Update ghcr.io/warp-tech/warpgate Docker tag to v0.27.4

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change
ghcr.io/warp-tech/warpgate	minor	v0.8.1 → 0.27.4

---

Release Notes

warp-tech/warpgate (ghcr.io/warp-tech/warpgate)

v0.27.4

Compare Source

Features

• link straight to a prefilled ticket request by @​jwillmer in #​2358

Fixes

• fixed #​2349 - keyboard layouts in RDP by @​Eugeny in #​2364
• fixed #​2341 - session pagination links not working by @​Eugeny in #​2363
• fix SSH target page overflow after host key check by @​PokAhonTAS911 in #​2359
• fixed #​2338 - fix duplicated UI fields in database target options by @​Eugeny in #​2366
• fixed #​2310 - ssh.keepalive_interval config format by @​Eugeny in #​2365
• fixed #​2337 - translate mismatched MySQL proto capabilities between client and target by @​Eugeny in #​2368
• fixed #​2373 - do not fail if a postgres client attempts gssenc by @​Eugeny in #​2374

New Contributors

• @​jwillmer made their first contribution in #​2358

Full Changelog: warp-tech/warpgate@v0.27.3...v0.27.4

v0.27.3

Compare Source

Security fixes

GHSA-qmr2-wp96-h9ff - API tokens bypass the user's "allowed IP ranges" restriction - #​2356

A user's "Allowed IP ranges" list is enforced on interactive logins (password, SSO, OTP) and on tickets, but was never applied to API token authentication over HTTP. An API token belonging to an IP-restricted user was accepted from any source address.

Upgrade if using IP restrictions for users.

Fixes

• fix trusted client IP in HTTP authentication by @​PokAhonTAS911 in #​2353
• refactor SSH channel handling, extract channel registry by @​Eugeny in #​2332
• fixed #​2325 - missing package.lock resolutions & integrity by @​Eugeny in #​2330

New Contributors

• @​PokAhonTAS911 made their first contribution in #​2353

Full Changelog: warp-tech/warpgate@v0.27.2...v0.27.3

What's Changed

• refactor SSH channel handling, extract channel registry by @​Eugeny in #​2332
• fix trusted client IP in HTTP authentication by @​PokAhonTAS911 in #​2353
• Bump postcss from 8.5.22 to 8.5.25 in /warpgate-web by @​dependabot[bot] in #​2340
• add PokAhonTAS911 as a contributor for code by @​allcontributors[bot] in #​2355
• Bump @​tanstack/svelte-virtual from 3.13.34 to 3.13.35 in /warpgate-web in the version-bumps group by @​dependabot[bot] in #​2342
• Bump ip-address from 10.2.0 to 10.4.0 in /warpgate-web by @​dependabot[bot] in #​2350
• Bump sha2 from 0.10.9 to 0.11.0 by @​dependabot[bot] in #​2347
• fixed #​2325 - missing package.lock resolutions & integrity by @​Eugeny in #​2330
• request validation for tokens by @​Eugeny in #​2356

New Contributors

• @​PokAhonTAS911 made their first contribution in #​2353

Full Changelog: warp-tech/warpgate@v0.27.2...v0.27.3

What's Changed

• refactor SSH channel handling, extract channel registry by @​Eugeny in #​2332
• fix trusted client IP in HTTP authentication by @​PokAhonTAS911 in #​2353
• Bump postcss from 8.5.22 to 8.5.25 in /warpgate-web by @​dependabot[bot] in #​2340
• add PokAhonTAS911 as a contributor for code by @​allcontributors[bot] in #​2355
• Bump @​tanstack/svelte-virtual from 3.13.34 to 3.13.35 in /warpgate-web in the version-bumps group by @​dependabot[bot] in #​2342
• Bump ip-address from 10.2.0 to 10.4.0 in /warpgate-web by @​dependabot[bot] in #​2350
• Bump sha2 from 0.10.9 to 0.11.0 by @​dependabot[bot] in #​2347
• fixed #​2325 - missing package.lock resolutions & integrity by @​Eugeny in #​2330
• request validation for tokens by @​Eugeny in #​2356

New Contributors

• @​PokAhonTAS911 made their first contribution in #​2353

Full Changelog: warp-tech/warpgate@v0.27.2...v0.27.3

v0.27.2

Compare Source

Changes

• fixed #​2326 - support dynamic resolution in RDP web client by @​Eugeny in #​2329

