Portainer v1.23.0 Release Notes

Release Date: 2019-12-05 // over 4 years ago
  • 1.23.0

    ๐Ÿš€ This release introduces a rework of ownership, several improvements to RBAC as well as an overhaul for the registry browse and push/pull functionality (including support for Gitlab registries).

    ๐Ÿ’ฅ Breaking Changes

    ๐Ÿš€ Required Docker API version was incremented as part of the ownership rewrite, this is a breaking change of snapshots and offline mode for users who manage any endpoints with a Docker API version < 1.40. If you don't require snapshots & offline mode for any of the endpoints you manage, then it is recommended to upgrade for security improvements included in this release. More info in this issue: #3457

    ๐Ÿณ The push/pull rewrite introduces a potential breaking change of the registry management extension & push/pull functionality for users with a Docker API version < 1.28.

    You can find which API version an endpoint has within the Swarm view (for swarm endpoints) or Host view (for non-swarm endpoints).

    Known issues

    0๏ธโƒฃ If you are on an older API version and are running Portainer as a container, then Portainer may log an API version error each time a snapshot is run (default is every 5 minutes). A workaround is to increase the time between snapshots, this can be adjusted in Portainer settings.

    ๐Ÿ”’ Security

    • ๐Ÿ›  Fixed an invalid check with previous mitigation of security issue: #3224
    • ๐ŸŒฒ Avoid logging password hash when admin password is set: #2844
    • ๐Ÿ›  Fixed issue where a non-admin creating volume with same name as an admin-only stack gives them ownership: #3273

    Ownership, RBAC & Authentication

    • ๐Ÿ›  Fixed issue where administrator stacks show as limited for RBAC users: #3348
    • ๐Ÿ›  Fixed issue where permissions weren't updated on team deletion: #3298
    • ๐Ÿ›  Fixed issue where an RBAC user removing a service makes related stack disappear for all RBAC users: #3351
    • ๐Ÿ›  Fixed issue where endpoint-admins cannot manage resources restricted to other users: #3346
    • ๐Ÿ›  Fixed issue where restricted stack shows assigned to administrators for other non-admin users: #3352
    • ๐Ÿ›  Fixed issue where a user in a helpdesk team & standard team results in read-only: #3366
    • ๐Ÿ›  Fixed issue where disabling the RBAC extension leaves users with previous role's abilities: #3344
    • ๐Ÿ›  Fixed issue where endpoint admin & standard RBAC users can't attach to containers: #3347
    • ๐Ÿ›  Fixed issue where RBAC users lose their abilities after a page refresh: #3338
    • ๐Ÿ›  Fixed issue where RBAC doesn't assign permissions to newly autoprovisioned users: #3427
    • ๐Ÿ’ป Clean up browser cache on session expired: #3300
    • ๐Ÿ‘ Allow setting access control rules via service labels: #1257

    Registries

    • Overhaul of the registry push/pull feature: #3122
    • ๐Ÿ”ง Introduce debugging for registry management configuration: #3269
    • ๐Ÿ‘Œ Support Gitlab registry with registry manager extension: #2956
    • โœ‚ Remove unneeded checkboxes in repositories list when using registry manager: #2836
    • ๐ŸŽ Performance improvement of the registry manager: #2958
    • ๐Ÿ›  Fixed issue where Portainer was unable to fetch tags from a local registry: #2879
    • ๐Ÿ‘ Allow inspect of layers of images in a private registry: #2808

    Extensions

    • Introduce offline extension activation: #3080
    • โšก๏ธ Automatically update Portainer extensions at startup: #3340

    ๐Ÿ‘Œ Improved User Experience

    • ๐Ÿ›  Fixed issue where image auto suggest on multinode swarm suggests the same image multiple times: #3422
    • ๐Ÿ‘ Allow empty labels on containers: #2646
    • Replace volume selector with type-ahead in container app-template form: #3370
    • Render empty env vars correctly on duplicate/edit of a container: #2112
    • โž• Add edge key to edge agent commands in UI: #3117
    • ๐Ÿ‘‰ Make the recreate & duplicate/edit buttons unavailable when RBAC enabled: #3418

    Networks

    • ๐Ÿ›  Fixed issue where docker network aliases are not persisted on duplicate/edit: #2118
    • ๐Ÿ›  Fixed issue where container name from container network not persisted on duplicate/edit: #2657
    • ๐Ÿ‘‰ Make system networks public to allow use by non-admins: #3364

    Stacks

    • ๐Ÿ›  Fixed issue where an invalid stack name results in 2 unusable stacks: #2020
    • ๐Ÿ›  Fixed issue where concurrent stack creation allocated same ID for all stacks: #2633

    Containers

    • ๐Ÿšš Prevent situation where user can try and recreate container that is set to auto-remove: #3247
    • ๐Ÿ‘ Allow a port range to be specified in container deployment: #734
    • ๐Ÿ›  Fixed recreate issue with container image from GCR registry in Portainer: #1962

    Minor Changes

    • โœ… Introduce cypress automated testing: #3304
    • โž• Add analytics message to about page: #3423
    • โšก๏ธ Update font-awesome dependency: #3130
    • Extract isteven-multi-select library from project: #3254