v2.2.0

• Fail silently and log when KMS policy validation fails so that customers can still authenticate successfully
• Increase the default KMS policy validation interval to five minutes

v2.1.4

• Minor bug fix: InvalidArnException should map to a 400 error code rather than a 500 error code.

v2.1.3

• Adding intentional incompatible change to prevent highlander branch from being deployed over the CMS 2.x.x series

v2.1.2

Bug fixes:

1. Key policy validation was always checking for role ARNs in keys but should have been checking for any of the ARN types allowed in key policies (all principals except instance-profile and group)
2. Key policy validation/generation was sometimes being passed ARNs cannot go in key policies
3. Updating ARN validation to reject instance-profile ARNs on SDB endpoint because KMS policies reject them.

In general, support for instance-profile ARNs is being dropped. The Dashboard will no longer allow instance-profile ARNs in the permissions section. We will still allow instance-profile ARNs via auth for backward compatibility for a small number of users.

We removed the instance-profile auth provider in the Java client,
https://github.com/Nike-Inc/cerberus-java-client/releases/tag/v4.0.3

Anyone using instance-profile ARNs today should update their permissions to switch to role ARNs. In a later release, all support for instance-profile ARNs will be removed.

v2.1.1

• Paginate over usergroups when a user requires pagination in the OKTA conenctor

v2.1.0

• Reports API Exception metrics for those using SignalFx

v2.0.3

• Additional bug fix with policy validation: some valid policies were being re-generated unnecessarily

v2.0.2

• Minor bug fix with key and policy validation

v2.0.1

• Fixing Hystrix exception handling

v2.0.0

• Move all Nike-Inc/cerberus-management-dashboard code into this project
• Serve Dashboard static webpage from CMS (endpoint: '/dashboard')
• For local dashboard development, run CMS gradle commands (e.g. runDashboardAndReverseProxy)

** Note: The version jump is a result of the Dashboard and CMS versioning together going forward