Fixes

• fixed #​2328 - channel confirmation race by @​Eugeny in #​2331

Full Changelog: warp-tech/warpgate@v0.27.1...v0.27.2

v0.27.1

Compare Source

Fixes

• fix: don't send Transfer-Encoding: chunked on bodyless proxy requests by @​britbennett in #​2322

New Contributors

• @​britbennett made their first contribution in #​2322

Full Changelog: warp-tech/warpgate@v0.27.0...v0.27.1

What's Changed

• fix: don't send Transfer-Encoding: chunked on bodyless proxy requests by @​britbennett in #​2322
• add britbennett as a contributor for code by @​allcontributors[bot] in #​2323
• Bump strum from 0.26.3 to 0.28.0 by @​dependabot[bot] in #​2318
• Bump futures from 0.3.32 to 0.3.33 in the version-bumps group by @​dependabot[bot] in #​2315

New Contributors

• @​britbennett made their first contribution in #​2322

Full Changelog: warp-tech/warpgate@v0.27.0...v0.27.1

v0.27.0

Compare Source

Before we start

Would you kindly spend a few (<5) minutes and give your feedback on the size & type of your installation here? Thank you 🙏

Additionally, you can now subscribe to major release notes and vulnerability alerts via email: https://warpgate.null.page/newsletter/

New features

RDP & VNC remote desktop support - #​1987

Warpgate now supports RDP and VNC targets.

This includes full video recording of the screen and inputs and a web based client.

Check out the setup guides for RDP and VNC.

by @​theharold

True clustering support

Warpgate can now run behind a non-sticky load balancer, with multiple instances sharing a database

Reauthentication policy for for critical endpoints - #​2143

An new option to direct web users to log in again before accessing critical endpoints such as web terminal/desktop and ticket creation.

by @​Eugeny

Live-reloading port listener configuration - #​2144

Warpgate now automatically reloads listener configuration - both the endpoint and TLS certificate & key files - with zero downtime.

by @​Eugeny

OIDC for Kubernetes - #​2094

Adds an option to use SSO via kubectl oidc-login with Kubernetes targets, forwarding kubectl's own OIDC token to Warpgate for re-verification against the live OIDC provider.

by @​alistarle

Cached web approvals - #​2175

An option to remember "web approval" authorizations for a configurable amount of time to avoid repeated prompts on each new connection.

Once enabled, the users will see an option to "remember" the authorization for the configured amount of time.

by @​Eugeny

PROXY protocol support - #​2174

Allows Warpgate run behind HAProxy - for all protocol listeners. See documentation

by @​njzydark

S3 recording storage support - #​2205

Recordings can now be stored on a shared object storage, allowing clustering without a shared filesystem. Nodes record active sessions to a local scratch while simultaneously uploading parts to S3 as they come. The storage location can be changed under Config > Global Parameters

Changes

• fixed #​1871 - show banner on protocols other than SSH by @​Eugeny in #​2253

• fixed #​2235 - heuristic SSH shell command auditing by @​Eugeny in #​2259

• fixed #​2262, fixed #​951 - MySQL caching_sha2 auth by @​Eugeny in #​2267

• fixed #​1627 - support multiple SSH keys by @​Eugeny in #​2277

• DB backed HTTP sessions by @​Eugeny in #​2281

• [HELM] Add support for loadBalancerSourceRanges in the Service template by @​basti-nis in #​2279

• #​1828 - option to disable host key checks by @​Eugeny in #​2284

• Opt-in: open HTTP targets in a new tab by @​Chanta007 in #​2195

• cross-node AuthState handling for MFA logins - LB stickiness no longer required by @​Eugeny in #​2294

