Galapagos 2.8.0

Hi Galapagos Users and Admins! Due to a lack of resources on Hermes side, unfortunately the release frequency of Galapagos has dropped significantly, as you may have noticed. But now, Galapagos 2.8.0 is here, with only few changes in the featureset and UI, but huge changes under the hood!

Spring Boot 3.x

Galapagos has been upgraded to Spring Boot 3.1, which brings a lot of changes internally, especially in the codebase. But there was a huge change regarding Spring Security, which leads us to...

Keycloak and OIDC

Galapagos 2.8.0 no longer includes the Keycloak-specific libraries, as these are no longer compatible to Spring Security. So we replaced the whole Authentication and Authorization logic with generic OIDC mechanisms of Spring Boot and Spring Security. This requires some migration effort on your side, but offers the possibility to connect Galapagos directly to other OIDC providers than Keycloak, e.g. directly to your Azure AD (now Entra ID).

Please see the Migration Guide for 2.8 for a detailed manual for the required migration steps.

All Changes

• Restructure Schema Compatibility Check (#287) @albrechtflo-hg
• fix sorting problem, if action button was pressed (#288) @ueberschaersilas-hg
• Migrated to Spring Boot 3 using OpenRewrite (#293) @jimbethancourt
• Limit app names to 50 characters for Service Account Display Name (#294) @albrechtflo-hg
• Improve ACL usage (#275) @albrechtflo-hg
• Distribute admin table to multiple pages (pagination) (#284) @ueberschaersilas-hg
• Stop creating a subscription if one already exists (#280) @ueberschaersilas-hg
• Remove "Resigned" application owner requests after 30 days (#281) @ueberschaersilas-hg

Download

You can pull Galapagos, as always, directly from Docker Hub.

Galapagos 2.7.0

Long time no see! Due to limited development capacity, it took a while to implement all the planned features for Galapagos 2.7.0, but finally, we made it! Also, we received more contributions from the community - thanks a lot! We always appreciate your efforts!

Galapagos 2.7.0 finally upgrades the UI to Bootstrap 5, while 2.6.x was in some kind of "intermediate" state with some ugly UI bugs. We hope UI experience is now back to normal.

Also, a really useful feature is the new flag developerWriteAccess for Kafka Clusters. If this is set to true for a given Cluster, Developers receive write access to the topics of their applications when they create a Developer API Key (or a Developer Certificate). This way, they can e.g. write test data using Offset Explorer or other Kafka Tools to their topics.

Usually, you would set that flag to true only for Development and maybe Integration Testing Clusters, but not for production clusters.

Along come many fixes (including Security updates of dependencies) and minor improvements, so enjoy this latest Galapagos Release!

Galapagos 2.7.0 is available at DockerHub, as they luckily refrained from killing their Free Plan. Still, we consider migrating to GitHub Container Registry with the next release.

Changes

• Upgrade to Bootstrap 5 (#252) @ueberschaersilas-hg
• Add per-env writeAccess flag for developer authentications (#249) @albrechtflo-hg
• Change error message on failed api key creation (#272) @ueberschaersilas-hg
• Fix timestamp in admin view (#260) @ueberschaersilas-hg
• Fix NPE during UpdateApplicationAcls Job (dry run) when missing authentication JSON (#271) @albrechtflo-hg
• Reset internal ID cache when creating new Developer API Keys (#269) @albrechtflo-hg
• change "Data" translation (#267) @ueberschaersilas-hg
• Application prefixes are not recalculated per stage (#268) @ueberschaersilas-hg
• Update some dependencies for security fixes (#258) @albrechtflo-hg
• Fix reload issue on settings page (#264) @ueberschaersilas-hg
• adjusting the demo setup script to a newer version of the confluent cli (#262) @1123
• Hide subscriber row for internal topics (#254) @ueberschaersilas-hg

Galapagos 2.6.3

This is a hotfix to fix an issue with the Confluent Cloud REST API, introduced by a slightly changed behaviour of their paginated endpoints. All Galapagos administrators using Confluent Cloud Kafka should update their 2.6.x installations ASAP.

If you still have a 2.5.x or earlier installation, you are not affected by this issue; however, consider updating to Galapagos 2.6.3 to get latest security updates. Please refer to the Galapagos 2.6.x migration guide before doing so.

Changes

• Hotfix: Fix Confluent Cloud changed "next" URI syntax for pagination (#257) @albrechtflo-hg

Galapagos 2.6.2

This hotfix release fixes another Darkmode related bug. Accordion Panels were not converted to dark mode after the last Bootstrap update.

Docker images are available at DockerHub, as always.

Changes

• Fix Accordion Panel in dark mode (#245) @albrechtflo-hg

Galapagos 2.6.1

This hotfix release fixes a UI bug where modal dialogs blocked the whole UI when UI was in "dark mode".

Changes

• Hotfix for UI blocking in dark mode (#243) @albrechtflo-hg

Galapagos 2.6.0

This release introduces a major change regarding the integration of Confluent Cloud.

Previously, Galapagos used the "inofficial" REST API which also feeds the Confluent Cloud Web UI for actions like creating service accounts and API keys.

With the latest additions to the official Confluent REST API, we were now able to switch to this API stack. This removes the necessity of adding a "real" user name and password to the Galapagos config. Instead, a so-called "Cloud API Key" (still, with OrgAdmin rights, unfortunately) must now be provided.

