Important: Version 5.7.0 is available to Dash Enterprise instances that are installed on a single server only.
KOTS Admin Console version support change: Dash Enterprise 5.7.1 uses version 1.124.7 of the KOTS Admin Console, which is not automatically changed with Dash Enterprise upgrades.
Security: Upgraded Caddy to v2.9.1.
Security: Upgraded Cert Manager to v1.17.1.
Security: Upgraded Gitea to v1.23.6.
Security: Upgraded Ingress NGINX Controller to v1.11.5.
Security: Upgraded KOTS to v1.124.7.
Security: Upgraded Kpack to v0.16.1.
Security: Upgraded Metrics Server (kURL) to v0.7.2.
Security: Upgraded Reloader to v1.3.0.
Important: Version 5.7.0 is available to Dash Enterprise instances that are installed on a single server only.
Kubernetes version support change: Dash Enterprise is no longer compatible with Kubernetes 1.30. As part of the Kubernetes upgrade to 1.31, all apps and workspaces will be restarted.
KOTS Admin Console version support change: Dash Enterprise 5.7.0 uses version 1.121.0 of the KOTS Admin Console, which is not automatically changed with Dash Enterprise upgrades.
Additional information: Upgrading to Dash Enterprise 5.7.0 causes apps and workspaces to restart.
Added the ability to set a Portal footer, as well as customize its background color and text color, to the Portal Customization settings.
Added several styling options to the Portal Customization settings.
System administration/installation: Added support for single server installations on Ubuntu 24.
The default Python version set for apps on newly installed instances is now v3.12.
The default pip version for deployed apps and workspaces is now 23.3.2. Existing apps will change to pip 23.3.2 when next deployed, and existing workspaces will change to 23.3.2 when next rebuilt. Important: pip 23.3.2 is not compatible with Python 3.7. If your app uses Python 3.7, you’ll need to lower the pip version.
Users who co-own apps can now see those apps on the Monitoring page.
Increased the allowed startup time for apps during deployment to 10 minutes.
Changes to the the app list view (such as browsing to the “My Apps” tab or sorting the list) will now be persisted.
Changed the terms “Created by” to “Owner” in the app list to account for transferred apps.
Users with the viewer role only will no longer see links to the App Manager and Admin settings (which they don’t have permission to use) in the Portal.
Renamed the “Hide Plotly Branding and App Manager Links” option in the Portal customization settings to “Custom branding and Portal-only mode for app viewers”.
When “Custom branding and Portal-only mode for app viewers” is enabled, users with the viewer role only will be redirected if they try to navigate to any other part of Dash Enterprise such as the App Manager.
Global and app environment variables no longer appear in build logs viewed from the App Manager.
Improved the search functionality on the Monitoring page so that search results are consistent with those on the apps list page for a given search term.
The memory and CPU usage tables on the Monitoring page now have sparklines.
The graphs on the Monitoring page now have overlay controls for zooming, panning, and more.
The “Replicas” and “Memory by Replica” graphs on the Monitoring page are no longer displayed when there is no replica data for the selected time period.
The Scale tab in the App Info now uses MiB for memory information.
Fixed a bug where users who were recently given the admin role sometimes did not see all apps on the Monitoring page until after they logged out and back in.
Fixed a bug where a running workspace would sometimes display a loading spinner in the place of the “Stop” and “Restart” buttons.
Fixed a bug where, under certain circumstances, the names of the items in the App Manager sidebar would not be displayed.
Fixed a bug where saving a memory limit on a Redis database would prevent the app from connecting to it.
Security: Improved security of the packages endpoint.
Security: New installations now use Kubernetes 1.31.
Security: Upgraded KOTS to v1.121.0.
Security: Upgraded Kpack to v0.15.0.
Security: Upgraded Upgraded Fluent Bit to v3.2.4.
Security: Upgraded Keycloak to v26.0.7.
Fixed a bug where the Customize Portal modal would close on its own after a few seconds.
Fixed a bug where the Portal would sometimes display “This app is not running right now” when the app was running.
Fixed a bug where, under certain circumstances, it was still possible to initialize new apps when Dash Enterprise reached its licensed memory limit.
Security: Upgraded OpenEBS to v4.0.0.
System administration/installation: Fixed a bug where changing the Dash Enterprise base domain did not propagate the change inside the requirements.txt files of new App Catalog apps.
Kubernetes version support change: Dash Enterprise is no longer compatible with Kubernetes 1.29. As part of the Kubernetes upgrade to 1.30, all apps and workspaces will be restarted.
Istio version support change: Dash Enterprise 5.6.0 uses Istio version 1.23.3, which is not automatically changed with Dash Enterprise upgrades. (Applies to Dash Enterprise instances that have Istio installed. Uninstalling Istio in single server instances is supported).
KOTS Admin Console version support change: Dash Enterprise 5.6.0 uses version 1.119.1 of the KOTS Admin Console, which is not automatically changed with Dash Enterprise upgrades.
Additional information: Upgrading to Dash Enterprise 5.6.0 causes apps and workspaces to restart.
Added the ability to configure an Azure Data Lake data source.
Added the ability to configure an AWS Redshift data source using AWS Auth.
Added the ability to configure a generic SQL data source as well as a custom data source.
Added the ability to test the connection when adding a data source.
Added a Monitoring page where users can view overall system memory and CPU usage. Additionally, administrators and app owners can view memory and CPU usage information by app. Monitoring is only available for Dash Enterprise installed on a single server.
System administration/installation: Added support for single server installations on RHEL 9.4.
System administration/installation: Added support for stopping and starting (parking) the server that Dash Enterprise is installed on. Parking is only supported for Dash Enterprise installed on a single server.
System administration/installation: Added Prometheus to the system (installations on a single server only).
Users with the admin role only can now add data sources.
Users who have their license seat revoked and later added back will now regain ownership of any apps that they owned before the license seat was revoked.
Users with the viewer role only are no longer available in the Data Source restricted access list.
Updated the file name for downloaded logs to add a 0 before single-digit months.
App builds that get stuck in “Starting” status are now detected and changed to “Cancelled”.
System administration/installation: App build pods are now scheduled in the dash-apps namespace.
Security: Updated the installation scripts to use localhost when connecting to KOTS.
Fixed a bug where adding a group as an app co-owner would not allow group members to view the app.
Fixed a bug where users whose usernames contained certain special characters had incorrect permissions.
Fixed a bug where the max memory displayed in the Scale tab of the App Info only considered one replica.
Fixed a bug where giving a group access to a data source did not allow group members to use it.
Fixed a bug where groups that co-owned an app appeared to be removable from a linked data source’s restricted access (a success message was displayed but the group was not removed).
Fixed a bug where uploading an app thumbnail could sometimes cause that app’s information to overflow from its card in the Portal.
Fixed a bug where deleted global environment variables would still be used in the app build process.
Fixed a bug where an empty error message was displayed when an administrator disabled the Unauthenticated viewer access option and one of the affected apps was deleted before the administrator saved the change.
Fixed a bug where, under certain circumstances, a user who was logged out by an administrator could still view Authenticated or Restricted apps that they had viewer access to.