Fixes

• fixed #​1459 - concurrent agent channel requests causing deadlock by @​Eugeny in #​2135
• fix(auth): avoid holding the AuthStateStore lock during DB I/O and serialization by @​mba965 in #​2141
• fixed #​2157 - strip warpgate-* query params before proxying by @​Eugeny in #​2176
• fixed #​2160 - load server info in the web SSH view by @​Eugeny in #​2177
• fixed #​2173 - RDP web desktop bitmap shear + enable autologon by @​Eugeny in #​2178
• Add UI for checking the status of protocol listeners by @​Eugeny in #​2184
• fixed #​2191 - allow concurrent DB access by @​Eugeny in #​2192
• Reuse HTTP clients across requests by @​LarsSven in #​2196
• Do not check show_session_menu when it's not necessary by @​LarsSven in #​2197
• alternative #​2186 - better web approval cache binding, optional "appr… by @​Eugeny in #​2199
• fixed #​2200 - record web desktop client inputs by @​Eugeny in #​2207
• Significantly improve authorization performance by @​LarsSven in #​2221
• Avoid unnecessary set_target and set_user_info hot path work by @​LarsSven in #​2220
• Fix embedded session menu clicks misclassified as drags by @​Hexalyse in #​2217
• compress web desktop client updates by @​Eugeny in #​2233
• accept RDP client's resolution requests by @​Eugeny in #​2242
• alternative #​2234 - properly handle websocket session keepalive by @​Eugeny in #​2246
• RDP progressive encoding by @​Eugeny in #​2247
• lock DB when running migrations by @​Eugeny in #​2260
• Fix session cleanup by @​Eugeny in #​2269
• fixed #​1575 - obtain SSO cred via web approval over SSH by @​Eugeny in #​2270
• fix(web): namespace the theme localStorage key by @​ndreno in #​2280
• fix #​1342 - cleanup abruptly ended sessions by @​Eugeny in #​2287
• Cross-node web approvals by @​Eugeny in #​2288
• make sure "close all sessions" closes sessions on all nodes by @​Eugeny in #​2286

New Contributors

• @​theharold made their first contribution in #​1987
• @​mba965 made their first contribution in #​2141
• @​alistarle made their first contribution in #​2094
• @​njzydark made their first contribution in #​2174
• @​Hexalyse made their first contribution in #​2217
• @​basti-nis made their first contribution in #​2279
• @​Chanta007 made their first contribution in #​2195

Full Changelog: warp-tech/warpgate@v0.26.1...v0.27.0

v0.26.1

Compare Source

Fixes

• #​2150 - fix a new WebSSH tab opening on reconnect - 9cb2e70
• #​2149 - admin API playground not rendering - 907a10f

Full Changelog: warp-tech/warpgate@v0.26.0...v0.26.1

v0.26.0

Compare Source

New features

Brute-force protection with IP blocking and user lockout #​1630

_{by @​mrmm}

Custom SSH banner #​2125

The new parameter lets you set a custom banner to be displayed when users connect over SSH.

Global toggle for webSSH #​2119

Added an option to disable WebSSH entirely

Option to disable password login #​2128

Added an option to disable the password login form entirely, allowing only SSO authentication.

Changes

• Add configurable roles_claim for custom OIDC providers by @​noammeltzer-ax in #​2113
  • Lets you sync roles from OIDC providers that do not support custom claim names
• fixed #​2112 - support receiving pre-expired cookies from upstream by @​Eugeny in #​2126
  • Upstream cookies that with an expiration date in the past are not passed through as-is
• fixed #​2066 - offer hmac-sha1 when insecure algorithms are allowed by @​Eugeny in #​2127
  • Enabling "Insecure ciphers" for an SSH target now also enables the hmac-sha1 MAC algorithm, which was previously never enabled.
• ci(docker): sign and attest (SBOM, provenance) the published image by @​mathieuHa in #​2090
• Warn on unknown/misplaced config keys instead of silently dropping them by @​ndreno in #​2099

Fixes

• Terminate HTTP target WebSockets on logout by @​snvtac in #​2111
• fixed #​2027 - case-insensitive username comparison for web approval by @​Eugeny in #​2117
• fixed #​2103 - do not auto-advance login state to SSO on invalid password by @​Eugeny in #​2118

New Contributors

• @​ndreno made their first contribution in #​2099
• @​snvtac made their first contribution in #​2111
• @​noammeltzer-ax made their first contribution in #​2113

Full Changelog: warp-tech/warpgate@v0.25.6...v0.26.0-beta.1

v0.25.6

Compare Source

Security fixes

GHSA-862h-v6cc-9757

In Websocket requests, a client could supply its own X-Wargate-Username header which would be appended to the upstream request, allowing the client to impersonate another user if the upstream relies on this header for authentication.

GHSA-2q37-6vxr-26jr

Incorrect authorization handling allowed an authenticated user to eavesdrop on another user's SSH session if they are able to obtain the session UUID.

