Skip to content

Commit 06608ae

Browse files
jstirnamanjstirnaman
committed
feat(influxdb3): add v3.3.0 release notes and admin token recovery documentation
- Add v3.3.0 release notes with grouped categories for Core and Enterprise features/fixes - Document admin token recovery server feature (--admin-token-recovery-http-bind) - Add recovery server option to CLI serve command reference (alphabetically sorted) - Add configuration details for admin token recovery in config options - Update regenerate token documentation with lost token recovery instructions - Include security warnings about unauthenticated recovery endpoint - Fix Vale linting issues (Parquet capitalization, remove exclamation point) Related to influxdb PR #26594
1 parent 89739cd commit 06608ae

File tree

7 files changed

+136
-6
lines changed

7 files changed

+136
-6
lines changed

‎content/influxdb3/core/reference/cli/influxdb3/serve.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -38,6 +38,7 @@ influxdb3 serve [OPTIONS] --node-id <HOST_IDENTIFIER_PREFIX>
3838
| | `--object-store` | _See [configuration options](/influxdb3/core/reference/config-options/#object-store)_ |
3939
| | `--bucket` | _See [configuration options](/influxdb3/core/reference/config-options/#bucket)_ |
4040
| | `--data-dir` | _See [configuration options](/influxdb3/core/reference/config-options/#data-dir)_ |
41+
| | `--admin-token-recovery-http-bind` | _See [configuration options](/influxdb3/core/reference/config-options/#admin-token-recovery-http-bind)_ |
4142
| | `--aws-access-key-id` | _See [configuration options](/influxdb3/core/reference/config-options/#aws-access-key-id)_ |
4243
| | `--aws-secret-access-key` | _See [configuration options](/influxdb3/core/reference/config-options/#aws-secret-access-key)_ |
4344
| | `--aws-default-region` | _See [configuration options](/influxdb3/core/reference/config-options/#aws-default-region)_ |

‎content/influxdb3/core/reference/config-options.md

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -106,6 +106,7 @@ influxdb3 serve
106106
- [HTTP](#http)
107107
- [max-http-request-size](#max-http-request-size)
108108
- [http-bind](#http-bind)
109+
- [admin-token-recovery-http-bind](#admin-token-recovery-http-bind)
109110
- [Memory](#memory)
110111
- [exec-mem-pool-bytes](#exec-mem-pool-bytes)
111112
- [buffer-mem-limit-mb](#buffer-mem-limit-mb)
@@ -752,6 +753,7 @@ Provides custom configuration to DataFusion as a comma-separated list of
752753

753754
- [max-http-request-size](#max-http-request-size)
754755
- [http-bind](#http-bind)
756+
- [admin-token-recovery-http-bind](#admin-token-recovery-http-bind)
755757

756758
#### max-http-request-size
757759

@@ -777,6 +779,31 @@ Defines the address on which InfluxDB serves HTTP API requests.
777779

778780
---
779781

782+
#### admin-token-recovery-http-bind
783+
784+
Enables an admin token recovery HTTP server on a separate port. This server allows regenerating lost admin tokens without existing authentication. The server automatically shuts down after a successful token regeneration.
785+
786+
> [!Warning]
787+
> This option creates an unauthenticated endpoint that can regenerate admin tokens. Only use this when you have lost access to your admin token and ensure the server is only accessible from trusted networks.
788+
789+
**Default:** `127.0.0.1:8182` (when enabled)
790+
791+
| influxdb3 serve option | Environment variable |
792+
| :--------------------- | :------------------- |
793+
| `--admin-token-recovery-http-bind` | `INFLUXDB3_ADMIN_TOKEN_RECOVERY_HTTP_BIND` |
794+
795+
##### Example usage
796+
797+
```bash
798+
# Start server with recovery endpoint
799+
influxdb3 serve --admin-token-recovery-http-bind
800+
801+
# In another terminal, regenerate the admin token
802+
influxdb3 create token --admin --regenerate --host http://127.0.0.1:8182
803+
```
804+
805+
---
806+
780807
### Memory
781808

782809
- [exec-mem-pool-bytes](#exec-mem-pool-bytes)

‎content/influxdb3/enterprise/reference/cli/influxdb3/serve.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -37,6 +37,7 @@ influxdb3 serve [OPTIONS] \
3737

3838
| Option | | Description |
3939
| :--------------- | :--------------------------------------------------- | :------------------------------------------------------------------------------------------------------------------------------ |
40+
| | `--admin-token-recovery-http-bind` | _See [configuration options](/influxdb3/enterprise/reference/config-options/#admin-token-recovery-http-bind)_ |
4041
| | `--aws-access-key-id` | _See [configuration options](/influxdb3/enterprise/reference/config-options/#aws-access-key-id)_ |
4142
| | `--aws-allow-http` | _See [configuration options](/influxdb3/enterprise/reference/config-options/#aws-allow-http)_ |
4243
| | `--aws-default-region` | _See [configuration options](/influxdb3/enterprise/reference/config-options/#aws-default-region)_ |

