Skip to content

Commit 9b23018

Browse files
authored
Update on-prem-release-notes.md (#758)
* Update on-prem-release-notes.md Added abacProject FF to table, and added section on migration to Project ABAC description * Update on-prem-release-notes.md Removed extra phrasing * Update on-prem-release-notes.md Moved abac migration to project bullet; added abacRuleRelatedResource FF to FF table * Update on-prem-release-notes.md
1 parent 0cf3161 commit 9b23018

File tree

1 file changed

+20
-20
lines changed

1 file changed

+20
-20
lines changed

_docs/whats-new/on-prem-release-notes.md

Lines changed: 20 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -55,15 +55,15 @@ We added a new **Settings** icon to the toolbar to simplify account-level manage
5555

5656
<br>
5757

58-
#### Universal Search & Navigation
59-
Boost your Codefresh experience with our latest feature, Universal Search & Navigation! Always available in the toolbar , Universal Search & Navigation lets you get to what and where you need to in Codefresh while staying where you are.
58+
#### Global Search & Navigation
59+
Boost your Codefresh experience with our latest feature, Global Search & Navigation! Always available in the toolbar, Global Search & Navigation lets you get to what and where you need to in Codefresh while staying where you are.
6060

6161
**Search & find**
62-
With Universal Search & Navigation, you can easily monitor and find resources in your projects, pipelines, and builds, with frequently used entities organized into categories for quick search. Easily find a specific project, pipeline, or build, or browse them all.
63-
In addition, Universal Search & Navigation pulls up links to relevant information from our documentation that may be useful within your current context, making it even easier to find what you need.
62+
With Global Search & Navigation, you can easily monitor and find resources in your projects, pipelines, and builds, with frequently used entities organized into categories for quick search. Easily find a specific project, pipeline, or build, or browse them all.
63+
In addition, Global Search & Navigation pulls up links to relevant information from our documentation that may be useful within your current context, making it even easier to find what you need.
6464

6565
**Switch accounts**
66-
You can also switch accounts in Codefresh with Universal Search & Navigation, without needing to navigate to your avatar drop-down menu. Simply search for the account, select the Switch Account action, and then choose the account you wish to switch to.
66+
You can also switch accounts in Codefresh with Global Search & Navigation, without needing to navigate to your avatar drop-down menu. Simply search for the account, select the Switch Account action, and then choose the account you wish to switch to.
6767
We are always adding more options, so stay tuned for announcements.
6868

6969
<br>
@@ -98,15 +98,20 @@ For details, see [Applying filters to build views]({{site.baseurl}}/docs/pipelin
9898
#### Project-based ABAC
9999
We are excited to announce project-level Attribute-Based Access Control (ABAC) in this release.
100100
ABAC for projects saves a lot of effort without compromising security as now you can control access to both project and to pipeline entities based on project tags.
101-
* Project access to teams with project-tags
101+
102+
103+
* Project access to teams with project-tags
102104
Now you can decide which teams have access to which projects, and at which level. By adding tags to projects, you can define rules for different teams that can create, update, delete, and view projects.
103105
Also, read the next feature description, _Auto-create projects for teams_.
104106

105-
* Pipeline access to teams with project-tags
106-
You can define access to pipelines on the basis of the projects that house the pipelines. Instead of tagging each pipeline, you can add tags to the project, and define rules that determine the teams who can access the pipelines which share the project tags.
107-
Builds now honor the permissions of the pipelines. Users without access to the pipeline, will also not have access to its builds. This also means fewer email notifications, as these are only sent for builds that users have access to.
107+
**Migrating existing accounts**
108+
If you have existing accounts with team-based access control for projects, you can either migrate all accounts or a specific account, as described in [Project ABAC migration](https://github.com/codefresh-io/project-abac-migration){:target="\_blank"}.
109+
110+
* Pipeline access to teams with project-tags
111+
You can define access to pipelines on the basis of the projects that house the pipelines. Instead of tagging each pipeline, you can add tags to the project, and define rules that determine which teams can access the pipelines which share the project tags.
112+
Builds now honor the permissions of the pipelines. Users without access to the pipeline, will also not have access to its builds. This also means fewer email notifications, as these are only sent for builds that users have access to.
108113