Full Changelog: warp-tech/warpgate@v0.25.5...v0.25.6

v0.25.5

Compare Source

Security fixes

GHSA-3c3w-75j2-7h74

This is a high severity vulnerability. An attacker-crafted Warpgate login URL could lead a user to a redirect page that runs attacker-injected JS code

Features

• fixed #​947 - configurable advertised MySQL server version by @​Eugeny in #​2083
  • The new mysql.advertised_version lets you specify the MySQL server version that Warpgate will advertise to clients. Note that the previous hardcoded value of 8.0.0 now defaults to 8.0.3 which disables some ancient compatibility behaviours in various DB clients.

Changes

• fixed #​1842 - tell the SSH client when the session is closed due to inactivity by @​Eugeny in #​2082

Fixes

• #​1989 - HTTP: return 401 instead of a redirect for cookie-less fetch by @​Eugeny in #​2060
• fixed #​2048 - HTTP: strip cookie domains by @​Eugeny in #​2061
• fixed #​2049 - WebSS sessions were never marked as ended by @​Eugeny in #​2062
• fixed #​2050 - SSH target menu freezing when running in Docker by @​Eugeny in #​2063
• fixed #​1957 - don't offer credentials for disabled SSH auth methods by @​Eugeny in #​2071
• #​1962 - handle connection accept errors gracefully by @​Eugeny in #​2072
• fix(logging): emit audit events to the JSON console by @​mathieuHa in #​2077
• fixed #​1421 - MySQL/Postgres TLS upgrade race by @​Eugeny in #​2081
• fixed #​2065 - rsync/scp/Ansible hang: early channel data dropped by @​Eugeny in #​2087

New Contributors

• @​mathieuHa made their first contribution in #​2077

Full Changelog: warp-tech/warpgate@v0.25.4...v0.25.5

v0.25.4

Compare Source

Fixes

• fixed #​2039 - allow setting Postgres protocol version explicitly by @​Eugeny in #​2047

Full Changelog: warp-tech/warpgate@v0.25.3...v0.25.4

v0.25.3

Compare Source

Fixes

• fixed #​2038 - saving a jump host option resets it by @​Eugeny in #​2043
• fixed #​2005 - prefer external_hosts.http as return host in the embedd… by @​Eugeny in #​2044

Full Changelog: warp-tech/warpgate@v0.25.2...v0.25.3

v0.25.2

Compare Source

Fixes

• fixed #​2029 - broken MySQL query, remove log entry size limit by @​Eugeny in #​2031
• fixed #​2027 - make username matching case insensitive by @​Eugeny in #​2032

Full Changelog: warp-tech/warpgate@v0.25.1...v0.25.2

What's Changed

• fixed #​2029 - broken MySQL query, remove log entry size limit by @​Eugeny in #​2031
• fixed #​2027 - make username matching case insensitive by @​Eugeny in #​2032
• Bump x509-parser from 0.17.0 to 0.18.1 by @​dependabot[bot] in #​1934

Full Changelog: warp-tech/warpgate@v0.25.1...v0.25.2

v0.25.1

Compare Source

Fixes

• Fixed an error when creating new SSH targers

Full Changelog: warp-tech/warpgate@v0.25.0...v0.25.1

v0.25.0

Compare Source

New features

#​1990 - SSH target selection menu

Users can now omit the target name when connecting to Warpgate's SSH port, which will trigger an interactive target selection menu in the terminal.

#​1882 - Configurable password policy

Added password complexity rules, configurable under Config > Global Parameters.

_{by @​kamilkrzeminski}

#​2013 - SSH jump host support

Added support for SSH targets that are only reachable behind another jump host. The jump host has itself to be defined as a separate SSH target, after which it becomes selectable in the new "Jump host" field in the SSH target configuration.

_{by @​rjourdan04}

#​1985 - Audit logging improvements

Added audit logging for failed web logins, as well as details regarding credentials used, IPs, etc.