‎content/influxdb3/enterprise/reference/config-options.md

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -113,8 +113,10 @@ influxdb3 serve
113113
- [HTTP](#http)
114114
- [max-http-request-size](#max-http-request-size)
115115
- [http-bind](#http-bind)
116+
- [admin-token-recovery-http-bind](#admin-token-recovery-http-bind)
116117
- [Memory](#memory)
117118
- [exec-mem-pool-bytes](#exec-mem-pool-bytes)
119+
- [buffer-mem-limit-mb](#buffer-mem-limit-mb)
118120
- [force-snapshot-mem-threshold](#force-snapshot-mem-threshold)
119121
- [Write-Ahead Log (WAL)](#write-ahead-log-wal)
120122
- [wal-flush-interval](#wal-flush-interval)
@@ -885,6 +887,31 @@ Defines the address on which InfluxDB serves HTTP API requests.
885887

886888
---
887889

890+
#### admin-token-recovery-http-bind
891+
892+
Enables an admin token recovery HTTP server on a separate port. This server allows regenerating lost admin tokens without existing authentication. The server automatically shuts down after a successful token regeneration.
893+
894+
> [!Warning]
895+
> This option creates an unauthenticated endpoint that can regenerate admin tokens. Only use this when you have lost access to your admin token and ensure the server is only accessible from trusted networks.
896+
897+
**Default:** `127.0.0.1:8182` (when enabled)
898+
899+
| influxdb3 serve option | Environment variable |
900+
| :--------------------- | :------------------- |
901+
| `--admin-token-recovery-http-bind` | `INFLUXDB3_ADMIN_TOKEN_RECOVERY_HTTP_BIND` |
902+
903+
##### Example usage
904+
905+
```bash
906+
# Start server with recovery endpoint
907+
influxdb3 serve --admin-token-recovery-http-bind
908+
909+
# In another terminal, regenerate the admin token
910+
influxdb3 create token --admin --regenerate --host http://127.0.0.1:8182
911+
```
912+
913+
---
914+
888915
### Memory
889916

890917
- [exec-mem-pool-bytes](#exec-mem-pool-bytes)

‎content/shared/influxdb3-admin/tokens/admin/regenerate.md

Lines changed: 23 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,8 @@ To regenerate an operator token, you need the current token string.
1616
> Regenerating the operator token invalidates the previous token.
1717
> Make sure to update any applications or scripts that use the operator token.
1818
19-
To regenerate the operator token, use the [`influxdb3 serve create token` command] with the `--admin` and `--regenerate` flags:
19+
To regenerate the operator token, use the [`influxdb3 serve create token` command](/influxdb3/version/reference/cli/influxdb3/create/token/) (CLI) or the
20+
[`/api/v3/configure/token/admin/regenerate` endpoint](/influxdb3/version/api/v3/configure/token/admin/regenerate) (HTTP API):
2021

2122
{{< tabs-wrapper >}}
2223
{{% tabs %}}
@@ -70,10 +71,30 @@ The response body contains the new operator token string in plain text, and Infl
7071
To use the token as the default for later commands, and to persist the token
7172
across sessions, assign the token string to the `INFLUXDB3_AUTH_TOKEN` environment variable.
7273

74+
## Lost admin token recovery
75+
76+
If you've lost your admin token and cannot regenerate it using the standard method, you can use the admin token recovery server:
77+
78+
1. Start {{< product-name >}} with the `--admin-token-recovery-http-bind` option:
79+
```bash
80+
influxdb3 serve --admin-token-recovery-http-bind
81+
```
82+
83+
2. In a separate terminal, regenerate the admin token using the recovery endpoint:
84+
85+
```bash
86+
influxdb3 create token --admin --regenerate --host http://127.0.0.1:8182
87+
```
88+
89+
3. The recovery server automatically shuts down after successful token regeneration.
90+
91+
> [!Warning]
92+
> The recovery server provides unauthenticated access to regenerate admin tokens. Only use this option when necessary and ensure the recovery endpoint (by default `127.0.0.1:8182`) is only accessible from trusted networks.
93+
7394
## Important considerations
7495

7596
- Regenerating the operator token invalidates the previous token.
76-
- If you lose the operator token, there is no recovery mechanism.
97+
- If you lose the operator token, use the recovery server method described above.
7798
- `--regenerate` only works for the operator token. You can't use the `--regenerate` flag with the `influxdb3 create token --admin` command to regenerate a named admin token.
7899
- Ensure that you update any applications or scripts that use the operator token with the new token string.
79100
- Always store your operator token securely and consider implementing proper secret management practices.

