You are viewing a plain text version of this content. The canonical link for it is here.
- (knox) branch master updated: KNOX-3341: LDAP proxy general search - review fixes and hardening (#1284) - posted by sm...@apache.org on 2026/07/01 07:21:31 UTC, 0 replies.
- (knox) branch master updated: KNOX-3369: Bump requests from 2.32.4 to 2.33.0 and pytest from 8.3.4 to 9.0.3 in /.github/workflows/tests (#1288) - posted by sm...@apache.org on 2026/07/01 09:20:50 UTC, 0 replies.
- (knox) branch dependabot/pip/dot-github/workflows/tests/pytest-9.0.3 deleted (was f5afcd59b) - posted by gi...@apache.org on 2026/07/01 09:21:29 UTC, 0 replies.
- (knox) branch dependabot/pip/dot-github/workflows/tests/requests-2.33.0 deleted (was 6878afaba) - posted by gi...@apache.org on 2026/07/01 09:21:57 UTC, 0 replies.
- (knox) branch master updated: KNOX-3367: Update Token State Service DB documentation (#1287) - posted by ha...@apache.org on 2026/07/01 09:29:44 UTC, 0 replies.
- (knox) branch master updated: KNOX-3366 - Upgrade Mina-core to 2.2.8 (#1285) via devaspati.krishnatri - posted by lm...@apache.org on 2026/07/01 14:45:45 UTC, 0 replies.
- (knox) branch master updated: KNOX-3370: Eliminate deprecated TokenStateService implementations (#1289) - posted by sm...@apache.org on 2026/07/01 19:13:41 UTC, 0 replies.
- (knox) branch master updated: KNOX-1608: Remove gateway-adapter module (#1263) - posted by sm...@apache.org on 2026/07/01 19:17:07 UTC, 0 replies.
- (knox) branch master updated: KNOX-3371: Fix broken error message on login page (#1290) - posted by ha...@apache.org on 2026/07/01 19:40:47 UTC, 0 replies.
- (knox) branch dependabot/maven/org.pac4j-pac4j-core-6.4.1 deleted (was 43bab8273) - posted by gi...@apache.org on 2026/07/02 08:12:05 UTC, 0 replies.
- (knox) branch master updated: KNOX-3316: Change downloaded keystore format based on FIPS (#1292) - posted by ha...@apache.org on 2026/07/02 08:56:36 UTC, 0 replies.
- (knox) branch knox_idf updated (4874c8a0c -> 157af9580) - posted by sm...@apache.org on 2026/07/04 18:58:08 UTC, 0 replies.
- (knox) 01/46: KNOX-3256: Refactor Docker build to use local Maven artifacts and unify CI/Dev workflows (#1239) - posted by sm...@apache.org on 2026/07/04 18:58:09 UTC, 0 replies.
- (knox) 02/46: KNOX-3328: Add Docker-based integration tests for Knox LDAP service (#1242) - posted by sm...@apache.org on 2026/07/04 18:58:10 UTC, 0 replies.
- (knox) 03/46: KNOX-3331: Add Maven option to skip Angular UI modules (#1241) - posted by sm...@apache.org on 2026/07/04 18:58:11 UTC, 0 replies.
- (knox) 04/46: KNOX-3332: Add listeners on gateway config changes (#1243) - posted by sm...@apache.org on 2026/07/04 18:58:12 UTC, 0 replies.
- (knox) 05/46: KNOX-3329: New database truststore type config (#1246) - posted by sm...@apache.org on 2026/07/04 18:58:13 UTC, 0 replies.
- (knox) 06/46: KNOX-3328: Implement recursive group resolution for LDAP proxy (#1236) - posted by sm...@apache.org on 2026/07/04 18:58:14 UTC, 0 replies.
- (knox) 07/46: KNOX-3339: Upgrade log4j2 to 2.26.0 (#1248) - posted by sm...@apache.org on 2026/07/04 18:58:15 UTC, 0 replies.
- (knox) 08/46: KNOX-3318: document LDAP service (#1227) - posted by sm...@apache.org on 2026/07/04 18:58:16 UTC, 0 replies.
