two new variables, OPENID_USER_FIELD and roles_from.

Environment Variable - OPENID_USER_FIELD

The optional environment variable, OPENID_USER_FIELD, defines which field in the access token maps to a user's name (default: sub).

RBAC Configuration - roles_from

The optional RBAC configuration field, roles_from, specifies whether to use the access_token or id_token for roles mapping (default: access_token).

See our OpenID Connect documentation for full configuration options.

Custom Serdes in the kREPL

You can now use Custom Serdes in the kREPL by using their label directly in your query in place of any standard serdes.

Improved Scheduled Mutations UI/UX

Kpow now correctly shows the details of failed mutations, and more clearly differentiates between scheduled and executed mutations.

Improved Performance of Tenancy Materialization

Thanks to user reports we detected issues with tenancy materialization in larger installations of Kpow (10+ clusters).

Work in this area reduces CPU utilization by as much as 50% for tenancy materialization.

Changelog v90.3

  • Improve OpenID SSO configuration with OPENID_USER_FIELD and roles_from fields
  • Fix custom serdes in the kREPL
  • Improve scheduled mutations UI/UX
  • Improve performance of tenancy materialization

Get this release on Dockerhub, on the AWS Marketplace, on ArtifactHub (Helm Charts), or Download as a JAR File.

Pull the latest Kpow Docker Container

docker pull operatr/kpow:90.3

Download the latest Kpow Java JAR

https://releases.operatr.io/kpow-2022-12-05-11-07.jar?AWSAccessKeyId=AKIAXNNKGCAKDUQSTKG4&Signature=QR4X%2B3x2NIthtWzKZEwBOHIDZs4%3D&Expires=1685750931

Download the Kpow Java 8 JAR (uses Jetty 9, we recommend updating to Java 11+ and using our standard JAR)

https://releases.operatr.io/kpow-2022-12-05-11-12.jar?AWSAccessKeyId=AKIAXNNKGCAKDUQSTKG4&Signature=ASgozSnT%2FSWWzwxLHQuLILlUPsI%3D&Expires=1685751246

Tags:

OpenID
SSO
Custom Serdes