Platform Manager 16.0.1 Changelog

AXPD-12403 - Deleting an Application or a private Environment now also deletes the Kafka users, Schema Registry clients and Vault secrets that Platform Manager created for its credentials

AXPD-12383 - Fix deleting any provided Kafka user or Schema Registry client

AXPD-12383 - Fix taking over another Schema Registry client with a Schema Registry OAuth credential

AXPD-12383 - Deleting a named Kafka credential of a Connector no longer deletes its other Kafka credentials

AXPD-12364 - Removed the internal topic-browse configuration endpoint from the public API documentation

AXPD-12302 - Stopping many Axual Connect connectors at once no longer fails while the Connect worker rebalances

Upgrade Jackson to 2.21.7 and 3.1.7 to fix CVE-2026-89407, CVE-2026-89425, CVE-2026-68497, CVE-2026-91776, CVE-2026-91777, CVE-2026-19032 and CVE-2026-83557. Spring Boot 4.1.1 still manages 2.21.5 and 3.1.5, which have them

Upgrade the base image to ubi9/openjdk-25-runtime:1.24-3.1790929655, which fixes 5 vulnerabilities in the operating system packages (2 of them High)

AXPD-12382 - Upgrade lz4-java to 1.11.4 (CVE-2026-106451 and five more) and the wire protobuf libraries to 6.4.7 (CVE-2026-45799, CVE-2026-63126)

AXPD-12387 - GET /api/users no longer answers 500 Failed to serialize response body

AXPD-12387 - A Connector that has failed can now be reset (undeployed). Before, RESET was refused with Invalid action RESET for deployment in state FAILED, so its active principal could not be deleted and a Terraform destroy failed

AXPD-12227 - Schema Registry config is now also injected for the Snowflake Avro converter and Axual’s ADLS Gen2 AvroObjectConverter, which previously started with no registry URL or credentials

AXPD-12189 - A group’s members, managers and resourceManagers now also accept a bare {uid}, which resolves to either a user or a service account

AXPD-12146 - A CONNECTOR deployment declaring a Confluent Avro converter now gets its Schema Registry URL and credentials injected in Confluent’s own config shape, alongside the existing Apicurio injection

AXPD-12019 - New GET /application_deployments/{id}/logs/download streams the target Kafka Connect cluster’s worker logs as a plain-text attachment

AXPD-12019 - Connect Reimagined: Each streamed Kafka Connect log line now carries the worker that wrote it and a timestamp (the KSML log stream is unchanged)

AXPD-12019 - Connect Reimagined: GET /application_deployments/{id}/logs now accepts a minLevel filter (TRACE–FATAL) and honors tailLines=0 in text/event-stream mode

AXPD-11969 - Connect Reimagined: GET /application_deployments/{id}/logs accepts filterByConnector and now returns merged entries/linesRead/linesReturned/truncated/degraded fields across both the JSON and text/event-stream modes (requires ksml-provisioner ≥ the AXPD-11974 release)

AXPD-11901 - Flink Integration: Starting a FLINK_SQL Application Deployment now auto-generates its Schema Registry credentials when missing, and platform-injects the avro-confluent connection options

AXPD-11914 - Add Service accounts support

AXPD-11725 - Internal refactor: ApplicationAccessAuthorizer now authorizes one Environment at a time instead of a collection (no functional change)

AXPD-10758 - Show the Instance used by the Environment

AXPD-11147 - Connector status is now always read live from the Connect REST interface instead of stored in the DB, with a new Connector Deployment State Fetcher replacing the old Deployment Reconciliation job

AXPD-11190 - Allow changing a Stream’s retentionPolicy even when it already has active StreamConfigs

AXPD-11115 - Admin Insights: Shared Principal (certificate) added

AXPD-11395 - Admin Insights: Export detail tables as CSV

AXPD-11411 - Connect Reimagined: Register Kafka Connect cluster

AXPD-11415 - Connect Reimagined: List and retrieve registered Kafka Connect clusters

AXPD-11412 - Connect Reimagined: Validate Kafka Connect cluster during registration

AXPD-11420 - Connect Reimagined: Kafka Connect plugin catalog and discovery, with new per-cluster endpoints to list and refresh plugins; GET /connect_plugins now returns a merged list across Axual Connect and Kafka Connect

AXPD-11862 - Connect Reimagined: Deployment targets for CONNECTOR Applications now list Kafka Connect clusters with plugin catalog metadata and group/plugin eligibility

AXPD-11419 - Connect Reimagined: Enforce group authorization for connector deployments

AXPD-11430 - Connect Reimagined: CONNECTOR Application Deployments now serve /logs (JSON batch or SSE stream) merged from every worker pod, with an optional logViewerUrl on the Kafka Connect Cluster pointing at the runtime provisioner that reads them

AXPD-11430 - Connect Reimagined: A Kafka Connect cluster’s log viewer is now validated by fetching a log line before registration and on update, catching bad URLs/credentials/config at setup time instead of as empty logs later

AXPD-11862 - Connect Reimagined: Group Authorization for Kafka Connect cluster Edit Page

AXPD-11938 - Connect Reimagined: Allow authorized groups to be deleted in the Group page

AXPD-11708 - Flink Integration: Create & Manage FLINK_SQL Cluster

AXPD-11830 - Flink Integration: Validate FLINK_SQL Cluster inputs against the Ververica platform on register/update

AXPD-11709 - Flink Integration: Create a FLINK_SQL Application

AXPD-11710 - Flink Integration: Configure Deployment Target for FLINK_SQL Application

AXPD-11711 - Flink Integration: Create the FLINK_SQL Application Deployment

AXPD-11712 - Flink Integration: Configure deployment size for FLINK_SQL Application Deployment

AXPD-11818 - Starting an Axual Managed KSML Application Deployment now generates its Schema Registry credentials when they are missing

AXPD-11715 - Flink Integration: View the status of a FLINK_SQL Application Deployment, including a crash-looping job reported as Failed with restart count and observed Flink status

AXPD-11713 - Flink Integration: Start and stop a FLINK_SQL Application Deployment

AXPD-11820 - Flink Integration: View the logs and metrics of a FLINK_SQL Application Deployment.

AXPD-11761 - Flink Integration: Auto-generate CREATE TEMPORARY TABLE DDL for a FLINK_SQL Application Deployment

AXPD-11896 - Platform Manager now targets Java 25 and requires a Java 25 runtime, on the ubi9/openjdk-25-runtime container image

AXPD-11423 - Connect Reimagined: A CONNECTOR deployment with no stored target now reports the implicit legacy Axual Connect target on GET, and PATCH /application_deployments/{id} can update targetId/targetVersion independently of configs

AXPD-11760 - Flink Integration: PATCH /application_deployments/{id} now validates a FLINK_SQL deployment’s Flink SQL before provisioning, rejecting disallowed statements, overridden platform properties, or unsupported connectors with 400 Bad Request

AXPD-11837 - Flink Integration: flink_sql and flink_task_size can now be patched independently on PATCH /application_deployments/{id} for a FLINK_SQL Application Deployment

AXPD-11876 - Flink Integration: Providing Schema Registry configuration to Flink Cluster

AXPD-11958 - Connect Reimagined: Starting/resuming/validating a Kafka Connect CONNECTOR Application Deployment now injects the Axual topic-name-resolving SMT config computed from the target cluster’s topic pattern

AXPD-11821 - Connect Reimagined: Kafka Connect deployment failure notification emails now include the name of the target Kafka Connect cluster

AXPD-11714 - Flink Integration: DELETE /application_deployments/{id} and the cascading DELETE /applications/{id} now support FLINK_SQL Application Deployments, stopping any running job and deleting the Ververica deployment first

AXPD-11782 - Connect Reimagined: Delete Kafka Connect Cluster

AXPD-11425 - Connect Reimagined: Configure connector Kafka principals via Vault

AXPD-11427 - Connect Reimagined: Configure connector Schema Registry principals via Vault, auto-generating a basic-auth credential in the target cluster’s own Connector Vault on first start

AXPD-11975 - Users who own neither the Application nor the Topic can again see an Approved Application Access Grant when both the Application and Environment are public, narrowing back AXPD-11484 after AXPD-11948 had closed it entirely

AXPD-11975 - Owners of an Environment and ENVIRONMENT_ADMIN can now see the Application Access Grants in that Environment regardless of status, but not a PRIVATE Application of another team

AXPD-11949 - Flink Integration: Align credential for the Flink application (only SASL)

AXPD-11954 - New GET /instances/{uid}/axual-connect/deletion-constraints reports whether an Instance’s legacy Axual Connect config can be safely removed

AXPD-11906 - Flink Integration: Introduce resume and reset operations

AXPD-11905 - The action links on GET /application_deployments/{uid}/status for a CONNECTOR Application Deployment now follow the live Kafka Connect state instead of the desired state

AXPD-12006 - Flink Integration: Guard deletion of a Flink Cluster

Flink Integration: Create the FLINK_SQL Application Deployment through the platform’s v1 deployment API

AXPD-11428 - Connect Reimagined: Manage connector lifecycle via one endpoint per action (POST /application_deployments/{uid}/start, /stop, /reset, /restart, /resume, /task/{taskId}/restart)

AXPD-12047 - Flink Integration: Disable reset-consumer offset button for FLINK_SQL Application Deployment

AXPD-12048 - Normalize schemaRegistryType to APICURIO/CONFLUENT on input and output

AXPD-11954 - PATCH /instances/{id} clearing connectUrls now re-runs the Axual Connect deletion-constraints check instead of being unconditionally rejected, succeeding once no CONNECTOR Application Deployment still targets legacy Axual Connect

AXPD-11713 - GET /application_deployments/{id} no longer returns start, stop or edit links for a FLINK_SQL deployment

AXPD-11713 - GET /application_deployments/{id}/status for a FLINK_SQL deployment reports fewer states and drops flinkStatus.message in favor of flinkStatus.observedFlinkJobStatus/flinkStatus.restarts

AXPD-11713 - Starting a KSML or FLINK_SQL Application now takes the broker address only from the Cluster’s bootstrapUrlsByAuthentication, with no fallback to Vault provider information

AXPD-11420 - GET /connect_plugins no longer returns pluginConfigs; the merged list now returns only pluginClass, pluginType, and instance

AXPD-11147 - Deployment-state and Connect scheduler config-keys were renamed to follow the modular naming (old keys still honored as a fallback for one release):

Schema Registry clients are now closed after each operation, scheduled task timestamps are persisted in UTC, and short-lived Kafka AdminClients no longer log their full configuration at INFO

A client disconnecting before a response is fully written is no longer logged as an ERROR with a full stack trace, and the “No schema registry details” warning is now only logged when deleting a topic whose schemas cannot be removed

AXPD-12215 - Connect Reimagined: A CONNECTOR Application Deployment or distributor that Kafka Connect reports as STOPPED or RESTARTING is now reported as stopped or starting, with its actions, instead of failing its status with a 500

AXPD-12206 - Replacing an application’s Schema Registry authentication now transfers ownership of its Kafka Streams internal-topic subjects on Apicurio Registry 3.x

AXPD-12194 - Flink Integration: GET /application_deployments/{id} and search/findByApplicationAndEnvironment now offer a FLINK_SQL Application Deployment’s delete link whenever its Flink job has reached an end state (e.g. Failed)

AXPD-12211 - Transferring Schema Registry artifact ownership no longer fails as unsupported on an Apicurio instance whose registry type is not stored in Vault

AXPD-12192 - An InvalidRequestException error response’s detail field now shows the translated message instead of the raw code message

Flink Integration: A stopped FLINK_SQL Application Deployment now reports its status as Stopped instead of Undeployed

AXPD-12176 - Flink Integration: Audit history no longer fails with a 500 on the Instance resource type; Flink Cluster events now render a summary

