Skip to main content

Release 0.5.61 — SSO Idle Timeout Fix & Insights Drill-Down

Sri Aradhyula
Sri Aradhyula

Released: 2026-07-24 Chart: oci://ghcr.io/cnoe-io/charts/ai-platform-engineering:0.5.61 Previous release: 0.5.60

Highlights​

0.5.61 fixes an SSO session bug that was randomly logging out idle users, adds per-user OAuth token support to the Webex and Confluence MCP servers, and lets admins click into a day's feedback directly from the Insights trend chart.

What's New​

Feedback trend drill-down​

Clicking a point on the Admin → Insights feedback trend chart now opens the Feedback tab pre-filtered to that day, with Back returning you to Statistics. Existing source, user, and simulation filters carry through unchanged. (#2283)

Insights user drawer for scoped viewers​

Insights readers can now open the user drawer for users within their permitted resource scope or team, not just full admins — while server-side RBAC still governs exactly which conversations are visible. Top Users cards are now paginated (10 rows per page) instead of loading everything at once. (#2285)

Bug Fixes​

  • ui: fixed users being logged out mid-session when their Keycloak SSO idle timer expired while a tab sat open but idle. A 6-hour keepalive now refreshes the session before the 8-hour idle window closes. (#2288)
  • webex: the Webex MCP server now uses a connected user's own OAuth token when available, falling back to the shared bot token — enabling per-user impersonation instead of every call running as the bot.
  • confluence: the Confluence MCP server now sends per-user Atlassian OAuth tokens as Bearer auth against the correct Atlassian API host, fixing "cannot access Confluence" for users with a connected Atlassian credential. Static bot-token deployments are unaffected.
  • rag: closed several RBAC gaps in the RAG server where document/chunk reads, job endpoints, and graph-explore endpoints checked only a coarse role instead of the per-datasource grant already enforced elsewhere — inaccessible datasources are now filtered or denied consistently. (#2269)

Breaking Changes​

No breaking changes. Drop-in upgrade from 0.5.60.

Known Issues​

None known at this time.

Upgrade Guide: 0.5.60 → 0.5.61​

Overview​

Drop-in upgrade — no values.yaml edits required.

Helm Values Changes​

No Helm values changes between 0.5.60 and 0.5.61. Drop-in upgrade.

Upgrade Runbook​

1. Update chart version​

helm upgrade ai-platform-engineering \
  oci://ghcr.io/cnoe-io/charts/ai-platform-engineering \
  --version 0.5.61 \
  -f your-values.yaml

2. Verify​

kubectl get pods -n <namespace>

If users on your deployment were reporting random logouts after long idle periods, confirm those stop occurring after this upgrade.

Personal Impact Analysis​

No values.yaml changes required.

Full Values Diff​

No diff — values.yaml is identical between 0.5.60 and 0.5.61.