ChangeLog

CHANGES
=======

UPGRADE: Debian version from 12.5 to 12.9 in Dockerfile
UPGRADE: djangorestframework from 3.11.2 to 3.15.2 due security vulnerability (CVE-2024-21520)
UPGRADE: django from 3.2.25 to 4.2.17 due security vulnerability (CVE-2024-45231, CVE-2024-53907, CVE-2024-53908)
UPGRADE: requests from 2.31.0 to 2.32.3
UPGRADE: python-ldap from 3.4.3 to 3.4.4
UPGRADE: uwsgi version from 2.0.24 to 2.0.28
UPGRADE: pymongo version from 4.6.3 to 4.8.0
UPGRADE: jsonschema version from 2.6.0 to 4.23.0

4.8.0

UPGRADE: pymongo version from 3.13.0 to 4.6.3
ADD: set to 256 (from previous 100) and allow change default queue size for uwsgi connections (QUEUE_SIZE env var in Dockerfile) (#352)
FIX: bad error reported (500 instead 401) when a token error (i.e. token expired)

4.7.0

UPGRADE: uwsgi version from 2.0.23 to 2.0.24
UPGRADE: django from 2.2.28 to 3.2.25 due security vulnerability
UPGRADE: Debian version from 12.1 to 12.5 in Dockerfile

4.6.0

UPGRADE: pymongo from 3.12.3 to 3.13.0
UPGRADE: python-ldap from 3.4.0 to 3.4.3
UPGRADE: uwsgi version from 2.0.19.1 to 2.0.23
UPGRADE: Debian version from 11.3 to 12.1 in Dockerfile
FIX: remove use of skipInitialNotification with orion subscriptions
UPGRADE: requests from 2.27.1 to 2.31.0

4.5.0

ADD: do not limit domain length in email check regex

4.4.0

ADD: new Orion indexes to optimize operations (#335)

4.3.0

ADD: new API to rename subservice (including mongo database of Orion, STH, CEP, IotAgents) (#330)
UPGRADE: Debian version from 11.2 to 11.3 in Dockerfile

4.2.0

ADD: config env vars for PEP and IOTAGENT user name
UPGRADE: Dockerfile base image from centos7.9.2009 to Debian 11.2-slim
UPGRADE: request from 2.25.1 to 2.27.1
UPGRADE: pymongo from 3.7.2 to 3.12.3
UPGRADE: django (2.2.27 -> 2.2.28) due security vulnerability

4.1.0

FIX: Error: TemplateDoesNotExist at rest_framework/api.html  when get /version from text/html
UPGRADE: python-ldap (3.3.1 -> 3.4.0) due security vulnerability
UPGRADE: django (2.2.24 -> 2.2.27) due security vulnerability
ADD: allow use WARN as WARNING log level
ADD: Docker healthcheck for orchestrator API

4.0.0

Upgrade Python (2 -> 3), #242
        Django (1.11 -> 2.2.24) #310
        DjangoRestFramework (3.9 -> 3.11) #309
        requests (2.22.0 -> 2.25.1)
        python-ldap (2.5.2 -> 3.3.1)
UPDATE: Update jsonschema dep 2.5.0 to 2.6.0

3.8.0

FIX: create geo-index in Orion DB upon service provision (#301)
FIX: create expiration index in Orion DB upon service provision
Upgrade Dockerfile base image from centos7.7.1908 to centos7.9.2009

3.7.0

FIX: Orion index creation (was `_id.creDate: 1` and has to be `creDate: 1`)
REMOVE: Remove unussed dependency repoze.lru
UPDATE: include `from` in loggger  based on forwarded header
UPDATE: Add skip initial notification to iot module (template subscription) (#293)

3.6.0

FIX: move to debug log about orc statistics
FIX: Allow chars .:-# only for compose grants name, but no subservices (#285)
UPDATE: Increase subservice and grants length from 64 to 128 chars
FIX: remove double '//' from STH index collection (#287)
UPDATE: Add uwsgi http_timeout option and set by default to 200

3.5.0

UPDATE: Update orchestrator entrypoint for docker to wait also for keypass before start.
UPDATE: Update iotp-orchestrator files and log ownership to orchestrator user. Also added default UID (10001) for orchestrator user on docker file
UPDATE: Update Django from 1.11.28 to 1.11.29 due to security vulnerability