AXPD-12144 - Connect Reimagined: Validating a CONNECTOR Application Deployment’s config now returns 400 Bad Request with Kafka Connect’s own error message (e.g. an unresolved ${vault:…​} reference) instead of a generic 500 with no detail

AXPD-12147 - Generate Schema Registry credential at creation time for FLINK_SQL and KSML Application Deployment

AXPD-12123 - Connect Reimagined: Regenerating a CONNECTOR Application’s SASL credential now reapplies its granted Streams, so the new credential is actually granted the topic ACLs it needs

AXPD-11371 - Deleting an Environment now correctly reports it can’t be deleted while an Application Deployment remains in any state, not just RUNNING/RUNNING_WITH_FAILURES; previously a stale FAILED/UNDEPLOYED/STOPPED deployment was invisible to the check, so the delete call could fail with a raw database error instead of a clear message

AXPD-12115 - A Stream’s (topic) ACLs are now built only from an Application’s Kafka (SASL) credentials. The Schema Registry credential generated for a KSML Application was being added as a topic ACL alongside the Kafka credential username; only the Kafka credential username is now emitted

AXPD-12120 - Connect Reimagined: creating a CONNECTOR Application Deployment that already names a target Kafka Connect Cluster now migrates the application’s Connector Vault secrets onto that cluster, as changing the target already did. A certificate activated before any deployment exists is written to the legacy vault, because no cluster vault is known yet; nothing moved it afterwards, so the cluster’s vault stayed empty. The deployment could still be started - the check is on the Application Principal, not on the vault - and the connector then failed in Kafka Connect with a 404 for its certificate and private key

AXPD-12023 - Connect Reimagined: A CONNECTOR Application Deployment’s connector-logging-* topic is now created/deleted correctly as its targetId switches between a registered Kafka Connect cluster and legacy Axual Connect

AXPD-10336 - Connect Reimagined: A CONNECTOR Application Deployment whose connector Kafka Connect reports as UNASSIGNED while its tasks keep running is now reported as Running/Running with failures and offered stop/restart/restart task, instead of Stopped

Connect Reimagined: Starting a CONNECTOR Application Deployment targeting a SASL_SCRAM Kafka Connect cluster now requires a Kafka credential instead of a TLS principal, so the start link it is offered can actually be used

Connect Reimagined: The start link/action for a CONNECTOR Application Deployment now requires the credential matching its target cluster’s configured authentication method, instead of always requiring a TLS principal

AXPD-12003 - Connect Reimagined: Deleting an Instance is now also blocked while it has Kafka Connect or Flink clusters registered, or a CONNECTOR deployment still targeting legacy Axual Connect, with GET /instances/{id}/deletion-constraints reporting these via new connectClustersCount/connectClusters, flinkClustersCount/flinkClusters and axualConnectAppDeploymentCount/axualConnectApplications fields, and envShortNames replaced by a richer environments field

Connect Reimagined: A CONNECTOR Application Deployment’s topics, topics.regex, errors.deadletterqueue.topic.name, offsets.storage.topic and topic.creation.<group>.include/.exclude are now resolved to the physical topic names before the config reaches Kafka Connect, so a logical name no longer fails with TOPIC_AUTHORIZATION_FAILED; consumer.override.group.id is owned by the platform in the same way, and a value that differs from the resolved one is replaced and logged

AXPD-10950 - Can create instance with cluster belonging to different tenant

Connect Reimagined: PATCH`ing a Kafka Connect Cluster can now change the AppRole `roleId/secretId alone, without also resupplying connectorVaultUrl and connectorVaultPath

Connect Reimagined: :validate-vault now checks write access against the actual secrets-write path instead of the bare connectorVaultPath, which could previously pass validation without real write access

Connect Reimagined: A connector’s mTLS/SASL_SCRAM Vault secrets are now deleted regardless of the target cluster’s current authMethod, instead of leaving a stale secret orphaned after an auth-method switch

Connect Reimagined: The clusters field on a generated connector SASL_SCRAM Kafka credential now reports the Kafka cluster the Connect cluster actually deploys against, instead of the Kafka Connect cluster’s own name

Connect Reimagined: A leading or trailing slash on a ConnectCluster’s connectorVaultPath no longer produces a double slash in the Vault paths built from it

AXPD-11975 - GET /overview now answers with the same visibility rule as the Application Access Grant endpoints, which it had drifted away from

AXPD-11975 - GET /overview no longer treats a TENANT_ADMIN as a member of every team, which is what gave them the whole Environment

AXPD-11975 - GET /overview now treats a Topic or Application as isolated per Environment, instead of a connection elsewhere hiding it from the isolated section

AXPD-11975 - The _links.self of GET /overview now echoes the request instead of the caller’s resolved teams

AXPD-11763 - Fix USER_CREATE, USER_UPDATE, and USER_DELETE audit entry referencing the ACTOR user

AXPD-11825 - Fix NullPointerException when updating a Tenant whose settings column is NULL

AXPD-11710 - Unify API Error detail with message for an incompatible schema error topic apply

AXPD-11886 - Fix creating an Environment on an Instance whose Cluster has no multi-environment support when another Cluster of the Tenant already has Environments

AXPD-11713 - A request the Ververica platform rejects now returns 400 Bad Request with what the platform objected to, instead of the platform’s raw error envelope

Fix NullPointerException when viewing the status of a KSML or Connector deployment

AXPD-11742 - Reject JSON schemas using drafts unsupported by Apicurio

AXPD-11922 - GET /audit-resource-types returns human-readable labels instead of enum names, consistent with /audit-actions and /audit-history

AXPD-11948 - Fix bug that allows users to see all topic access requests

AXPD-11983 - Fix Flink SQL validation rejecting a user-written BEGIN STATEMENT SET; …​ END; block

AXPD-11999 - Connect Reimagined: Changing a CONNECTOR Application Deployment’s targetId now migrates its mTLS certificate and SASL_SCRAM credential to the new target’s Vault, instead of leaving them orphaned

Connect Reimagined: The periodic Connector deployment state-poll job no longer fails with Authentication object cannot be null for a deployment targeting a registered Kafka Connect cluster

AXPD-11905 - Starting a CONNECTOR Application Deployment now picks its Kafka Connect operation from the live state, fixing two `500`s on a deployment whose recorded state had drifted from Connect

AXPD-11905 - GET /application_deployments/{uid}/status for a CONNECTOR Application Deployment whose actual state is Completed now returns 200 OK with no action links instead of 500

AXPD-11905 - A CONNECTOR Application Deployment whose live state can’t be read because Kafka Connect is unreachable now rejects actions with 500 instead of silently being treated as not deployed

AXPD-12019 - Connect Reimagined: tailLines on GET /application_deployments/{id}/logs now accepts 0 instead of being rejected as below the minimum of 1

Flink Integration: A change to axual.applicationlifecycle.flink.kubernetes.pods now reaches existing FLINK_SQL Application Deployments too, instead of only new ones, since deployment read/update/delete now all run on Ververica’s v1 API

AXPD-12104 - Flink SQL validation now rejects multiple INSERT INTO statements not wrapped in BEGIN STATEMENT SET; …​ END;

AXPD-12119 - Connect Reimagined: The topic-name-resolving SMT is no longer injected into a CONNECTOR Application Deployment’s config when the target cluster’s topic pattern is a bare {topic} placeholder

AXPD-12105 - Block creation of a second Kafka credential for a FLINK_SQL Application

AXPD-12203 - An IAM-managed Group no longer grants its members permissions when the tenant has IAM group management disabled

AXPD-12213 - Creating or renaming a topic is now rejected when its name differs from an existing topic in the tenant only by dots versus underscores

AXPD-12045 - A Kafka Streams or KSML application authenticating via OAuth now receives its internal-topic prefixed ACLs under the OAuth-prefixed principal, so it can create and access its own changelog and repartition topics

AXPD-11428 - PUT /application_deployments/{uid}/operation and PUT /application_deployments/{uid}/task/{taskId}/operation are deprecated in favour of the per-action endpoints, and will be removed in 2027.3

PUT /application_deployments/{id} is deprecated in favour of PATCH /application_deployments/{id} and will be removed in a future release. It remains available for Connector/KSML deployments; a PUT on a FLINK_SQL deployment returns 405 Method Not Allowed.

AXPD-11941 - InstanceSettings.CONNECT_LOGGING_SUPPORT_ENABLED (connectLoggingSupportEnabled on instance create/update requests) is deprecated and will be removed in a future release.

AXPD-11047 - Include stream, application and access-type to the GET /application_access_grants/{uid}

AXPD-11547 - Allow topics in the Topic Catalog to be filtered on Schema name

AXPD-11325 - ConnectorIT refactoring, includes Connect REST testcontainers

AXPD-10148 - Refactor migrate connector code into applicationlifecycle module

AXPD-10435 - Enable IAM Group Management on the Tenant page

AXPD-11329 - Enable ProblemDetail (RFC 9457) and create ProblemDetailFactory

AXPD-11330 - Create per-module exception handlers for all custom MVC modules

AXPD-11141 - Update Group Management modal to include Automatic IAM Group Creation toggle

AXPD-10437 - Validate IAM Groups claims

AXPD-10465 - Convert an Axual-based Group to IAM-based Group

AXPD-10472 - Accept iamReference field on Group creation; returns 400 if IAM Group Management is disabled for the Tenant

AXPD-11413 - Implement Group Manager and Resource Manager Authorization for Externalized Groups

AXPD-11095 - Upgrade to Spring Boot 4.0.7

AXPD-11332 - Publish OpenAPI spec

AXPD-10470 - GET /groups to retrieve IAM reference

AXPD-10378 - Add restart action to Connector

AXPD-10470 - GET /groups to retrieve IAM reference

AXPD-10473 - Automatic IAM-managed Group creation logic

AXPD-10466 - Convert an IAM-based Group to an Axual-based Group

AXPD-10471 - Update the Group Detail Edit Page for IAM-managed Groups

AXPD-10525 - ACL operation ITs

AXPD-10534 - Allow configure retention time on the audit_entry table

AXPD-10526 - Schema Registry operation ITs

AXPD-11468 - Extend KSML application /status endpoint with restart information (runningSince, restartsCount, lastRestart)

AXPD-11220 - Log users not using IAM groups (when enabled per Tenant)

AXPD-11205 - Only save customer-provided Connector Configuration

AXPD-10961 - Write audit events to an external system

Update keystore-provider version to 0.3.1

AXPD-11069 - Allow configuring different truststore for client and server

AXPD-11235 - Allow configuring only part of the tls configuration

AXPD-11697 - Connector Owner can now browse their Connector Logs topic via GET /environments/search/findByApplication

AXPD-11692 - Fix NullPointerException in the Notification Service when handling grants approved on an auto-approve environment

AXPD-11684 - Allow removing the last certificate when the application has active grants and SASL credentials are present

AXPD-11670 - Fix streams, environments, applications returning 405 Method Not Allowed when clearing viewer groups

AXPD-10481 - Connector state reconciler now fetches only deployments in reconcilable states (STARTED, FAILED, STARTED_WITH_FAILURES, STARTING), skipping UNDEPLOYED and STOPPED connectors

AXPD-11294 - Fix connector status mismatch when a connector is in UNASSIGNED state

AXPD-8425 - Allow SUPER_ADMIN to view and search SHARED and PRIVATE Cluster

AXPD-10688 - Fix API error field names and add parameterized validation messages

AXPD-11460 - Fix overview response with private apps

AXPD-11484 - Show public Application Access Grants to non-owner users on public environments

AXPD-11485 - Multiple App Principals are marked active for Connector-type application

AXPD-11516 - getSchemaFieldsNames with oneOf

AXPD-11597 - Admin Insights: sorting

AXPD-11379 - Managed apps rely on DB State (not actual)

AXPD-11662 - VaultException not propagated to UI using ProblemDetail

AXPD-11669 - Retrieve Application Deployment status also when the DB status is UNDEPLOYED

AXPD-11677 - Environment owner cannot see all topics and applications in their environment in the Overview page

AXPD-11694 - searchUser for the users with spaces return empty data

AXPD-11704 - null user in access grant notification email

AXPD-10795 - Removed all changes related to deprecated api/schemas/includeSchemaVersions?filter=latest endpoint

AXPD-10427 - Allow searching for deleted/recreated Resources. (resourceId parameter removed from audit history search (GET /audit-history); use resourceName instead.)

