release: 3.4.1

helm/templates/adminsvc.yml

@@ -28,6 +28,11 @@ spec:
       initContainers:
         - name: i3dhub-init-adminsvc
           image: {{ if .Values.registry }}{{ .Values.registry }}/{{ end }}i3dhub-initcheck:{{ .Values.imageTag }}
+{{- if .Values.securityContext.enabled }}
+          securityContext:
+            runAsUser : {{ .Values.securityContext.initUser }}
+            runAsGroup: {{ .Values.securityContext.initUser }}
+{{- end }}
           env:
             - name: POSTGRES_CONNECTION_STRING
               valueFrom:

helm/templates/apigw.yml

@@ -28,6 +28,11 @@ spec:
       initContainers:
         - name: i3dhub-init-apigw
           image: {{ if .Values.registry }}{{ .Values.registry }}/{{ end }}i3dhub-initcheck:{{ .Values.imageTag }}
+{{- if .Values.securityContext.enabled }}
+          securityContext:
+            runAsUser : {{ .Values.securityContext.initUser }}
+            runAsGroup: {{ .Values.securityContext.initUser }}
+{{- end }}
           env:
             - name: POSTGRES_CONNECTION_STRING
               valueFrom:

helm/templates/delivery.yml

@@ -28,6 +28,11 @@ spec:
       initContainers:
         - name: i3dhub-init-deliverysvc
           image: {{ if .Values.registry }}{{ .Values.registry }}/{{ end }}i3dhub-initcheck:{{ .Values.imageTag }}
+{{- if .Values.securityContext.enabled }}
+          securityContext:
+            runAsUser : {{ .Values.securityContext.initUser }}
+            runAsGroup: {{ .Values.securityContext.initUser }}
+{{- end }}
           env:
             - name: POSTGRES_CONNECTION_STRING
               valueFrom:

helm/templates/entrygw.yml

@@ -28,6 +28,11 @@ spec:
       initContainers:
         - name: i3dhub-init-entrygw
           image: {{ if .Values.registry }}{{ .Values.registry }}/{{ end }}i3dhub-initcheck:{{ .Values.imageTag }}
+{{- if .Values.securityContext.enabled }}
+          securityContext:
+            runAsUser : {{ .Values.securityContext.initUser }}
+            runAsGroup: {{ .Values.securityContext.initUser }}
+{{- end }}
           env:
             - name: CONSUL_ADDRESS
               value: i3dhub-consul:8500

helm/templates/geometric.yml

@@ -34,6 +34,11 @@ spec:
       initContainers:
         - name: i3dhub-init-geometricsvc
           image: {{ if .Values.registry }}{{ .Values.registry }}/{{ end }}i3dhub-initcheck:{{ .Values.imageTag }}
+{{- if .Values.securityContext.enabled }}
+          securityContext:
+            runAsUser : {{ .Values.securityContext.initUser }}
+            runAsGroup: {{ .Values.securityContext.initUser }}
+{{- end }}
           env:
             - name: POSTGRES_CONNECTION_STRING
               valueFrom:

helm/templates/keystore.yml

@@ -28,6 +28,11 @@ spec:
       initContainers:
         - name: i3dhub-init-keystore
           image: {{ if .Values.registry }}{{ .Values.registry }}/{{ end }}i3dhub-initcheck:{{ .Values.imageTag }}
+{{- if .Values.securityContext.enabled }}
+          securityContext:
+            runAsUser : {{ .Values.securityContext.initUser }}
+            runAsGroup: {{ .Values.securityContext.initUser }}
+{{- end }}
           env:
             - name: POSTGRES_CONNECTION_STRING
               valueFrom:

helm/templates/measurement.yml

@@ -32,6 +32,11 @@ spec:
       initContainers:
         - name: i3dhub-init-measurementsvc
           image: {{ if .Values.registry }}{{ .Values.registry }}/{{ end }}i3dhub-initcheck:{{ .Values.imageTag }}
+{{- if .Values.securityContext.enabled }}
+          securityContext:
+            runAsUser : {{ .Values.securityContext.initUser }}
+            runAsGroup: {{ .Values.securityContext.initUser }}
+{{- end }}
           env:
             - name: POSTGRES_CONNECTION_STRING
               valueFrom:

helm/templates/query.yml

@@ -28,6 +28,11 @@ spec:
       initContainers:
         - name: i3dhub-init-querysvc
           image: {{ if .Values.registry }}{{ .Values.registry }}/{{ end }}i3dhub-initcheck:{{ .Values.imageTag }}
+{{- if .Values.securityContext.enabled }}
+          securityContext:
+            runAsUser : {{ .Values.securityContext.initUser }}
+            runAsGroup: {{ .Values.securityContext.initUser }}
+{{- end }}
           env:
             - name: POSTGRES_CONNECTION_STRING
               valueFrom:

helm/templates/resourcegw.yml

@@ -28,6 +28,11 @@ spec:
       initContainers:
         - name: i3dhub-init-resourcegw
           image: {{ if .Values.registry }}{{ .Values.registry }}/{{ end }}i3dhub-initcheck:{{ .Values.imageTag }}
+{{- if .Values.securityContext.enabled }}
+          securityContext:
+            runAsUser : {{ .Values.securityContext.initUser }}
+            runAsGroup: {{ .Values.securityContext.initUser }}
+{{- end }}
           env:
             - name: POSTGRES_CONNECTION_STRING
               valueFrom:

helm/templates/services/APIGateway.yml

@@ -25,6 +25,7 @@ http {
   #   'request_time:$request_time';
   access_log  /var/log/nginx/access.log;
 
+  client_header_buffer_size 10M;
   client_max_body_size 100M;
   proxy_read_timeout 7d;
   proxy_http_version 1.1;

helm/templates/sessionstore.yml

@@ -28,6 +28,11 @@ spec:
       initContainers:
         - name: i3dhub-init-spacestoresvc
           image: {{ if .Values.registry }}{{ .Values.registry }}/{{ end }}i3dhub-initcheck:{{ .Values.imageTag }}
+{{- if .Values.securityContext.enabled }}
+          securityContext:
+            runAsUser : {{ .Values.securityContext.initUser }}
+            runAsGroup: {{ .Values.securityContext.initUser }}
+{{- end }}
           env:
             - name: POSTGRES_CONNECTION_STRING
               valueFrom:

helm/templates/sharedsession.yml

@@ -32,6 +32,11 @@ spec:
       initContainers:
         - name: i3dhub-init-sharedsessionsvc
           image: {{ if .Values.registry }}{{ .Values.registry }}/{{ end }}i3dhub-initcheck:{{ .Values.imageTag }}
+{{- if .Values.securityContext.enabled }}
+          securityContext:
+            runAsUser : {{ .Values.securityContext.initUser }}
+            runAsGroup: {{ .Values.securityContext.initUser }}
+{{- end }}
           env:
             - name: POSTGRES_CONNECTION_STRING
               valueFrom:

helm/templates/spacesvc.yml

@@ -28,6 +28,11 @@ spec:
       initContainers:
         - name: i3dhub-init-spacesvc
           image: {{ if .Values.registry }}{{ .Values.registry }}/{{ end }}i3dhub-initcheck:{{ .Values.imageTag }}
+{{- if .Values.securityContext.enabled }}
+          securityContext:
+            runAsUser : {{ .Values.securityContext.initUser }}
+            runAsGroup: {{ .Values.securityContext.initUser }}
+{{- end }}
           env:
             - name: ENTRY_GW_ADDRESS
               value: http://i3dhub-entrygw:8080

helm/templates/transcoder.yml

@@ -31,6 +31,11 @@ spec:
       initContainers:
         - name: i3dhub-init-transcodersvc
           image: {{ if .Values.registry }}{{ .Values.registry }}/{{ end }}i3dhub-initcheck:{{ .Values.imageTag }}
+{{- if .Values.securityContext.enabled }}
+          securityContext:
+            runAsUser : {{ .Values.securityContext.initUser }}
+            runAsGroup: {{ .Values.securityContext.initUser }}
+{{- end }}
           env:
             - name: POSTGRES_CONNECTION_STRING
               valueFrom:

helm/templates/uploadsvc.yml

@@ -28,6 +28,11 @@ spec:
       initContainers:
         - name: i3dhub-init-uploadsvc
           image: {{ if .Values.registry }}{{ .Values.registry }}/{{ end }}i3dhub-initcheck:{{ .Values.imageTag }}
+{{- if .Values.securityContext.enabled }}
+          securityContext:
+            runAsUser : {{ .Values.securityContext.initUser }}
+            runAsGroup: {{ .Values.securityContext.initUser }}
+{{- end }}
           env:
             - name: CONSUL_ADDRESS
               value: i3dhub-consul:8500

helm/templates/visualization.yml

@@ -30,6 +30,11 @@ spec:
       initContainers:
         - name: i3dhub-init-gpuvissvc
           image: {{ if .Values.registry }}{{ .Values.registry }}/{{ end }}i3dhub-initcheck:{{ .Values.imageTag }}
+{{- if .Values.securityContext.enabled }}
+          securityContext:
+            runAsUser : {{ .Values.securityContext.initUser }}
+            runAsGroup: {{ .Values.securityContext.initUser }}
+{{- end }}
           env:
             - name: POSTGRES_CONNECTION_STRING
               valueFrom:

helm/values.yaml

@@ -72,6 +72,7 @@ elasticStackFeatures:
 
