tale/headplane v0.6.2-beta.5

on GitHub

Hey all, Headplane 0.6.2-beta.5 is now available and ties together everything for the full 0.6.2 release. This release explicitly supports Headscale 0.28! I still need some more time to iron out some bugs before making an official release, but this should be pretty close to a daily use experience.

Notable for this beta release, the Kubernetes and Linux integrations have been fixed after being problematic for a long time. Also, for any deployments that use OIDC, oidc.redirect_uri has been deprecated and server.base_url will need to be supplied. Starting in Headplane 0.7.0, you will receive errors if it is not set. See the OIDC configuration docs for more information. Also, PKCE has now been turned into an option, so you'll need to set oidc.use_pkce to true if you get code verifier errors when authenticating with your OIDC provider.

Changes

• Added support for Headscale 0.27.0 and 0.27.1
• Bundle all node_modules aside from native ones to reduce bundle and container size (closes #331).
• Allow conditionally compiling the SSH WASM integration when building (closes #337).
• Implemented the ability to customize the build with a custom script (see ./build.sh --help for more information).
• Attempt to warn against misconfigured cookie settings on the login page.
• Made server.cookie_max_age and server.cookie_domain configurable (closes #348).
• Re-worked the configuration loading system with several enhancements:
  • It is now possible to skip a configuration file and only use environment variables (closes #150).
  • Secret path loading has been reworked from the ground up to be more reliable (closes #334).
  • Added better testing and validation for configuration loading
• Re-worked the OIDC integration to adhere to the correct standards and surface more errors to the user.
  • Deprecated oidc.redirect_uri and automated callback URL detection in favor of setting server.base_url correctly.
  • Explicitly added oidc.use_pkce to correctly determine PKCE configuration.
• Removed several unnecessarily verbose or spammy log messages.
• Updated the minimum Docker API used to support the latest Docker versions (via #370).
• Enhanced the node tag dialog to show a dropdown of assignable tags (via #362).
• Fixed an issue where the website favicon would not load correctly (closes #323).
• Correctly handle invalid ACL policy inserts on Headscale 0.27+ (closes #383).
• Prevent a machine from changing its owner to itself (closes #373).
• Added an /admin/api/info route that can expose sensitive information if server.info_secret is set in the configuration (closes #324).
• Correctly apply Gravatar profile pictures on the user page if applicable (closes #405).
• Machine key registration no longer works if the key isn't 24 characters long (closes #415).
• Fixed some mobile CSS issues across the application (closes #401).
• Added a Docker healthcheck to the container (closes #411).
• Strengthened the validation for the /proc integration to correctly discover the Headscale PID.
• Added lazy retry logic for OIDC providers if they initially fail to respond (closes #423).
• Fixed API key login on Headcale 0.28.0-beta.1+ (closes #429).
• Fixed an issue that prevented the pre-auth-key UI from being usable on Headscale 0.28 and later

Full Changelog: v0.6.2-beta.4...v0.6.2-beta.5