AXPD-11075 - Remove auto activation of the first created Application Principal for Connector

AXPD-11491 - Remove user-controlled URLs in Connector availability endpoints

AXPD-11548 - Remove deprecated API endpoints

AXPD-11629 - Unify the running status for KSML and Connector apps

AXPD-10186 - Drop deprecated bootstrapServers field from Cluster entity in favor of Vault-based bootstrap server URLs

AXPD-10922 - Add client authentications to the SchemaRegistry configuration

AXPD-5759 - Handle multiple Authentications for Connector

AXPD-10796 - Add OAuth Principals Prefix setting to Cluster entity

AXPD-9663 - Support non-ASCII characters like breve (ă) in usernames and emails

AXPD-10923 - Allow registering OAuth/Bearer principal for SchemaRegistry

AXPD-11026 - Send notification emails before cluster certificate expiry

AXPD-11024 - Remove subscription management module and Stripe integration

AXPD-10924 - Allow replacing Artifact Owner on Apicurio

AXPD-11105 - Store and return the DisplayName for Connector Config

AXPD-10624 - Removed the deprecated POST /user endpoint

AXPD-10624 - Removed the password column from the user table

AXPD-10627 - Audit the Tenant Create action in the DB

AXPD-10628 - Audit the Tenant Update action in the DB

AXPD-10629 - Audit the Tenant Delete action in the DB

AXPD-10624 - Audit the User Create action in the DB

AXPD-10625 - Audit the User Update action in the DB

AXPD-10626 - Audit the User Delete action in the DB

AXPD-9887 - Audit the Topic Masking Configuration action in the DB

AXPD-9888 - Audit the Schema Masking Configuration action in the DB actions

AXPD-10104 - Audit the Instance Synchronized action in the DB

AXPD-10103 - Audit the Environment Synchronized action in the DB

AXPD-9093 - Remove deprecated myTeams and ownerIds params from /application_access_grants/search/findByAttributes

AXPD-11173 - Add Kafka 4 topic properties message.timestamp.after.max.ms and message.timestamp.before.max.ms to the recognized property list

AXPD-11114 - Admin Insights: add resources-by-group

AXPD-11112 - Admin Insights: add topic volume

AXPD-11112 - Admin Insights: add unused topics

AXPD-9335 - Hibernate Upgrade from 6.2 to 6.6

AXPD-11116 - Allow reset consumer-group offset to timestamp

AXPD-11204 - Log streaming via SSE for KSML deployments

AXPD-11056 - Fix _links for Application Principal

AXPD-11057 - Fix _links for Application Deployment

Fixed LazyInitializationException when deleting application credentials for KSML applications

AXPD-10992 - Unable to delete properties from the Tenant

AXPD-10835 - When clicking the STOP button and there are no tasks, DELETE the Connector instead of PAUSE

AXPD-11018 - Block User email address changes

AXPD-11033 - NPE occurs when updating topic config with Binary schema-type

AXPD-10705 - Fixed Topic Name resolution for AsyncAPI

AXPD-11297 - AsyncAPI spec for non-AVRO topic not working

AXPD-8219 - Migrate Cluster endpoints away from Spring Data REST

AXPD-11071 - Perform validation before deleting Application Credentials

AXPD-11088 - Fix Connector certificate deletion from Vault when active principal is deleted

AXPD-11028 - User should not be able to reset a running KSML application

AXPD-11012 - Fix race condition when approving or revoking grants

AXPD-11109 - Fix race condition when auto approving grants

AXPD-11197 - Fix NPE when auditing the Connector configuration

AXPD-11127 - Resource Managers are not removed when a user is removed from a Group

AXPD-11027 - KSML deployment application status is stored in the DB

AXPD-11258 - Delete a KSML application on a Confluent Schema Registry is blocked

AXPD-10556 - POST /streams returns 500 error with incomplete request body (missing keyType or valueType)

AXPD-10591 - User should not be able to create SASL credentials for connector apps

AXPD-10791 - Make ApplicationAccessGrant creation idempotent

AXPD-10763 - Add orphan field to Topics CSV export to identify topics without approved application access grants

AXPD-10711 - Expose CPU and memory values in KSML deployment size

AXPD-10244 - Add state store configuration for KSML application deployments

AXPD-10684 - Enhance save operation efficiency in Connect Plugin reconciliation

AXPD-10695 - Allow configure more Topic Config properties

AXPD-9192 - KSML Deployment failure notification emails

AXPD-10689 - Clear PVC as part of KSML stateful disabled

AXPD-10589 - Implement a cleanup mechanism for the event_publication table

AXPD-10408 - Configurable approlePath per VaultTemplate

AXPD-10579 - Clear PVC as part of the Kafka Reset action on KSML

AXPD-10845 - Add support for retrieving metrics of KSML application deployments

Add the option to provide annotations to Deployment resource

Add the option to provide annotations to Service resource

AXPD-10580 - Clear the PVC and reset the application as part of the Application deletion

AXPD-8936 - Schema Overview redesign

AXPD-8193 - Show Elevated Rights Users

AXPD-10793 - Deprecate myTeams and ownersIds params from /application_access_grants/search/findByAttributes

AXPD-8988 - Notify the application owner about a new schema applied to a topic

AXPD-9344 - Show disabled Start button for KSML

Update Keystore Provider to 0.2.9

AXPD-10778 - Remove uneditable properties from DB and fix Cluster Import

AXPD-8796 - Fix: Removing principal for a Connector and Custom app is allowed when App is connected to the Topic

AXPD-8460 - Unformatted error message on updating application and environment

AXPD-9664 - Too many .jks files generated

AXPD-9904 - Fix APPLICATION_ACCESS_GRANT_VIEW permission to prevent stream owners from viewing grants in private environments

AXPD-10739 - Allow stopping failed connector deployments

AXPD-9098 - Fix VaultTemplate configuration overwrites between instances

AXPD-10737 - Internal topic deletion for KSML deployments

AXPD-10740 - Wrong group name in notification emails

AXPD-10743 - AxualConnectClient getUsername() NPE / Improved error handling

AXPD-10633 - Fix the connector status retrieval to handle concurrent modifications

Use default deployment-size when creating a KSML application-deployment without providing deployment-size

AXPD-10431 - Allow configuring topologySpreadConstrains

AXPD-9348 - Blank Instance/Cluster page on sealed Vault

Update SchemaAuditEventListener to handle missing owner details

AXPD-10859 - User cannot remove un-supported Stream Config properties

Refactored StreamProperties to increase readability

AXPD-8279 - Support for schema type mix

AXPD-10760 - Block Schema Registry configuration removal when applications have Schema Registry credentials configured

AXPD-9496 - Can’t open topic when schema-type is NULL

AXPD-10868 - Resources overview on Group Page uses name instead of groupId to look up associated resources

AXPD-10832 - Wrong config upload preventing snowflake sink connector to start

AXPD-10968 - Fix NPE issue when metrics for KSML app is not available

Removed endpoint deprecated since v8.7.0 /schemas/getAllWithLatestSchemaVersion

AXPD-8740 - The base package has been changed from io.axual.flux to io.axual.governance - this affects logging output and log filters

When a connector takes long to start, the status might remain in UNDEPLOYED, a repeated START operation will show the correct status

AXPD-10536 - Disabled default RestExposure for Repositories

AXPD-10269 - Changed SQL Queries to be compatible with PostgreSQL

AXPD-9951 - Added cluster information to the instance/{uid} response

AXPD-9675 - Audit the Group Create action in the DB

AXPD-9676 - Audit the Group Update action in the DB

AXPD-9677 - Audit the Group Delete action in the DB

AXPD-10358 - Add namingConventionEnabled toggle on the Tenant settings

AXPD-10316 - Changes to distinguish between ACL types

AXPD-10245 - Make the CPU/Memory configurable for KSML application deployments

AXPD-10157 - New endpoint to return available actions per resourceType

AXPD-9414 - Add Ksml Provisioner endpoints (POST, GET, DELETE)

AXPD-9619 - Configure SchemaRegistry SerDes/URL for a KSML Provisioner

AXPD-10516 - KSML /deploy supports multiple SchemaRegistry configurations

AXPD-10568 - Re-expose applications/search/findByName and applications/search/findByShortName endpoints

AXPD-9646 - Audit the Schema Version Upload action in the DB

AXPD-9647 - Audit the Schema Owner Transfer action in the DB

AXPD-9648 - Audit the Schema Delete action in the DB

Allow starting a KSML application with JSON_SCHEMA or PROTOBUF schemas

AXPD-10512 - Define Kafka bootstrap endpoints per Cluster

AXPD-9892 - Audit adding/removing a Cluster to an Instance in the DB

AXPD-10566 - Audit the Schema Registry Configured and Schema Registry Unconfigured actions

AXPD-10514 - KSML /deploy picks correct bootstrap endpoints based on authentication

AXPD-10566 - Audit the SChema Registry Configured and Schema Registry Unconfigured actions

AXPD-10567 - Audit KSML provisioner configured/unconfigured actions

AXPD-10511 - Remove deprecated OrganizationCreatedService and related code

Bump kameleon-schema-lib version 1.2.0

Update Keystore Provider to 0.2.8

Removed .Capabilities.APIVersions checks from PrometheusRule and ServiceMonitor templates; resources are now created whenever their enabled values are set

AXPD-9225 - Properly return any APIError

Fix unwanted Consumer Group deletion

AXPD-7485 - Modify the MyTeam logic of the /overview API

AXPD-10519 - Fix default collation issues after HQL improvements

AXPD-10406 - Schema ownerships block deletion of a group without informing of the cause

Add SSLContext to the KeycloakClient

AXPD-9720 - Fix Create Application Modifies Shortname

Remove unused Instance API and Application Operation Manager SSLContext configuration

AXPD-10578 - Fix Audit history when filtering CRUD action for Application, Topic and Environment Resources

AXPD-10619 - Fix schema compatibility check for mixed schema types (Avro/Protobuf)

AXPD-10607 - Creating/Updating KSML Deployment without deployment-size is possible on the PM Resources

AXPD-10596 - Fix Previously masked fields are still masked if the masking feature is disabled

AXPD-10606 - Delete KSML config of undeployed app

Update validation to use orgShortName instead of lastName for organization registration in Keycloak and Auth0 authorization servers.

