In this release, we have implemented a dedicated data endpoint for the edochub container registry images to enhance security. In addition, we have updated the version of Keycloak and the associated SCIM plug-in.
The list of allowed ports has been updated in the edoc platform guide.
We have also fixed some bugs.
New functions and enhancements
ID 15271: Deploy "edochub" container registry images via a dedicated data endpoint
The edoc Container Registry, edochub, is now available via fixed domains. If you have configured firewall rules for the edoc platform, you must add edochub.northeurope.data.azurecr.io to the list of allowed ports and remove *.blob.core.windows.net.
ID 20362: Update Keycloak and the "scim-for-keycloak" plug-in
With this update, Keycloak will be updated to version 26.7.3 and the SCIM plug-in to version 4.1.0.
ID 20466: Expand the URL list for allowed ports in the firewall
The list of Kubernetes community container images has been expanded for Port 443 to include the URLs https://production.cloudfront.docker.com and https://*.pkg.dev.
Bug fixes and improvements
High ID 20417: MySQL upgrade fails
MySQL upgrades performed as part of migrations now run correctly again. The permissions required to load the images (ImagePullSecrets) are checked and automatically set as needed, so that the synchronization process can be completed without errors.
High ID 20282: Image tags in the app definition are not carried over when synchronizing with edoc agent
The image tags in the edoc system control app definition are now correctly read and applied by edoc agent during synchronization.