Skip to main content
Version: 4

AC v4.7.3 release highlights

AC v4.7.3 release contains the following security enhancement.

Security enhancement ​

Option to use a Secret created manually for heap/thread dump API authentication​

You can now configure the application to use a manually created Secret for authenticating the API used to download heap dumps and thread dumps. This has been achieved by introducing the customActuatorSecrets block under both global.webappGateway and global.apigateway sections of values.yaml. When you set the create parameter in this section to:

  • false: The Helm does not create the Secret. Instead, you must provide the name of a manually created Secret in the secretName parameter.

  • true**:** The Helm creates the Kubernetes Secret using the username and password provided in the respective parameters.