Disabled default RestExposure for Repositories, some of the existing undocumented methods might not be available anymore

Add KSML Provisioner is not present anymore in POST /instances, use POST /api/instances/{uid}/ksml-provisioners instead

Update KSML Provisioner is not present anymore in PATCH /instances/{uid}, use POST /api/instances/{uid}/ksml-provisioners instead

ksmlEnabled is not present anymore in POST /instances and PATCH /instances/{uid}, it is returned based on the presence of Ksml Provisioner

connectionCollation=utf8mb4_unicode_ci parameter is now required to connect to a mariadb or mysql database in spring.datasource.url

AXPD-10068 - Clean up Kafka Streams internal topics when app.id changes

AXPD-8983 - Clean up Consumer Groups ACLs when delete app principals

AXPD-9803 - Added a new endpoint /instances/search/findByAttributes for Instance

AXPD-10183 - The validateCredentials logic is included as part of the Update Cluster (PATCH)

AXPD-9026 - Audit the Cluster Create action in the DB

AXPD-9027 - Audit the Cluster Update action in the DB

AXPD-9025 - Audit the Cluster Delete action in the DB

AXPD-9019 - Audit the Environment Create action in the DB

AXPD-9020 - Audit the Environment Update action in the DB

AXPD-9021 - Audit the Environment Delete action in the DB

AXPD-9014 - Audit the Grant Request action in the DB

AXPD-9015 - Audit the Grant Approve action in the DB

AXPD-9016 - Audit the Grant Deny action in the DB

AXPD-9018 - Audit the Grant Cancel action in the DB

AXPD-9017 - Audit the Grant Revoke action in the DB

AXPD-9008 - Audit the Topic Create action in the DB

AXPD-9009 - Audit the Topic Update action in the DB

AXPD-9010 - Audit the Topic Delete action in the DB

AXPD-9002 - Audit the Application Principal Create action in the DB

AXPD-9004 - Audit the Application Credential Create action in the DB

AXPD-9003 - Audit the Application Principal Delete action in the DB

AXPD-9005 - Audit the Application Credential Delete in the DB

Added a custom controller endpoint for DELETE /environments

AXPD-10149 - Group Overview sort Users

AXPD-9006 - Audit the Application Deployment Configured in the DB

AXPD-9007 - Audit the Application Unconfigured action in the DB

AXPD-9028 - Audit the Application STARTED action in the DB

AXPD-9029 - Audit the Application STOPPED action in the DB

AXPD-9030 - Audit the Application RESTARTED action in the DB

AXPD-9969 - Audit the Application Reset action in the DB for Consumer Offset

AXPD-9968 - Audit the Application Reset action of Kafka Streams Application in DB

AXPD-10308 - Refactored the TopicBrowse audit event

AXPD-10200 - Audit the Application RESET action in the DB

AXPD-10329 - Persist ApplicationDeployment config restart_policy

AXPD-10159 - Add searching logic for second and third level resources

AXPD-10331 - Pass DeploymentType to KSML Provisioner

AXPD-9011 - Audit the Topic Configured action in the DB

AXPD-10158 - Add event summary to the auditHistory response

AXPD-9013 - Audit the Topic Unconfigured action in the DB

AXPD-7942 - Audit the Group Browse Permission Granted in the DB

AXPD-10290 - Audit the Group Browse Permission Revoked in the DB

AXPD-10292 - Audit the User Browse Permission Revoked in the DB

AXPD-10291 - Audit the User Browse Permission Granted in the DB

AXPD-10372 - Add audit fields to the Browse Permission DTO

AXPD-10297 - Adds rel links to application_deployment/status calls

Update Keystore Provider to 0.2.7

AXPD-9551 - Fix the Pod Name leakage in the notification email’s header

AXPD-9863 - Prevent other instances from using cert of tenant-protected instance

AXPD-10035 - Connector 404 handled as unauthorized

AXPD-9840 - Edit Cluster requires broker credentials (privateKey/password)

AXPD-10205 - Fix Audit history filtering issue when searching for deleted resources

AXPD-9855 - Axual config topic.pattern collides with KSML app config topic.

AXPD-10333 - refreshDeploymentState for connectors only

AXPD-10306 - Fix importing schemas without namespaces

AXPD-10271 - Deleting Topic without Schemas results in a call to Schema Registry

AXPD-10192 - Fix Hibernate Lazy Loading Exception while creating SASL Credentials

AXPD-10197 - Fix missing authorization check for create link generation for listing groups

AXPD-10386 - Prefixed ACL collision bugfix

AXPD-9962 - Resource Manager role and rules added to permissions

AXPD-9810 - Breaking change removed selection of SR for create/update Instance operations

AXPD-9326 - Improved Grants Overview

AXPD-9120 - Hide sensitive fields when retrieving Instance information

AXPD-9580 - Introduce Delete Constraint Endpoint for Schema

AXPD-9702 - KafkaStreams based reset

AXPD-9680 - Allow changing just the SchemaRegistry Listeners/Properties without changing Credentials

Add Auth0 support in Organization Management module

AXPD-9581 - Introduce Delete Constraint Endpoint for Schema Version

AXPD-9446 - Disable the API /groups exposed by SDR

AXPD-7993 - Audit the Application Update action in the DB

AXPD-9001 - Audit the Application Delete action in the DB

AXPD-9770 - Allow SR password regeneration for Self Managed KSML and Kafka Streams application

AXPD-9022 - Audit the Instance Create action in the DB

AXPD-8920 - Add a new type of Retention Type for compact,delete

AXPD-9645 - Delete internal topics when deleting a “Kafka Streams”-based application

AXPD-9822 - Filter Grant by Access Type

AXPD-9532 - Manage SR credentials for Axual Managed KSML application when creating/deleting application_deployment

AXPD-9948 - Add authentication support in KSML flows

AXPD-9024 - Audit the Instance Delete action

AXPD-6953 - Audit the Topic Browse action in the DB

AXPD-9023 - Audit the Instance Update action

AXPD-9961 - Add only-resource-manager-can-update toggle on the Tenant settings

AXPD-9980 - Self approving for application grand should not be possible

AXPD-9743 - Allows selecting Resource Manager in a Group

AXPD-9031 - View the audit history

AXPD-9590 - Starting an already started connector fails

AXPD-10021 - InstanceCluster couldn’t be saved without SR details

AXPD-9975 - SR Keycloak Details weren’t saving during Instance Edit

AXPD-8221 - Allow sending null properties for the topic apply

AXPD-8742 - Removed the circular dependency between kms and clusterImporter modules

AXPD-9808 - Renamed SchemaDeleteConstraints fields

AXPD-8445 - Deleting user from UI also deletes from Keycloak

AXPD-9807 - Distribution performance issue and flaky test fix

AXPD-9825 - Permissions for Owning Group by default browsing group not toggleable per tenant

AXPD-9798 - Fix Truststore Apicurio Configuration

AXPD-9852 - fix for notification not sent while connector fails

AXPD-9718 - Breaking change Simplify SchemaRegistry truststore configuration

AXPD-9856 - Not Topic Owner can see view masking fields button

AXPD-9907 - Fix the generic error message when proving invalid retentionPolicy

AXPD-9901 - Fixed issue while updating a topicConfig having unsupported property

AXPD-9894 - Importing an existing Kafka Cluster with SchemaRegistry doesn’t work

AXPD-9900 - Fixed issue while importing an existing SSL ACL from Kafka cluster

AXPD-9838 - Regular user can’t see instances

AXPD-9945 - Distribution flaky test fix

AXPD-8827 - Disabled URLs in the Notifications

AXPD-9909 - Creating a Tenant with /tenants should result in a WizardCompleted tenant

AXPD-9963 - Removed the unused endpoint /groups/{uid}/members/{uid}

AXPD-9884 - Removed unused instance_clusters table

AXPD-9963 - Marked the unused endpoint GET/POST/PATCH/DELETE /groups/{uid}/members as deprecated

AXPD-9285 - Fix for creating instance with invalid connectUrl

AXPD-10026 - fix: Updating an Instance removes the srType, srVersion, distribution config and KSML overrides

Fixed the audit issue of the Instance.properties

Update Keystore Provider to 0.2.6

AXPD-9776 - NPE when getting masking-fields for a AVRO/non-AVRO Topic

AXPD-9554 - Consumer app offset reset

AXPD-8691 - Allow to Stop Distribution

AXPD-9533 - New Schema Registry details endpoint for InstanceCluster

Masking_fields support for schema

Masking_fields support for Topic Config

AXPD-9318 - Migrated the connect endpoints from AOM to PM

Updated keycloak-admin-client version to 26.0.0

AXPD-9525 - Add Kafka Streams custom application type

AXPD-9343 - Make the schema-roles-enforce a Tenant setting

AXPD-9523 - Store Apicurio’s Keycloak details per Instance Cluster

AXPD-9632 - Add dataMaskingEnabled flag to Tenant setting

AXPD-9000 - Audit the Application Create action in the DB

AXPD-8949 - Allow to configure strict masking toggle for an Environment

AXPD-9524 - Allow app owners to create Schema Registry credentials in Apicurio’s Keycloak

AXPD-9526 - Allow app owners to delete Schema Registry credentials in Apicurio’s Keycloak

AXPD-9684 - Unmask the masking_fields for a Topic Config Browse

AXPD-9697 - Create KafkaStreams prefixed ACLs on credential and principal creation

AXPD-9738 - Enhance Keycloak client registration error handling with fallback scenario

AXPD-9669 - Delete KafkaStreams prefixed ACLs on credential and principal deletion

AXPD-9748 - KafkaStreams based application.id modification should trigger collision-detection/delete/create Prefixed ACLs

AXPD-9744 - Trigger KafkaStreams based prefixed ACL collision detection on credential/principal/topic creation

Updated kameleon library version to 0.9.2

AXPD-9102 - Don’t delete permission groups when Granular Browse gets disabled for an Instance

AXPD-9681 - Schema registry secrets location fix

AXPD-9495 - Uploading a new schema-version with a different type is allowed

AXPD-9325 - Block creation of an Instance with existing short-name in the same Tenant

AXPD-9309 - Don’t allow dropping Schema Registry from InstanceClusters when topics are deployed

AXPD-9542 - Update SchemaRegistryUrls for old architecture Instances

AXPD-9476 - EnvOwner & EnvAdmin cannot delete private environment if app-auth defined by others

AXPD-9592 - Fix NPE when running deploymentReconciliation job

AXPD-9268 - Connector configs and grouping disappears

AXPD-9167 - Fixing an issue when creating a topic for the first time

AXPD-9639 - Simplify logic to retrieve StreamConfig allowed Kafka Properties

Updated kameleon library version to 0.8.15

AXPD-9408 - Fixed issue for topic owners can browse their own topic

AXPD-9735 - Make KSML only working with Schema Registry in confluent mode

AXPD-9725 - Not a resource owner can take ownership of resources

AXPD-9737 - Added the missing owners field to the response of the /schema_versions/search/findAllBySchema API

AXPD-9736 - The SchemaRegistry Type is not updated in the DB but just in the Vault

AXPD-9408 - Fixed issue for topic owners can browse their own topic

AXPD-9749 - Resolved an issue where users without ownership of any resources could view all appAccessGrants

AXPD-9299 - Removed “notificationsEnabled” field from “/me”, “/tenant” and “/user” endpoints. Breaking change

Prepare for KSML: Copy instance_clusters into entity table instance_cluster

Prepare for KSML: Introduce ksml_provisioner table, entity

Prepare for KSML: Create/Update instance with KSML provisioner

AXPD-9115 - a POST endpoint to create distribution config for an instance cluster

AXPD-5367 - Allow Tagging streams

AXPD-9119 - a PATCH endpoint to create distribution config for an instance cluster

A GET endpoint to retrieve the distribution config for an instance cluster

AXPD-8670 - KSML ‘Start’ action

AXPD-8671 - KSML ‘Stop’ action

AXPD-8674 - KSML ‘View Status’ action

Introduce “dev” mode which uses DB instead of Governance Vault

AXPD-8675 - KSML ‘View Logs’ action

AXPD-8710 - Hide Sensitive fields when retrieving Cluster information & validate credentials when updating Cluster

AXPD-8684 - a GET endpoint to retrieve distribution overview of an instance

AXPD-6022 - Add tag to the search attributes of the Stream entity

AXPD-8673 - KSML ‘Delete’ App

AXPD-9288 - Distribution API improvements

AXPD-8685 - Get distribution status

AXPD-9286 - Added validation to not configure KSML Application SSL/SASL authentication if Environment/Instance is not suitable

AXPD-9263 - Allow KSML Application to use SASL/SCRAM_SHA credentials

AXPD-9330 - New statuses for KSML apps

Added a validation to disallow SSL auth creation if any auth exists (principal or credential) for the app and environment

AXPD-8761 - Updated shortName in Tenant/Instance/Environment resource to have min length 1

AXPD-8688 - Allow to Start a Distribution

AXPD-9356 - Add JSONSchema support

AXPD-9217 - Allow user to update provider info fields while updating Kafka cluster

AXPD-8349 - Create/Update a topic using JSON Schema

AXPD-9338 - Create Schema ownership

AXPD-7329 - Create/Delete JSON Schema topic config

AXPD-9199 - Protobuf schemas without package (namespace) were saved with a starting dot “.”

