Skip to main content

v26.8

v26.8.0​

Features

  • OSIE-601 - Firewalls
    Customers can filter the traffic that passes their routers with firewalls, under a new Firewalls tab in Networking. They write rules that allow, deny or reject traffic by protocol, address and port, order them in policies, and apply the policies to router interfaces through firewall groups. The tab appears on clouds whose Neutron offers the FWaaS v2 extension, in every region with the network service enabled. Firewall groups, policies and rules have resource types of their own for pricing, and the default group the cloud creates for each project is not billed.

  • OSIE-579 - Metadata on organizations and users
    Administrators can attach their own references, such as the account ID from a CRM, to organizations and users as metadata: up to 20 key and value pairs per record, set from the record's Metadata card in the admin dashboard, on its create form, or through the Admin API. The lists of organizations and users filter on it with metadata.<key>=<value>, and a new Update User endpoint sets a user's metadata. Customers never see metadata, and every change is audited key by key.

  • OSIE-498 - Metadata on billing profiles
    Billing profiles carry metadata with the same rules, on the profile's Address tab, on the create form, in the billing profile list, and in the Admin API, where the list of billing profiles filters on it. The built-in invoice template and the statement template can print a key with {{metadata.<key>}}; the default templates are unchanged. Deleting a billing profile clears its metadata. An Update Billing Profile request now changes only the fields the Admin API exposes, and keeps the profile's payment provider customer, default card, bank details, verifications, suspension, message template and reseller settings.

  • OSIE-606 - Move a project to another organization
    Platform administrators move a project with Move on its page, to another organization of the same realm. The new organization's members take over the project, the members of the old one lose access on the clouds, the new organization's groups apply, and pending invitations are withdrawn. The new organization's billing profile pays from the moment of the move, without billing again what the old profile already billed, and the project's status follows the new organization's billing. The organization is no longer editable from Edit project, and the client API no longer changes a project's organization.

  • OSIE-635 - Quotas per volume type
    The project dashboard's quotas list the volumes, storage and snapshots of each volume type under the block storage totals: the types offered in the region, or the types with a limit of their own. When the cloud does not report per-type quotas to the project, the totals show alone.

  • OSIE-616 - Server activity
    A server's Server Activity lists its actions newest first and scrolls within its card, so a long history no longer lengthens the page. A server with no activity shows No activity yet.

Bug fixes

  • OSIE-629 - Realm two-factor and passkey settings are enforced
    Enforce 2FA on a realm had no effect. Users who sign in with a password in such a realm now need a second factor: users without an authenticator app set one up before they get a session, with no way to skip it, and cannot remove their last app. A passkey sign-in meets the requirement. Existing users of a realm that already has Enforce 2FA on are asked to set up an app at their next sign-in. With Allow passkeys off, passkeys are no longer offered and OSIE refuses passkey sign-in and registration. Entering an authenticator code also works in realms other than the default one.

  • OSIE-640 - Projects without billing open from the projects list
    In an organization with billing turned off, a project that still stored an older billing profile opened as an empty page from the client portal's projects list. The project list and the project page now report the same billing profile, the organization's, and such a project opens with billing off.

  • OSIE-630 - Create interface dialog closes after success
    Creating an interface on a server's Network tab could leave the dialog open after the interface was created, and a second Create made a second interface. The dialog closes and a message confirms the interface. Detaching an interface shows a confirmation too.

  • OSIE-615 - Project synchronization on large clouds
    On a cloud connected with the Domain Administrator option, synchronizing a project listed the ports, networks, subnets, routers, security groups, floating IPs, load balancers and VPN objects of the whole cloud. On a cloud with thousands of ports this timed out, loaded Neutron, and let synchronization fall hours behind. OSIE now lists only the project's resources, stops checking resources one by one when a list fails, and drops a pending synchronization once the next one is due.

  • OSIE-614 - Memory charts and config drives
    A server unknown to Gnocchi logged an error on every load of its overview; its memory chart is now empty without an error. A server created on a network without DHCP could miss the config drive that carries its network configuration, when OSIE had not yet cached the subnet's settings; the subnet is now read reliably.

  • OSIE-597 - Organization groups list their members
    A group's members were missing after a reload, in the client portal's group window and in the admin dashboard's. Groups now list their members, and the admin dashboard's group window shows only that group's members.