Anvil Staging 2021.06 release 1624287413

[themarcelor]

copying files from internalstaging.theanvil.io to staging.theanvil.io

[PlanXCyborg]

staging.theanvil.io/manifest.json

Deployment changes

• arborist
  • Needs Fence later than 4.22.2 or 2020.08 (which introduces the new JWT scopes claim). (uc-cdis/(PXP-6617): remove scopes from jwt aud claim arborist#130)
• fence
  • This commit includes patches to allow old style refresh tokens and API keys to pass new style validation, while issuing new style refresh tokens and API keys. Since refresh tokens and API keys have a default TTL of 30 days, stay on this tag for 30 days if possible. (uc-cdis/PXP-6617 Remove scopes from aud claim in tokens fence#839)
  • Old access tokens will NOT work once this is deployed so active sessions may be temporarily interrupted. (uc-cdis/PXP-6617 Remove scopes from aud claim in tokens fence#839)
  • Audit logs for user logins and data downloads can be enabled by deploying the audit-service and adding setting ENABLE_AUDIT_LOGS to the fence config (see https://github.com/uc-cdis/fence/blob/1c850d07e54f8527dbde182fdd9dd593d18f660e/fence/config-default.yaml#L586-L588) (uc-cdis/PXP-7447 audit-service integration fence#885)
  • REQUIRES A FENCE DB MIGRATION, since with this update there is now an additional column in the authorization_code table "refresh_token_expires_in" (uc-cdis/Feat/refresh expires in fence#848)
• indexd
  • When running gen3authz, backoff package needed separate poetry run pip install (uc-cdis/PXP-6824: return 401 errors from Arborist indexd#304)
• portal
  • envs with customized color schemes no longer need to overwrite dictionary button color in their gitops.css (uc-cdis/(PXP-6570): refactor/dictionaryBtnColor: change dictionary btn to use defined global colors data-portal#822)
  • New optional config property, tierAccessLevel, in each tab of the explorerConfig block in the portal config. Used to enable index-scoped tiered-access, which is only available starting with Guppy server version 0.11.0. See README for more information. (uc-cdis/Feat/index scoped tiered access data-portal#802)

[PlanXCyborg]

staging.theanvil.io/manifest.json

Deployment changes

• arborist
  • Needs Fence later than 4.22.2 or 2020.08 (which introduces the new JWT scopes claim). (uc-cdis/(PXP-6617): remove scopes from jwt aud claim arborist#130)
• fence
  • This commit includes patches to allow old style refresh tokens and API keys to pass new style validation, while issuing new style refresh tokens and API keys. Since refresh tokens and API keys have a default TTL of 30 days, stay on this tag for 30 days if possible. (uc-cdis/PXP-6617 Remove scopes from aud claim in tokens fence#839)
  • Old access tokens will NOT work once this is deployed so active sessions may be temporarily interrupted. (uc-cdis/PXP-6617 Remove scopes from aud claim in tokens fence#839)
  • Audit logs for user logins and data downloads can be enabled by deploying the audit-service and adding setting ENABLE_AUDIT_LOGS to the fence config (see https://github.com/uc-cdis/fence/blob/1c850d07e54f8527dbde182fdd9dd593d18f660e/fence/config-default.yaml#L586-L588) (uc-cdis/PXP-7447 audit-service integration fence#885)
  • REQUIRES A FENCE DB MIGRATION, since with this update there is now an additional column in the authorization_code table "refresh_token_expires_in" (uc-cdis/Feat/refresh expires in fence#848)
• indexd
  • When running gen3authz, backoff package needed separate poetry run pip install (uc-cdis/PXP-6824: return 401 errors from Arborist indexd#304)
• portal
  • envs with customized color schemes no longer need to overwrite dictionary button color in their gitops.css (uc-cdis/(PXP-6570): refactor/dictionaryBtnColor: change dictionary btn to use defined global colors data-portal#822)
  • New optional config property, tierAccessLevel, in each tab of the explorerConfig block in the portal config. Used to enable index-scoped tiered-access, which is only available starting with Guppy server version 0.11.0. See README for more information. (uc-cdis/Feat/index scoped tiered access data-portal#802)