- (knox) 09/46: KNOX-3330: Refactor LDAP Proxy configuration to support multiple backends (#1240) - posted by sm...@apache.org on 2026/07/04 18:58:17 UTC, 0 replies.
- (knox) 10/46: KNOX-3336: New LDAP Service Factory (#1250) - posted by sm...@apache.org on 2026/07/04 18:58:18 UTC, 0 replies.
- (knox) 11/46: KNOX-3330: Handle interceptor name collisions (#1251) - posted by sm...@apache.org on 2026/07/04 18:58:19 UTC, 0 replies.
- (knox) 12/46: KNOX-3337: Add optional LDAP role lookup support (#1247) - posted by sm...@apache.org on 2026/07/04 18:58:20 UTC, 0 replies.
- (knox) 13/46: KNOX-3342: Fixed NPE in HadoopGroupFilter when hadoopGroups instance wasn't set (#1253) - posted by sm...@apache.org on 2026/07/04 18:58:21 UTC, 0 replies.
- (knox) 14/46: KNOX-3343: Fix NPE when cacheKeyHeader is not found in the request (#1254) - posted by sm...@apache.org on 2026/07/04 18:58:22 UTC, 0 replies.
- (knox) 15/46: KNOX-3294: Upgrade bootstrap to 5+ on login,logout and redirecting pages (#1252) - posted by sm...@apache.org on 2026/07/04 18:58:23 UTC, 0 replies.
- (knox) 16/46: KNOX-3445: ignore GatewayServerTest.testRefreshGatewayConfig temporarily (#1255) - posted by sm...@apache.org on 2026/07/04 18:58:24 UTC, 0 replies.
- (knox) 17/46: KNOX-3345: Fix intermittent testRefreshGatewayConfig test issue (#1259) - posted by sm...@apache.org on 2026/07/04 18:58:25 UTC, 0 replies.
- (knox) 18/46: Bump org.apache.commons:commons-configuration2 from 2.10.1 to 2.15.0 (#1238) - posted by sm...@apache.org on 2026/07/04 18:58:26 UTC, 0 replies.
- (knox) 19/46: KNOX-3348: Upgrade BouncyCastle to 1.84 (#1261) - posted by sm...@apache.org on 2026/07/04 18:58:27 UTC, 0 replies.
- (knox) 20/46: KNOX-3335: Add pylint pre-push linting for .github/workflows/tests Python integration tests (#1260) - posted by sm...@apache.org on 2026/07/04 18:58:28 UTC, 0 replies.
- (knox) 21/46: KNOX-3334 - Introduce ActorChainPrincipal for RFC 8693 instead of ImpersonatedPrincipal (#1257) - posted by sm...@apache.org on 2026/07/04 18:58:29 UTC, 0 replies.
- (knox) 22/46: KNOX-3340: Add Control for LDAPRolesLookupInterceptor (#1258) - posted by sm...@apache.org on 2026/07/04 18:58:30 UTC, 0 replies.
- (knox) 23/46: KNOX-3352: Set scheme for Iceberg REST catalog based on ssl enabled c… (#1265) - posted by sm...@apache.org on 2026/07/04 18:58:31 UTC, 0 replies.
- (knox) 24/46: KNOX-3351: Resolve LDAP roles for users with no groups (#1266) - posted by sm...@apache.org on 2026/07/04 18:58:32 UTC, 0 replies.
- (knox) 25/46: KNOX-3347 - Introduce TokenExchangePrincipal for extending Act claim … (#1262) - posted by sm...@apache.org on 2026/07/04 18:58:33 UTC, 0 replies.
- (knox) 26/46: KNOX-3354: Remove index suffix from actor groups header for roles in AbstractAuthResource (#1267) - posted by sm...@apache.org on 2026/07/04 18:58:34 UTC, 0 replies.
- (knox) 27/46: KNOX-3352: k8s pre-auth validator for service account annotation (#1268) - posted by sm...@apache.org on 2026/07/04 18:58:35 UTC, 0 replies.