AXPD-9350 - Make OffboardingService to use Vault strategy and remove direct dependency on Azure KeyVault service.

AXPD-9377 - Delete environment|topic|application should identify active child-resources

AXPD-9342 - Prepare Readme.md as external doc and Developer.md for internal

AXPD-8723 - Support connector logging on the governance flow

Updated the stripe version to 22.31.0

Added dependency for joda-time to 2.13.0

Added dependency for guava t0 33.3.0-jre

Updated the datasource-micrometer version to 1.0.5

Updated keycloak-admin-client version to 25.0.6

Updated avro version to 1.12.0

Updated hypersistence-utils version to 3.8.2

AXPD-8911 - Topic delete idempotency (kameleon)

AXPD-8619 - Cluster sasl mechanism update getting invalid protocol type error

AXPD-9128 - Forbid removing Instance from Environment

AXPD-9113 - Added validation for BYOK clusters to provide a user-friendly message in case the SR is not configured for AVRO/PROTOBUF topic

AXPD-9110 - Fixed /application_access_grants/search/findByAttributes API sorting issue

AXPD-9168 - Added Transactional annotation to fix hibernate lazy loading exception

AXPD-6494 - Fix NPE issues encountered during deployment status retrieval

AXPD-8769 - Fix update Instance issue regarding storing the Instance credentials as Cluster credentials

AXPD-8800 - VaultTemplates bean is not part of the Spring Lifecycle

Fix to resolve the distribution config path in vault service using correct delimiters

AXPD-9057 - Fix the get all and one Group to not load the Tenant

AXPD-9227 - Cannot delete private environment with KSML deployment

AXPD-9264 - When setting the default enabledAuthenticationMethods for an instance, the collection is immutable

AXPD-9266 - Return privateKey uploaded for KSML and Connector Applications

AXPD-9274 - Fetch the stream.tags when searching stream by name containing /streams/search/findByNameContaining

AXPD-9260 - Fix validateCredentials behaviour which requires everything to be sent

AXPD-9261 - Update the logic of validating credentials in PATCH distributionConfig

AXPD-9185 - When using SASL as super-user, Topic-Browse fails

AXPD-9220 - When updating an Instance, the secrets are not replaced/removed

AXPD-9267 - Fixed fetch all streams when the tag is empty string

AXPD-9152 - Updating application ID is case-insensitive which should not be

AXPD-9277 - Instance Edit page is not handling 403 errors

AXPD-9295 - Hibernate LazyLoadingException when refreshing PluginsInfo

AXPD-9328 - Can save sslAuthMode in Cluster table as a JSON column

AXPD-9304 - Add a self-link to the application.owner resource

AXPD-9368 - Migrating an instance removes the schema-registry-slave urls

AXPD-9122 - The key/value type is not visible for PROTOBUF/JSON_SCHEMA topic

AXPD-9374 - Fixed duplicated self-link of the group resource by introducing custom APIs for POST and PATCH /groups/{uid}

AXPD-9389 - Allow Cluster Name to contain _-. symbols

AXPD-9398 - Fix double _links.self in /api/application_deployments/xxx/status endpoint

AXPD-9396 - Added HAL_JSON_VALUE Accept header to the post and patch /groups APIS and fixed a duplicated self-link of the SDR API

AXPD-9465 - Env Owner cannot create/update StreamConfig on his private Environment

AXPD-9467 - Environment Admin cannot delete a private environment with TopicConfig

AXPD-9493 - Instance.caCerts is missing when getStreamBrowseConfig

AXPD-8534 - Delete Kafka Topic with Protobuf Schemas

AXPD-8537 - Create Kafka Topic with Protobuf Schemas

AXPD-8040 - Trigger emails based on events for application Owners

AXPD-7330 - View, Delete Protobuf Schema in the Self-Service

AXPD-8037 - Enable Tenant Notification

AXPD-8782 - Add Owners field to Environment findByAttributes API

AXPD-8041 - Trigger emails based on events for Connector Owners

AXPD-8779 - Provide the SchemaRegistry Type in the Instance-Cluster

AXPD-8852 - Enable/Disable KSML support for an Instance

AXPD-8833 - Disable User Notification

AXPD-7941 - Support multi-cluster for ApplicationAuthentication creation

AXPD-8900 - Application Principal for KSML Application

AXPD-8895 - Create KSML application

AXPD-8669 - Add KSML Application Deployment

AXPD-8661 - Add Application Lifecycle interface

AXPD-8598 - Define Viewer Group for Environment

AXPD-8597 - Create Group Managers to manage group’s members

AXPD-8950 - Allow stream-owner to add group to the PermissionGroup

AXPD-8933 - Define Viewer Group for Streams

AXPD-9834 - Define Viewer Group for Application

Made the tenant in Group entity LAZY to resolve hibernate memory overload issue

AXPD-7736 - Fixed/simplified logic for Create Cluster button

AXPD-8774 - Fix Cascade delete for an stream not removing Kafka Topics

AXPD-8773 - Fix Cascade delete for an application not removing Kafka Topics ACLs

AXPD-8772 - Fix Cascade delete for an environment not removing Kafka Topics

AXPD-8759 - Fix Private Environment cascade delete issue regarding removing ApplicationAccess

AXPD-8762 - Add audit logs for application access grant status changes

AXPD-8699 - When a cluster has billingCloudEnabled=true, that value should not change if it’s not present in a PATCH call

AXPD-8854 - Add ‘Axl-Sr-Type-ApacheKafka’ in Provider Config

AXPD-8882 - Updated the AuditLogger’s log method to remove debug handling for ApplicationDeployment instances

AXPD-8890 - Remove HubSpot related code

AXPD-8538 - Fix force apply for AVRO and Protobuf

AXPD-8810 - Missing namespace when uploading a Protobuf with defined package

AXPD-8843 - Changed Boolean parsing for handling old migration values (1,0) as (true, false)

AXPD-8654 - Partial match on searching for ApplicationID

AXPD-9061 - NPE when instance setting does not include CERTIFICATE_REUSE_PREVENTION

AXPD-9060 - Unhandled data layer exception when creating an application with a duplicate name/shortName

AXPD-9069 - Improve the error message that occurs when a schema cannot be applied

AXPD-9055 - Unauthorized User can create SASL Application Principal

AXPD-8644 - When uploading cert and key for a Kafka cluster (super user), chain is not passed

AXPD-9078 - Exported entities do not have standard ISO format dates and times

AXPD-9088 - A Private Environment Owner cannot create a TopicConfig in his Environment

AXPD-9087 - Fix for private environments are visible to normal users and TENANT_ADMIN

AXPD-9091 - Application Access Grants are not visible to Admin when myteams=true

AXPD-9094 - Allow multiple principals with the same DN and different fingerprint irrespective of the certificateReusePrevention value

AXPD-8549 - Topic Owner cannot revoke Application Access Grant

AXPD-8391 - Implement the Notification Service

AXPD-8043 - Configure PM to use SMTP

AXPD-8039 - Trigger emails based on events for Topic Owners

AXPD-7330 - View Protobuf schema in the Self-Service

AXPD-8720 - Add SchemaRegistry Type to the TopicBrowse Config

AXPD-7330 - Validate and upload Protobuf

AXPD-8717 - Fix returning inconsistent dataType for application access grant members

AXPD-8479 - Filter the system-topics from the /wizard/topics

AXPD-8042 - Added DB scheduler configuration for distributed scheduling of connector cron jobs

Fixed issue while updating onboarded default instance

AXPD-8541 - Remove usage of`updateTopic` to fix issue adding a cluster makes existing things fail

AXPD-8528 - Added SSL configuration to HashicorpVault

AXPD-8529 - Fix fetching the secrets when the cluster or instance Name have Capital letters

AXPD-8427 - Fix to restrict updating patterns on external cluster when mapped to a topic

AXPD-7687 - Add properties field to Application and Group APIs

AXPD-7750 - Off-boarding of a ConfluentCloud cluster

AXPD-8410 - Allow downloading CSV file for Topics, Applications, and Environments

Add extraInitContainers, extraVolumes, extraVolumeMounts, and extraContainers to Helm Charts

AXPD-4214 - Cascade delete Application, Environment, Topic

AXPD-4569 - Prevent reuse of SSL principal

Added a new field settings to Instance entity

AXPD-8485 - Add monitoring_information for API Gateway

AXPD-8519 - Add validation to block changing cluster ownership

AXPD-8504 - Fixed PATCH /clusters/{id} API to allow migrating old arch cluster to a shared apache-kafka cluster

AXPD-8444 - Changes to add namespace property to governance.vault

AXPD-8426 - Fix creating first environment on single-environment cluster

AXPD-8480 - Changing environment to PRIVATE is blocked by REVOKED access grants.

AXPD-6477 - A deleted instance is still present in the list of managed instance

AXPD-8477 - Fixed PATCH /instances/{id} API to allow instance migration

AXPD-8515 - Added default instanceSettings while onboarding new tenant

AXPD-8509 - Refactored the logic of setting value for isSchemaRegistryEnabled field of /me API

AXPD-6476 - Exception when deleting an instance with connect enabled

AXPD-8526 - Fixed issue with search on topic with findByAttributes

AXPD-8542 - Cannot create the first environment in a Tenant

AXPD-8472 - Fixed issue when selecting AVRO and then switching back during topic creation

AXPD-8452 - Fixed HATEOAS links pointing to the wrong resources

AXPD-7869 - Add provider info to the Instance entity

AXPD-8257 - Handled Duplicated CAs internally instead of returning validation error when creating or updating an instance

AXPD-8313 - Add Cluster validation when creating/updating the entity

Set server.forward-headers-strategy: framework as default

AXPD-7937 - Add new api to get the Kafka connectivity Information per application

AXPD-7940 - Add the properties to the StreamProjections

AXPD-8064 - Allow Stream owner and Stream admin to create applicationAccessGrant

AXPD-8421 - Add delete /schemas endpoint to delete the Schema with related SchemaVersions

AXPD-8384 - Add validation fields for Instance PATCH endpoint

Fixed cluster.name update issue of ignoring case sensitivity when interacting with vault

AXPD-8393 - Remove phone number validation for the user entity

AXPD-8383 - Fix overwriting issue of SR and Kafka listeners when performing a patch

AXPD-8431 - Fix bypassing the APPLICATION_ACCESS_GRANT_CREATE rule for createApplicationAccessGrant API

AXPD-8274 - Create an Admin group when bootstrapping the Tenant/User

Remove tests inside Helm charts

Upgrade Spring Boot to 3.1.0

Replace Spring Sleuth with Micrometer to fix distributed tracing

AXPD-6797 - Make Platform Manager image Red Hat compliant

AXPD-6799 - Add values.schema.json to Platform Manager helm-charts

AXPD-7087 - Get rid of all deprecated endpoints as 6.x & 7.x version

AXPD-7354 - Add Broker mTLS cert/privateKey validation in the Wizard

AXPD-7355 - Add Broker SASL username/password validation in the Wizard

AXPD-7356 - Add SR BasicAuth username/password validation in the Wizard

AXPD-7357 - Add SR mTLS cert/privateKey to Wizard

AXPD-7741 - Add provider info in the cluster page

AXPD-7776 - Allow skipping onboarding after user signup

AXPD-7888 - Refactor ExternalProviderHelper

AXPD-8071 - Refactor Kameleon Headers to be part of the request body

AXPD-8183 - Added validation while creating an environment to check if Instance has any multi-environment cluster

