From 11809f6cf62877291c06ab763ea764772a468a38 Mon Sep 17 00:00:00 2001 From: Tom Clegg Date: Mon, 7 Nov 2022 10:09:01 -0500 Subject: [PATCH] 19240: Mention federation case in upgrade note. Arvados-DCO-1.1-Signed-off-by: Tom Clegg --- doc/admin/upgrading.html.textile.liquid | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/admin/upgrading.html.textile.liquid b/doc/admin/upgrading.html.textile.liquid index 984b15aa9a..5a88ba50d0 100644 --- a/doc/admin/upgrading.html.textile.liquid +++ b/doc/admin/upgrading.html.textile.liquid @@ -35,7 +35,7 @@ h2(#main). development main (as of 2022-10-31) h3. Google or OpenID Connect login restricted to trusted clients -If you use OpenID Connect or Google login, and your users log in from a web application other than the Workbench1 and Workbench2 @ExternalURL@ addresses in your configuration file, the additional URL(s) must be listed explicitly in @Login.TrustedClients@, otherwise login will fail. Previously, login would succeed with a less-privileged token. +If you use OpenID Connect or Google login, and your cluster serves as the @LoginCluster@ in a federation _or_ your users log in from a web application other than the Workbench1 and Workbench2 @ExternalURL@ addresses in your configuration file, the additional web application URLs (e.g., the other clusters' Workbench addresses) must be listed explicitly in @Login.TrustedClients@, otherwise login will fail. Previously, login would succeed with a less-privileged token. h3. New keepstore S3 driver enabled by default -- 2.30.2