_{by @​LarsSven}

Changes

• Add logs download button by @​LarsSven in #​1977
• Postgres protocol 3.2 support by @​Eugeny in #​2009
• New connection animation by @​Eugeny in #​2017
• fixed #​2000 - always require TLS for Postgres connections by @​Eugeny in #​2020
• fixed #​2003 - allow dismissing tutorial by @​Eugeny in #​2022

Fixes

• #​1988 - fix migrations compatibility with MySQL 8 by @​Eugeny in #​1992
• fix(db): change varchar fields to TEXT to avoid insertion errors by @​joseluisgonzalezca in #​1999
• perf: find target by name using a query instead of doing it in memory by @​joseluisgonzalezca in #​2019

New Contributors

• @​kamilkrzeminski made their first contribution in #​1882

Full Changelog: warp-tech/warpgate@v0.24.0...v0.25.0

v0.24.1

Compare Source

Fixes

• Fixed the bug where clicking SSH connection instructions would open both instructions and WebSSH

Full Changelog: warp-tech/warpgate@v0.24.0...v0.24.1

v0.24.0

Compare Source

WebSSH update

This is a large feature release bringing a web-based SSH terminal and self-service ticket requests.

Migrating

If you use domain binding with SSO and want to use the bound domain for the SSO return URL, you'll need to set the new return_url_domain option to host_header - see more at https://warpgate.null.page/sso/#domain-handling

New features

Web SSH #​1943

Your users will now be able to connect to their SSH targets directly from the web browser. The terminal supports multiple tabs and single file transfers via ZMODEM.

Clicking an SSH target will open the terminal by default, but this can be changed under Config > Global parameters.

Default roles #​1923

Roles can now be marked "default", which will auto-assign them to any newly created users.

Self-serve tickets #​1818

_{by @​SteezyCougar}

If enabled under Config > Global parameters, users will be able to request ticket creation from their profile page. Admins will be able to see and approve/reject these requests on the Ticket admin page. Tickets for already allowed targets can be optionally auto-approved.

Changes

• Sectioned forms for users and targets by @​Eugeny in #​1961
• fixed #​1975, fixed #​1976 - let admin choose the default target click action by @​Eugeny in #​1983
• Little/max api token duration by @​SteezyCougar in #​1946
• fixed #​1945 - make SCP recording optional by @​Eugeny in #​1978
• fixed #​1948 - add return_url_domain SSO config option by @​Eugeny in #​1971

Fixes

• Make admin UI search filtering case-insensitive across list and log endpoints by @​Copilot in #​1922
• Ipv6 hostname parse fix by @​Eugeny in #​1936
• Small cleanups by @​LarsSven in #​1939
• fix: parse forwarded header lists by @​immanuwell in #​1944
• Fix Svelte sourcemap line drift by disabling preprocess-level sourcemap emission by @​Copilot in #​1959
• fix: display security key and browser auth URL in SSH terminal (#​1960) by @​xTamasu in #​1970

New Contributors

• @​immanuwell made their first contribution in #​1944
• @​xTamasu made their first contribution in #​1970

Full Changelog: warp-tech/warpgate@v0.23.4...v0.24.0

v0.23.4

Compare Source

Fixes

• Fix #​1558 - get username for API token by @​tieb62 in #​1899
• Helm : Roll deployment when config or referenced secrets change by @​plopoyop in #​1898
• fixed #​1903 - ensure usernames are unique by @​Eugeny in #​1911
• read request Host header explicitly by @​Eugeny in #​1912

New Contributors

• @​tieb62 made their first contribution in #​1899
• @​plopoyop made their first contribution in #​1898

Full Changelog: warp-tech/warpgate@v0.23.3...v0.23.4

What's Changed

• Bump github/codeql-action from 4.35.2 to 4.35.4 by @​dependabot[bot] in #​1907
• Bump axios from 1.15.0 to 1.16.0 in /warpgate-web by @​dependabot[bot] in #​1905
• Bump ip-address and socks in /warpgate-web by @​dependabot[bot] in #​1904
• Fix #​1558 - get username for API token by @​tieb62 in #​1899
• Helm : Roll deployment when config or referenced secrets change by @​plopoyop in #​1898
• add tieb62 as a contributor for code by @​allcontributors[bot] in #​1909
• fixed #​1903 - ensure usernames are unique by @​Eugeny in #​1911
• read request Host header explicitly by @​Eugeny in #​1912

New Contributors

• @​tieb62 made their first contribution in #​1899
• @​plopoyop made their first contribution in #​1898

