|
| 1 | +--- |
| 2 | +author: meshcloud |
| 3 | +title: Release 2025.47.0 |
| 4 | +--- |
| 5 | + |
| 6 | +Release period: 2025-10-22 to 2025-10-29 |
| 7 | + |
| 8 | +This release includes the following issues: |
| 9 | +* Optional Filters for meshProjectBindings API |
| 10 | +* Fix Non-Admins Receiving E-mails Intended for Admins |
| 11 | +* Service Instances Are Now Visible in Workspace Overview |
| 12 | +* Fix User Search in New Admin Area Access Control |
| 13 | +* Fix for Race Condition Leading to Inconsistent Tenant States |
| 14 | +* Enforce Tag Validation for meshObjects Created via API |
| 15 | +* Improved Error Handling for Building Block Run Creation |
| 16 | +* Improved User Deletion with SCIM Synchronization |
| 17 | +* Purge Tenants in meshStack |
| 18 | +* Administrative Unit Support Enabled For All Customers |
| 19 | +* Simplified API Key Login with Direct Token Response |
| 20 | +* Fixed Email Notification Links for Building Blocks |
| 21 | +* Add README Support for Platforms |
| 22 | +* Retired meshObject Endpoints deprecated 2025-07-01 |
| 23 | +<!--truncate--> |
| 24 | + |
| 25 | +## Ticket Details |
| 26 | +### Optional Filters for meshProjectBindings API |
| 27 | +**Audience:** User<br> |
| 28 | + |
| 29 | +#### Description |
| 30 | +We made the query parameters 'workspaceIdentifier' and 'projectIdentifier' |
| 31 | +optional for the meshProjectBindings read API. |
| 32 | + |
| 33 | +### Fix Non-Admins Receiving E-mails Intended for Admins |
| 34 | +**Audience:** User<br> |
| 35 | + |
| 36 | +#### Description |
| 37 | +We fixed an issue where non-admins received e-mails about 'Service Approval Requested' notifications. These e-mails |
| 38 | +should only be sent to users with admin permissions who can actually approve or deny such requests. The issue |
| 39 | +occurred when users previously had admin permissions but later lost them. Now you will only receive these |
| 40 | +notifications if you have the necessary permissions to act on them. |
| 41 | + |
| 42 | +### Service Instances Are Now Visible in Workspace Overview |
| 43 | +**Audience:** User<br> |
| 44 | + |
| 45 | +#### Description |
| 46 | +You can now see Open Service Broker (OSB) service instances alongside other workspace resources like projects, |
| 47 | +tenants, and building blocks in the workspace overview. Service instances are displayed with their managed service |
| 48 | +name, service plan, and current status. This provides better visibility into all resources within your workspace. |
| 49 | + |
| 50 | +#### How to use |
| 51 | +Navigate to your workspace overview to see service instances listed with other workspace resources. You can search |
| 52 | +for service instances by name, service plan, or managed service name. Click on a service instance to navigate to |
| 53 | +the marketplace tenant's service registry overview page where you can manage it. If a service instance has a |
| 54 | +dashboard URL, you can access it directly through the "Service Dashboard" link in the overview. |
| 55 | + |
| 56 | +### Fix User Search in New Admin Area Access Control |
| 57 | +**Audience:** User<br> |
| 58 | + |
| 59 | +#### Description |
| 60 | +Fixed an issue where searching for users in the new admin area's access management interface was |
| 61 | +failing with an error. Users can now successfully search for and add users to workspaces in the |
| 62 | +admin area using the new access management interface. |
| 63 | + |
| 64 | +Note: This new access management interface is only available for selected customers. |
| 65 | + |
| 66 | +### Fix for Race Condition Leading to Inconsistent Tenant States |
| 67 | +**Audience:** User<br> |
| 68 | + |
| 69 | +#### Description |
| 70 | +We fixed a rare race condition that could occur during tenant replication updates. In rare cases, this issue could |
| 71 | +lead to tenants not being properly updated or deleted, causing them to remain in an incorrect state (e.g., a |
| 72 | +tenant that should have been deleted remaining active in the system). |
| 73 | + |
| 74 | +### Enforce Tag Validation for meshObjects Created via API |
| 75 | +**Audience:** User<br> |
| 76 | + |
| 77 | +#### Description |
| 78 | +Previously, a principal with admin permission was able to create meshObjects with invalid tags via the meshObject API. |
| 79 | +For example, in a meshStack where a workspace tag named 'environment' was set up to allow only the values 'dev' and |
| 80 | +'prod', you were able to create workspaces tagged with an environment of 'qa' or any other arbitrary value. This has |
| 81 | +been fixed for meshWorkspaces and meshProjects, so that proper tag validation takes place for these two entity types. |
| 82 | + |
| 83 | +#### How to use |
| 84 | +If you rely on the old behavior due to existing API integrations, you can re-enable it via a setting in the Admin |
| 85 | +Area. Go to Settings -> Compliance -> Tags to revert to the previous behavior if needed. |
| 86 | + |
| 87 | +### Improved Error Handling for Building Block Run Creation |
| 88 | +**Audience:** User<br> |
| 89 | + |
| 90 | +#### Description |
| 91 | +We improved the handling of internal race conditions which reduces |
| 92 | +seemingly "stuck" Building Blocks. |
| 93 | + |
| 94 | +### Improved User Deletion with SCIM Synchronization |
| 95 | +**Audience:** User<br> |
| 96 | + |
| 97 | +#### Description |
| 98 | +We fixed an issue that prevented user deletion when both an active and disabled user with the same username existed |
