Portainer v1.23.0 Release Notes
Release Date: 2019-12-05 // over 4 years ago-
1.23.0
๐ This release introduces a rework of ownership, several improvements to RBAC as well as an overhaul for the registry browse and push/pull functionality (including support for Gitlab registries).
๐ฅ Breaking Changes
๐ Required Docker API version was incremented as part of the ownership rewrite, this is a breaking change of snapshots and offline mode for users who manage any endpoints with a Docker API version < 1.40. If you don't require snapshots & offline mode for any of the endpoints you manage, then it is recommended to upgrade for security improvements included in this release. More info in this issue: #3457
๐ณ The push/pull rewrite introduces a potential breaking change of the registry management extension & push/pull functionality for users with a Docker API version < 1.28.
You can find which API version an endpoint has within the Swarm view (for swarm endpoints) or Host view (for non-swarm endpoints).
Known issues
0๏ธโฃ If you are on an older API version and are running Portainer as a container, then Portainer may log an API version error each time a snapshot is run (default is every 5 minutes). A workaround is to increase the time between snapshots, this can be adjusted in Portainer settings.
๐ Security
- ๐ Fixed an invalid check with previous mitigation of security issue: #3224
- ๐ฒ Avoid logging password hash when admin password is set: #2844
- ๐ Fixed issue where a non-admin creating volume with same name as an admin-only stack gives them ownership: #3273
Ownership, RBAC & Authentication
- ๐ Fixed issue where administrator stacks show as limited for RBAC users: #3348
- ๐ Fixed issue where permissions weren't updated on team deletion: #3298
- ๐ Fixed issue where an RBAC user removing a service makes related stack disappear for all RBAC users: #3351
- ๐ Fixed issue where endpoint-admins cannot manage resources restricted to other users: #3346
- ๐ Fixed issue where restricted stack shows assigned to administrators for other non-admin users: #3352
- ๐ Fixed issue where a user in a helpdesk team & standard team results in read-only: #3366
- ๐ Fixed issue where disabling the RBAC extension leaves users with previous role's abilities: #3344
- ๐ Fixed issue where endpoint admin & standard RBAC users can't attach to containers: #3347
- ๐ Fixed issue where RBAC users lose their abilities after a page refresh: #3338
- ๐ Fixed issue where RBAC doesn't assign permissions to newly autoprovisioned users: #3427
- ๐ป Clean up browser cache on session expired: #3300
- ๐ Allow setting access control rules via service labels: #1257
Registries
- Overhaul of the registry push/pull feature: #3122
- ๐ง Introduce debugging for registry management configuration: #3269
- ๐ Support Gitlab registry with registry manager extension: #2956
- โ Remove unneeded checkboxes in repositories list when using registry manager: #2836
- ๐ Performance improvement of the registry manager: #2958
- ๐ Fixed issue where Portainer was unable to fetch tags from a local registry: #2879
- ๐ Allow inspect of layers of images in a private registry: #2808
Extensions
- Introduce offline extension activation: #3080
- โก๏ธ Automatically update Portainer extensions at startup: #3340
๐ Improved User Experience
- ๐ Fixed issue where image auto suggest on multinode swarm suggests the same image multiple times: #3422
- ๐ Allow empty labels on containers: #2646
- Replace volume selector with type-ahead in container app-template form: #3370
- Render empty env vars correctly on duplicate/edit of a container: #2112
- โ Add edge key to edge agent commands in UI: #3117
- ๐ Make the recreate & duplicate/edit buttons unavailable when RBAC enabled: #3418
Networks
- ๐ Fixed issue where docker network aliases are not persisted on duplicate/edit: #2118
- ๐ Fixed issue where container name from container network not persisted on duplicate/edit: #2657
- ๐ Make system networks public to allow use by non-admins: #3364
Stacks
- ๐ Fixed issue where an invalid stack name results in 2 unusable stacks: #2020
- ๐ Fixed issue where concurrent stack creation allocated same ID for all stacks: #2633
Containers
- ๐ Prevent situation where user can try and recreate container that is set to auto-remove: #3247
- ๐ Allow a port range to be specified in container deployment: #734
- ๐ Fixed recreate issue with container image from GCR registry in Portainer: #1962
Minor Changes