A full description of the related config changes and the steps to perform to upgrade to Galapagos 2.6.0 can be found in the Galapagos 2.6 migration guide. Please read it carefully. Galapagos 2.6.0 won't start up successfully on unchanged 2.5.x or earlier configurations.

The new integrations allowed us to provide a really cool Demo setup script for Galapagos, which guides you from creating a Confluent Cloud account (or using an existing one) down to full Galapagos configuration. See the updated README for details. From now on, we strongly encourage all new users of Galapagos to start with the Confluent based Demo setup, and, if required, switch to self-operated Kafka Clusters later, after getting familiar with Galapagos.

Additionally, we updated Angular to version 14 and related front-end libraries. A Bootstrap update (to Bootstrap 5) will most likely follow in the next release.

Backend libraries also have been updated to fix potential security issues.

Here are all changes and new features of this version:

Changes

• Send mail when producer is added/deleted (#216) @PolatEmre-hg
  Change Maven/npm integration to better work on "clean" systems (#237) @albrechtflo-hg
• Official Confluent Cloud REST API & new CCloud based Demo Setup (#231) @albrechtflo-hg
• Use double quotes for sasl.jaas.config value (#230) @albrechtflo-hg
• Use Clipboard API (#218) @PolatEmre-hg
• [Snyk] Fix for 10 vulnerabilities (#219) @snyk-bot
• Note on staging for topic subscriptions (#228) @albrechtflo-hg
• Fix scrollbar in darkmode (#227) @albrechtflo-hg
• Calculated staging is not resetted when changing the application #187 (#223) @PolatEmre-hg
• Show Service Account Id for Applications in UI (#226) @PolatEmre-hg
• Added DEST/SRC Store Type to get demo running (#213) @8mk

Galapagos 2.5.1

This Bugfix release fixes an issue where Galapagos did not terminate cleanly when a Kafka connection error occurs during Galapagos startup.

Changes

• Bugfix: Process hangs on Kafka connection error on startup (#211) @albrechtflo-hg

Galapagos 2.5.0

This release brings some nice features for the Galapagos UI. For example, you can now choose to display avatars in the changelog, e.g. using Gravatar, calculated initials, or a custom profile picture provider (e.g. SharePoint). Also, the changelog is optimized to hide superflouous information when it comes to lots of JSON schema additions and deletions, e.g. during development phase.

Related to JSON schemas is also a new feature which allows Galapagos admins (and only them!) to publish a new JSON schema for a topic even if it is incompatible to the previous version. This is a last resort in some edge cases and has to be used with caution. Always ensure that you do not break production applications by doing so!

Do you also operate a Testing Instance of Galapagos? Now you can display an "Instance Name" in the top bar of the application, so no changes are done accidentally in the production.

Also included in this release are some technical improvements in the UI. For example, we have replaced the deprecated moment.js library with Luxon, which allows for better UI performance in combination with Angular.

As always, you can find the latest release on DockerHub: https://hub.docker.com/r/hermesgermany/galapagos/tags

Changes

• Show Kafka Instance Name in UI (#182) @ahmedullah-neyazi-hg
• change endpoint name (#208) @PolatEmre-hg
• Log JSON Schema Deletions; optimize Changelog display (#171) @ueberschaersilas-hg
• Display avatar pictures, if available, in changelog (#166) @ueberschaersilas-hg
• Skip schema compatibility check as admin (#170) @PolatEmre-hg
• Change momentjs to luxon (#168) @ueberschaersilas-hg
• Flag for disabling ACL updates (#202) @albrechtflo-hg
• Change toPromise to FirstValueFrom (#172) @ueberschaersilas-hg
• Fix UI on topic site (#199) @ueberschaersilas-hg

Galapagos 2.4.1

This is a hotfix release fixing a wrong text template used in the API Key dialog for "My applications" (in Confluent Cloud mode).

Changes

• Fix #196: Wrong text template in API Key dialog (#197) @albrechtflo-hg

Galapagos 2.4.0

Wow, this one took a while. Among others, we implemented the seemingly small but much underestimated feature of Developer API keys, which is just analogous to the Developer Certificates for certificate-based Kafka clusters.

Now, you can access a "settings" menu when clicking on your user name (top right) and receive a "Developer API Key" for a Confluent Cloud-based cluster, allowing you to access anything what your owned applications are also allowed to access. The Developer API Key is limited in its validity and disabled (deleted) by Galapagos after a configurable amount of time, to avoid security risks.

To enable Developer API Keys for a given Confluent Cloud-based cluster, you have to configure this validity period in your Galapagos configuration. See the application-ccloud.properties for how to configure that period.

Anther new feature is a "Dark mode" of Galapagos, which is auto-detected based on your system settings (if available) and also switchable using the top right menu.

See the changelog below for more new features in this latest release.

Changes

• Implement Developer API Keys (#154) @PolatEmre-hg
• Ability to swap to Darkmode (#158) @ueberschaersilas-hg
• Upgrade to Spring 2.5.12 to fix SpringShell vulnerability (#175) @albrechtflo-hg
• [Snyk] Fix for 18 vulnerabilities (#173) @snyk-bot
• Add ESLint rules for spacing related to keywords (#164) @albrechtflo-hg
• Add possibility to change amount of changes in dashboard (#155) @ueberschaersilas-hg
• Added new Cases for Pending, Accepted and Declined in Dashboard (#152) @ueberschaersilas-hg
• Updated Angular to Version 13.2 (#149) @ueberschaersilas-hg
• Fixed Bug where SAML Username wouldn't show up (#146) @ueberschaersilas-hg