AXPD-8185 - Add Axual License

AXPD-8186 - Update keystore-provider version to 0.2.0

AXPD-8168 - Unify logging pattern

AXPD-7489 - Improve performance of getAllWithLatestSchemaVersion endpoint

AXPD-7689 - Hide sensitive fields in the audit logging

AXPD-7860 - Make Error Human Readable (again)

AXPD-7979 - Allow changing the enabledAuthMethods in any instance irrespective of the provider

AXPD-8104 - Remove phoneNumber pattern validation on group entity

AXPD-8247 - Hide public cluster to non-using tenants

AXPD-7980 - Don’t validate connector-logging certificate against the instance CAs

AXPD-7918 - Added TRIALING status to reflect “active” state of the subscription

AXPD-7858 - Add stream-config-browse config endpoint

AXPD-7762 - Add Hashicorp Vault support

Upgraded Kameleon Library version to 0.3.0-SNAPSHOT

Upgraded Spring Kafka version to 3.0.10

Upgraded Spring Hateoas version to 2.0.6

Upgraded Spring Security version to 6.1.4

Upgraded Keycloak Admin Client version to 22.0.3

AXPD-7794 - Added a new link _links.byok while fetching Instances by ID

AXPD-7799 - Changed the /clusters endpoint to return Public and Owned clusters

AXPD-7799 - Removed the endpoint /instances/{id}/clusters

AXPD-7800 - Change to restrict creating Byok-Instance using the non-byok cluster and vice versa while creating instance

AXPD-7827 - Introduce a multiInstance feature to control instance-creation

AXPD-7731 - Ingest AOM features into Platform Manager

AXPD-7872 - Show Private Key Uploaded in Principal

AXPD-7771 - Add HashiCorp Vault support for storing connect secrets

AXPD-7900 - Store secrets as JSON object

AXPD-7736 - Added links to the /clusters endpoint. Updated RBAC rule for cluster create,edit and delete

Add apache-kafka allowed topic-properties

Add tenantUid, topicBrowseEnabled, and schemaRegistryEnabled fields to /api/me

AXPD-7897 - Added a new endpoint /tenants/{tenantUID}/onboard to onboard a tenant with shared cluster

AXPD-7917 - Re-introduced segment.ms pickup from Instance’s properties

AXPD-7814 - Use principalChain when creating Topic ACL for multi-tenant cluster and support multi-cluster for topic apply/delete

AXPD-7764 - Delete public environment

Add tls support to PlatformManager helm-charts with external k8s secret only

AXPD-7868 - Support multiple instanceConnect configuration at Deployment time

AXPD-7951 - Document environment variables of the application

Fix issue when retrieving null secrets from Vault

Fix check on identifying external cluster in InstanceEventHandler

AXPD-7823 - Changes to Allow Generating/Deleting SASL credentials for Plain/Strimzi provider

AXPD-7593 - Fix change key/value of an unconfigured topic to AVRO

AXPD-7837 - Allow deleting an applicationCredentials with the ResourceId as metadata in case clusterApiKey is empty

Allow to don’t have VaultService bean defined in the StreamBrowseService

AXPD-7910 - Return a tenant optional field when getting all Instances

AXPD-7954 - Fix Schema Browser issue with null schemas in mgmt-api

AXPD-7911 - Fix create/delete multiple schema versions

AXPD-8005 - Fix on links to show create and show for an empty cluster resource on /clusters endpoint

changed multiCluster term to multiTenant in ClusterPatternConfiguration

AXPD-7594 - Add E2E tests for Confluent-Cloud provider

AXPD-7761 - Added configuration to enable/disable duplicate schema validation

AXPD-7682 - Update importApplication to store ResourceID

AXPD-7410 - Allow applying a topic on a Plain/Strimzi Cluster

AXPD-7410 - Allow deleting a topic on a Plain/Strimzi Cluster

Upgraded Spring version to 6.0.11

AXPD-7511 - Changes to remove duplicated ACL when applying a topic

AXPD-7501 - Updated the rule for APPLICATION_ACCESS_GRANT_VIEW similar to APPLICATION_ACCESS_VIEW

AXPD-7745 - Add connector logging status to environments/search/findByApplication endpoint response

AXPD-7556 - Add delete /schema_versions/{uid} endpoint

AXPD-7783 - RollBack all the changes to resolve username on findByAttribute endpoint

AXPD-7773 - Uploading a schema-version for an existing schema gives error

AXPD-7752 - Auto-create/delete topic configs when toggling connector logging state.

AXPD-7548 - Changes to create authentication on Confluent Cloud

AXPD-7578 - Create/delete Connect log prefix ACLs when environment is saved/deleted

AXPD-7579 - Create/delete ACLs when a Connect logging certificate is uploaded/deleted

AXPD-7433 - Automatically create topic configurations as part of the connector logging support feature

AXPD-7652 - Handle concurrency in creation of application_access

AXPD-7562 - Support Headers based authentication

AXPD-6960 - Set user fullName as createdBy/modifiedBy for myApplications and myTopics APIs

AXPD-7462 - Allow onboarding a ConfluentCloud cluster as a CloudAdmin

AXPD-7566 - Get /group endpoint returns sorted by name, add myTeams param to get /application_access_grants/search/findByAttributes endpoint

AXPD-7427 - Allow to delete API Keys on Confluent Cloud

AXPD-7686 - Allow importing Consumer with empty GroupID

AXPD-7443 - Store the cluster patterns in cluster resource to generate topic name, consumer group name, and transactional id

AXPD-7255 - Change topicConfig properties endpoint to use envID

AXPD-7567 - If resource does not exist return 404 instead of 403 for all getById APIs

Expect a clusterName param for ConfluentCloud when getting the external topic details

AXPD-7707 - fix /applications/search/findByAttributes and /streams/search/findByAttributes APIs returning duplicated items

AXPD-7545 - Formatting of Async API causing issues with Swagger Next Editor

Fix switched “prefix” and “environment” when enabling connect logging

Upgraded Spring Boot to 3.0.7

AXPD-7492 - Add POST /application_authentications endpoint to create credentials for any provider

AXPD-7576 - Create/delete prefix ACLs when instance is saved with connect logging enabled

AXPD-7041 - Improve error message of an unauthorized user attempting to browse a stream

AXPD-7592 - Fix Hibernate Lazy Initialization on ConnectPluginInfo

Removed realm header from staging e2e postman collection to support ApiGateway

AXPD-7285 - Added a toggle to enable/disable support for connector-logging.

AXPD-7553 - Fixed IT tests

AXPD-7430 - Fixed streamConfig update policy

AXPD-7581 - Allow user to provide single character for firstname and lastname

AXPD-7554 - Fixes issue with topic apply on any newly created topic

AXPD-7139 - Eliminate the need for ApplicationAccess

AXPD-7049 - Allow creating/updating kafka topic without optional kafka properties

Update HorizontalPodAutoscaler to autoscaling/v2 apiVersion in helm-chart

AXPD-7425 - Delete /application_authentications endpoint to delete user on any provider

APCS-1703 - Fixed hibernate lazy initialization issue with asyncApi endpoint

Added a check to validate if an environment’s Authorization issue is Auto before browsing a stream

Updated findStreamConfigById in stream config repository to a custom query

Updated findById in stream config repository to a custom query

AXPD-7467 - Fix for Browsing a stream on a Public Environment with AUTO approval is denied

AXPD-7470 - User in permission-group but not owner of stream-config cannot browse

Fix issue on application_access_grants/search/findByAttributes returning other tenant resources

Remove api/streams/{uid}/browse-access endpoint

AXPD-6917 - Remove unused Validator components

AXPD-7491 - Fix for Requesting application-access for the first time results in no-ACL for AUTO Approval Environment

AXCH-395 - Added custom queries for few methods in ApplicationAccess, Stream and Environment repositories to avoid hibernate lazy loading

AXPD-7338 - Add status filter to /application_access_grants/search/findByAttributes endpoint

AXPD-7287 - Allow duplicate applicationID per Tenant

AXPD-7183 - Exposed an API to get schema versions with schema id

AXPD-5071 - Add AsyncAPI generation from a StreamConfig

AXPD-7305 - Stripe idempotency for customer and subscription creation

AXPD-7335 - Make Stripe debug level

AXPD-7336 - If the token is not TenantAwareAuthenticationToken return false from hasActiveSubscription

AXPD-7350 - Change GET to DELETE for /offboard endpoint

AXPD-7163 - Add content-type=application/json support to PUT /application_access_grants endpoint

AXPD-7384 - Add embedded schema to key/value schema-version on the API

APCS-1661 - Fix to restrict non admin users and non-members from updating the group

AXPD-7321 - Set TopicSchemas as null in case the topic key/value type is not Avro for External Providers

AXPD-6061 - Restrict creating duplicate application_principals

AXPD-7162 - Cache return from Kameleon getAllTopicsDetails to wait less during the Wizard

AXPD-6549 - Organization Created event is sent after Tenant is created

AXPD-7177 - Only one subscription should be active + NPE fix

AXPD-7170 - Added customer portal and checkout redirect

AXPD-7157 - Off-board customer from Stripe

AXPD-7156 - Added Slack notification for Sales/Marketing when the user request a quote

AXPD-7024 - Added fallback value for products

AXPD-6922 - Make features human-readable in the Pricing Table

AXPD-6974 - Disable beans creation

AXPD-6929 - Integrate Stripe events

AXPD-6713 - Block clusters/groups creation upon reaching limit by client

AXPD-6930 - Create an endpoint to retrieve current customer’s usage and features

AXPD-6892 - Added customer creation and subscription logic

AXPD-6892 - Added subscription management database schema

AXPD-6727 - Added subscription management module + pricing table endpoint

AXPD-6628 - Support multiple OIDC Provider

AXPD-6716 - Implement /me endpoint to return User and Tenant information

AXPD-6554 - Validate Aiven credentials and return Aiven services

AXPD-6684 - Validate Confluent Cloud credentials and return Confluent Cloud services

AXPD-6724 - Implement /wizard/topics endpoint to create base entities

AXPD-6560 - Show number of discovered topics

AXPD-6728 - Get TopicDetails for available topics on a Kafka Provider

AXPD-6827 - Delete stream browse permission groups when disabling granular browse permissions on Instance

AXPD-6662 - Added implementation for creating Streams/StreamConfigs to the endpoint /wizard/topics

AXPD-6822 - Persisting secrets in Azure KeyVault for Aiven and ConfluentCloud providers

AXPD-6921 - Search Application Grants by Attributes Supports Multiple owner

AXPD-6973 - Allow creating clusters with same Name on different tenant

AXPD-7002 - Delete topic via Provider Library

AXPD-6981 - Allow imported topics to have any Kafka properties

AXPD-7001 - Apply topic and update existing topic via Provider Library

AXPD-7086 - Remove retention.policy and retention.time from topicConfigProperties list for imported topicConfigs

AXPD-7029 - Include ACLs as discovered resources for an external provider

AXPD-7030 - Include Schemas as discovered resources for an external provider

AXPD-7014 - Add GET /schemas/findAllWithLatestVersion endpoint to list all schemas with the latest schema versions

