DX Cloud Changelog

Latest versions

Latest Helm: 1.23.0 · Archetype: 1.10 · Cloud parent: 6.4.8

Magnolia 6.4.8

Release notes for Magnolia 6.4.8 are available.

Magnolia 6.2.75

Release notes for Magnolia 6.2.75 are available.

Magnolia 6.3.25

Release notes for Magnolia 6.3.25 are available.

Opt out of wildcard certificates

You can now opt out of wildcard certificates when adding a new certificate. This means a certificate is issued only for the specific domain and not for any subdomains.

To opt out of wildcard certificates, check the box to Disable wildcard domains when adding a new managed certificate.

For more details, see Managed certificates .

Keycloak updated to 26.6.4

Keycloak was updated to 26.6.4.

See the official Keycloak documentation for more details on the release.

Health App

We are happy to announce the release of the Health App in the Cockpit.

For more details, see Cockpit .

JCR content viewer

We have added a new JCR content viewer to the Cockpit. This viewer allows you to browse the live JCR repository on your Author or Public Magnolia instances. This viewer is read-only. To create or edit content, use Magnolia AdminCentral.

For more details, see JCR content .

Additionally:

• Log levels can now be configured for Public instances.
• The password reset functionality is supported for both Author and Public instances.
• We offer more pod information in the Manage environments section enabling you to better understand the status of your pods.

Magnolia 6.4.7

Release notes for Magnolia 6.4.7 are available.

Keycloak updated to 26.6.3

Keycloak was updated to 26.6.3.

See the official Keycloak documentation for more details on the release.

Magnolia 6.3.24

Release notes for Magnolia 6.3.24 are available.

Keycloak updated to 26.6.2

Keycloak was updated to 26.6.2.

See the official Keycloak documentation for more details on the release.

Cluster events, instance restart, and log filtering

New 🚀

• Cluster events are now available under Infrastructure > Events, with summary metrics, richer filters, and a chronological event list.
• You can restart a single public instance from Manage your environments using Restart on the instance row.
• The WAF request logs viewer supports filtering by all requests, blocked requests, and allowed requests.

Improved ✨

• Embedded help including inline help for notification alert descriptions are updated across the Cockpit, including Subscription notification configuration .
• The Ingresses table now indicates whether CDN is enabled for each Ingress.
• Log viewer filters are contextualized: selecting a namespace restricts the pod filter to pods in that namespace (for example in Magnolia Application logs ).

Fixed 🔧

• The Manage environment action on the Home screen now respects and applies the correct user roles.
• The YAML edit option in the Ingresses view again allows users with the appropriate permissions to modify Ingress configuration.
• The multi-select dropdown component no longer jumps while interacting with the menu.

Magnolia 6.2.74

Release notes for Magnolia 6.2.74 are available.

Magnolia 6.4.6

Release notes for Magnolia 6.4.6 are available.

Magnolia 6.3.23

Release notes for Magnolia 6.3.23 are available.

Magnolia 6.2.73

Release notes for Magnolia 6.2.73 are available.

Cockpit logs, insights, and security updates

New 🚀

• Added a new System log section in the Cockpit to view system-level events such as email delivery activity.

{sp} +

Improved ✨

• Added richer request log fields across log views: CDN request logs now include blocked; Ingress request logs now include query parameters; Redirect request logs now include query parameters, action, target, and related table filter fields.
• Expanded CDN traffic analysis and Ingress traffic analysis with traffic source tabs including top IPs and top paths.
• Reintroduced WAF Security statistics and improved WAF tags with clearer full names and descriptions.
• Aligned CDN response-time metrics with Ingress and Redirect metric formats.
• Redirect metrics now include average redirect ratio and redirect ratio over time.
• The PROD cluster is now selected by default when the Cockpit loads.
• Refreshed embedded help across logs, Insights, Security statistics, and System log to match the latest Cockpit and log viewer style.

Fixed 🔧

• Resolved date picker visibility issues.

Cleanup 🧹

• Hid the User Preferences menu after moving notification settings to a dedicated navigation item.

Magnolia 6.4.5

Release notes for Magnolia 6.4.5 are available.

Keycloak updated to 26.6.1

Keycloak was updated to 26.6.1.

See the official Keycloak documentation for more details on the release.