3.4.0

UPDATE: Increase min length password from 6 to 8 chars (#274)
UPDATE: Upgrade Dockerfile from Centos 7 to Centos 7.7.1908

3.3.0

UPDATE: Enable all configuration options in environment variables for docker.
UPDATE: Use new keystone scim API to create roles at once if available.
UPDATE: Use new keystone scim API to delete roles at once if available.
UPDATE: Update Django from 1.11.27 to 1.11.28 due to security vulnerability

3.2.1

UPDATE: (Revert) Delete keystone roles explicitly when delete keystone domain

3.2.0

UPDATE: Adjust uwsgi options: add uwsgi logs and fix max_request to 250 instead of 500
UPDATE: Change log level of summaries logs from info to debug to avoid extra load
UPDATE: Update Django from 1.11.26 to 1.11.27 due to security vulnerability
UPDATE: Makes optional create default generic roles when create a new domain

3.1.0

UPDATE: perseo url from /m2m/vrules to /rules to affect all rules
UPDATE: Update requests version from 2.21.0 to 2.22.0
UPDATE: Update Uwsgi version from 2.0.17.1 to 2.0.18
UPDATE: Check if cloud_admin user before try to delete rules and subscriptions when delete service (#246)
UPDATE: Makes optional create default groups when create a new domain
UPDATE: Do not delete keystone roles explicitly when delete keystone domain
UPDATE: Adjust uwsgi options: add uwsgi logs and fix max_request to 500 instead of 1000
UPDATE: Increase harakiri uwsgi option to 80 from 40
UPDATE: Adjust orchestrator spec file for RPM (#238)
ADD: API crud for ldap groups (#235)
UPDATE: Use NGSIv2 by orion driver (#232)

3.0.0

FIX: Hardening groups
FIX: Disable log into container file
UPDATE: remove httplib2 and simplejson deps
UPDATE: Add new single roles (ServiceAdmin, ServiceCustomer, SubServiceAdmin, SubServiceCustomer) for each component (Orion, Sth, Perseo, Iotagent)
UPDATE: Update Django from 1.11.23 to 1.11.26
UPDATE: Allow header buffer size customization from execution args. If is not received the default is 4KB
FIX: duplicate multiagent into multisink cygnus option

2.10.0

ADD: Allow subservices names with '#'
UPDATE: Update Django to 1.11.23 due to security vulnerability

2.9.0

FIX: Mongo exception when indexes are created (at service provision) (#214)
UPDATE: Update Django to 1.11.21 due to security vulnerability

2.8.0

UPDATE: Add pylint to travis
UPDATE: Remove empty lines in dockerfile (will be forbidden in future verions of docker)
UPDATE: Orion indexes creation logic aligned with last changes in Orion documentation

2.7.0

UPDATE: Update Djangorestframework to 3.9.4 due to security vulnerability
Add STH mongodb indexes to optimize queries on its collections (#192)
Add TLS option to mailer configuration

2.6.0

ADD: PostGIS cygnus iotmodule
ADD: Allow subservices names with '-'
ADD: anon passwords in debug logs
ADD: extra check for getUserDetailsByAdmin to create response

2.5.0

ADD: Increate subservice name limit to 64
ADD: Allow subservices names with ':' and '.'

2.4.0

FIX: startup orchestrator is not executed (#190)
UPDATE: Update Django to 1.11.20 due to security vulnerability (#186)
UPDATE: Update python deps:
          httplib2 to 0.12.0
          simplejson to 3.16.0
          uwsgi to 2.0.17.1
          requests 2.21.0
          pymongo to 3.7.2

2.3.0

ADD: multilevel support allowing subservices with '/'
UPDATE: Django to 1.11.18 (and djangorestframweork to 3.9.0) due to security vulnerability (#39)
FIX: show PEP_PERSEO conf at startup
FIX: add docker arg to set debug level option (#98)

2.2.0

FIX: add docker arg to set multiagent cygnus option (#175)
FIX: add docker arg to set default pwd for pep and iotagent (#171)
FIX: execute orchestrator command into docker container (#167)