| 99 | +in the system. This scenario commonly occurs when SCIM synchronization is enabled. Now, user deletion correctly |
| 100 | +targets only the active user while preserving the disabled user record. |
| 101 | + |
| 102 | +Additionally, when you attempt to delete a user while SCIM synchronization is enabled, meshPanel now displays a |
| 103 | +warning that the deleted user is likely to be recreated automatically during the next SCIM sync. We recommend |
| 104 | +deleting users directly in your source directory instead to prevent automatic recreation. |
| 105 | + |
| 106 | +#### How to use |
| 107 | +When deleting a user in the Admin Area > Users section, you will see a warning message if SCIM synchronization is |
| 108 | +currently enabled. This helps you make informed decisions about user management and understand that the deletion |
| 109 | +may not be permanent if the user still exists in your SCIM source directory. |
| 110 | + |
| 111 | +### Purge Tenants in meshStack |
| 112 | +**Audience:** User<br> |
| 113 | + |
| 114 | +#### Description |
| 115 | +You can now purge a tenant to remove it from meshStack's control without executing deletion steps in the cloud platform. |
| 116 | +This is useful when a tenant has been manually deleted in the cloud or when you want to stop managing a tenant in |
| 117 | +meshStack without affecting existing cloud resources. This feature is available to workspace owners, platform operators, |
| 118 | +and users managing platforms via Platform Builder. |
| 119 | + |
| 120 | +#### How to use |
| 121 | +Navigate to the tenant settings page in the Admin Area or Platform Builder. Under the "Purge Tenant" tab, |
| 122 | +you will find the "Purge Tenant" option. This allows you to remove the tenant from meshStack without triggering |
| 123 | +any cloud platform deletion steps. |
| 124 | + |
| 125 | +### Administrative Unit Support Enabled For All Customers |
| 126 | +**Audience:** User<br> |
| 127 | + |
| 128 | +#### Description |
| 129 | +The Azure Administrative Unit features are now available for every customer. |
| 130 | + |
| 131 | +### Simplified API Key Login with Direct Token Response |
| 132 | +**Audience:** User<br> |
| 133 | + |
| 134 | +#### Description |
| 135 | +We added a new way to authenticate with your API key that returns the access token directly in the response, without |
| 136 | +requiring a redirect. You can now send your API key credentials as JSON to the `/api/login` endpoint and receive the |
| 137 | +bearer token immediately. This makes it easier to integrate with the meshObject API, especially for clients that |
| 138 | +cannot handle HTTP redirects. The existing form-based login with redirect is still supported for backwards |
| 139 | +compatibility. |
| 140 | + |
| 141 | +#### How to use |
| 142 | +Send a POST request to `/api/login` with `Content-Type: application/json` and include your API key credentials in the |
| 143 | +request body as a JSON object with fields `clientId` and `clientSecret`. The response will contain the `access_token` |
| 144 | +and related fields directly, which you can then use as a Bearer token in subsequent API requests. Check the API |
| 145 | +documentation for detailed examples and response field descriptions. |
| 146 | + |
| 147 | +### Fixed Email Notification Links for Building Blocks |
| 148 | +**Audience:** User<br> |
| 149 | + |
| 150 | +#### Description |
| 151 | +Email notifications for building blocks now link to the correct panel view based on building block type. Previously, |
| 152 | +notification emails linked to an outdated route that no longer existed. Now, workspace-level building blocks link to |
| 153 | +the workspace building blocks view, and tenant-level building blocks link to the tenant building blocks view, ensuring |
| 154 | +operators can quickly access the relevant building blocks requiring attention. |
| 155 | + |
| 156 | +### Add README Support for Platforms |
| 157 | +**Audience:** User<br> |
| 158 | + |
| 159 | +#### Description |
| 160 | +Platform engineers can now add a README to their platforms using markdown format. Like the README for |
| 161 | +building block definitions, the README is rendered on the marketplace and makes it easier for your users |
| 162 | +to understand how to use the platform effectively. |
| 163 | + |
| 164 | +#### How to use |
| 165 | +When creating or editing a platform, you will find a new README field in the platform settings. You can use |
| 166 | +markdown syntax to format your README with headings, lists, bold text, links, and other elements. The editor |
| 167 | +provides a live preview so you can see how your README will look. |
| 168 | + |
| 169 | +### Retired meshObject Endpoints deprecated 2025-07-01 |
| 170 | +**Audience:** User<br> |
| 171 | + |
| 172 | +#### Description |
| 173 | +This release removes meshObject API endpoints originally deprecated 2025-07-01. These endpoints now return HTTP 406 |
| 174 | +(Not Acceptable) with a deprecation notice directing you to the current supported API versions. |
| 175 | +This affects the following meshObject versions: meshTenant v1 and v2, meshProject v1, meshPaymentMethod v1 and meshServiceInstance v1. |
| 176 | + |
| 177 | +#### How to use |
| 178 | +If you are using any of the retired endpoints, you will receive HTTP 406 responses. |
| 179 | +The deprecation notice in the response will indicate the recommended API version to use instead. |
| 180 | +If you need assistance with the migration, please refer to the meshObject API documentation or contact our support. |
| 181 | + |
0 commit comments