Keycloak updated to 26.5.7

Keycloak was updated to 26.5.7.

See the official Keycloak documentation for more details on the release.

Helm chart release 1.23.0

We have released a new version of the Helm chart with the following change:

• Change the default logging level from DEBUG to INFO for both author and public instances.

ingress-nginx updated to v1.14

ingress-nginx was updated to v1.14.

See the official ingress-nginx release notes for more details on the release.

This is likely the last release of ingress-nginx before moving to GatewayAPI. Claim your Ingresses in the Cockpit before the next release to avoid any potential disruption.

For more details on this topic, see Claim an Ingress .

Magnolia 6.4.4

Release notes for Magnolia 6.4.4 are available.

Magnolia 6.2.72

Release notes for Magnolia 6.2.72 are available.

Helm chart release 1.22.0

We have released a new version of the Helm chart with the following changes:

• Added bootstrap properties to support the Magnolia application requirement of setting a password before starting the application See Magnolia 6.3.22: Superuser account disabled on fresh installations for more details on this topic.

Keycloak updated to 26.5.6

Keycloak was updated to 26.5.6.

See the official Keycloak documentation for more details on the release.

Magnolia 6.3.22

Release notes for Magnolia 6.3.22 are available.

New Insights section and Slack notifications

We have added a new Insights section to the Cockpit to help you understand what is happening across your infrastructure, applications, and network traffic. This section includes:

• Ingress traffic analysis: Overview of ingress traffic and metrics.
• CDN traffic analysis: Overview of CDN traffic and metrics.

Additionally, we have added the ability to send Cockpit notifications via Slack in addition to email through the recently added Subscription section.

For more details, see Cockpit and Cockpit respectively.

Subscription section and notifications

We have added a new Subscription section to the Cockpit and introduced notification management. This section contains information about your subscription and how to manage it. This includes platform update tiers, notification channels, notification configuration rules, and notification whitelists.

The notification management lets your configure notification channels, configuration rules, and whitelists to control which events trigger notifications and where they are sent.

For more details, see Cockpit .

Keycloak updated to 26.5.5

Keycloak was updated to 26.5.5.

See the official Keycloak documentation for more details on the release.

Cockpit 2.0

We have officially completed the transition to Cockpit 2.0 with this release.

New 🚀

• New Infrastructure dashboard to visualize cluster node metrics for Memory, CPU, and Storage.

• New Environments dashboard to monitor request latency, JVM status, and container resource usage.

• New ingress path type constraint using regex validation for Prefix types.

• New mTLS certification dropdown that appears when certificate authentication is selected in the UI.

Improved ✨

• Updated the query string matching UI to include forward toggles and automated field clearing for specific match types.
• Enhanced the Magnolia database dashboard by adding container-specific memory and CPU metrics.
• Integrated measured capacity values into the latest and average PVC metrics.
• Included memory and CPU limits within the container and JVM memory metric views.
• Transitioned memory and traffic volume metrics from line charts to bar charts for better visualization.
• Standardized the use of IEC and SI units for memory, storage, and traffic across all API and UI reports.

Additionally, we ensured the ImplementationSpecific path type as the default when adding denied locations. We also removed the legacy regex validation for the query string matching UI.

Full help is provided directly in the Cockpit for each new feature.

Magnolia 6.2.71

Release notes for Magnolia 6.2.71 are available.

Magnolia 6.4.3

Release notes for Magnolia 6.4.3 are available.

Keycloak updated to 26.5.4

Keycloak was updated to 26.5.4.

See the official Keycloak documentation for more details on the release.

Magnolia 6.3.21

Release notes for Magnolia 6.3.21 are available.

Infrastructure updates

Statistics

We have replaced the Real Time Usage section with a new Infrastructure Statistics section in the Cockpit. This section displays information on Memory, CPU, and Storage for your DX Cloud project. Use this page to monitor infrastructure performance and troubleshoot issues at a glance.

For more details, see Infrastructure: Statistics .

Distribution

The Infrastructure Overview section is now called Infrastructure Distribution in the Cockpit. This was done to better reflect the purpose of the section.

For more details, see Infrastructure: Distribution .

Manage groups

We have updated the Admin > Groups section in the Cockpit so you can create Custom groups to manage users and roles. We also consolidated the groups view to have a more consistent experience.