AXPD-6991 - Update authMethods to match the external Kafka Providers

AXPD-7120 - Rename imported group to Admins

AXPD-7086 - Add uid and comment to ApplicationAccessGrant Response

AXPD-7016 - New fields to /api/schemas/search/findAllWithLatestVersion response

AXPD-6959 - Use Cluster and Schema-Registry API/Secret to connect with ConfluentCloud provider

AXPD-6991 - Import ACLs for external providers

AXPD-6500 - Import Schemas for external providers

AXPD-6575 - Convert custom initial_group claim into existing Group to add new user when converting an Auth0 JWT

AXPD-6897 - Off-board an Axual Governance Organization and its resources

AXPD-7194 - Filter out topic properties which are topic fields

AXPD-7175 - Allow ConfluentCloud applications to manage their AccountID

AXPD-7280 - Rename imported resources to not collide when using a pattern

AXPD-7031 - Subscriptions shouldn’t be deleted

Allow AxualAuditorAware to work with anonymous user and anonymous authentication token

AXPD-6887 - Change default value for Instance.environmentMapping to true

AXPD-6743 - Fix creation of browse permission group for Auto environment

AXPD-7006 - Fix NPE when getting subscription info on Auth0 authentication

AXPD-7021 - Add Instance.apiUrl as part of the response when getting an Environment

AXPD-6443 - Add delete link to GET /clusters/{uid} endpoint

AXPD-7044 - Fixed issues with the endpoint /users/search/searchUser

AXPD-7054 - Updated the application.adoc mentioning _ are allowed for applicationId

AXPD-6539 - Make all error responses consistent

AXPD-7145 - Add /instance/{uid}/clusters to return only owned cluster in case the Instance is using an external Kafka cluster

AXPD-7174 - Add SASL_PLAIN to GET /authentication_methods to support tenant update with SASL_PLAIN

AXPD-7017 - GET /schemas/findAllWithLatestVersion endpoint SQL fix with GROUP BY

AXPD-7166 - Handle missing secrets from AzureKeyVault when creating Kameleon Headers

Remove application-principal when deploying ACLs for external provider

AXPD-7279 - Change application_id type to store long applicationId coming from Confluent-Cloud

AXPD-7275 - Set default value of create-stream.disable-time to 0 minutes

AXPD-6992 - Change imported stream description

AXPD-6458 - Fix /deletion-constraints endpoint to return 404 instead of 403

Fix issue of not passing partitionCount and set proper SchemaType when no schema is present

AXPD-7297 - Remove username prefix from imported applications name for Aiven provider

Fix issue on application_access_grants/search/findByAttributes returning other tenant resources

AXPD-7298 - Stream and Application owners can be updated by TENANT_ADMIN

AXPD-6899 - Fix for instance setting being ignored when there is no stream browse permission group

AXPD-6739 - Setting max size limit of pagination to 9999

AXPD-6887 - Change default value for Instance.environmentMapping to true

AXPD-6729 - Fix for Environment filter issue on application-access-grant search

AXPD-6589 - Check schema compatibility only when schema versions have changed

AXPD-5862 Remove schema compatibility check when schema key/value versions are not changed

AXPD-6668 - Update docs to show which error responses are inconsistent

AXPD-640

AXPD-5531 - Configure and Expose auto-generated OpenAPI Specification

AXPD-6436 - Make API tests part of the project with a manual trigger to be running

AXPD-6451 - Setup tests for checking that Flyway scripts work

AXPD-6467 - Add modifiedAt and modifiedBy fields to the Stream responses

AXPD-6469 - Make Vault testcontainers running only when needed

AXPD-6474 - Enrich APIDocs for environmentMapping and granularBrowsePermission fields in instance

AXPD-6421 - Add API changelog

AXPD-6312 - Delete certificate/privateKey when deleting an Application

AXPD-5916 - Add Content-Type for missing API responses

AXPD-6351 - Deactivate connector plugins when they delete from AOM

AXPD-6352 - Endpoint /connect_plugins returns only deployed connector plugins

AXPD-6435 - Fix NPE in CertificateUtils error logging

AXPD-4363 - Add Distributed Tracing support with Spring Cloud Sleuth and OpenTelemetry

AXPD-6250 - Endpoint to add users allowed to browse a Stream

AXPD-6251 - Endpoint to remove users allowed to browse a Stream

AXPD-6249 - Endpoint to retrieve users allowed to browse a Stream

AXPD-6013 - Sort Application Access search by Application (findByApplication) by the Stream Name Ascending

AXPD-6329 - Dynamic search for streams

AXPD-6258 - Check the user’s browse permissions while browsing

AXPD-6348 - Add option in Instance to disable environment creation

AXPD-6302 - Endpoint /environments/search/findByStream should expose environments browse permission

AXPD-6333 - Add myApplications param to findByAttributes endpoint to retrieve user owned applications

AXPD-6335 - /tenant endpoint does not expose updated tenant’s value

AXPD-5740 - Create a new PermissionGroup entity model

AXPD-5741 - Create a browse permission group when a new Stream is deployed

AXPD-6180 - Upgrades to be ready for Spring Boot 3

AXPD-6260 - Fix connector’s cert-uri when Vault.Namespace is provided

AXPD-6380 - Update org.apache.commons:commons-text to 1.10.0

AXPD-6311 - Environments without a color having a default color

AXPD-5105 - Migrate maven parent project to use Spring Boot’s Parent

AXPD-5924 - Uniform Patch Documentation tests to expect 200 ok

AXPD-6032 - Eagerly fetch pluginConfigs when findConnectPluginInfoByPluginClassAndPluginTypeAndInstance

AXPD-6159 - Upgrade Spring Data REST to address security Vulnerability (CVE-2022-31679)

AXPD-5993 - Only SUPER_ADMIN should be able to assign INTERNAL_BILLING role

AXPD-5997 - No audit logging of USER objects

AXPD-4450 - Remove whitespaces from the ApplicationId during creation and update

AXPD-5979 - Environment visibility shouldn’t be changed to private, if there are resources of other groups

AXPD-5927 - While deleting an Instance all its active environments(private/public) should be visible when calling getDeleteConstraints endpoint

AXPD-5909 - Fix for issue with deleting an instance when connect enabled

AXPD-5991 - Missing Pagination URLs and wrong totalElements count for findByAttributes service

AXPD-6024 - Allow searching applications by applicationClass in findByAttributes service

AXPD-5761 - Resolve Tenant using the realm header, allowing multiple tenants to use same issuer

AXPD-5973 - Add application deployment resource check to environment deletion service

AXPD-4736 - While configuring an application in an environment, application access should not automatically being defined for other environments

AXPD-5169 - Added new endpoints to check cluster deletion constraints and to delete a cluster

AXPD-4667 - Group connector configs and show description text of configuration value

AXPD-5520 - Added new endpoint to list missing streams on governance layer

AXPD-5523 - Added new endpoint to add a missing stream to the governance layer

AXPD-5640 - Return UID when uploading a schema-version with /schemas/upload

AXPD-5510 - Added new endpoint to list applications with public attributes

AXPD-5894 - Deprecate POST and PATCH /schema_versions

AXPD-5815 - Fix update custom application principal to update instead of create new principal

AXPD-5891 - Updating an application without ApplicationAdmin role results in error

AXPD-5914 - Updated the endpoint used to list application with public attributes from /applications/search/findByExample to /applications/search/findByAttributes

AXPD-5482 - Support SASL_OAUTHBEARER as an Authentication Method for the Tenant

AXPD-5503 - Add test for SASL_OAUTHBEARER as an Authentication Method for the Instance

AXPD-5509 - Support customPrincipal for application using SASL_OAUTHBEARER

AXPD-5770 - Fix update application principal to update instead of create new principal

AXPD-5529 - Stream Value Type, Key Type, Retention Time, Schema(if AVRO) should be editable

AXPD-4999 - Update Keycloak Admin Client to 18.0.1

AXPD-5588 - Fix for issue with updating the application

AXPD-3437 - Updating the application ID should trigger a topic apply for all connected topics

AXPD-5342 - Updated the monitoring info endpoint to return also the tenant and environment short names

AXPD-5200 - Considering the STOPPED deployment state to check to validate the application short name update

AXPD-5248 - Added applicationClass field while returning list of applications

AXPD-5247 - Allow searching for applications by their applicationType

AXPD-4710 - UI should give error message while uploading key when Vault unavailable

AXPD-5239 - User profile no longer displays group membership

AXPD-1419 - When creating a stream-config and instance without segment.ms property, load it from Management API defaults

AXPD-3943 - Convert certificate and private-key from CRLF to LF when uploading to Vault

AXPD-5122 - Added an endpoint to retrieve Instance, Cluster’s Topic and Group Pattern for a Tenant

AXPD-5163 - Allow deletion of Instance and allow edit of Instance ShortName

AXPD-4684 - Fix HubSpot integration, now it adds the HubSpot tag every time a user has been logged.

AXPD-4896 - Create an extra column pluginDeployed and Update the pluginReconciliation job

AXPD-4897 - Mark the state of the properties in Application Deployment Config

AXPD-4886 - Log sensitive information at DEBUG level

AXPD-4744 - Add HubSpot tag update on user created

AXPD-4957 - When pluginReconciliation runs, it stores connectPluginInfo even if DB has it already

AXPD-4991 - Upgraded to the Spring Boot security update version 2.6.6

Upgraded the JarRunner to 3.3.1

Renamed cors.allowed.origins to cors.allowed.origin.patterns

Fix wrong vault-path creation for Connector application security (affecting new connectors only)

Fix usage of Application.name instead of Application.shortName for dealing with Operation-Manager

AXPD-4765 - Limit to the essential properties that can be configured on a Stream

AXPD-4764 - Distinguish between custom and non-custom property of a connector

AXPD-4754 - Preventing Exception occurrence when connector returns a null ConfigValue by filtering null ConfigurationKeyInfo references

AXPD-4885 - Add Delimiters to the Vault Path while saving Credentials

AXPD-4574 - Allow deleting certificate and PK from a connector application

AXPD-4599 - Include curl snippets to stream_configs/properties endpoint

AXPD-4592 - Integrate Credentials in environments/search/findByApplication

AXPD-4521 - Restrict unselecting supported Auth Method in Tenant and Instance

AXPD-4322 - Restrict Topic apply while deleting REVOKED application principal

AXPD-4561 - Included roles.adoc to the API docs

AXPD-4585 - Return unique list of connectors plugins

AXPD-4446 - Using application name consistently

AXPD-4633 - Rollback changes on application name/shortName

AXPD-4680 - Mark an env active when connector app has config and principal

AXPD-4233 - Use a map to store optional TopicConfig

AXPD-4636 - Return information about Deprecated/New connector configurations

AXPD-4626 - Support a Vault namespace

AXPD-4687 - Update the Max length supported for the Username in Application Credential

AXPD-4720 - Allow approval request when an application has either SASL or SSL

AXPD-4627 - StreamConfig properties cannot be removed

AXPD-4601 - Fix regression on creating/updating a stream-config without segment.ms

AXPD-4603 - Fix regression on creating/updating authMethods for Tenant and Instance

AXPD-4607 - Fix regression on updating Tenant as TENANT_ADMIN when feature-config exists

AXPD-4560 - Remove dangling application_access_grants while deleting an Environment

AXPD-4676 - History Tab not displayed on Application Page when the user role is set only to ‘TENANT_ADMIN’

AXPD-4635 - Updating existing connector information instead of adding a duplicate.

