What's new in 3.2.0
minorLatest Production Version
January 30 2025
Welcome to ASI 3.2.0! This is a minor release and it contains a number of enhancements and fixes which are detailed below.
Bug Fixes
- ASIPLAT-895 - SSL/TLS: In the 'enableAsiSsl' util, ensure that we are checking to see if authenticator is live before changes to the SSL configuration can be made
- ASIPLAT-974 - Authorization Providers: Authorization Providers table is not refreshed to show the real-time state after enabling / disabling an authorization provider
- ASIPLAT-1048 - Theme: '413 - Request Entity too large' error when attempting to upload a background image
- ASIPLAT-1289 - Service Lens: Service Lens rendering incorrectly when a new service is added
- ASIPLAT-1290 - Events (Automation): Typo on 'Create Action' form when creating an Automation Policy
- ASIPLAT-1291 - Events (Automation): When creating an Automation Policy, the dropdown list for the Query Builder does not select the correct field when clicked
- ASIPLAT-1292 - Events (Query Builder): Selecting fields beginning with an uppercase or underscore does not allow the user to set a valid field
- ASIPLAT-1294 - Events (Automation): Query dropdown list does not refresh after adding a new condition query
- ASIPLAT-1295 - Events (Automation): Creating a new Automation Policy fails with a 500 error
- ASIPLAT-1300 - Management Console: Update asi-dashboards icon to match the Dashboards menu icon
- ASIPLAT-1347 - Management Console: Address circular logic bug during ASI startup caused if the asi-core-service secret is incorrect
- ASIPLAT-1368 - Utilities: asi-cli fails to run on el8 systems due to an outdated glibc version
- ASIPLAT-1385 - Management Service: Extend management-service startup time in systemctl to stop it from being killed if it takes longer than expected to come alive
- ASIPLAT-1402 - Management Service: Management Service fails to start due to changes in logback
- ASIPLAT-1409 - Management Console: 'No BES instances found' even though BES has been registered and nnBES-asi is running
- ASIPLAT-1412 - OTP Policy: Success toast has dark grey background instead of the standard green
- ASIPLAT-1413 - OTP Policy: Enabling the OTP Policy globally doesn't actually enable it
- ASIPLAT-1414 - OTP Policy: Supported OTP applications list has default names
- ASIPLAT-1420 - Roles: Edit button is visible on the User Administration page for users who only have the read-only 'access-users-user-role'
- ASIPLAT-1421 - Roles: The 'access-users-admin-role' composite does not inherit the 'access-users-helpdesk-role', making it impossible for a user to update passwords for other users
- ASIPLAT-1422 - Roles: Edit button is visible on the Group Administration page for users who only have the read-only 'access-group-user-role'
- ASIPLAT-1423 - Roles: The 'access-group-admin-role' composite does not inherit the 'access-users-user-role' & 'access-roles-user-role' making it impossible for a user to add users and roles to a group
- ASIPLAT-1424 - Roles: Users with only the read-only 'access-policies-user-role' are able to edit the OTP Policy configuration
- ASIPLAT-1426 - Roles: Edit button is visible on the Configuration page for users who only have the read-only 'system-config-user-role'
- ASIPLAT-1427 - Roles: The 'system-config-admin-role' composite does not inherit the 'system-plugins-user-role' & 'system-packages-user-role' making it impossible for a user to create new configuration entries
- ASIPLAT-1428 - Roles: The 'system-connections-user-role' composite does not inherit the 'system-plugins-user-role' making it impossible for a user to view the details of a connection
- ASIPLAT-1430 - Roles: The 'system-theme-editor-role' should not allow a user to upload a logo or background image
- ASIPLAT-1435 - Events (Automation): User is not prompted for confirmation when deleting an automation policy
- ASIPLAT-1436 - Service Modelling: Service Modelling UI is using a hard-coded api endpoint, leading to failures when loading the model
- ASIPLAT-1438 - User Administration: User Administration table does not refresh after deleting a user
- ASIPLAT-1439 - Theme: When uploading a logo, the preview for the background image also changes
- ASIPLAT-1441 - Events (Automation): Create button styling is incorrect and commands section is not required