- (knox) 28/46: KNOX-3353: Eliminate K8sPreAuthFederationFilter and consolidate logic in ServiceAccountValidator (#1269) - posted by sm...@apache.org on 2026/07/04 18:58:36 UTC, 0 replies.
- (knox) 29/46: KNOX-3356: Allow Cloudera Manager service discovery over cleartext HTTP (#1272) - posted by sm...@apache.org on 2026/07/04 18:58:37 UTC, 0 replies.
- (knox) 30/46: KNOX:3353: Add Docker-based integration tests for k8s ServiceAccountValidator (#1271) - posted by sm...@apache.org on 2026/07/04 18:58:38 UTC, 0 replies.
- (knox) 31/46: KNOX-3358: Support configurable bind credentials for the embedded Knox LDAP service (#1275) - posted by sm...@apache.org on 2026/07/04 18:58:39 UTC, 0 replies.
- (knox) 32/46: KNOX-3234: Upgrade Admin UI Angular to 21+, bootstrap to 5+ (#1249) - posted by sm...@apache.org on 2026/07/04 18:58:40 UTC, 0 replies.
- (knox) 33/46: KNOX-3357: Upgrade Webshell UI frameworks/libraries (#1276) - posted by sm...@apache.org on 2026/07/04 18:58:41 UTC, 0 replies.
- (knox) 34/46: KNOX-3341: LDAP proxy backend handles general searches (#1274) - posted by sm...@apache.org on 2026/07/04 18:58:42 UTC, 0 replies.
- (knox) 35/46: KNOX-3360: create-k8s-alias command to save aliases from k8s secrets (#1279) - posted by sm...@apache.org on 2026/07/04 18:58:43 UTC, 0 replies.
- (knox) 36/46: KNOX-3363: Document create-k8s-alias, create-list-aliases and update export-cert and list-alias KnoxCLI commands (#1281) - posted by sm...@apache.org on 2026/07/04 18:58:44 UTC, 0 replies.
- (knox) 37/46: KNOX-3364: New loadAliasesFromK8sSecrets method in entrypoint.sh to load aliases from k8s secrets. Install jq in the container as well. (#1282) - posted by sm...@apache.org on 2026/07/04 18:58:45 UTC, 0 replies.
- (knox) 38/46: KNOX-3365: New docs for k8s ServiceAccount validator (#1283) - posted by sm...@apache.org on 2026/07/04 18:58:46 UTC, 0 replies.
- (knox) 39/46: KNOX-3341: LDAP proxy general search - review fixes and hardening (#1284) - posted by sm...@apache.org on 2026/07/04 18:58:47 UTC, 0 replies.
- (knox) 40/46: KNOX-3369: Bump requests from 2.32.4 to 2.33.0 and pytest from 8.3.4 to 9.0.3 in /.github/workflows/tests (#1288) - posted by sm...@apache.org on 2026/07/04 18:58:48 UTC, 0 replies.
- (knox) 41/46: KNOX-3367: Update Token State Service DB documentation (#1287) - posted by sm...@apache.org on 2026/07/04 18:58:49 UTC, 0 replies.
- (knox) 42/46: KNOX-3366 - Upgrade Mina-core to 2.2.8 (#1285) via devaspati.krishnatri - posted by sm...@apache.org on 2026/07/04 18:58:50 UTC, 0 replies.
- (knox) 43/46: KNOX-3370: Eliminate deprecated TokenStateService implementations (#1289) - posted by sm...@apache.org on 2026/07/04 18:58:51 UTC, 0 replies.
- (knox) 44/46: KNOX-1608: Remove gateway-adapter module (#1263) - posted by sm...@apache.org on 2026/07/04 18:58:52 UTC, 0 replies.
- (knox) 45/46: KNOX-3371: Fix broken error message on login page (#1290) - posted by sm...@apache.org on 2026/07/04 18:58:53 UTC, 0 replies.
- (knox) 46/46: KNOX-3316: Change downloaded keystore format based on FIPS (#1292) - posted by sm...@apache.org on 2026/07/04 18:58:54 UTC, 0 replies.