2.1.1

FIX: max-requests uswgi option fixed from 5000 to 1000

2.1.0

FEATURE: add harakiri and max-requests options to uwsgi
FEATURE: upgrade some python dependences:
        - uwsgi to 2.0.17
        - httplib2 to 0.11.3
        - simplejson to 3.15.0
        - jsonschema to 2.6.0
        - request to 2.12.5
        - djangorestframework to 3.1.3
FIX: increase number of uwsgi processes from 2 to 6

2.0.1

FIX: check ldap port before cast to int

2.0.0

FEATURE: Create Orion indexes needed for each service in MongoDB [#145]

1.9.5

FEATURE: Add checks about optional endpoints: orion, perseo, openldap, mailer

1.9.4

FIX: handler error in auth user operation [#153]

1.9.3

FIX: docker LDAP and MAILER conf

1.9.2

FIX: check if metrics are enable before collect metrics from requester API handler

1.9.1

FIX: Add missed doc about group role assigment
FIX: Expose group role assignment API

1.9.0

FIX: Remove legacy endpoints: IoTA and CA
FEATURE: Remove uwsgi stats: takes too much time

1.8.0

FEATURE: LDAP support for user management

1.7.0

FEATURE: Unify uwsgi configuration (docker, SaaS)
FEATURE: Add option to enable or disable extended metrics (experimental). Disabled by default
FEATURE: update docker to centos7
FEATURE: Check domain_name at delete service and raise exception if is not found
FEATURE: Log in debug level all requests with codes > 400 and < 500
FIX: Init orchestrator_core logger with empty values for startup errors

1.6.0

FIX: return policy into results of get PolicyFromRole [#97]
FIX: typo in status returned by delete metrics

1.5.3

FEATURE: update uwsgi version to 2.0.15
FIX: catch error disabling and deleting service when create service fails [#90]
FEATURE: duplicate number of procesing resources
FIX: error trace reported when metrics are trying to calculate error response size [#84]
FIX: replace error by warn trace when trying to remove elements in third parties [#83]
FIX: set pepperseo conf after perseo conf in docker [#82]
FEATURE: allow non positional args in docker entrypoint [#78]

1.5.2

FIX: get project detail with scoped token

1.5.1

FIX: Perseo expected port in docker

1.5.0

FEATURE: Metrics API [#58]
FEATURE: Support keystone groups in a Service, including role assignments [#56]
FIX: Add pagination to list orion subscriptions [#37]

1.4.5

FIX: Perseo expected port in docker

1.4.4

FIX: Fix dependencies version to a fixed version

1.4.3

FIX: Add pagination to list orion subscriptions [#37]

1.4.2

FEATURE: get_version_string extended to include release information


1.4.1

FIX: django trace logs


1.4.0

FEATURE: Remove perseo rules when service or subservice is deleted - issue 24
FIX: Notifypath not handled by docker orchestrator conf - issue 42


1.3.0

task/get_current_log_level
task/align_log_format
task/endpoint_connection_error_in_detail


1.2.6

bug/get_tag_release_branch


1.2.5

bug/remove_subscriptions_at_service_subservice_delete - issue 22


1.2.4

feature/task/notify_path_by_conf_for_iotmodules


1.2.3

bug/check_idpattern_exists_all_subcriptions


1.2.2

bug/allow_orion_subscription_entity_without_type_or_empty


1.2.1

bug/check_orion_suscription_entity_type_exits


1.2.0

task/delete_keystone_roles_at_delete_domain
task/utc_for_log_time


1.1.0

task/docker_improvements
task/task/resolve_service_name_role_flow


1.0.0

task/remove_policy_from_role


0.9.0

task/orion_v2_subscriptions_callback
task/return_correlator_header_response
bug/fiware_correlator_header_in_meta_request


0.8.0

feature/updated_CI_script


0.7.2

task/add_log_service_subservice
task/transaction_id
fix/alias_iotmodule_not_found
task/change_log_level_api
fix/disable_django_debug
task/api_set_role_policy
task/print_pretty_tokens_in_logs
task/get_role_policies_api
task/add_tests for clean data


0.7.1

task/resolve_service_name_for_service_user_service_role
task/refactor_flow_ensure_service_name
fix/attributes_module_iot_subscription
bug/create_trust_token_service_name_and_pep_user
bug/wrong_error_trace_create_user
bug/bad_token_iot_modules_for_services
task/remove_duplicate_function