 # run pods/containers as given user/fsGroup 
 #
+#  - initUser, used by init containers which check for service readiness
 #  - gatewayUser/FsGroup, no access to external volumes
 #  - serviceUser/FsGroup, access to external volumes
 #  - postgresUser/FsGroup, for internal postgres and pgbouncer, do not change
@@ -80,6 +81,7 @@ elasticStackFeatures:
 securityContext:
   enabled        : false
 
+  initUser       : 1337
   gatewayFsGroup : 50000
   gatewayUser    : 50001
   serviceFsGroup : 55000
@@ -317,7 +319,7 @@ numGeometricServicePods: 1
 numGeometricWorkerPerPod: 24
 
 # This is the version name and the tag for the instant3Dhub images
-imageTag: 940eda57326a803b23bd1cd4e0b2f2d4 
+imageTag: 6b9fc407444db27406e2d764185ffa0d 
 
 # Override ping interval in seconds on websocket connections.
 # Setting it to 0 will disable sending pings.

instant3Dhub_changelog.html

@@ -77,7 +77,18 @@ font-weight: 400;
 <header>
 <h1 class="title">instant3Dhub changelog</h1>
 </header>
-<h1 id="section">3.4</h1>
+<h1 id="section">3.4.1</h1>
+<ul>
+<li>Important Fixes
+<ul>
+<li>Fixed an issue with the new init containers in combination with Istio</li>
+<li>Fixed an issue with incorrect annotation-node relations on snapshot restore</li>
+<li>Increased the header size limit to support larger authorization tokens</li>
+<li>Fixed an issue with header filter rules to not apply to urn based DataGateways</li>
+<li>Fixed the error display for unauthorized resources when using custom headers</li>
+</ul></li>
+</ul>
+<h1 id="section-1">3.4</h1>
 <ul>
 <li>Highlights
 <ul>
@@ -113,14 +124,14 @@ font-weight: 400;
 <li>Recommended: Upgrade LicenseServer to 22.1</li>
 </ul></li>
 </ul>
-<h1 id="section-1">3.3.4</h1>
+<h1 id="section-2">3.3.4</h1>
 <ul>
 <li>Important Fixes
 <ul>
 <li>Fixed an issue with the storage of 3DSpaces after the restart of specific containers</li>
 </ul></li>
 </ul>
-<h1 id="section-2">3.3.3</h1>
+<h1 id="section-3">3.3.3</h1>
 <ul>
 <li>Important Fixes
 <ul>
@@ -132,7 +143,7 @@ font-weight: 400;
 <li>Fixed issue where webvis config smallfeatureculling settings are not propagated correctly</li>
 </ul></li>
 </ul>
-<h1 id="section-3">3.3.2</h1>
+<h1 id="section-4">3.3.2</h1>
 <ul>
 <li>Updates
 <ul>
@@ -148,7 +159,7 @@ font-weight: 400;
 <li>Update LicenseServer</li>
 </ul></li>
 </ul>
-<h1 id="section-4">3.3.1</h1>
+<h1 id="section-5">3.3.1</h1>
 <ul>
 <li>Important Fixes
 <ul>
@@ -162,7 +173,7 @@ font-weight: 400;
 <li>Update LicenseServer</li>
 </ul></li>
 </ul>
-<h1 id="section-5">3.3</h1>
+<h1 id="section-6">3.3</h1>
 <ul>
 <li>Highlights
 <ul>
@@ -202,7 +213,7 @@ font-weight: 400;
 <li>Clear Cache</li>
 </ul></li>
 </ul>
-<h1 id="section-6">3.2.1</h1>
+<h1 id="section-7">3.2.1</h1>
 <ul>
 <li>Important Changes
 <ul>
@@ -217,7 +228,7 @@ font-weight: 400;
 <li>Fixed an issue with parsing Content-Disposition with encoding flags</li>
 </ul></li>
 </ul>
-<h1 id="section-7">3.2</h1>
+<h1 id="section-8">3.2</h1>
 <ul>
 <li>Focus Topic
 <ul>
@@ -252,7 +263,7 @@ font-weight: 400;
 <li>Clear Cache</li>
 </ul></li>
 </ul>
-<h1 id="section-8">3.1</h1>
+<h1 id="section-9">3.1</h1>
 <ul>
 <li>Focus Topic
 <ul>
@@ -293,7 +304,7 @@ font-weight: 400;
 <li>Data Gateway &amp; Authorization configuration syntax</li>
 </ul></li>
 </ul>
-<h1 id="section-9">3.0</h1>
+<h1 id="section-10">3.0</h1>
 <p>Welcome to instant3Dhub Version 3! This version is a major overhaul of the core system for cloud-native, containerized environments. We are also switching to a new release model. For more information visit the<a href="https://www.threedy.io/blog/instant3dhub-release-3-0">public announcement</a>.</p>
 </body>
 </html>