- (knox) branch knox_idf updated (157af9580 -> 3a3b8043d) - posted by sm...@apache.org on 2026/07/05 12:01:45 UTC, 0 replies.
- (knox) 01/01: Knox as OIDC Provider (#1215) - posted by sm...@apache.org on 2026/07/05 12:01:46 UTC, 1 replies.
- (knox) branch master updated: KNOX-3372: Add gateway-reloadable documentation (#1297) - posted by ha...@apache.org on 2026/07/05 17:32:03 UTC, 0 replies.
- (knox) branch master updated: KNOX-3344: Upgrade pac4j to 6.5.3 (#1278) - posted by bo...@apache.org on 2026/07/06 11:44:33 UTC, 0 replies.
- (knox) branch dependabot/maven/org.apache.derby-derby-10.17.1.0 created (now 6554a027f) - posted by gi...@apache.org on 2026/07/06 11:45:25 UTC, 0 replies.
- (knox) branch master updated: KNOX-3374: Fix inherited roles missing from auth headers when LDAP roles-lookup interceptor is active (#1300) - posted by ha...@apache.org on 2026/07/08 13:45:10 UTC, 0 replies.
- (knox) branch master updated: KNOX-3359 - Support Single-Purpose EKU Certificates (#1291) - posted by mo...@apache.org on 2026/07/09 18:54:19 UTC, 0 replies.
- (knox) branch dependabot/maven/org.apache.directory.api-api-ldap-client-api-2.1.8 created (now eb457cf62) - posted by gi...@apache.org on 2026/07/09 18:55:33 UTC, 0 replies.
- (knox) branch master updated: KNOX-3375: Wire in gatewayservices for LDAPRolesLookupInterceptorFactory so KnoxCLI is able to load it (#1303) - posted by sm...@apache.org on 2026/07/13 10:36:27 UTC, 0 replies.
- (knox) branch master updated: KNOX-3376: Use DeafultAliasService in Knox OOTB (#1304) - posted by sm...@apache.org on 2026/07/13 12:04:13 UTC, 0 replies.
- (knox) branch master updated: KNOX-3377: KNOX-3378: KNOX-3379: Support secure LDAP (LDAPS) for the Knox embedded LDAP service (#1305) - posted by sm...@apache.org on 2026/07/15 08:47:41 UTC, 0 replies.
- (knox) branch dependabot/maven/org.apache.directory.api-api-ldap-client-api-2.1.8 deleted (was eb457cf62) - posted by gi...@apache.org on 2026/07/15 09:13:13 UTC, 0 replies.
- (knox) branch master updated: KNOX-3374: Skip redundant roles lookup in PreAuth/ExtAuthz when the identity-assertion layer already resolved roles (#1306) - posted by sm...@apache.org on 2026/07/15 15:36:56 UTC, 0 replies.
- (knox) branch master updated: KNOX-3380: hive_metastore_enable_ssl config should be used to determin if SSL is enabled on HMS (#1307) - posted by sm...@apache.org on 2026/07/15 16:45:44 UTC, 0 replies.
- (knox) branch master updated: KNOX-3361: Route OpenSAML off BouncyCastle in FIPS mode (#1299) - posted by ha...@apache.org on 2026/07/16 04:45:11 UTC, 0 replies.
- (knox) branch knox_idf updated (3a3b8043d -> a023563db) - posted by sm...@apache.org on 2026/07/17 07:39:26 UTC, 0 replies.
- (knox) branch master updated: KNOX-3383: Bump Jackson to 2.18.9 due to CVEs (#1310) - posted by sm...@apache.org on 2026/07/17 13:48:14 UTC, 0 replies.
- (knox) branch master updated: KNOX-3382: Bump Netty to 1.135.Final due to CVEs (#1309) - posted by sm...@apache.org on 2026/07/17 13:48:23 UTC, 0 replies.
- (knox) branch pr-1293 created (now a83f03123) - posted by lm...@apache.org on 2026/07/18 14:02:07 UTC, 0 replies.
- (knox) 01/01: Resolved 4 additional "inferred" to "maintainer" - posted by lm...@apache.org on 2026/07/18 14:02:08 UTC, 0 replies.
