You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
chore(dependencies): bump `spinnaker-dependencies` to 0.161.1 (spinna……ker#2300)
This PR also adds an `OkHttpMetricsInterceptor` to the `Ok3Client`
used for inter-service communication.
See the service-specific `okhttp.requests` metric.
feat(fiat): Delegate whether fiat is enabled to `FiatStatus` (spinnak……er#2298)
This allows for fiat to be selectively enabled at runtime via the
`DynamicConfigService` (environment-specific).
fix(auth): Avoid propagating auth to triggered pipelines (spinnaker#2295)
BREAKING CHANGE
This addresses a potential security vulnerability wherein a user could
configure a pipeline to be triggered by the completion of another
privileged pipeline.
Currently, the authentication details of the privileged pipeline would
be propagated to the triggered pipeline.
To enable service accounts for implicitly triggered pipelines, you must
enable `services.fiat.enabled`.