Skip to content

0.17.3

This page documents the changes in Kannika Armory version 0.17.3.

  • Console: the OIDC redirect URI is now configurable through console.config.security.oidc.redirectUri. It is optional and defaults to the current origin, so existing installations keep working unchanged. Set it to a full URI when your provider requires a dedicated callback path.

  • API: custom CA certificates can now be imported into the API’s default truststore. Provide the PEM-encoded certificates in a Kubernetes Secret and reference it through api.config.tls.customCaCertificates.secretName, and the API merges them into the JVM’s default truststore on startup. This resolves PKIX path building failed errors when the OIDC provider or another TLS endpoint uses a private or internal CA.

  • Bump version to 0.17.3