Fixed a bug where the App Manager would display a 403 error to users with the licensed_user role for a few minutes after Dash Enterprise had been restored from a backup.
Fixed a bug where the “Open App” button in the Portal would sometimes be unavailable for unauthenticated users.
Fixed a bug where the “Nearing System Limits” warning message would sometimes display the pod and PVC limits as undefined.
System administration/installation: Fixed a bug where pods in Terminated or Completed status would be counted in the “Nearing System Limits” warning message.
System administration/installation: Fixed a bug where kubectl get dashenterprise -n plotly-system would sometimes report that the Appstack was healthy when it wasn’t.
Security: Upgraded Cert Manager to v1.16.1.
Security: Upgraded Gitea to v1.22.3.
Security: Upgraded Harbor to v2.12.0.
Security: Upgraded Ingress NGINX Controller to v1.11.3.
Security: Upgraded Istio to v1.23.2.
Security: Upgraded KOTS to v1.119.1.
Security: Upgraded Oomie to v2.6.
Security: New installations now use Kubernetes 1.30.
Security: New EKS installations now use the gp3 storage class.
Security: New installations now use AWS CLI v2.18.9.
Security: New installations now use Azure CLI v2.65.0-1.
Security: New installations now use eksctl v0.190.0.
Security: New installations now use gloud and gke-gcloud-auth-plugin v497.0.0.
Security: New installations now use Helm to v3.16.2.
Additional information: Upgrading to Dash Enterprise 5.5.1 causes apps and workspaces to restart.
Fixed a bug where, under certain circumstances, users with the admin and licensed_user roles were able to open other users’ workspaces in read-only mode.
Fixed a bug where the “Open App” button in the Portal would sometimes be unavailable.
System administration/installation: Fixed a bug where installing Dash Enterprise on a multi-node cluster with an internal root CA certificate would fail.
System administration/installation: Fixed a bug where restoring from a backup of a multi-node environment with an internal root CA certificate would fail.
Security: Upgraded Node base image version to apply image vulnerability patches for OS packages.
Security: Upgraded image dependencies to apply vulnerability patches for library packages.
Kubernetes version support change: Dash Enterprise is no longer compatible with Kubernetes 1.28. As part of the Kubernetes upgrade to 1.29, all apps and workspaces will be restarted.
Istio version support change: Dash Enterprise 5.5.0 uses Istio version 1.22.3, which is not automatically changed with Dash Enterprise upgrades. (Applies to Dash Enterprise instances that have Istio installed. Uninstalling Istio in single server instances is supported).
KOTS Admin Console version support change: Dash Enterprise 5.5.0 uses version 1.112.4 of the KOTS Admin Console, which is not automatically changed with Dash Enterprise upgrades.
Additional information: Upgrading to Dash Enterprise 5.5.0 causes apps and workspaces to restart.
Added a Data Sources feature that allows data stored in Databricks, Snowflake, AWS Redshift, Google BigQuery, or AWS S3 to be more easily used in workspaces and deployed apps. Once a data source is added by a user with a license seat, authorized users can link it to their apps. A new data-sources library is available in dash-enterprise-libraries that handles the connection code.
Added a new App Ownership tab in Platform and Users where administrators can view and manage the owners and co-owners of all apps on Dash Enterprise.
Added a Python Version setting in the Admin Settings where administrators can set a Python version that will be used for all newly created pip-based apps (and their workspaces, if applicable). Does not apply to App Studio. App developers can override the Python version for their apps in the App Info.
System administration/installation: Added support for single server installations on RHEL 8.10.
System administration/installation: Added support for integrating external identity providers that use a self-signed/internal certificate.
System administration/installation: Added support for specifying a static IPv4 address to be used for the external or internal load balancer in GKE (multi-node) installations. This IP address must be created within the same GCP project as the GKE cluster.
Changed the way the Python version is set for pip-based apps. The Python version is now configured in the Settings tab of the App Info, and takes precedence over the version set by administrators in Admin Settings.
App owners and co-owners can now view values for global environment variables.
Improved app transfers by allowing administrators to change ownership of apps even when their owner has been deleted.
The default “Max Replicas” for new apps is now 10.
Apps deployed to Dash Enterprise now have their HTTP traffic compressed, improving app performance. If you have a Dash app with compress=False, this directive will be ignored when the app is deployed to Dash Enterprise.
When an administrator turns on “Hide Plotly Branding and App Manager Links,” users with the viewer role only will no longer see the Personal Settings link from the Portal.
When memory usage reaches 80% of the licensed memory limit, scaling app web process replicas (as well as autoscaling, if applicable) will be disabled, and a warning will be displayed at the top of the App Manager.
New global environment variables are no longer marked with a blue dot in the App Info Global Environment Variables list nor cause a warning message to appear at the top of the App Info.
Changed the button name for initializing a new app from “Initialize App” to “+ Dash App”.
When the App Info is accessed before the app is fully initialized, the page now periodically refreshes and a loading animation is displayed.
System administration/installation: Improved installations on a single server by adding a bundle of setup tools in Installation Plans. This bundle contains preinstalled packages that previously needed to be downloaded at install time. As a result, airgapped installations no longer require an internet-connected bootstrap node, and internet-connected installations require less outbound communication.
System administration/installation: Installations on a single server now create a de5-bootstrap pod into which key tools are installed, as well as a script for entering this pod. Entering the de5-bootstrap pod is now required to change the KOTS admin password.
System administration/installation: Changed the officially supported way to back up and restore Dash Enterprise instances that are installed on a single server. These instances must now be backed up and restored using cloud provider snapshotting tools.
System administration/installation: Updated the multi-node installation scripts to install metrics-server only if the cloud provider doesn’t supply it.
System administration/installation: Auth server requests from apps and workspaces are now made using Keycloak’s internal URL. This reduces network hops that could lead to latency resulting in connection resets or timeouts. Existing apps and workspaces will need to be rebuilt to take advantage of this change.
System administration/installation: Reduced the amount of calls that the backend makes to Keycloak in order to prevent Keycloak from going down in high pressure situations.
System administration/installation: Changed the command for generating a support bundle. See the “Support” documentation page for details.
System administration/installation: New installations now use Kubernetes 1.29.
System administration/installation: New installations now use eksctl v0.169.0.
System administration/installation: Upgraded Calico to v3.26.4.
System administration/installation: Upgraded Cert Manager to v1.14.7.
System administration/installation: Upgraded Fluent Bit to v3.1.5.
System administration/installation: Upgraded Gitea to v1.22.1.
System administration/installation: Upgraded Harbor to v2.11.1.
System administration/installation: Upgraded Helm to v3.14.0.
System administration/installation: Upgraded Istio to v1.22.3.
System administration/installation: Upgraded Keycloak to v24.0.5.
System administration/installation: Upgraded KOTS to v1.112.4.
System administration/installation: Upgraded Metrics Server to v0.7.1.
System administration/installation: Upgraded Redpanda to v24.1.11.
System administration/installation: Applied security patches to several dependency images.
Fixed a bug with the buildpacks where predeploy scripts in workspaces were given incorrect permissions.
Fixed a bug where the ~/.ssh directory in workspaces would have the incorrect owner after a node in the cluster was rotated.
