From: Tom Clegg Date: Mon, 7 Nov 2022 15:09:01 +0000 (-0500) Subject: 19240: Mention federation case in upgrade note. X-Git-Tag: 2.5.0~44^2~1 X-Git-Url: https://git.arvados.org/arvados.git/commitdiff_plain/11809f6cf62877291c06ab763ea764772a468a38 19240: Mention federation case in upgrade note. Arvados-DCO-1.1-Signed-off-by: Tom Clegg --- diff --git a/doc/admin/upgrading.html.textile.liquid b/doc/admin/upgrading.html.textile.liquid index 984b15aa9a..5a88ba50d0 100644 --- a/doc/admin/upgrading.html.textile.liquid +++ b/doc/admin/upgrading.html.textile.liquid @@ -35,7 +35,7 @@ h2(#main). development main (as of 2022-10-31) h3. Google or OpenID Connect login restricted to trusted clients -If you use OpenID Connect or Google login, and your users log in from a web application other than the Workbench1 and Workbench2 @ExternalURL@ addresses in your configuration file, the additional URL(s) must be listed explicitly in @Login.TrustedClients@, otherwise login will fail. Previously, login would succeed with a less-privileged token. +If you use OpenID Connect or Google login, and your cluster serves as the @LoginCluster@ in a federation _or_ your users log in from a web application other than the Workbench1 and Workbench2 @ExternalURL@ addresses in your configuration file, the additional web application URLs (e.g., the other clusters' Workbench addresses) must be listed explicitly in @Login.TrustedClients@, otherwise login will fail. Previously, login would succeed with a less-privileged token. h3. New keepstore S3 driver enabled by default