Full Changelog: warp-tech/warpgate@v0.23.3...v0.23.4

What's Changed

• Bump github/codeql-action from 4.35.2 to 4.35.4 by @​dependabot[bot] in #​1907
• Bump axios from 1.15.0 to 1.16.0 in /warpgate-web by @​dependabot[bot] in #​1905
• Bump ip-address and socks in /warpgate-web by @​dependabot[bot] in #​1904
• Fix #​1558 - get username for API token by @​tieb62 in #​1899
• Helm : Roll deployment when config or referenced secrets change by @​plopoyop in #​1898
• add tieb62 as a contributor for code by @​allcontributors[bot] in #​1909
• fixed #​1903 - ensure usernames are unique by @​Eugeny in #​1911
• read request Host header explicitly by @​Eugeny in #​1912

New Contributors

• @​tieb62 made their first contribution in #​1899
• @​plopoyop made their first contribution in #​1898

Full Changelog: warp-tech/warpgate@v0.23.3...v0.23.4

v0.23.3

Compare Source

Security fixes

CVE-2026-44347

• Verify SSO state parameter in #​1891

This vulnerability allowed an authorized Warpgate user A to share their SSO return link with another authorized Warpgate user B, potentially misleading B into getting logged in as A and subsequently sharing confidential information through user A's session.

Fixes

• fix #​1883 - re-normalize options.auth field for database targets by @​Eugeny in #​1892

Full Changelog: warp-tech/warpgate@v0.23.2...v0.23.3

What's Changed

• Verify state parameter by @​Eugeny in #​1891
• fix #​1883 - re-normalize options.auth field for database targets by @​Eugeny in #​1892

Full Changelog: warp-tech/warpgate@v0.23.2...v0.23.3

v0.23.2

Compare Source

Fixes

• fix #​1854 - PG timestamp types by @​Eugeny in #​1877

Full Changelog: warp-tech/warpgate@v0.23.1...v0.23.2

What's Changed

• Bump follow-redirects from 1.15.11 to 1.16.0 in /warpgate-web by @​dependabot[bot] in #​1867
• fix #​1854 - PG timestamp types by @​Eugeny in #​1877
• Bump github/codeql-action from 4.35.1 to 4.35.2 by @​dependabot[bot] in #​1870

Full Changelog: warp-tech/warpgate@v0.23.1...v0.23.2

What's Changed

• Bump follow-redirects from 1.15.11 to 1.16.0 in /warpgate-web by @​dependabot[bot] in #​1867
• fix #​1854 - PG timestamp types by @​Eugeny in #​1877
• Bump github/codeql-action from 4.35.1 to 4.35.2 by @​dependabot[bot] in #​1870

Full Changelog: warp-tech/warpgate@v0.23.1...v0.23.2

v0.23.1

Compare Source

Security fixes

GHSA-f5v4-2wr6-hqmg

This DoS vulnerability allowed an unauthenticated user to trigger an out-of-memory condition on a Warpgate instance if keyboard-interactive authentication is enabled. A malicious authentication packet could trigger a multi-GB memory allocation likely leading to Warpgate to be killed by the OOM killer.

v0.23.0

Compare Source

Changes

• #​1499 - admin roles in #​1783

  • New "Admin roles" let you grant users granular permisssions to the admin UI, for example to manage targets/users/roles/tickets. These are separate from the existing "Access roles".
  • Migration notes:
    • The admin UI is no longer its own "target" but rather a link on the top of the Warpgate landing page
    • Any user with an admin role assigned to them is now able to access the admin UI - with the corresponding restrictions
    • Existing users that are assigned to the warpgate:admin role will have a warpgate:admin superuser admin role assigned to them, so that there is no change in access after the update.
    • You can delete the old warpgate:admin access role if you have never used it for anything other than admin UI access.

• Added support for disabling the injected menu by @​LarsSven in #​1852

  • The new checkbox under Global Parameters lets you disable the injected session menu for HTTP targets. The users can still manually navigate back to /@warpgate to switch targets.

• AWS IAM auth in #​1859

  • Experimental support for AWS IAM role authentication for SSH (EC2), EKS (Kubernetes) and MySQL and Postgres (RDS) targets.

• Automatically generate client certificate when using kubernetes targets by @​LarsSven in #​1795

  • The "Access instructions" dialog now offers a quick way to issue a new client certificate for Kubernetes targets as well as an option to store the certificate and the private key in the browser's storage. This allows the Warpgate frontend to generate a fully pre-configured kubeconfig file for the user, including the credentials.

• Rich audit logs in #​1832

  • Audit-relevant events (such as role or credential changes as well as session start/e

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.