For more details, see Manage groups .

Keycloak updated to 26.5.3

Keycloak was updated to 26.5.3.

See the official Keycloak documentation for more details on the release.

Magnolia 6.3.20

Release notes for Magnolia 6.3.20 are available.

CDN and User Management improvements

With this update, we have:

• Enhanced CDN logging: We have added three new fields to CDN logs : Query String, Header Size, and the Is Internal query, providing deeper forensic insight into traffic patterns.
• Introduced granular traffic analytics: The CDN Statistics dashboard now includes a traffic breakdown, allowing you to differentiate between Body and Header data sizes.
• Improved user management: You can now download the complete list of users as a CSV file directly from the User Management under the Admin Cockpit section .

Magnolia 6.4.2

Release notes for Magnolia 6.4.2 are available.

Keycloak updated to 26.5.2

Keycloak was updated to 26.5.2.

See the official Keycloak documentation for more details on the release.

Magnolia dashboard improvements

New 🚀

• The Top 10 request paths are now integrated into both the CDN Statistics and Networking Statistics dashboards for better visibility into your most frequently accessed content.
• Networking Statistics also now includes redirect data when a redirect server is present in the environment, allowing for easy comparison with Ingress statistics.

Improved ✨

• The JCR Content dashboard has been replaced by a new Magnolia Database dashboard which has faster performance and increased data depth. Monitor database size, binary storage, cache performance, and per-workspace storage details.

• The Magnolia Publications dashboard has been greatly improved providing a more comprehensive overview of publication states including request metrics, response times, transaction health, traffic volumes, and per-workspace breakdowns.

For more details, see Cockpit .

Magnolia 6.2.70

Release notes for Magnolia 6.2.70 are available.

Magnolia 6.2.69

Release notes for Magnolia 6.2.69 are available.

Keycloak updated to 26.5.1

Keycloak was updated to 26.5.1.

See the official Keycloak documentation for more details on the release.

Magnolia Publication Logs

New 🚀

• We have added a new Magnolia Publication Logs view to the Logs section in the Cockpit.

Improved ✨

• Redirect Logs are now available as two dedicated views: Redirect Request Logs and Redirect Application Logs both leveraging the log viewer.

For more details, see Cockpit .

Magnolia 6.3.19

Release notes for Magnolia 6.3.19 are available.

Keycloak updated to 26.5.0

Keycloak was updated to 26.5.0.

See the official Keycloak documentation for more details on the release.

Magnolia 6.2.68

Release notes for Magnolia 6.2.68 are available.

Magnolia 6.4.1

Release notes for Magnolia 6.4.1 are available.

Improvements to Browser and CDN cache in the Cockpit

We have improved the Browser and CDN cache in the Cockpit with a cleaner look and feel. You can also now directly ** Import cache rules from Magnolia** and reorder cache policies by dragging and dropping to the order you desire.

CDN Cache example

For more details, see Content delivery: Cache .

Keycloak updated to 26.4.7

Keycloak was updated to 26.4.7.

See the official Keycloak documentation for more details on the release.

Magnolia 6.3.18

Release notes for Magnolia 6.3.18 are available.

Keycloak updated to 26.4.6

Keycloak was updated to 26.4.6.

See the official Keycloak documentation for more details on the release.

Sticky session and redirect server session-cookie-name

Breaking change

Previously, when using cookie-based redirect servers with sticky sessions enabled, the nginx.ingress.kubernetes.io/session-cookie-name value needed to match between both configurations.

This behavior has been reversed. The session-cookie-name values must now be different to prevent cookie conflicts and ensure proper functionality.

Action required

If your DX Cloud project uses both:

• Cookie-based redirect servers
• Sticky sessions (session affinity)

Update your values.yml file(s) to use different cookie names for each service.

Example configuration

# Sticky session cookie
nginx.ingress.kubernetes.io/session-cookie-name: "INGRESSCOOKIE"

# Redirect server cookie (must be different)
redirect.session-cookie-name: "REDIRECTCOOKIE"

For more details, see Sticky sessions and Networking: Add redirect server .

Magnolia 6.2.67

Release notes for Magnolia 6.2.67 are available.

Keycloak updated to 26.4.5

Keycloak was updated to 26.4.5.