Fixed a bug where pip-installed Python packages in workspaces could not be downgraded.
Fixed a bug where users with the licensed_user and admin roles would lose access to their apps when the admin role was removed.
Fixed a bug where members of a child group that has multiple parent groups had incorrect permissions.
Fixed a bug where adding or removing viewers from a Restricted app did not change the app’s “Updated” information.
Fixed a bug where adding a user as a co-owner or viewer to an app did not display the user’s name if one was available.
Fixed a bug where, when searching for users in Viewer Access, performing an action with a user in the search results would clear the search but not the text entered in the searchbar.
Fixed a bug where a deleted global environment variable would not appear in the list of recently deleted global environment variables in the App Info if the app had never been deployed.
Fixed a bug where adding a new global environment variable would cause the list to be incomplete if it spanned more than one page until the page was hard refreshed.
System administration/installation: Fixed a bug where internet-connected Dash Enterprise instances with a proxy were not able to immediately get the latest enterprise libraries (such as Dash Design Kit), App Catalog apps, and documentation.
System administration/installation: Fixed a bug where installing Dash Enterprise on an airgapped single server with a certificate whose root CA is internal to the organization would fail.
System administration/installation: Fixed a bug where configuring Dash Enterprise with an internal root CA certificate would prevent dash-enterprise-auth from working normally.
System administration/installation: Fixed a bug where the INSTALL_ISTIO variable was missing in airgapped single server config files.
Removed the ability for app developers to change their pip-based app’s Python version using a project.toml file. Note that project.toml is still the supported way of changing the pip version.
Removed the ability for app developers to change their app’s Python version using the BP_CPYTHON_VERSION environment variable. Note that BP_PIP_VERSION still works for changing the pip version.
System administration/installation: Removed the ability for Dash Enterprise instances installed on a single server to be restored onto a different VM.
Istio version support change: Dash Enterprise 5.4.2 uses Istio version 1.21.2, which is not automatically changed with Dash Enterprise upgrades. (Applies to Dash Enterprise instances that have Istio installed. Uninstalling Istio in single server instances is supported starting with this Dash Enterprise version.)
KOTS Admin Console version support change: Dash Enterprise 5.4.2 uses version 1.108.12 of the KOTS Admin Console, which is not automatically changed with Dash Enterprise upgrades.
Gatekeeper version support change: Dash Enterprise 5.4.2 uses version 3.14.2 of Gatekeeper, which is not automatically changed with Dash Enterprise upgrades.
Additional information: Upgrading to Dash Enterprise 5.4.2 causes workspaces to rebuild. If you are using Dash Enterprise in an airgapped environment or an environment that uses a proxy, workspaces will need to be rebuilt manually after upgrade to ensure they have the latest workspaces version.
Added the ability to open App Studio from within Dash Enterprise.
Added horizontal pod autoscaling (HPA) to app web process replicas. Dash Enterprise will automatically scale apps to meet demand using the minimum and maximum replica count defined in the process resources. The minimum and maximum replica counts are set to 1 by default, and you can change these defaults to enable autoscaling. If the value for “Replicas” was edited prior to upgrading Dash Enterprise to this version, it will correspond to the maximum replica count after the upgrade.
Added global environment variables, configurable by administrators, that apply to all apps and workspaces on Dash Enterprise.
Added support for pip 23.3.2.
System administration/installation: Added support for pulling Dash Enterprise images from an internal registry during internet-connected installations and upgrades.
System administration/installation: Added support for pulling Dash Enterprise images from Artifact Registry during installations and upgrades.
Changed the way Plotly delivers new versions of Dash Enterprise Workspaces to internet-connected Dash Enterprise instances. It is now possible to obtain new versions of Workspaces without upgrading Dash Enterprise, as long as the environment allows communication to api.github.com and quay.io. When a new Workspace version is available, a “Rebuild and Update” button, along with a notification, will be displayed in the Workspace section of the App Info.
Changed the default Python version for deployed apps and workspaces from 3.8.16 to 3.10.11. Existing apps without a project.toml file that overrides the default Python version will change to Python 3.10.11 when next deployed. This may cause incompatibility with app dependencies. Notably, older versions of psycopg2-binary are incompatible with Python 3.10.11.
App co-owners can now open the workspace IDE in read-only mode. Read-only mode allows viewing files but not editing them or using the terminal.
App co-owners can now access the workspace development site.
Users in a workspace now see a session expiry warning five minutes before their session expires. They are prompted to save their work and log back in to continue their session.
Changed Jupyter notebooks in Workspaces to improve their integration with the IDE framework.
Users with the admin role only are now able to stop and start all app processes.
Improved GraphQL API stability by implementing a rate limit.
Increased the environment variable name character limit from 30 to 250.
Increased the environment variable value character limit from 255 to 4096.
Lowercase environment variable names are no longer automatically changed to uppercase when added. Names are case sensitive (you can have both FOO and foo and they are treated as distinct environment variables).
Improved environment variable name validation and error message.
Replaced the “Dashboard Engine” page with an “App Studio” page in the Capabilities section.
System administration/installation: Improved the process for changing the Dash Enterprise hostname. Administrators with access to the KOTS Admin Console can now specify a new hostname in the Config tab. Administrators are responsible for making the corresponding changes to DNS entries, and should expect Dash Enterprise to be inaccessible while the entries propagate.
System administration/installation: By default, Istio is no longer installed in single server environments.
System administration/installation: Optimized the resource requests and limits for several components in the system.
System administration/installation: Upgraded buildpacks.
System administration/installation: Upgraded Cert Manager to v1.13.6.
System administration/installation: Upgraded Cert Injection Webhook to v0.6.0.
System administration/installation: Upgraded Fluent Bit to v3.0.4.
System administration/installation: Upgraded Gatekeeper to v3.14.2.
System administration/installation: Upgraded Gitea to v1.21.11.
System administration/installation: Upgraded Harbor to v2.10.2.
System administration/installation: Upgraded Istio to v1.21.2.
System administration/installation: Upgraded Keycloak to v24.0.4.
System administration/installation: Upgraded Kpack to v0.13.4.
System administration/installation: Upgraded KOTS to v1.108.12.
System administration/installation: Upgraded Oomie to v2.4.
System administration/installation: Upgraded Postgres to v14.
System administration/installation: Upgraded Reloader to v1.0.104.
System administration/installation: Upgraded aws-load-balancer-controller to v2.7.1.
Fixed a security issue where, in some cases, unauthorized users were able to exploit restricted apps.
Fixed a bug where contact emails for apps were not displayed in the Portal.
Fixed a bug where app deployment would become stuck if the app had non-alphanumeric characters in their Procfile process names.
Fixed a bug where a user that was given viewer access to an app was able to search for it in the App Manager even though they weren’t an owner or co-owner.
Fixed a bug where removing co-owners after filtering them would remove all co-owners instead of only those selected.
Fixed a bug where users with the admin role only were able to deploy apps over HTTPS.
Fixed a bug where users with the admin role only were unable to use the workspace Restart button (but were able to use Stop and Start).
Fixed a bug where Viewer Analytics were unavailable for Django apps.
