helm-charts-1.3.18

An umbrella Helm chart for eclipse-tractusx/traceability-foss project

6.0.1

[6.0.1] - 2023-10-23

Added

• All elements from 6.0.1-rc1,rc2,rc3,rc4

[6.0.1-rc4]

Added

Changed

• updated IRS helm chart from 6.6.1 to 6.7.2
• updated policy related logic to reflect IRS changes

Removed

[6.0.1-rc3] - 2023-08-31

Added

Changed

• Updated irs-registry-client from 1.1.0-SNAPSHOT to 1.2.0-SNAPSHOT
• Updated irs-helm from 6.4.1 to 6.5.0

Removed

[6.0.1-rc2]

Added

• OAuth2 client credentials rest template interceptor
• Configuration for left and right policies to use registry client library
• TRG Github Action Pipeline for quality checks
• ErrorMessage field to investigation and alerts

Changed

• Changed digitalTwinRegistryRestTemplate to use token in requests
• Update asBuild test data to 1.5.3 and asPlanned to 1.5.1
• Changed transfer notification logic not to break iteration loop when sending notifications to bpn with more than 1 connector endpoints
• added handling for null manufacturerName in IrsJobResponse, if null is passed it is replaced with "UNKNOWN_MANUFACTURER"

Full Changelog: https://github.com/eclipse-tractusx/tx-traceability-foss/compare/6.0.0...6.0.1

helm-charts-1.3.17

An umbrella Helm chart for eclipse-tractusx/traceability-foss project.

6.0.1-rc4

[6.0.1-rc4]
Added

• new submodelserver related API endpoints for data provisioning /api/submodel/data/{id}

Changed

• updated IRS helm chart from 6.6.1 to 6.7.2
• updated policy related logic to reflect IRS changes

Full Changelog: helm-charts-6.0.1-rc1...6.0.1-rc4

helm-charts-1.3.15

An umbrella Helm chart for eclipse-tractusx/traceability-foss project.

7.1.0

[7.1.0 - 29.09.2023]

Added

• Splitscreen View with sliders on parts and otherParts View
• New test data for as planned assets aswell as JustInSequence and TractionBatteryCode
• Toggle for parts and other parts to switch views asPlanned/asBuilt
• LocalStorage to be used for saving view setting
• archunit tests as preparation for good quality architecture checks
• safety and security doc including roles matrix
• handling for duplicate shellDescriptor ids when refreshing registry
• Extendend testdata to reflect better overview of assets
• Support for TractionBatteryCode

Changed

• added sorting for /api/investigations received and created endpoints
• added sorting for /api/alerts received and created endpoints
• integration tests uses flyway now rather than hibernate schema auto creation
• irs helm updated from 6.5.0 to 6.6.1
• BpnEntity now contains BpnEdcMappingEntity fields
• Directories of bpnEntity to match architecture
• Mapping logic of catena-x site id and manufacturerPartId for AssetsAsPlanned

Removed

• Old edc code not necessary anymore
• BpnEdcMappingEntity removed with related repository

Full Changelog: 7.1.0...7.1.0

helm-charts-1.3.14

An umbrella Helm chart for eclipse-tractusx/traceability-foss project

7.0.0

Added

• OAuth2 client credentials rest template interceptor
• Configuration for left and right policies to use registry client library
• Add support for JustInSequence aspect model
• TRG Github Action Pipeline for quality checks
• ErrorMessage field to investigation and alerts
• Cucumber tests for quality investigations
• Refactored asset structure to allow new API for assets-as-planned
• Optional parameter "receiverBpn" to /investigations endpoint
• NEW API /api/assets/as-planned
• NEW API DELETE /api/registry
• NEW API GET /api/shelldescriptors
• cascading sorting functionality by allowing multiple sort query parameters on APIs
• cascading sorting functionality for Parts and OtherParts tables in FE
• NEW API GET /api/assets/as-planned/distinctFilterValues
• NEW API GET /api/assets/as-built/distinctFilterValues
• Added Batch 2.0.0 support
• Updated some patch version for used dependencies.