See the official Keycloak documentation for more details on the release.

Magnolia 6.4.0

Release notes for Magnolia 6.4.0 are available.

Log and Redirect improvements

New 🚀

• Magnolia Backend and Magnolia Audit logs are available in the Log Viewer.

• We also enhanced the Redirects Cockpit section with new capabilities including the option to forward redirects and use country and language-based rules.

Keycloak updated to 26.4.4

Keycloak was updated to 26.4.4.

See the official Keycloak documentation for more details on the release.

Improved CDN and Ingress metrics

New 🚀

• We are happy to announce improved metrics for our CDN page.
• We have also introduced metrics for Ingresses. See these metrics under Networking > Statistics in the Cockpit.

Improved ✨

• You can now click on the histogram in the Log Viewer to automatically prefill filters based on selected values.

New Log viewer

New 🚀

We have added a new Log Viewer for:

• CDN requests
• Ingress requests
• Audit logs

For assistance, use the embedded help directly in the Cockpit or alternatively, see Cockpit .

Keycloak updated to 26.4.2

Keycloak was updated to 26.4.2.

See the official Keycloak documentation for more details on the release.

Keycloak updated to 26.4.1

Keycloak was updated to 26.4.1.

See the official Keycloak documentation for more details on the release.

Magnolia 6.3.17

Release notes for Magnolia 6.3.17 are available.

Magnolia 6.2.66

Release notes for Magnolia 6.2.66 are available.

Magnolia 6.3.16

Release notes for Magnolia 6.3.16 are available.

Keycloak updated to 26.4.0

Keycloak was updated to 26.4.0.

See the official Keycloak documentation for more details on the release.

Keycloak updated to 26.3.5

Keycloak was updated to 26.3.5.

See the official Keycloak documentation for more details on the release.

Magnolia 6.2.65

Release notes for Magnolia 6.2.65 are available.

Magnolia 6.3.15

Release notes for Magnolia 6.3.15 are available.

Keycloak updated to 26.3.4

Keycloak was updated to 26.3.4.

See the official Keycloak documentation for more details on the release.

Magnolia 6.2.64 and Infrastructure updates

• Release notes for Magnolia 6.2.64 are available.
• We added a load balancer section to the Infrastructure overview in the Cockpit. This contains information about the load balancer host and address.

Monitor platform health and Elliptic Curve certificates

New 🚀

• Our new Health App provides an overview and insights into the overall health of the platform straight from the Cockpit. This feature is currently behind a feature flag so you may not see it in your Cockpit. Talk to your DX Cloud contact if you want to enable it. Get detailed help straight from the cockpit on each health check.

• You can also now create Elliptic Curve certificates .

Improved ✨

• You can now change an algorithm for existing managed certificates.
• We improved filtering for ticket tag categories in the Support Ticket view.

Magnolia 6.2.63

Release notes for Magnolia 6.2.63 are available.

Keycloak updated to 26.3.3

Keycloak was updated to 26.3.3.

See the official Keycloak documentation for more details on the release.

Federations and Support tickets in the Cockpit

We are pleased to announce the introduction of Federations and Support tickets in the Cockpit.

New 🚀

• You can now view an overview of your support tickets (under Global Features > Support tickets).
• You can now configure Federations in the Cockpit (under Admin > Federations).

Improved ✨

• Added support for wildcards in Alternative names for Certificate CSR signing.
• Enabled Ingress v2 to create ingresses without TLS.

Fixed 🔧

• General performance and stability improvements

Federations

The Federations feature in the DX Cloud Cockpit, lets you seamlessly integrate external Identity Providers (IdPs) with the DX Cloud platform. This feature enhances authentication flexibility and streamlines user management through secure, standardized protocols.

• Support for OpenID Connect (OIDC) and SAML Protocols: Federations enable integration with external IdPs using industry-standard OIDC or SAML protocols, ensuring secure and reliable authentication.
• Trusted Relationships with Third-Party IdPs: Establish trusted connections with external identity systems, enabling single sign-on (SSO) and centralized user management.
• Cockpit and Rancher Mappings: Configure mappings to align external IdP roles and permissions with DX Cloud Cockpit and Rancher resources for consistent access control.
• User Attribute Mapping: Define mappings between external IdP user attributes and DX Cloud platform resources, allowing precise control over user data synchronization.