- (knox) branch master updated: Add Project Security Threat Model Document (#1312) - posted by lm...@apache.org on 2026/07/18 15:05:39 UTC, 0 replies.
- (knox) branch master updated: KNOX-3381: Fix HaDispatch unnecessary failover due to IOException during writeOutboundResponse (#1308) - posted by ha...@apache.org on 2026/07/20 06:09:29 UTC, 0 replies.
- (knox) branch knox_idf updated: KnoxIDF - Fixed pylint and test issues in Docker-based tests - posted by sm...@apache.org on 2026/07/21 13:43:00 UTC, 0 replies.
- (knox) branch knox_idf updated: KNOX-3355 - Add TrustedOidcIssuerService schema and interface (#1311) - posted by lm...@apache.org on 2026/07/21 20:31:34 UTC, 0 replies.
- (knox) branch master updated: KNOX-3385: Ldap Proxy accepts search using either proxy or remote base dn (#1314) - posted by sm...@apache.org on 2026/07/22 08:06:19 UTC, 0 replies.
- (knox) branch master updated: KNOX-3388: Improve alias creation during EKU mode testing (#1316) - posted by sm...@apache.org on 2026/07/22 08:26:26 UTC, 0 replies.
- (knox) branch knox_idf updated: KNOX-3355 - Add OIDCDiscoveryHelper, JdbcTrustedOidcIssuerService, and TrustedOidcIssuerServiceFactory (#1315) - posted by sm...@apache.org on 2026/07/22 13:25:25 UTC, 0 replies.
- (knox) branch master updated: KNOX-3389: Embedded LDAP getUserGroups drops roles-lookup roles that have no backing group (#1318) - posted by sm...@apache.org on 2026/07/22 18:15:15 UTC, 0 replies.
- (knox) branch knox_idf updated: KNOX-3390 - Address comments in PR 1315 (#1320) - posted by sm...@apache.org on 2026/07/23 09:48:48 UTC, 0 replies.
- (knox) branch knox_idf updated: KNOX-3390: Moved gateway-level config to GatewayConfig and implemented the missing methods (#1322) - posted by sm...@apache.org on 2026/07/23 10:12:46 UTC, 0 replies.
- (knox) branch knox_idf updated (5e64d708c -> c0eb9b583) - posted by sm...@apache.org on 2026/07/23 10:20:43 UTC, 0 replies.
- (knox) 01/06: Knox as OIDC Provider (#1215) - posted by sm...@apache.org on 2026/07/23 10:20:44 UTC, 0 replies.
- (knox) 02/06: KnoxIDF - Fixed pylint and test issues in Docker-based tests - posted by sm...@apache.org on 2026/07/23 10:20:45 UTC, 0 replies.
- (knox) 03/06: KNOX-3355 - Add TrustedOidcIssuerService schema and interface (#1311) - posted by sm...@apache.org on 2026/07/23 10:20:46 UTC, 0 replies.
- (knox) 04/06: KNOX-3355 - Add OIDCDiscoveryHelper, JdbcTrustedOidcIssuerService, and TrustedOidcIssuerServiceFactory (#1315) - posted by sm...@apache.org on 2026/07/23 10:20:47 UTC, 0 replies.
- (knox) 05/06: KNOX-3390 - Address comments in PR 1315 (#1320) - posted by sm...@apache.org on 2026/07/23 10:20:48 UTC, 0 replies.
- (knox) 06/06: KNOX-3390: Moved gateway-level config to GatewayConfig and implemented the missing methods (#1322) - posted by sm...@apache.org on 2026/07/23 10:20:49 UTC, 0 replies.
- (knox) branch master updated: KNOX-3333 - Update Letsencrypt staging certs (#1244) - posted by mo...@apache.org on 2026/07/23 11:02:39 UTC, 0 replies.
- (knox) branch master updated: KNOX-3041: Eliminate load-balancing race condition in HA dispatch (#1317) - posted by ha...@apache.org on 2026/07/23 17:21:17 UTC, 0 replies.