0.7.0

task/remove_link_after_uninstall
fix/api_schema_validation
task/check_user_before_get_token
task/start_service_after_install_rpm
task/apiary_typo_type_parameter
task/handle_errors_register_service
task/identify_flow_traces
task/remove_cygnus_moduleiot
task/apiary_examples


0.6.10

task/att_timeout_as_string
task/fix_ca_geolocation_endpoint


0.6.9

bug/resolve_service_subservice_name_rsubservice_role_assignment
bug/list_activated_iotmodules_by_admin_domain_user
bug/delete_subservice_admin_domain_user
bug/resolve_domain_name_role_assignments_as_cloudadmin
task/rpm_reuse_config
bug/role_assignment_api_not_realise_subservice_id
task/resolve_domain_name_role_assignment
task/script_set_all_service_role_policies
task/create_service_customer_role_at_new_service


0.6.8

bug/delete_service_wrong_code


0.6.7

task/remove_old_stuff_ckan_conf


0.6.6

task/unregister_iota_response


0.6.5

task/orion_get_device_list_fields


0.6.4

task/iota_get_device_list_fields


0.6.3

task/subscribe_ca_before_register_service_entity


0.6.2

task/recover_if_keypass_not_found
task/bb_sync_request_internal_id


0.6.1

task/remove_subscriptions_at_remove_service


0.6.0

task/manage_module_activation
feature/subservice_create_automation
bug/delete_subservice_by_cloud_admin
bug/use_params_url_in_role_assignment


0.5.1

subscriptions instead of register context for IOTA handling
feature/OIOTP-81_orchestrator_kpis
bug/remove_service_without_iota
bug/get_enpoints_from_config_not_default
bug/use_service_name_without_resolve_it
bug/apiary_doc
bug/iccid_entity_attribute
bug/empty_orion_attribute


0.5.0

task/keypass_policies
task/scim_2_support
task/log_format_change: add operation name to each trace and add banner version
task/orion_and_iota_suppor_for_register_device_and_entity_service


0.4.9

task/OIOTP-30_create_trust_token_by_user_id
bug/servicecustomer_role_policies_sth_iotagent


0.4.8

task/OIOTP-66_sth_XACML_policies


0.4.7

task/OIOTP-68_deploy_vagrant
bug/OIOTP-69_rpm_install_dir_permissions


0.4.6

task/get_admin_role_from_assignments_to_get_domain_role_policies
bug/edit_service_with_non_scoped_token
bug/remove_role
bug/delete_subservice_without_id_in_url


0.4.5

task/OIOTP-30_trust_token_pep_config
bug/get_role_assignments_in_set_policy_for_admin
bug/bad_effective_arg_value_in_scripts


0.4.4

bug/bug_update_policy_role_script


0.4.3

bug/python26_script_commands_logging_conf


0.4.2

feature/OIOTP-63_iota_policies


0.4.1

feature/OIOTP-38_change_user_password_by_himself
feature/OIOTP-63_set_acc_policy_for_role
feature/OIOTP-57_release_as_open_source
task/OIOTP-52_trust_token_withoutservice
task/OIOTP-64_naming_convention_restriction
bug/return_error_if_non_found_entity


0.3.0

feature/OIOTP-30_trust_token
feature/OIOTP-25_pagination_api
feature/OIOTP-51_subserviceadmin_to_admin_after_create
task/OIOTP-15_script_commands
bug/OIOTP-53_modify_user_name
bug/OIOTP-55_bug_create_new_role


0.2.0

feature/OIOTP-4_subservice_edition
feature/OIOTP-7_delete_role
feature/OITOP-32_service_delete
feature/OIOTP-24_creaet_role_with_xacml_policy
feature/OITOP-1_service_provision

task/OIOTP-15_script_commands
task/OIOTP-48_log_format
task/OIOTP-43_format_input_validation
task/OIOTP-6_role_assigment_api
task/OIOTP-22_role_unassignment_api
task/OIOTP-12_jsonschema_validation

bug/OIOTP-36_bad_error_code_creating_role_duplicated


0.1.0

task/OIOTP-8_user_edition_api
task/OIOTP-8_delete_user_api
task/OIOTP-5_user_provision_api
task/OIOTP-14_rpm_package
task/OIOTP-11_portal_interaction