AXPD-4685 - Fix Instance Protocols validation, allowing update an instance without SSL enabled

AXPD-4609 - Mysql DB scripts have syntax invalid

AXPD-4546 - Remove log4j dependency completely

AXPD-4164 - Allow Application Owner to revoke own Application Access request(s)

AXPD-4385 - Configure Supported Authentication Methods for Tenants

AXPD-4337 - Delete all Application Credentials while deleting an application

AXPD-4392 - Configure Enabled Authentication Methods for Instances

AXPD-4441 - Add optional filter SASL Mechanism/Type to the Application Credential Search

AXPD-4472 - Upgrade base docker image to be multi arch

AXPD-2851 - Initialize the first tenant through Mgmt-API

AXPD-4403 - Fix Application Deployment Config Endpoint to return required value

AXCH-235 - Remove Log4J components because of CVE-2021-44228

AXPD-4335 - Disallow editing tenant shortname

AXPD-4333 - Make Socket Timeout Configurable

AXPD-1643 - Use environment connector plugin version

AXPD-3309 - Call AOM if its enabled else log error

AXPD-4141 - Implement new environment switcher

AXPD-4092 - Trigger topic apply when ApplicationCredential is created

AXPD-4257 - Updated the instance-api endpoints with SASL type in url

AXPD-1665 - Make all kafka properties deployable on kafka topic

AXPD-4284 - When restarting a connector the VAULT configs are not passed to AOM

AXPD-3750 - Allow applying an incompatible schema

AXPD-3787 - Prevent distribution errors due to quick topic create/delete actions

AXPD-4091 - Create and Store SASL Credentials

AXPD-3959 - Connector self-service state out-of-sync with connect

AXPD-3184 - Management API cannot create new cluster

AXPD-3686 - Include cluster names to InstanceUsage returned to Billing

AXPD-3761 - Parse the specific exception and provide the error message to the UI when uploading certificates

AXPD-4000 - Make Migration Scripts compatible with MySQL

AXPD-3763 - Always set processed at to the time we auto approve an applicationAccessGrant

AXPD-2959 - Schema subjects are not always correctly deleted

AXPD-3804 - Change schema upload view object

AXPD-3800 - Add name to Applications/Streams Search Controller sorting fields

Updated apache.avro dependency to 1.10.2 version

AXPD-3789 - Add null check when reading schema-versions from DB

AXPD-1671 - log stacktrace for errors on /schema/check endpoint

AXPD-3042 - Use internal methods to retrieve principals when topic-apply

AXPD-337 - Disallow changing an environment’s instance or shortName when stream configs exist

AXPD-3509 - Enable sorting on stream owner

AXPD-3510 - Enable sorting on application owner

AXPD-3609 - Add HATEOAS links object to Application and Stream SearchControllers

AXPD-3731 - Make API EnvironmentEventHandler to check if shortname as changed

AXPD-3467 - Uploading the PEM file with the cert + intermediate CA + root CA gives error when saving

Set spring.datasource.hikari.max-lifetime to 150000 ms

AXPD-3277 - Support windows line ending for PK/certificate/schema upload

AXPD-3266 - Offer XML support in UI

AXPD-3007 - Add exactly once permissions for every produce request

AXPD-3348 - Update Auth Endpoint

AXPD-3332 - Add 2 new rules for SUBSCRIPTION_UPDATE and PRODUCT_VIEW

AXPD-3273 - Enable SonarCloud scans - Management API

AXPD-3064 - Send mgmt-api audit logging to STDOUT instead of a file

AXPD-3311 - Prepare migration for groups

AXPD-3124 - Missing info in mgmt-api docs for create an application

AXPD-3290 - Missing info in mgmt-api docs for create an environment

AXPD-3291 - Missing info in mgmt-api docs for create a stream

AXPD-3121 - Added reconciliation logic for Connector Applications

Authentication endpoint and rule for subscription service

AXPD-3125 - Increase restriction on APPLICATION_DEPLOYMENT_VIEW

AXPD-3147 - Create new field feature_config on Tenant

AXPD-3211 - Add SUBSCRIPTION_VIEW action

AXPD-1676 - allow same email different tenant

AXPD-3024 - Add internal action with ABAC rule

AXPD-2788 - Fix Deletion of connector Applications

AXPD-1711 - Include more fields when searching for an user in the Self-Service

AXPD-1709 - Mgmt-API - Create endpoint to return instance-connect urls

AXPD-1703 - Separate role for billing info

AXPD-1746 - Remove useless role BILLING_ADMIN

AXPD-1653 - Billing - Cron should scrape only cloud clusters for message count

AXPD-1677 - Remove unique constraint on tenant-name from mgmt-db

APCS-2965 - Connect - Error in self-service related to too long fields in connector default values

AXPD-1635 - Connect application - Deleting a pvt key and cert causes connector to go in an unstable state.

AXPD-1634 - Fix path for private key and certificate in vault via mgmt-api

AXPD-1288 - All

Allow multipart file upload instead of automated maven download in SchemaUpdateController.

AXPD-1608 - configuring Snowflake private key doesn’t fit in SQL db

AXPD-1439 - Edit the Instance ENTITY on API

AXPD-1472 - Add a new entity application_deployment with crud operations

AXPD-1464 - Persist connect configs for available plugins with a CRON job attached to a Connect entity

AXPD-1442 - Change APPLICATION entity on API

AXPD-1547 - When retrieving configuration, the API fails if more plugin has the same name

AXPD-1440 - [UI/API] - Implement Application changes

AXPD-1529 - [API][AOM] Create validate-config call from API to AOM

AXPD-1494 - [API] - Create getAvailablePlugins endpoint

AXPD-1468 - Add Private key field to application Principal entity

AXPD-1467 - Application Principal Entity Changes for saving private key reference

AXPD-1455 - Implement API changes to restart a connector’s task

AXPD-1452 - Implement API connector’s actions

AXPD-1445 - Make connector-config endpoint available

AXPD-1443 - Implement Connect integration UI<→ API+AOM

AXPD-1439 - Edit the Instance ENTITY on API

AXPD-1578 - Not able to update(clean-up) Application deployment configs once set

AXPD-1571 - When configuring a stream, the number of partitions is not respected

AXPD-1282 - Setting the “num.partitions” config has no effect

AXPD-1565 - Adding stream without “toggling” retention policy, returns in NullPointerException

AXPD-893 - View Stream endpoint add ABAC rules

AXPD-920 - Adding discovery api url, sr-url to Instance entity

AXPD-922 - Add a new endpoint to return stream browse config

AXPD-1225 - Adding cluster browse service url to Cluster entity

AXPD-1226 - Update generic auth endpoint in mgmt-api to support Resources.

AXPD-1354 - Store cluster-wise schema registry inside Instance

AXPD-1360 - Remove discovery_api_url as an instance level property

AXPD-1288 - Create non-paginated endpoint to retrieve all schema-versions by schema

AXPD-1190 - API- Create generic auth endpoint

AK8SP-60 - Make Mgmt API lazily build JWT decoders

AXPD-1220 - Change schema request to take schema as string instead of file

AXPD-913 - Make Application ID unique per tenant

AXPD-1116 - Create SchemaService to check and upload a schema inside MGMT-DB

AXPD-1118 - Create /check endpoint to validate a schema-body

AXPD-1119 - Create /upload endpoint to upload a valid schema-body to MGMT-DB

AXPD-1054 - Super Admin user can view instances from all tenants.

AXPD-915 - A user creating an application is not able to edit it when no group is assigned.

AXPD-1161 - Remove “Domain” from the Tenant Entity

AXPD-1141 - Remove /v1 versioning from MGMT-API

AXPD-1121 - Document the new MGMT-API endpoints

AXPD-1100 - Add BILLING_ADMIN as valid role in MGMT_API.

AXPD-1079 - /clusters/bootstrapServers response add tenant name

AXPD-1053 - Add supportTier field to instance entity

AXPD-1051 - Create brokers url retrieval endpoint

AXPD-1040 - Create billing endpoint ( to scrape DB data ) / #instances’s support, #stream configs, #groups in MGMT-API

AXPD-831 - Update API to deprecate GROUP_ADMIN

AXPD-893 - View Stream endpoint add ABAC rules

AXPD-886 - Create stream browse endpoint

AXPD-901 - Add enable DC toggle to tenant entity

AXPD-902 - Create Integrity Entity

AXPD-903 - Create Confidentiality Entity

AXPD-904 - Create ABAC Rules for Integrity Entity

AXPD-905 - Create ABAC Rules for Confidentiality Entity

AXPD-906 - Add integrity and Confidentiality References to Stream Entity

AXPD-907 - Create Delete constraints endpoint for Integrity to check if a Level can be deleted

AXPD-908 - Create Delete constraints endpoint for Confidentiality to check if a Level can be deleted

AXPD-909 - Stream delete should check for application accesses before deleting

AXPD-581 - Configure Management API as Resource Server and talk to Keycloak via OpenID

AXPD-772 - Connect User with Tenant Entity

AXPD-851 - Get rid of the Axual initial tenant

AXPD-854 - Create/Update Tenant: Register JWT Decoder registry based on the issuer url

AXPD-863 - Give initial roles to new Users

AXPD-867 - Add auth mechanism for docs

AXPD-876 - Error While setting Tenant Admin Role to a normal user / Logged in as SUPER ADMIN

AXPD-880 - Can’t log in to a newly created tenant

AXPD-883 - Set default realm when single tenant installation

AXPD-832 - Sync principal chain building for Mgmt-api and Principal builder

AXPD-709 - Create Certificate Chain Validation Service in Management API

AXPD-746 - Support upload of applicationprincipals

AXPD-758 - Create Validation API for validating application PEM

AXPD-743 - Add/edit/delete root ca’s per instance

AXPD-790 - Management API - Fix migration script causing database corruption.

AXPD-738 - API - Add validation for stream name

AXPD-795 - Stream configuration error

AXPD-321 - Deleting a stream

AXPD-577 - Deleting a private environment

AXPD-104 - Allow an application to have multiple principals in Management API / UI.

AXPD-271 - Show API and UI versions in the frontend in “About” section

AXPD-591 - Topic Apply does not happen when application access is created

AXPD-562 - Deleting a StreamConfig

AXPD-89 - Create tenant-instance mapping to disallow sharing instances

AXPD-572 - API implementation of tenant-instance mapping v.2.1.0

AXPD-495 - Delete ApplicationPrincipal

AXPD-499 - Deleting an application

AXPD-500 - Deleting a user

AXPD-545 - Integrate mgmt-ui with Backend for delete application principal

AXPD-564 - Integrate the delete user functionality from the API

AXPD-567 - Integrate application delete

AXPD-568 - Integrate “delete streamconfig”

AXPD-479 - Enable CSRF protection

AXPD-182 - Upgrade MGMT API to Spring Boot 2 / Java 11

AXPD-380 - Enforce HTTPS by default for MGMT API

AXPD-374 - Upgrade to HTTP/2

AXPD-432 - Use JWT for MGMT API

AXPD-168 - Revoke access to a stream

AXPD-311 - Remove topic and group resolution, moved to Instance API

AXPD-370 - Refactor Grants service, change cancel, revoke endpoints. Breaking change!

AXPD-382 - Remove environments call as we no longer use _environments topic for distributor.

AXPD-368 - Creation of ApplicationAccessGrant for auto-approved environment results in an error as it has been created and approved.

AXPD-366 - Environment name instead of short name used in topic config apply.

AXDEV-1629 - Render create links on empty pages

AXDEV-1202 - Topic apply with Instance API instead of Cluster API endpoint. Removed primary cluster config/code.

AXPD-138 - Fix the unique key constraint on clusters_id in the instance_clusters table

AXPD-55 - Add multiple ApplicationAccessGrants API’s for dashboard / notifications

AXPD-51 - Environment changes need to be reflected in distributor

AXPD-283 - Unable to create user if email address TLD is longer than 3 characters (.cloud)

AXPD-136 - Cannot update or remove Application ID

AXPD-183 - Approving or denying request is not working for stream owner

Added Tenant and Environment model

Created DB repository and REST endpoints for Tenant and Environment

Added validations for all models

Updated REST docs