‎content/shared/v3-core-enterprise-release-notes/_index.md

Lines changed: 55 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,59 @@
55
> All updates to Core are automatically included in Enterprise.
66
> The Enterprise sections below only list updates exclusive to Enterprise.
77
8+
## v3.3.0 {date="2025-07-29"}
9+
10+
### Core
11+
12+
#### Features
13+
14+
- **Database management**:
15+
- Add `influxdb_schema` system table for database schema management ([#26640](https://github.com/influxdata/influxdb/pull/26640))
16+
- Add `system.processing_engine_trigger_arguments` table for trigger configuration management ([#26604](https://github.com/influxdata/influxdb/pull/26604))
17+
- Add write path logging to capture database name and client IP address for failed writes. The IP address is fetched from `x-forwarded-for` header if available, `x-real-ip` if available, or remote address as reported by TlsStream/AddrStream ([#26616](https://github.com/influxdata/influxdb/pull/26616))
18+
- **Storage engine**: Introduce `TableIndexCache` for efficient automatic cleanup of expired gen1 Parquet files based on retention policies and hard deletes. Includes new background loop for applying data retention policies with configurable intervals and comprehensive purge operations for tables and retention period expired data ([#26636](https://github.com/influxdata/influxdb/pull/26636))
19+
- **Authentication and security**: Add admin token recovery server that allows regenerating lost admin tokens without existing authentication. Includes new `--admin-token-recovery-http-bind` option for running recovery server on separate port, with automatic shutdown after successful token regeneration ([#26594](https://github.com/influxdata/influxdb/pull/26594))
20+
- **Build process**: Allow passing git hash via environment variable in build process ([#26618](https://github.com/influxdata/influxdb/pull/26618))
21+
22+
#### Bug Fixes
23+
24+
- **Database reliability**:
25+
- Fix URL encoded table name handling failures ([#26586](https://github.com/influxdata/influxdb/pull/26586))
26+
- Allow hard deletion of existing soft-deleted schema ([#26574](https://github.com/influxdata/influxdb/pull/26574))
27+
- **Authentication**: Fix AWS S3 API error handling when tokens are expired ([#1013](https://github.com/influxdata/influxdb/pull/1013))
28+
- **Query processing**: Set nanosecond precision as default for V1 query API CSV output ([#26577](https://github.com/influxdata/influxdb/pull/26577))
29+
- **CLI reliability**:
30+
- Mark `--object-store` CLI argument as explicitly required ([#26575](https://github.com/influxdata/influxdb/pull/26575))
31+
- Add help text for the new update subcommand ([#26569](https://github.com/influxdata/influxdb/pull/26569))
32+
33+
### Enterprise
34+
35+
All Core updates are included in Enterprise. Additional Enterprise-specific features and fixes:
36+
37+
#### Features
38+
39+
- **License management**:
40+
- Improve licensing suggestions for Core users
41+
- Update license information handling
42+
- **Storage engine**: Add experimental PachaTree storage engine with core implementation and server integration
43+
- **Database management**:
44+
- Enhance `TableIndexCache` with advanced features beyond Core's basic cleanup: persistent snapshots, object store integration, merge operations for distributed environments, and recovery capabilities for multi-node clusters
45+
- Add `TableIndexSnapshot`, `TableIndex`, and `TableIndices` types for distributed table index management
46+
- **Support**: Include contact information in trial error messages
47+
- **Telemetry**: Send onboarding telemetry before licensing setup
48+
49+
#### Bug Fixes
50+
51+
- **Compaction stability**:
52+
- Fix compactor re-compaction issues on max generation data overwrite
53+
- Fix compactor to treat "all" mode as "ingest" mode
54+
- **Database reliability**:
55+
- Add missing system tables to compact mode
56+
- **Storage integrity**: Update Parquet file paths to use 20 digits of 0-padding
57+
- **General fixes**:
58+
- Only load processing engine in correct server modes
59+
- Remove load generator alias clash
60+
861
## v3.2.1 {date="2025-07-03"}
962

1063
### Core
@@ -78,7 +131,7 @@ All Core updates are included in Enterprise. Additional Enterprise-specific feat
78131
- **Compaction improvements**:
79132
- Address compactor restart issues for better reliability
80133
- Track compacted generation durations in catalog for monitoring
81-
- Disable parquet cache for ingest mode to optimize memory usage
134+
- Disable Parquet cache for ingest mode to optimize memory usage
82135

83136
#### Bug Fixes
84137

@@ -272,7 +325,7 @@ All Core updates are included in Enterprise. Additional Enterprise-specific feat
272325

273326
**Enterprise**: revision e530fcd498c593cffec2b56d4f5194afc717d898
274327

275-
This update brings several backend performance improvements to both Core and Enterprise in preparation for additional new features over the next several weeks!
328+
This update brings several backend performance improvements to both Core and Enterprise in preparation for additional new features over the next several weeks.
276329

277330

278331
## v3.0.0-0.beta.1 {date="2025-03-17"}

‎data/products.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ influxdb3_core:
66
versions: [core]
77
list_order: 2
88
latest: core
9-
latest_patch: 3.2.1
9+
latest_patch: 3.3.0
1010
placeholder_host: localhost:8181
1111
ai_sample_questions:
1212
- How do I install and run InfluxDB 3 Core?
@@ -21,7 +21,7 @@ influxdb3_enterprise:
2121
versions: [enterprise]
2222
list_order: 2
2323
latest: enterprise
24-
latest_patch: 3.2.1
24+
latest_patch: 3.3.0
2525
placeholder_host: localhost:8181
2626
ai_sample_questions:
2727
- How do I install and run InfluxDB 3 Enterprise?

0 commit comments

Comments
 (0)