Fixed a bug where Dash apps using the rpy2 package would fail to run in workspaces and deploy. If your app depends on rpy2, add an environment variable with name R_HOME and value /layers/fagiani_apt/apt/usr/lib/R in order for it to successfully deploy and run in workspaces.
System administration/installation: Removed support for pulling Dash Enterprise images from Google Container Registry (GCR) during installations and upgrades (GCR has been deprecated by Google).
System administration/installation: Removed scripts for migrating from Dash Enterprise 4.X to 5.X.
Istio version support change: Dash Enterprise 5.3.0-sp.1 uses Istio version 1.21.0, which is not automatically changed with Dash Enterprise upgrades.
KOTS Admin Console version support change: Dash Enterprise 5.3.0-sp.1 uses version 1.108.3 of the KOTS Admin Console, which is not automatically changed with Dash Enterprise upgrades.
System administration/installation: New installations now use Istio v1.21.0.
System administration/installation: New installations now use KOTS v1.108.3.
System administration/installation: Upgraded Kpack to v0.13.4 (prerelease).
System administration/installation: Upgraded buildpacks.
System administration/installation: Upgraded Gitea to v1.21.9.
System administration/installation: Upgraded Harbor to v2.10.1.
System administration/installation: Upgraded Fluent Bit to v3.0.0.
System administration/installation: Upgraded Ingress NGINX Controller to v1.10.0.
System administration/installation: Upgraded Redpanda to v23.3.9.
System administration/installation: Upgraded bitnami-redis to 7.2-debian-12.
System administration/installation: Additional upgrades to address security vulnerabilities.
Kubernetes version support change: Dash Enterprise is no longer compatible with Kubernetes 1.27. As part of the Kubernetes upgrade to 1.28, all apps and workspaces will be restarted.
KOTS Admin Console version support change: Dash Enterprise 5.3.0 uses version 1.104.6 of the KOTS Admin Console, which is not automatically changed with Dash Enterprise upgrades.
Important notice: Dash Enterprise libraries (such as Dash Design Kit) are dropping support for Python 3.6 and 3.7. Upgrade to Python >=3.8 to use the latest versions of Dash Enterprise libraries. Our team is happy to assist you in upgrading Python or package versions.
Heads up: The default Python version for deployed apps and workspaces will change to 3.10 in the next Dash Enterprise minor release.
Additional information: Upgrading to Dash Enterprise 5.3.0 causes workspaces to restart.
Added support for pip 23.3.0 and 23.3.1.
Added support for Python 3.12.0 (only compatible with pip 23.3.1 or later).
Added download functionality for app logs, build logs, and workspace logs.
Added a Show Details button in the error message that appears when an app build fails. Selecting the button displays the build failure reason along with a kubectl command for obtaining the logs from the build pod.
System administration/installation: Added support for customizing the port that Dash Enterprise uses for app deployments over SSH.
System administration/installation: Expanded RHEL support in single server installations. The entire RHEL 8.X series is now supported.
System administration/installation: Added a Dash Enterprise upgrade tool, dectl, that handles many steps of the Dash Enterprise upgrade process in a single command. Not all installation types are currently compatible with dectl.
System administration/installation: Added support for internal root CA certificates.
System administration/installation: Added support for application load balancers (ALB) in EKS multi-node environments. When an ALB is used, Git pushing over SSH from a workstation is not available.
System administration/installation: Added support for automated TLS/SSL certificate generation for single server, internet-connected environments.
App co-owners can now view workspace logs and restart the workspace.
dash-enterprise-libraries is now preinstalled in Workspaces.
git and build-essentials are now installed in app base images on deploy.
Changed the default value for the Visible in Portal app access setting from Yes to No.
Updated the Overview tab of the App Info to display deployment instructions using the Dash Enterprise CLI.
Improved support for git pushing large files over SSH.
Updated the Workspace tab of the App Info by disabling the Visit Development Site button when the development app is not running.
Workspace logs now appear faster.
Improved the detection of system-level packages in Workspaces.
Updated the app initialization flow to check the availability of the app name when the user selects Create instead of as the user is typing.
Updated the app initialization flow to display an error if the entered app name would cause a URL collision in the App Manager.
App builds now fail if an incorrect package name or URL is specified in an Aptfile.
Improved the App Manager searchbar to search over app tags.
Improved the App Manager searchbar to trim any entered white space.
The external links on the Help & Support page now open in new tabs.
Improved the error message when a user without a license seat tries to add an SSH public key.
Improved the confirmation message when a user is deleted. The message now offers a reminder to transfer any apps that the user owns before proceeding.
Changed the way licensed memory is determined on the Platform and Users page. Licensed memory now uses whichever value is lower: the memory set by Plotly in the license, or the memory available across the cluster node(s).
System administration/installation: Added preflight checks to verify that pod IPs are within the RFC 1918 private address space.
System administration/installation: Changed the directory used during single server installations from /tmp to /var.
System administration/installation: New installations now use Kubernetes version 1.28.
System administration/installation: Upgraded Keycloak to v23.0.3.
System administration/installation: Upgraded several install tools defined in the installations scripts to be compatible with Kubernetes 1.28.
System administration/installation: Upgraded Gitea to v.1.21.
System administration/installation: Upgraded Cert Manager to v1.13.3.
System administration/installation: Upgraded Cert Injection Webhook to v0.5.1.
System administration/installation: Upgraded Gatekeeper to v3.14.0.
System administration/installation: Upgraded Ingress NGINX Controller to v1.9.6.
System administration/installation: Upgraded metrics-server to v0.7.0.
System administration/installation: Upgraded Oomie to v2.3.
System administration/installation: Upgraded Postgres to v13.
System administration/installation: Upgraded Reloader to v1.0.63.
System administration/installation: Upgraded aws-load-balancer-controller to v2.6.2.
System administration/installation: Upgraded Calico to v3.25.2.
System administration/installation: Changed how Calico is bundled in order to allow KOTS to upgrade it alongside other dependencies.
System administration/installation: Upgraded buildpacks.
System administration/installation: Updated the installation scripts for single server to include wget.
System administration/installation: Improved support for installing on a single server with multiple network interfaces by adding a new variable KURL_PRIVATE_IP in config files. kURL will use the specified IP when creating the Kubernetes cluster.
System administration/installation: Changed the Dash realm configuration in Keycloak to enforce SSL for all external requests.
Fixed a bug where packages that were manually installed in a workspace terminal would be added in a different directory than the equivalent install in a deployed app.
Fixed a bug where apps would get stuck in Deployment Pending status if they did not contain a Python file at the root.
Fixed a bug where redeploying an app in Deployment Failed status to address the failure reason would not correctly update the app status in the Overview.
Fixed a bug where including a pip install command in a predeploy script would not correctly install the package.
Fixed a bug where predeploy scripts were not automatically run on workspace creation and rebuild.
Fixed a bug where APT files specified in an Aptfile were not automatically installed on workspace creation and rebuild.
Fixed a bug where Python packages installed from C or C++ source code requiring gcc would fail to install in workspaces (but succeed during app deployment).
Fixed a bug that prevented postdeploy scripts from running.