109-
For details, see [ABAC for entities with tags and rules]({{site.baseurl}}/docs/administration/account-user-management/access-control/#abac-for-entities-with-tags-and-rules).
114+
For details, see [ABAC for entities with tags and rules]({{site.baseurl}}/docs/administration/account-user-management/access-control/#abac-for-entities-with-tags-and-rules).
110115

111116
<br>
112117

@@ -251,17 +256,12 @@ The table below describes the Feature Flags in the Codefresh On-Premises release
251256
| `filterMailsByAbac ` | When enabled and ABAC permissions are defined for projects, sends email notifications on builds only for those pipelines to which the user has access. <br>See [Project-based ABAC](#project-based-abac) in this article. | FALSE |
252257
| `syncClassicAnnotationsToGitOps` | When enabled, displays annotations assigned to entities in the Annotations area of the Images dashboard. The following annotation types are displayed: {::nomarkdown}<ul><li>String</li><li>Boolean</li><li>Link</li><li>Percentage</li><li>Number</li></ul>. {:/} **NOTE**: This feature flag does not impact Issue and Git (PR)-based annotations. These are displayed in the Issue and Git areas . | FALSE |
253258
| `gitopsArgoCdRollback` | When enabled, allows users to rollback to a previously deployed version of an active GitOps application. | FALSE |
254-
| `commandbar` | When enabled, activates Codefresh Universal Search & Navigation. Displayed in the top-left of the toolbar, allows users to find and navigate to project/pipeline/build entities, switch accounts, and more. See [Universal Search & Navigation](#universal-search--navigation) in this article. | FALSE |
259+
| `commandbar` | When enabled, activates Codefresh Universal Search & Navigation. Displayed in the top-left of the toolbar, allows users to find and navigate to project/pipeline/build entities, switch accounts, and more. See [Global Search & Navigation](#global-search--navigation) in this article. | FALSE |
255260
| `gerritIntegration` | When enabled, allows configuring Git integrations with Gerrit for Codefresh pipelines. | FALSE |
256-
| `workflowAbacByPipeline` | When enabled, builds will not be visible to users who don’t have access to the corresponding pipelines. <br>IMPORTANT: Before enabling this feature flag, make sure to read [this](https://github.com/codefresh-io/project-abac-migration){:target="\_blank"}.<br>See [Project-based ABAC](#project-based-abac) in this article. | FALSE |
257-
|`filterMailsByAbac` |When enabled, together with `workflowAbacByPipeline`, email notifications are not send for users without access to the builds. <br>See [Project-based ABAC](#project-based-abac) in this article. |FALSE
258-
259-
260-
261-
262-
263-
264-
261+
| `abacProject` | When enabled, allows admins to define rule-based access to projects for teams by project tags.<br>**IMPORTANT**: Before enabling this feature flag, make sure to read [Project ABAC migration](https://github.com/codefresh-io/project-abac-migration){:target="\_blank"}.<br>See [Project-based ABAC](#project-based-abac) in this article. | FALSE |
262+
| `abacRuleRelatedResource` | When enabled, allows admins to define rule-based access to pipelines for teams by project tags.<br>See [Project-based ABAC](#project-based-abac) in this article. | FALSE |
263+
| `workflowAbacByPipeline` | When enabled, builds will not be visible to users who don’t have access to the corresponding pipelines.<br>See [Project-based ABAC](#project-based-abac) in this article. | FALSE |
264+
|`filterMailsByAbac` |When enabled, together with `workflowAbacByPipeline`, email notifications are not sent for users without access to the builds. <br>See [Project-based ABAC](#project-based-abac) in this article. |FALSE
265265

266266

267267

0 commit comments

Comments
 (0)