All notable changes to this project will be documented in this file.
Please find documentation here: https://tapis.readthedocs.io/en/latest/technical/systems.html
You may also reference live-docs based on the openapi specification here: https://tapis-project.github.io/live-docs
Update from Java jdk-17 to jdk-21
- None
- None
Support for Trust Manager System (TMS) Minimal Viable Product (MVP)
- Initial support for Trust Manager System (TMS). New credential type and related functionality.
- None
New release
- None
- None
Incremental improvements. Update service code to match latest System client model.
- None
- GET followed by PUT will incorrectly switch effectiveUserId from dynamic to static. Allow but ignore effectiveUserId during PUT.
Incremental improvements. Add log messages for when access is denied or resource not found.
- None
- None
Incremental improvements. Improved error handling. Refactoring of service implementation.
- None
- None
Incremental improvements and new features.
- Support use of HOST_EVAL in attribute rootDir during system creation.
- Run service in docker container as non-root user.
- Set default log level to INFO. Allow for dynamic changing of log level.
- Fix bug where total count might be incorrect for getSystems when a tenant admin impersonates a Tapis user.
Incremental improvements and new features
- Endpoint to get the initial Globus authentication URL now requires the system ID to be passed in.
- Endpoint /v3/systems/credential/globus/authUrl is now /v3/systems/credential/{systemId}/globus/authUrl
- Obsolete attributes removed from System definition: isDtn, dtnMountPoint, dtnMountSourcePath
- Allow tenant admin to impersonate a Tapis user when calling getSystem, getSystems.
- Validate DTN system configuration when a DTN system is specified as part of a system definition.
- Add sharing related keywords to list of reserved IDs.
Incremental improvements.
- When fetching systems get shareInfo only when needed.
- Add ZIP to JobRuntime model.
- Allow owner to grant themselves permissions. Useful when preparing to call changeSystemOwner.
- Fix missing information in error message SYSLIB_CRED_NOT_FOUND.
Incremental improvements and bug fixes.
- None
- Rebuild with latest shared code to fix JWT validation issue.
- Relax restrictions on attribute host. Validation was rejecting some valid names, such as host.docker.internal.
- Allow attribute rootDir to be empty for S3 type systems.
- Fix bug in PATCH where null value for defaultAuthnMethod resulted in an error.
New release
- None
- None
Code cleanup, update java version in docker builds.
- None
- None
Incremental improvements and new features.
- Add computed attribute sharedWithUsers to be included when a system is fetched.
- None
Incremental improvements and bug fix.
- Allow id to begin with a number.
- For an unknown user the credential check passes when it should not.
Incremental improvements and new features.
- Environment variables beginning with _tapis may not be used in jobEnvVariables. This is to match Jobs service behavior.
- Add notes and inputMode attributes to items in jobEnvVariables.
- None
Incremental improvements and bug fixes
- None
- Add application shutdown hook for graceful shutdown.
- When Files fetches a system the effectiveUserId is incorrect for the mapped login user case.
- Do not log error if optional startup parameter for applying a migration is not set.
Incremental improvements.
- Child Systems
- None
Incremental improvements and bug fix.
- None
- Update sharedAppCtx to represent app share grantor.
Incremental improvements and new preview features.
- Support for multiple module load entries in a scheduler profile has changed the data structure. The modules entry is now an array modules to load.
- Added enableCmdPrefix to Systems. This can be used to enable/disable command prefix for jobs.
- Add accessToken, refreshToken to Credential for Globus support.
- Add support for Globus. New credential attributes accessToken, refreshToken, new AuthnMethod type TOKEN. New endpoints:
- GET /v3/systems/credential/{systemId}/globus/authUrl
- POST /v3/systems/credential/{systemId}/globus/{authCode}/tokens/{userName}
- Support multiple module load entries for SchedulerProfile.
- None
Incremental improvements and new preview features.
- Add attributes returned for getSystem: isPublic, isDynamicEffectiveUser.
- Remove support for resolveEffectiveUser in favor of new attribute isDynamicEffectiveUser.
- Add endpoint for checking credentials.
- None
Incremental improvements and new preview features.
- Add support for searching by tags attribute using operator contains.
- Add support for query parameter listType when retrieving systems. Allows for filtering based on authorization.
- Options are OWNED, SHARED_PUBLIC, ALL. Default is OWNED.
- Improved error message when attempting to search using an unsupported attribute
- Use ForbiddenException (403) as appropriate.
Incremental improvements and new preview feature.
- Add description attribute to jobEnvVariables.
Incremental improvements and bug fixes.
- Fix issues with handling of authorization checks for service requests.
- Fix issues with sharing support.
- Patched system authorization code to allow any service to read any system definition.
- Fixed system authorization code for publicly shared system to allow user to add their own credentials.
Incremental improvements and new preview features.
- Support sharedAppCtx for getSystem. Allowed for Jobs and Files services.
- None
Incremental improvements and new preview feature.
- Support query parameter resolveEffectiveUser for geSystem, getSystems
- Switch default for resolveEffectiverUser from false to true.
Incremental improvements and new preview feature.
- Support query parameter resolveEffectiveUser for geSystem, getSystems
- None
Incremental improvements and bug fixes
- None
- Fix bugs in login user mapping support.
Incremental improvements and new features.
- Support mapping of a Tapis user to a login user when effectiveUserId is dynamic.
- Store secrets in SK under separate paths for static and dynamic effectiveUserId.
- Standalone java program (MigrateJob.java) for performing a one-time migration of data for the Systems service.
- None
Incremental improvements and preview of new features.
- Refactor authorization checks for maintainability.
- Replace skipTapisAuthorization with impersonationId for requests from Jobs, Files and Apps services.
- None
Preview of new features.
- Additional information for System history.
- Support skipTapisAuthorization for requests from Jobs, Files and Apps services.
- None
System history implementation.
- System history end point implementation.
- None
Incremental improvements and bug fixes.
- Update readyCheck to check for expired service JWT.
- Updates for JDK 17
- Fix issue with credential check at create/update time. Check was not being done when effectiveUserId set to ${apiUserId}
New minor release.
- Add minLength to mpiCmd in jsonschema.
- None
Incremental improvements and bug fixes.
- Add mpiCmd attribute.
- Fix bug in setting default for SchedulerProfile owner.
Incremental improvements and bug fixes.
- Rename jobIsBatch to canRunBatch.
- Support for public builds from repository.
- Set scheduler profile owner to apiUserId if owner not specified.
- Source code cleanup and refactoring.
- Add check for existence of scheduler profile
- Allow null for imporRefId and Capability.value
- Fix several bugs related to scheduler profiles.
- Fix jobRuntimes PUT bug.
Incremental improvements.
- Add importRefId attribute.
- Support for multiple orderBy in search and sort.
- Add support for scheduler profiles.
- Add credential check during system and credential updates. On by default. Use skipCredentialCheck=true to bypass.
- Source code cleanup and refactoring.
- None
Initial release supporting basic CRUD operations on Tapis System resources as well as management of Tapis System user credentials and permissions.
- Initial release.
- Initial release.
- None