- ASIPLAT-1443 - Installation: Default dashboards fail to be added on fresh installs
- ASIPLAT-1444 - Events (Query Builder): HTTP 400 errors returned from queries due to an invalid character in the URL
- ASIPLAT-1445 - Automation: Unable to create a Command Action due to an incorrect redirect to the Message Channels page
- ASIPLAT-1447 - Service Modelling: HTTP 405 Method not allowed error when attempting to delete a branch or upload a CSV
- ASIPLAT-1450 - Core: 'spring.cloud.gateway.routes' configuration does not get added to the asi-core config file if it doesn't exist, which leads to the service-engine proxy not being created when registering events with ASI
- ASIPLAT-1452 - Service Modelling: No feedback from the backend when committing a branch's changes
- ASIPLAT-1454 - Service Modelling: No feedback in the UI when a merge fails
- ASIPLAT-1456 - Service Modelling (Events): DataBufferLimitExceeded error when attempting to upload a large model from CSV
- ASIPLAT-1457 - Service Modelling: 'Make Live' button not very obvious to the user
- ASIPLAT-1458 - Service Modelling: 'Make Live' not working due to an incorrect table being used in the findAllPolicies method
- ASIPLAT-1460 - Installation: Add guard to upgrade scripts to ensure that they can only run as the ppadmin user
- ASIPLAT-1461 - Events (Query Builder): Incorrect URL gets built when using multiple sorts
- ASIPLAT-1466 - Dashboards: .org.chromium.Chromium directories not being cleaned up
Enhancements
- ASIPLAT-781 - Authenticator: Bump the keycloak version from 25.0.6 to 26.0.7
- ASIPLAT-802 - Service Modelling: Introduce Service Modelling functionality as part of Event Management
- ASIPLAT-1101 - Event Management: Allow command-line options to be fed to the 'registerEventsWithAsi' script to allow for unattended configuration
- ASIPLAT-1195 - Platform: Bump spring-boot to version 3.3.6
- ASIPLAT-1213 - ASI DataHub: Introduce the DataHub ASI Platform Module
- ASIPLAT-1216 - Authorization Providers: Add 'Principal Type' and 'NameID policy format' fields to the SAML definition page
- ASIPLAT-1228 - Authenticator: Rename authenticator's 'realm_access.roles' to 'roles' to allow DataHub connectivity via OIDC
- ASIPLAT-1354 - Platform: Drop Python 2 Dependency
- ASIPLAT-1403 - Management Service: Introduce a management-service-startup.log file
- ASIPLAT-1407 - Events (Field Definitions): Add more meaningful error messages to the Field Definitions page to help debug issues when pulling back field definitions
Known Issues
- ASIPLAT-494 - Dashboard: Edit Dashboard Properties window no longer has the button to view All Widgets
- ASIPLAT-1036 - Management Console: Management Console clustered instances inconsistencies
- ASIPLAT-1256 - User Administration: Users who have never logged on should have a default value set for the 'Last Login' field instead of '1970-01-01T01:00:00.000+01:00'
- ASIPLAT-1373 - User Federation (LDAP): All AD Groups and Users get imported into ASI, leading to peformance issues when loading both Group and User pages
- ASIPLAT-1374 - Performance: Long load times on User/Group admin pages on systems with large volumes of records
- ASIPLAT-1448 - User Sessions: Session expiry issues whilst multiple tabs are open
- ASIPLAT-1465 - Dashboards: Chrome/Selenium writing files to '/tmp'
Known CVE's
- CVE-2014-0001
- CVE-2015-2325
- CVE-2016-0610
- CVE-2016-0616
- CVE-2017-15365
- CVE-2017-15945
- CVE-2017-3302
- CVE-2018-14627
- CVE-2018-14627
- CVE-2019-3805
- CVE-2019-3805
- CVE-2019-3826
- CVE-2020-10718
- CVE-2020-10718
- CVE-2020-10740
- CVE-2020-10740
- CVE-2020-13956
- CVE-2020-13956
- CVE-2020-1719
- CVE-2020-1719
- CVE-2020-25640
- CVE-2020-25640
- CVE-2020-25689
- CVE-2020-25689
- CVE-2020-28912
- CVE-2021-3503
- CVE-2021-3503
- CVE-2021-3536
- CVE-2021-3536
- CVE-2021-42550
- CVE-2021-46666
- CVE-2021-46667
- CVE-2021-46669
- CVE-2022-1278
- CVE-2022-1278
- CVE-2022-27385
- CVE-2022-27449
- CVE-2022-31621
- CVE-2022-31622
- CVE-2022-31623
- CVE-2022-31624
- CVE-2022-37422
- CVE-2022-40152
- CVE-2022-40152
- CVE-2022-40159
- CVE-2022-40159
- CVE-2022-40159
- CVE-2022-40160
- CVE-2022-40160
- CVE-2022-40160
- CVE-2022-45129
- CVE-2023-48795
- CVE-2023-5072
- CVE-2023-5157
- CVE-2023-6378
- CVE-2024-1597
- CVE-2024-8391