OpenID configurability and tenancy performance improvements

Kpow v90.3 improves OpenID Connect SSO configurability and the performance of tenancy materialization.

OpenID Configurability

In release 90.3 we improve support for generic OpenID Connect integration by providing two new variables, OPENID_USER_FIELD and roles_from.

Environment Variable - OPENID_USER_FIELD

The optional environment variable, OPENID_USER_FIELD, defines which field in the access token maps to a user's name (default: sub).

RBAC Configuration - roles_from

The optional RBAC configuration field, roles_from, specifies whether to use the access_token or id_token for roles mapping (default: access_token).

See our OpenID Connect documentation for full configuration options.

Custom Serdes in the kREPL

You can now use Custom Serdes in the kREPL by using their label directly in your query in place of any standard serdes.

Improved Scheduled Mutations UI/UX

Kpow now correctly shows the details of failed mutations, and more clearly differentiates between scheduled and executed mutations.

Improved Performance of Tenancy Materialization

Thanks to user reports we detected issues with tenancy materialization in larger installations of Kpow (10+ clusters).

Work in this area reduces CPU utilization by as much as 50% for tenancy materialization.