Changed

• API BREAKING CHANGE: /api/assets changed to /api/assets/as-built
• Changed digitalTwinRegistryRestTemplate to use token in requests
• Update asBuild test data to 1.5.3 and asPlanned to 1.5.1
• Changed transfer notification logic not to break iteration loop when sending notifications to bpn with more than 1 connector endpoints
• Decentral flow only using bpn for resolving globalAssetIds
• Logic of commitId retrieval by frontend has changed
• Readme / Docker Notice information as required in TRGs
• Removed references to GitHub registry and added docker hub for tractusx instead
• Removed UX breaking black status box
• Updated cypress-io/github-action from 5.8.4 to 6.0.0
• Updated asciidoctor-maven-plugin from 2.2.3 to 2.2.4
• Updated owasp:dependency-check from 8.3.1 to 8.4.0
• Updated commons-io from 2.11.0 to 2.13.0
• Updated snakeyaml from 2.0 to 2.1
• Split up Parts View in Frontend to parts asBUilt and asPlanned
• Replaced own implementation of getCatalog, negotiateAgreement, and validatePolicy with irs-client-library implementation.
• Updated irs-registry-client from 1.1.0-SNAPSHOT to 1.2.0-SNAPSHOT
• Updated irs-helm from 6.4.1 to 6.5.0
• Migrated groovy integration tests to SpringBootTests
• API GET/api/assets/as-built allow Search criteria to be provided
• API GET/api/assets/as-planned allow Search criteria to be provided
• Upgraded aquasecurity/trivy-action from 0.11.2 to 0.12.0
• Upgraded actions/checkout from 3 to 4
• Upgraded maven-checkstyle-plugin from 3.2.1 to 3.3.0
• Upgraded swagger-annotations from 1.6.10 to 1.6.11
• Upgraded spring-boot-maven-plugin from 3.0.2 to 3.1.3
• Upgraded shedlock.version from 5.5.0 to 5.7.0
• Upgraded mikefarah/yq from 4.34.2 to 4.35.1
• Upgraded snakeyaml from 2.0 to 2.2
• Upgraded docker/login-action from 2 to 3
• Upgraded cypress-io/github-action 6.0.0 to 6.5.0

Known knowns

• Backend [TRACEFOSS-1458]: AdminView: No validation of BPN for BPN EDC URL mapping
• Backend [TRACEFOSS-589]: Backend API access without login returns incorrect HTTP status code (500 instead of 401)
• Backend [TRACEFOSS-2148]: Endpoints for parts and notifications returns unsorted list

---

• Frontend [TRACEFOSS-2149]: Sorting on empty table causes unhandled error view

---

• Security [TRACEFOSS-829]: CVE Strict-Transport-Security header - The HSTS Warning and Error may allow attackers to bypass HSTS
• Security [TRACEFOSS-830]: CVE one stack trace disclosure (Java) in the target web server's HTTP response
• Security [TRACEFOSS-919]: Authorization Bypass Through User-Controlled SQL Primary Key CWE ID 566
• Security [TRACEFOSS-984]: Improper Output Neutralization for Logs CWE ID 117
• Security [TRACEFOSS-1313]: Using components with known vulnerabilities
• Security [TRACEFOSS-1314]: Open Redirect - host header injection
• Security [TRACEFOSS-1315]: No additional authentication component (MFA) during login process

---

• Environment [TRACEFOSS-2164]: HTTP Requests for syncing the submodel server inoperable~~

6.0.0

Added

• Moved all parts of app config to helm charts to be fully configurable
• Helmignore config params for wrong values.yaml files
• Home / Source URL in Helm Chart
• Name Overrides in Helmchart for pgadmin, irs-helm and tractusx-connector
• Added decentral registry approach
• Added discovery finder / edc discovery service for looking up edc urls of receiver of notifications
• Added about component with additional Workflow to load repo info into the component
• Add Transformer to support new EDC constraint operator format

Changed

• Modified IRS Policies support to handle multiple policies
• Readme titles to match TRGs
• Updated Irs helm chart to 6.3.1
• Update EDC dependencies to 0.1.3
• Update implementation to use EDC 0.5.0
• Spring Security Config Update from 6.0.3 to 6.0.5

Removed

• unused classes and methods

Known knowns

• Backend [TRACEFOSS-1458]: AdminView: No validation of BPN for BPN EDC URL mapping
• Backend [TRACEFOSS-589]: Backend API access without login returns incorrect HTTP status code (500 instead of 401)
• Backend [TRACEFOSS-2148]: Endpoints for parts and notifications returns unsorted list

---

• Frontend [TRACEFOSS-2149]: Sorting on empty table causes unhandled error view

---

• Security [TRACEFOSS-829]: CVE Strict-Transport-Security header - The HSTS Warning and Error may allow attackers to bypass HSTS
• Security [TRACEFOSS-830]: CVE one stack trace disclosure (Java) in the target web server's HTTP response
• Security [TRACEFOSS-919]: Authorization Bypass Through User-Controlled SQL Primary Key CWE ID 566
• Security [TRACEFOSS-984]: Improper Output Neutralization for Logs CWE ID 117
• Security [TRACEFOSS-1313]: Using components with known vulnerabilities
• Security [TRACEFOSS-1314]: Open Redirect - host header injection
• Security [TRACEFOSS-1315]: No additional authentication component (MFA) during login process

---

• Environment [TRACEFOSS-2164]: HTTP Requests for syncing the submodel server inoperable~~

Full Changelog: 5.0.0...6.0.0

helm-charts-1.3.12

An umbrella Helm chart for eclipse-tractusx/traceability-foss project