Fixed a bug where enabling the persistent filesystem and selecting Restart App and Workspace from the confirmation message would not correctly add the mount directory to the workspace after it restarted.
Fixed a bug where temporary empty files were visible in the explorer panel of a new workspace when the workspace was opened as soon as it finished creating.
Fixed a bug where a user that didn’t have access to an app’s workspace would see a blank page instead of a 404 error when visiting /apps/<app-name>/workspace.
Fixed a bug where it wasn’t possible to install a version of Jupyter notebooks other than the default v7.0.2 in workspaces.
Fixed a bug where resizing the workspace terminal would break the column size of the terminal and prevent users from being able to run commands.
Fixed a bug where the commit author would sometimes not be displayed in the Builds tab of the App Info.
Fixed a bug where the App Info overview would sometimes display two different statuses when an app deployment failed.
Fixed a bug where changing an app’s Portal rank from a value that wasn’t 0 or Not set to 0 would cause the app to appear first in the Portal.
Fixed a bug where removing a title from an app would not correctly update the text in the browser tab.
Fixed a bug where selecting a file in a workspace would cause the browser tab to display the name of the file.
Fixed a bug where an app that exceeded its custom memory limit would not restart automatically when an administrator adjusted the limit.
Fixed a bug where users that were created natively in Keycloak would have incorrect permissions if their usernames contained capital letters.
Fixed a bug where changes to user metadata would not be reflected in the App Manager.
Fixed several bugs in the Keycloak IdP Setup Wizard where AD FS IdPs were created in Keycloak with incorrect settings.
System administration/installation: Fixed a bug where during internet-connected single server installations, the installation script would prompt to confirm the sshd change, but the user was unable to respond.
System administration/installation: Fixed a bug in backup and restore where during the restore, the system would attempt to download the velero-restore-helper image from the internet in airgapped environments.
5.2.1
Fixed a bug where, under certain circumstances, files in a workspace would be incorrectly added or lost.
Fixed a bug where, under certain circumstances, app deployments would fail with runtime error: invalid memory address or nil pointer dereference.
System administration/installation: Fixed a bug in the GKE infrastructure provisioning script that would cause the script to fail for some network setting combinations.
System administration/installation: Fixed a bug where some images were missing in the airgap bundle.
System administration/installation: Fixed an incorrect Gitea version in the airgap bundle.
5.2.0
Breaking change reminder: As of 5.2.0-rc.1, app pods no longer run as root. As a result, if your apps contain a predeploy script that installs system-level dependencies, you’ll need to update the predeploy script to use
sudoin order for your apps to continue working with Dash Enterprise. For example, the following script that installs the ODBC driver
txt cp /app/odbc.ini /etc/odbc.ini cp /app/odbcinst.ini /etc/odbcinst.ini
would need to be updated to
txt sudo cp /app/odbc.ini /etc/odbc.ini sudo cp /app/odbcinst.ini /etc/odbcinst.ini
Breaking change reminder: As of 5.2.0-rc.1, apps and workspaces use Ubuntu 22, which may not be supported by older drivers. If your apps depend on drivers, you may need change their versions in order for your apps to continue working with Dash Enterprise.
Notably, if your apps use
msodbcsql, you’ll need to upgrade it to v17.10.5.1. (“MSSQL App” from the App Catalog is an example of an app that depends onmsodbcsql. This app has been updated to usemsodbcsqlv17.10.5.1, but if any of your
deployed apps were built using “MSSQL App” from earlier Dash Enterprise versions, they will require an update).
dash-enterprise-libraries package.dash-enterprise package to dash-enterprise-libraries.5.2.0-rc.3
KOTS Admin Console version support change: Dash Enterprise 5.2.0-rc.3 uses version 1.104.1 of the KOTS Admin Console, which is not automatically changed with Dash Enterprise upgrades.
System administration/installation: New installations now use KOTS v1.104.1.
System administration/installation: Upgraded Ingress NGINX Controller to v1.9.4.
System administration/installation: Upgraded Fluent Bit to v2.2.0.
System administration/installation: Upgraded Redpanda to v23.2.15.
System administration/installation: Upgraded Kpack to v0.12.2.
System administration/installation: Applied security patches to several dependency images.
Fixed a bug where it was not possible to save a change to an app’s portal rank unless its portal visibility was also changed.
Fixed a bug where some buttons in the left sidebar of the Workspaces IDE were hidden.
5.2.0-rc.2
Additional information: Upgrading to Dash Enterprise 5.2.0-rc.2 causes workspaces to restart.
Fixed a bug where deploying an app with a predeploy script would fail with “permission denied”.
Fixed a bug where workspaces would sometimes become unresponsive.
Fixed a bug where pip was inaccessible after it was upgraded in a workspace.
5.2.0-rc.1
Kubernetes version support change: Dash Enterprise is no longer compatible with Kubernetes 1.25. As part of the Kubernetes upgrade to 1.27, all apps and workspaces will be restarted.
Istio version support change: Dash Enterprise 5.2.0-rc.1 uses Istio version 1.19.0, which is not automatically changed with Dash Enterprise upgrades.
KOTS Admin Console version support change: Dash Enterprise 5.2.0-rc.1 uses version 1.102.0 of the KOTS Admin Console, which is not automatically changed with Dash Enterprise upgrades.
Breaking change: As of this release, app pods no longer run as root. As a result, if your apps contain a predeploy script that installs system-level dependencies, you’ll need to update the predeploy script to use
sudoin order for your apps to continue working with this release. For example, the following script that installs the ODBC driver
txt cp /app/odbc.ini /etc/odbc.ini cp /app/odbcinst.ini /etc/odbcinst.ini
would need to be updated to
txt sudo cp /app/odbc.ini /etc/odbc.ini sudo cp /app/odbcinst.ini /etc/odbcinst.ini
Breaking change: As of this release, apps and workspaces use Ubuntu 22, which may not be supported by older drivers. If your apps depend on drivers, you may need change their versions in order for your apps to continue working with this release.
Notably, if your apps use
msodbcsql, you’ll need to upgrade it to v17.10.5.1. (“MSSQL App” from the App Catalog is an example of an app that depends onmsodbcsql. This app has been updated to usemsodbcsqlv17.10.5.1, but if any of your
deployed apps were built using “MSSQL App” from earlier Dash Enterprise versions, they will require an update).
Additional information: Upgrading to Dash Enterprise 5.2.0-rc.1 causes workspaces to restart.
Introduced a new package dash-enterprise:
Installs most enterprise libraries as well as a new command line interface (CLI) for managing and deploying apps.
Introduces a new EnterpriseDash() constructor for deployed Dash apps that automatically styles your app with Dash Design Kit and enables a prebuilt header containing app metadata as well a Shortcuts menu. The Shortcuts menu contains:
A new way to copy and share views of apps called deep links
A username and avatar, if the user is logged in
A logout button, if the user is logged in
Links to the App Manager and Portal
Added a Viewer Analytics tab to the App Info and related documentation.
Added support for Streamlit apps, Django apps, and added related documentation.
Added support for RSA/SHA2 SSH keys.
Added an environment variable DASH_SECRET_KEY that is automatically created on app creation and is used by the system to allow requests that originate from Snapshot Engine background tasks when the app is protected by dash-enterprise-auth.