Benefits

• Enhanced Security: Leverage trusted external IdPs to enforce robust authentication policies.
• Streamlined Administration: Simplify user access management by integrating with existing identity systems.
• Flexible Configuration: Customize mappings to align with your organization’s unique access and attribute requirements.

Get started

To configure Federations, navigate to the Admin > Federations section in the DX Cloud Cockpit. Refer to the Federations for step-by-step instructions or get help directly in the Cockpit.

Magnolia 6.3.14

Release notes for Magnolia 6.3.14 are available.

Magnolia 6.3.13

Release notes for Magnolia 6.3.13 are available.

Magnolia 6.2.62

Release notes for Magnolia 6.2.62 are available.

Magnolia 6.3.12

There are several known issues with this release if upgrading from 6.3.8 and earlier. If this applies to your DX Cloud project, wait for the Magnolia 6.3.13 release.

Release notes for Magnolia 6.3.12 are available.

Magnolia 6.3.11

This release was declared faulty. Upgrade to Magnolia 6.3.12 instead.

Release notes for Magnolia 6.3.11 are available.

Magnolia 6.2.61

Release notes for Magnolia 6.2.61 are available.

API improvements and fixes

New 🚀

• Use a single host for all client API Ingresses, simplifying configuration and speeding up API performance.

Improved ✨

• Deactivate buffering when needed. This is useful for things such as live streaming and improved upload/download performance.
• Environment API now adapts all legacy APIs to the new standardized format.

Fixed 🔧

• Ingress v2, UI rules for empty paths now default to an empty string instead of showing undefined.
• The routing badge no longer disappears after editing an Ingress.
• Fixed an issue where the search function in tables could break the UI and cause a blank screen.

Magnolia 6.3.10

Release notes for Magnolia 6.3.10 are available.

Ingress v2 enhancements and fixes

Improved ✨

• Ingress v2: We streamlined in-app documentation for faster access to usage guidelines and best practices. ** Users must resolve all outstanding sync warnings before claiming an ingress. ** We improved validation of HTTP headers for both clear and set operations. ** We added support for the proxy buffers annotation to optimize proxy behavior. ** We introduced a “Allow regex in paths” checkbox on the Rules tab to enable flexible routing patterns. ** We now handle status call failures gracefully, preventing disruptive errors in the UI. ** Each entry now includes a badge indicating its destination URL—whether the Fastly cluster or other (e.g., custom CDN) when displaying rule hosts. ** We set the default path type to (Prefix) Starts with.
• We strengthened Content Security Policy (CSP) headers to enhance overall platform security.

Fixed 🔧

• Certificates: We now hide the “Certificate details” button while certificate issuance is in progress, eliminating 404 errors.
• Ingress v2: We fixed an issue where the ingress list view did not refresh after syncing with Rancher. The view now updates automatically to display all synchronized data. ** We temporarily removed the “Edit Ingress” link post-synchronization. This link will return in the redesigned cockpit to direct users to the new inline editor. ** We enhanced error handling for certificate operations to provide clearer feedback and reduce unexpected failures.

Embedded redirect documentation and minor Cockpit fixes

We now offer embedded help for Redirects in the Cockpit to assist you in configuring redirects effectively. This feature is designed to enhance your understanding and streamline the process of managing redirects within the Magnolia environment.

We also resolved a few minor Cockpit issues to improve the overall user experience. These fixes include:

• Ingress embedded documentation: corrected the help popover to avoid unnecessary scrolling.
• Ingress v2: Optimized API calls and enhanced default values

Magnolia 6.2.60

Release notes for Magnolia 6.2.60 are available.

Ingress v2 updates

New Features

• Enhanced Ingress validation: Strengthen your Ingress configurations with improved validation for greater reliability.
• Visible Ingress status: Monitor Ingress statuses effortlessly, with clear error messages to streamline troubleshooting.
• Embedded Ingress documentation: Access comprehensive Ingress documentation directly in the Magnolia interface for quick reference.
• Configurable Redirect server memory limit: Set the memory limit for the redirect server using a new property to optimize performance.

For more details, see Ingresses .

