Administrator/Xen-Orchestra-xen-orchestra-MIRROR
1
0
Fork 1
mirror of https://github.com/vatesfr/xen-orchestra.git synced 2026-09-10 22:14:48 -05:00
Code Issues Packages Projects Releases Wiki Activity
Files
2fba0ff4dfa170ade6f435b72ca02b1e5e797a64
Xen-Orchestra-xen-orchestra…/CHANGELOG.unreleased.md
Mathieu 2fba0ff4df fix(openmetrics): keep the Prometheus secret across xo-server restarts (#10290) 
* fix(openmetrics): keep the Prometheus secret across xo-server restarts

The `secret` property of `configurationSchema` used a random `default`. That
expression is re-evaluated every time the module is loaded, and xo-server never
persists the values ajv fills in from schema defaults, so each restart handed
the metrics endpoint a brand new bearer token and Prometheus started getting
401s.

Drop the default and generate the secret in `load()` instead, saving it through
`xo.configurePlugin()` so it survives a restart.

Introduced by #9323
See https://xcp-ng.org/forum/topic/12415

* chore(changelog): add openmetrics secret entry

* fix(xo-server-openmetrics): generate a 256-bit Prometheus secret

Buffer.from(getRandomValues(new Uint32Array(8))) coerces each 32-bit
element to a single byte, so the generated secret held 64 bits of
entropy instead of 256. Use randomBytes(32) instead.

Introduced by fe29bd0d4
2026-08-31 13:45:02 +02:00

1.4 KiB
Raw Blame History

This file contains all changes that have not been released yet.

Keep in mind the changelog is addressed to users and should be understandable by them.

Security

Security fixes and new features should go in this section

Enhancements

Users must be able to say: "Nice enhancement, I'm eager to test it"

  • [XO6/Host] Add possibility to detach an host (PR #10179)
  • [XO5/New VM] Ability to add the VM to a resource set and to share it during creation (PR #10259)

Bug fixes

Users must be able to say: "I had this issue, happy to know it's fixed"

  • [OpenMetrics] The Prometheus secret no longer changes on every xo-server restart: it is now generated once and saved in the plugin configuration (PR #10290)

Packages to release

When modifying a package, add it here with its release type.

The format is the following: - $packageName $releaseType

Where $releaseType is

  • patch: if the change is a bug fix or a simple code improvement
  • minor: if the change is a new feature
  • major: if the change breaks compatibility

Keep this list alphabetically ordered to avoid merge conflicts

  • @xen-orchestra/web minor
  • xo-server minor
  • xo-server-openmetrics patch
  • xo-web minor