Added a PIP_EXTRA_INDEX_URL field in the KOTS Admin Console Config tab that allows system administrators to configure an extra index URL to be used by all apps on the system.
System administration/installation: Added a script that handles upgrading Istio and KOTS for easier Dash Enterprise upgrades.
System administration/installation: Added support for internal certificates in GKE (multi-node) installations.
System administration/installation: Added support for authenticated image pulls in airgapped installations.
Changed how Plotly delivers enterprise libraries (such as Dash Design Kit), App Catalog apps, and documentation for internet-connected environments. Starting in this version, enterprise libraries, App Catalog apps, and documentation update without the need to upgrade Dash Enterprise. With this change, the changelogs for enterprise libraries are moved into their respective documentation sections instead of being included in this changelog, and App Catalog changes are no longer included.
Environment variables set in the App Info are now used at build time as well as runtime.
Improved the look and feel of the Workspaces IDE for better consistency with the rest of Dash Enterprise.
Improved navigation between the Workspaces IDE and the rest of Dash Enterprise by adding links to the App Manager, the App Catalog, the Portal, and Documentation in the left sidebar of the IDE. Any existing workspaces will need to be rebuilt to get this change as well as the above change.
Python packages that are installed in a workspace terminal are now preserved when the workspace is rebuilt, unless the app files contain a project.toml file that specifies a Python version.
Pinned Jupyter to v7.0.2 in Workspaces.
Improved the accuracy of app status indicators in the Overview.
Using the Portal searchbar now searches over app tags.
App tags are now displayed in the Portal (previously, they were only displayed once an app was selected).
Apps in the Portal can now be opened in new tabs.
Breaking change (see note at the top of this changelog) System administration/installation: Upgraded the base OS image for Dash apps and workspaces from Ubuntu 18 to Ubuntu 22.
System administration/installation: Changed the Keycloak settings to enable OAuth2 Device Authorization Grant by default for the dash client (to better support CLI login).
System administration/installation: Improved the scripts for migrating from Dash Enterprise 4 to Dash Enterprise 5 and related documentation.
System administration/installation: New installations now use Kubernetes version 1.27.
System administration/installation: New installations now use Istio v1.19.0.
System administration/installation: New installations now use KOTS v1.102.0.
System administration/installation: Changed how Cert Manager is bundled in order to allow KOTS to upgrade it alongside other dependencies.
System administration/installation: Upgraded Cert Manager to v1.12.0.
System administration/installation: Upgraded Keycloak to v22.0.0.
System administration/installation: Upgraded Gitea to v1.19.4.
System administration/installation: Upgraded Redpanda to v23.2.8.
System administration/installation: Upgraded Fluent Bit to v2.1.9.
System administration/installation: Upgraded Kpack to v0.12.0.
System administration/installation: Updated the AKS and GKE infrastructure provisioning scripts to disable automatic Kubernetes control plane upgrades.
Breaking change (see note at the top of this changelog) System administration/installation: Changed the configuration of several pods, including app pods, to ensure that they do not run as root.
System administration/installation: Improved DNS, secret, and condition management in system operators.
System administration/installation: Updated the resource status details in the KOTS Admin Console to add the ability to view the Harbor status.
System administration/installation: Enhanced the buildstack status with new conditions for improved accuracy and insights.
System administration/installation: Updated the EKS infrastructure provisioning script to reduce permissions given to the EBS CSI controller.
System administration/installation: Changed installation scripts to be ran with sudo rather than using sudo within the scripts.
System administration/installation: All Installation Plans now contain config files.
Fixed a bug where referencing app environment variables in a requirements.txt file (such as a token for fetching packages) would work when previewing the app in Workspaces but fail on deployment.
Fixed a bug where environment variables added to a project.toml file had no effect when the app was previewed in workspaces.
Fixed a bug where the default pip version was different in Workspaces and in deployed apps. The default pip version is now 21.1.4. in both Workspaces and deployed apps.
Fixed a bug where app co-owners were unable to run git clone in a workspace over HTTPS unless they first deleted the ~/.gitconfig file.
Fixed a bug where the status indicator for services would always display “Offline”.
Fixed a bug where search queries entered in the App Manager would persist after logging out and back in.
Fixed a bug where selecting “Restart Workspace” from the “Workspace Restart Required” message did not correctly restart the workspace.
Fixed a bug where restarting workspaces displayed an incorrect success message “App restart completed”.
Fixed a bug where apps that use Snapshot Engine, when left idle for some time, would sometimes fail to generate a PDF with (psycopg2.OperationalError) server closed the connection unexpectedly.
Fixed a bug where entering a search query in the Portal searchbar would cause the browser Back button to behave unexpectedly.
System administration/installation: Fixed a bug where deleting a user while the user was still logged in would cause the system to recreate the user, and cause the user to receive a “400: A user already exists with that username” error message when trying to use the App Manager.
System administration/installation: Fixed a bug where integrating an Okta SAML IdP could cause apps to be inaccessible due to too many redirects.
System administration/installation: Fixed a bug where upgrading Dash Enterprise would sometimes fail with “The Job keycloak-realm-update is invalid”.
Documentation: Removed “Scalable Remote Computing with Dash, Dask, and Coiled”.
System administration/installation: Removed restore scripts from Installation Plans.
5.1.1-post.1
Fixed a bug where no build logs were available.
Fixed a bug where available Python runtimes corresponded to an earlier version of Dash Enterprise until some resources were rotated.
System administration/installation: Fixed a bug where the Gitea image was missing from the airgap bundle.
System administration/installation: Fixed incorrect image references in the airgap bundle.
System administration/installation: Fixed a bug in the EKS installation script that caused the script to get stuck if configured to use an existing VPC and only a private API endpoint was enabled.
System administration/installation: Fixed missing jq dependency in the AKS installation script (required to configure an HTTP/HTTPS proxy).
System administration/installation: Fixed a bug where sdc was hardcoded as the disk location in the Azure single server infrastructure provisioning script.
System administration/installation: Fixed a bug where Keycloak becoming unavailable would cause user permissions to be lost.
System administration/installation: Fixed a bug where upgrading Dash Enterprise would cause authentication flows defined in Keycloak to be overwritten.
5.1.0-post.1
System administration/installation: Fixed a bug where the Gitea image was missing from the airgap bundle.
System administration/installation: Fixed a bug in the installation script for GKE airgapped that caused the KOTS images to be pushed to the root of the registry.
System administration/installation: Fixed missing jq dependency in the AKS installation script (required to configure an HTTP/HTTPS proxy).
System administration/installation: Fixed a bug where sdc was hardcoded as the disk location in the Azure single server infrastructure provisioning script.
System administration/installation: Fixed a bug where Keycloak becoming unavailable would cause user permissions to be lost.
System administration/installation: Fixed a bug where upgrading Dash Enterprise would cause authentication flows defined in Keycloak to be overwritten.
5.1.0
Documentation: Added new page “Airgapped Multi-node Install on AKS”.
System administration/installation: Added support for multi-node airgapped installs on AKS.
System administration/installation: Added support for single server installs on a GCP VM (Ubuntu).