Improvements

• Persistent Release/Environment Filter: Retain your selected Release/Environment filter as you navigate across pages for a seamless experience.
• Relocated Managed Environment Delete Index: Delete indexes at the pod level on the Managed Environment page for precise control.

Magnolia 6.3.9

Release notes for Magnolia 6.3.9 are available.

Magnolia 6.2.59

Release notes for Magnolia 6.2.59 are available.

SSO client integration and improved environment management

SSO clients

We’re happy to introduce the SSO Clients section to the Cockpit. For DX Cloud deployments, configuring an SSO client is essential to connect your IDP to Magnolia. If your IDP uses SAML instead of OIDC, we need to bridge the gap by routing authentication through Keycloak. Proper client configuration ensures smooth and secure access across your environments.

See SSO clients for more details.

Managing environments

We have improved the experience for managing environments in the Cockpit. This includes:

• Enhanced layout and usability
• Full API integration for faster access
• Display of all containers with detailed status information
• Visualization of the deployed pod image

See Manage your environments for more details.

** Start: Start your environment.** ** Stop: Destroys all instances down to 0 replicas.** ** Delete indexes: Delete the environment’s indexes.** ** All containers: Display a list of all containers associated with the environment.** ** See logs: Takes you directly to any applicable log information.**

ECC support

DX Cloud customers can now use Elliptic Curve cryptography (ECC) to sign publication requests. You must be on Helm 1.17.2 or later to avail of this feature. See How to change the signature algorithm for publication tasks for more details.

Embedded Cockpit user assistance and global features

We now offer user assistance help directly in the Cockpit. This helps answer questions directly in the Cockpit and points you to more in-depth documentation if needed. The first iteration includes user assistance for certificates .

We also have now labelled the Global Features more clearly in the Cockpit navigation, meaning you can see which features are unaffected by the cluster switcher.

Magnolia 6.3.8

Release notes for Magnolia 6.3.8 are available.

Magnolia 6.2.58

Release notes for Magnolia 6.2.58 are available.

Magnolia 6.2.57

Release notes for Magnolia 6.2.57 are available.

Magnolia 6.3.7

Release notes for Magnolia 6.3.7 are available.

Magnolia 6.3.6

Release notes for Magnolia 6.3.6 are available.

Magnolia 6.2.56

Release notes for Magnolia 6.2.56 are available.

Persistent filters and improved Home Page performance

• Filters are now retained in the URL, letting you share pre-applied filters directly with others.

• We also improved the performance for the Cockpit home page, ensuring an optimal user experience.

Manage certificate updates and Real time usage for Infrastructure

• You can now choose to have certificates managed entirely by us or retain full control with custom certificates. We’ve made this process easier by enhancing the certificate section in the Cockpit. For full details, see Manage certificates .

• We also merged the CPU and Memory components into Real time usage in the Cockpit section of the Cockpit.

Certificate improvements in the Cockpit

We made several improvements for managing certificates in the Cockpit including the ability to filter by Type or Method.

You can now see even more details about certificates with the following new columns:

• Renews: Specifies when the certificate is scheduled to renew.
• Issuer: Specifies the certificate issuer.

Magnolia 6.3.5

Release notes for Magnolia 6.3.5 are available.

Magnolia 6.2.55

Release notes for Magnolia 6.2.55 are available.

Certificate and Infrastructure improvements

With this release, we have improved several items related to Certificates. This includes:

• Integrating a dedicated certificate chain checker directly into the Cockpit
• Updating the endpoint for retrieving CSR data to ensure CSRs can be edited
• Allowing filtering on certificates to quickly retrieve information directly in the Cockpit

• We also merged the Overview and Distribution components in the Cockpit section of the Cockpit.

Improved redirect import validation

We have improved our import validation in the Cockpit when you import redirect files. This ensures that only files that are correctly formatted are imported.

The import dialog notifies you if there are any issues with your import file such as incorrect .csv formatting or if the status code is not permitted.

For more, see Create redirects .

Redirect status filters

You can see the status of your redirects under the Status column in the redirect table. You are now able to filter on these status directly in the Cockpit.

• Synced: Published redirect including any changes (if applicable).
• Created: New redirect; unpublished.
• Modified: Changes were made to the redirect; unpublished.
• Deleted: The redirect is marked for deletion; it is removed the next time you publish.