- (knox) branch dependabot/maven/org.postgresql-postgresql-42.7.12 created (now d9a3c6930) - posted by gi...@apache.org on 2026/07/23 19:35:31 UTC, 0 replies.
- (knox) branch master updated: Bump org.postgresql:postgresql from 42.7.11 to 42.7.12 (#1323) - posted by ha...@apache.org on 2026/07/24 06:06:02 UTC, 0 replies.
- (knox) branch dependabot/maven/org.postgresql-postgresql-42.7.12 deleted (was d9a3c6930) - posted by gi...@apache.org on 2026/07/24 06:06:08 UTC, 0 replies.
- (knox) branch knox_idf updated: KNOX-3368 - Trusted OIDC Issuer admin API for Knox IDF (#1327) - posted by sm...@apache.org on 2026/07/24 08:43:12 UTC, 0 replies.
- (knox) branch revert-1255-KNOX-3345 deleted (was ef8dcbd83) - posted by sm...@apache.org on 2026/07/24 10:13:22 UTC, 0 replies.
- (knox) branch v3.0.0 created (now a6d36773a) - posted by ha...@apache.org on 2026/07/24 10:36:54 UTC, 0 replies.
- (knox) tag v3.0.0-RC1 deleted (was a6d36773a) - posted by ha...@apache.org on 2026/07/24 10:46:38 UTC, 0 replies.
- (knox) branch knox_idf updated: KNOX-3390: Corrected JUnit test coverage for max issuers (#1326) - posted by sm...@apache.org on 2026/07/24 18:31:38 UTC, 0 replies.
- (knox) branch knox_idf updated: KNOX-3396: Return 4xx for type-mismatched register bodies and issuer-limit-reached instead of 500 (#1328) - posted by sm...@apache.org on 2026/07/24 18:32:05 UTC, 0 replies.
- (knox) branch master updated: KNOX-3397: Add preauth.auth.header.actor.groups to set actor groups header name explicitly (#1329) - posted by sm...@apache.org on 2026/07/27 09:55:16 UTC, 0 replies.
- (knox) branch v3.0.0 updated: KNOX-3397: Add preauth.auth.header.actor.groups to set actor groups header name explicitly (#1329) - posted by sm...@apache.org on 2026/07/27 11:57:25 UTC, 0 replies.
- (knox) branch master updated: KNOX-3398: Enable Iceberg REST catalog SSL only when ENCRYPT_ALL_PORTS is set (#1330) - posted by sm...@apache.org on 2026/07/28 12:17:06 UTC, 0 replies.
- (knox) branch v3.0.0 updated: KNOX-3398: Enable Iceberg REST catalog SSL only when ENCRYPT_ALL_PORTS is set (#1330) - posted by sm...@apache.org on 2026/07/28 12:18:15 UTC, 0 replies.
- (knox) branch master updated: KNOX-3399 - Make RFC 8693 token exchange work for form-encoded requests and align it with the spec (#1334) - posted by sm...@apache.org on 2026/07/30 14:34:10 UTC, 0 replies.
- (knox) branch v3.0.0 updated: KNOX-3399 - Make RFC 8693 token exchange work for form-encoded requests and align it with the spec (#1334) - posted by sm...@apache.org on 2026/07/30 20:14:03 UTC, 0 replies.
- (knox) branch master updated: KNOX-3403: RFC 8693 token exchange: use the impersonated subject as the token sub on non-server-managed topologies (#1336) - posted by sm...@apache.org on 2026/07/31 05:11:40 UTC, 0 replies.
- (knox) branch v3.0.0 updated: KNOX-3403: RFC 8693 token exchange: use the impersonated subject as the token sub on non-server-managed topologies (#1336) - posted by sm...@apache.org on 2026/07/31 06:39:45 UTC, 0 replies.
- (knox) branch master updated: KNOX-3386: LDAP Proxy pages backends (#1331) - posted by sm...@apache.org on 2026/07/31 14:11:13 UTC, 0 replies.
- (knox) branch v3.0.0 updated: KNOX-3386: LDAP Proxy pages backends (#1331) - posted by sm...@apache.org on 2026/07/31 14:13:00 UTC, 0 replies.