System administration/installation: Added support for airgapped single server installs on a GCP VM (Ubuntu).
5.1.0-rc.5
JupyerDash library when running Dash apps in Jupyter notebooks.licensed_user and admin roles could not add managed databases to apps that they co-owned.5.1.0-rc.4
Documentation: Added several pages of Dash AG Grid documentation.
Documentation: Added new page Airgapped Single Server Install on a VM.
System administration/installation: Added support for airgapped single server installs on an EC2 instance (Ubuntu).
System administration/installation: Added support for airgapped single server installs on an Azure VM (Ubuntu).
System administration/installation: Added support for single server installs on an Azure VM (Ubuntu).
Documentation: Updated various Dash app code examples to use Dash syntax from more recent Dash versions.
App Catalog: Updated apps to use Dash syntax from more recent Dash versions.
5.1.1-rc
Kubernetes version support change: Dash Enterprise is no longer compatible with Kubernetes 1.24. As part of the Kubernetes upgrade to 1.25, all apps and workspaces will be restarted.
3.11.3, 3.11.2, 3.10.11, 3.10.10, 3.9.16, 3.9.15, 3.8.16, 3.8.15, 3.7.16, 3.7.15.project.toml file that overrides the default Python version will change to Python 3.8.16 when next deployed.licensed_user and admin roles could not add managed databases to apps that they co-owned.3.9.7, 3.9.6, 3.8.12, 3.8.11, 3.7.12, 3.7.11. If you have a deployed app with a project.toml file that specifies one of these versions, the app will still be available after upgrading Dash Enterprise, but redeploying it will fail until you change the Python version to a supported version.5.1.0-rc.3
Istio version support change: Dash Enterprise 5.1.0-rc.3 uses Istio version 1.17.1, which is not automatically changed with Dash Enterprise upgrades.
Documentation: Added new page Single Server Install on Bare Metal.
System administration/installation: Added support for single server installs on bare metal (RHEL, Ubuntu).
System administration/installation: Added support for airgapped single server installs on bare metal (Ubuntu).
5.1.0-rc.2
Documentation: Added new page Airgapped Single Server Install on Bare Metal.
System administration/installation: Added support for airgapped single server installs on bare metal (RHEL).
Documentation: Changed some styling to improve readability.
Documentation: Moved the Dash AG Grid documentation to the Open Source Component Libraries section now that this library is open source.
System administration/installation: Upgraded the Harbor operator to v1.4.0-rc1.
5.1.0-rc.1
Kubernetes version support change: Dash Enterprise is no longer compatible with Kubernetes 1.23. As part of the Kubernetes upgrade to 1.24, all apps and workspaces will be restarted.
KOTS Admin Console version support change: Dash Enterprise 5.1.0-rc.1 uses version 1.91.3 of the KOTS Admin Console, which is not automatically changed with Dash Enterprise upgrades.
Introduced Dash Design Kit v1.8.1 (dash-design-kit==1.8.1):
Added support for upcoming Dash AG Grid v2.0 open-source release.
Updated dash-table and dash-core-components for Dash v2.9.2. This upgrades plotly.js to v2.20.0.
Removed support for Internet Explorer.
Raised the minimum compatible Dash version from v1.0.0 to v1.6.1.
Fixed several CSS leakages into the global scope, including Font Awesome and some HTML body resets.
Introduced Dashboard Engine v1.1.2 (dashboard-engine==1.1.2):
Unpinned numpy and xarray.
Removed package morph.
Upgraded build pipeline and JS dependencies.
Introduced Snapshot Engine v2.2.5 (dash-snapshots==2.2.5):
Fixed installation problems with some versions of setuptools.
Introduced Snapshot Engine v2.2.4 (dash-snapshots==2.2.4):
Fixed error with newer versions of importlib-metadata.
Introduced Dash Embedded v2.7.0 (dash-embedded==2.7.0):
Fixed to allow HEAD requests (from app readiness check) to be GET for DE5 compatibility.
Introduced Dash Embedded Component v2.7.0:
Removed support for Internet Explorer.
Updated dash-renderer to v1.14.3, the version from Dash v2.7.0.
Introduced Dash Enterprise Auth v0.1.1 (dash-enterprise-auth==0.1.1):
Added back user info from Keycloak user info endpoint.
Introduced DatabricksDash v0.1.4:
Fixed display for Databricks version 12.
Removed extra logging message from cell outputs.
Added new badges to indicate app deployment status.
Added the ability for administrators to transfer a user’s apps to a new owner. This feature is available from the Platform and Usage page, by selecting More > Transfer apps next to a user in the Users table.
Added Memory Usage and Limits information on the Platform and Users page that displays total licensed memory, used license memory, and number of nodes in the Kubernetes cluster.
Added a default memory limit feature that allows admins to set a memory limit on all app processes and workspaces that do not have a custom memory limit.
Added a message that appears in the App Info when an app process is stopped because it exceeds its memory limit.
Added an environment variable GUNICORN_CMD_ARG with value --limit-request-field_size=16384 to all apps, which sets the header size limit to 16 KB.
Added an app viewer access policy setting that allows admins to disable the Unauthenticated viewer access option.
Added color and font options in the Branding tab for Portal customization.
Added a warning banner that appears when the Dash Enterprise license is within 5 days of its expiration date. The warning banner is displayed on the Platform and Users page, the Settings page, as well as the apps list (https://<your-dash-enterprise-server>/apps).
Added support for Microsoft Entra ID (formerly Azure AD) integrations that have some users belonging to more than 150 groups.
Documentation: Added new page “Airgapped Multi-node Install on GKE”.
Documentation: Added new page Single Server Install on a VM.
Documentation: Added new page Managing Inactive Users and App Ownership.
Documentation: Added new section “Databricks Integration.”
App Catalog: Added an app demonstrating Dash with databricks-sql-connector.
System administration/installation: Added support for single server installs on an EC2 Ubuntu instance (internet-connected).
System administration/installation: Added support for multi-node airgapped installs on GKE.
System administration/installation: Added HTTP proxy support for internet-connected multi-node and single server installs.
There’s now a limit of 10 on the number of replicas that each app process can have (apps with higher replica counts set in 5.0 will retain those replicas in 5.1, but the max will be 10 upon next edit).
Moved the custom memory limit settings for workspaces and managed databases into the Scale tab of the App Info.
Updated the Scale tab to display memory usage of the app’s combined processes and workspace.
The admin role is now required to set custom memory limits on apps, workspaces, and managed databases.
App processes that exceed their memory limits are now stopped instead of restarted.
Renamed the Users page to Platform and Users.
Updated the License Seats information on the Platform and Users page to display license name, license expiration date, and number of remaining license seats.
Users can now see their roles when they select their username.
Updated the Personal Settings to add User Profile information that displays username, roles, groups, and user creation date.
User permission changes caused by directly editing user role mappings now take effect within a few seconds instead of the next time the user logs into Dash Enterprise.
User permission changes caused by users joining or leaving a Keycloak-native group or LDAP group that has role mappings now take effect after the user refreshes Dash Enterprise instead of the next time the user logs into Dash Enterprise.
Updated the App Manager to display an error message when a user has the licensed_user role but no license seats were available to allocate to the user. The message is displayed to the affected user as well as to admins on the Platform and Users page.
Disabled autosave in workspaces to prevent development apps from going into a restart loop.
App Catalog: Updated apps to use Dash Embedded v2.7.0, Dash Embedded Component v2.7.0, Snapshot Engine v2.2.5, Dash Design Kit v1.8.1 and Dash v2.9.3.
Documentation: Updated the Memory Limits page with information about licensed memory, viewing memory usage, and admin-configured memory limits.
Documentation: Renamed the “App Replicas” page to Scaling Your App and added information about memory usage.
Documentation: Renamed the “DE4 to DE5 App Migration” page to DE4 to DE5 Migration and added automated migration scripts content.
System administration/installation: New installations now use Kubernetes version 1.24 (EKS), 1.24.9 (AKS), and 1.24.10-gke.2300 (GKE). Kubernetes version 1.23 has reached end of life and is no longer supported.
System administration/installation: Changed the way Plotly collects data for support and licensing. Instead of the data being collected by Replicated on behalf of Plotly, Plotly now collects it directly.
System administration/installation: Changed the scripts for internet-connected installations on EKS, AKS, and GKE to allow optionally specifying an existing VPC/VNet and related network settings.
System administration/installation: Changed the default behavior for node networking in EKS multi-node installations. When the infrastructure provisioning script creates the VPC, the nodes are created on private subnets instead of public ones.
System administration/installation: Calico is now installed via Helm in the Dash Enterprise installation and restore scripts for EKS.
System administration/installation: Upgraded Keycloak to v19.0.3.
System administration/installation: Upgraded Kpack to v.0.9.1.
System administration/installation: Upgraded Redpanda to v22.3.9.
System administration/installation: Upgraded Fluent Bit to v2.0.6.
System administration/installation: Upgraded Ingress NGINX Controller to v1.7.0.
Fixed a bug that prevented zero-downtime app deployments.
Fixed a bug where users with both the licensed_user and admin roles could add managed databases to an app that they did not own or co-own.
Fixed a bug where users with both the licensed_user and admin roles could not run Git commands against apps that they did not own or co-own over SSH.
Fixed a bug where app co-owners could not start and stop processes.
Fixed a bug where pressing Save multiple times when adding an SSH key would sometimes list the key more than once.
Fixed a bug where changing the page and page size in the App Manager would sometimes show an empty list.
Fixed a bug where the persistent filesystem setting sometimes didn’t correctly enable/disable the mount folder in Workspaces.
App Catalog: Fixed a bug where the “Snapshots Clinical Trial App & Report” app was showing incorrect links in the email sent by the app.
5.0.0
Documentation: Added new page “Multi-node Install on EKS”.
Documentation: Added new page “Multi-node Install on AKS”.
Documentation: Added new page “Multi-node Install on GKE”.
App co-owners can now make changes to app memory limit and replicas.
Documentation: Updated the Troubleshooting Deployment Errors page with DE5-specific information.
Documentation: Updated the Continuous Integration page with DE5-specific information.
System administration/installation: Upgraded Istio to v1.13.3.
System administration/installation: Upgraded Cert Manager to v1.9.1.
Removed disk storage setting for managed Redis and Postgres databases that had no effect.
Documentation: Removed the “Review Apps” page, which contained DE4-specific information.
5.0.0-RC1
Introduced Dash Design Kit v1.7.0 (dash-design-kit==1.7.0):
Added support for dash-bootstrap-components v1.x and bootstrap v5.x.
Added support for dash-daq v0.5.0.
Updated dash-table and dash-core-components for Dash 2.6.2. This brings Graph improvements including built-in MathJax rendering of LaTeX-format math expressions, and upgrades plotly.js to v2.13.3, as well as various bug fixes in both Graph and DataTable.
Dropped Python 2 support.
Introduced Snapshot Engine v2.2.3 (dash-snapshots==2.2.3):
Fixed PDF generation in workspaces.
Introduced Snapshot Engine v2.2.2 (dash-snapshots==2.2.2):
Fixed unexpected keyword argument attachment_filename when serving PDFs.
Added a new app initialization method, “Use the App Catalog”, to get started with an app from the App Catalog and open its files in a workspace.
Added workspace logs in the Workspaces tab of the App Info. Workspace logs are available to app owners and administrators.
Added configurable memory limits for apps in the Scale tab of the App Info. Memory limit configuration is available to app owners and administrators.
Added configurable app replicas in the Scale tab of the App Info. Replica configuration is available to app owners and administrators.
Added configurable memory limits for managed Redis and Postgres databases. Memory limit configuration is available to app owners, co-owners, and administrators.
Added configurable disk storage for managed Redis and Postgres databases. Disk storage configuration is available to app owners, co-owners, and administrators.
Added configurable memory limits for workspaces. Workspace memory limit configuration is available to app owners and administrators.
Added a setting to enable and disable the persistent filesystem for an app in the Persistent Filesystem tab of the App Info. This setting is available to app owners, co-owners, and administrators.
Added “Starting” and “Build Queued” statuses for app builds.
Added a Portal Access setting in Customize Portal where administrators can require login to view the Portal. By default, the Portal does not require login.
App Catalog: Added several apps demonstrating Dash Embedded, Snapshot Engine, Dask, Jupyter, databases, and more.
Documentation: Added new page Memory Limits.
Documentation: Added new page App Replicas.
Documentation: Added new page Backing Up and Restoring Dash Enterprise.
System administration/installation: Added support for backing up and restoring Dash Enterprise using Velero.
System administration/installation: Added resource reservation via kubeletExtraConfig in the EKS install script in order to safeguard the nodes against unbalanced pod scheduling.
System administration/installation: Added restore.sh scripts to Installation Plans. restore.sh provisions a new cluster intended for restoring a backed up instance of Dash Enterprise on it.
System administration/installation: Enabled cluster-level logging in the EKS infrastructure provisioning script (accessible via Amazon CloudWatch).
Changed the SSH Public Keys list to no longer display the keys that are generated automatically on workspace creation.
Improved app logs in the App Manager by injecting a log message indicating when new deployments have started.
App logs older than 7 days are no longer available in the App Manager.
App logs are limited to 5000 lines in the App Manager.
Organized the Portal Customization settings under tabs.
Updated the white labelling setting to hide links in the Portal that go to the App Manager when turned on.
Renamed the white labelling setting to “Hide Plotly branding and App Manager links”.
Decreased the app thumbnail size limit to 100 KB.
Improved the error message displayed when an uploaded app thumbnail is too large.
Initializing an app no longer creates a persistent filesystem by default.
Increased the persistent filesystem storage limit from 5 GB to 25 GB.
App and workspaces (if any) must be restarted in order to save changes to environment variables, the persistent filesystem, or when adding or deleting managed Redis and Postgres databases.
Changed workspace creation to be temporarily unavailable while another workspace is deleting.
Reduced the time it takes for app viewer access and co-owner changes to propagate. These changes now take effect in about 30 seconds.
Changed the error message displayed when a user tries to access an app they don’t have access to from 403 Forbidden to a more helpful 404 with recommended actions.
App Catalog: Updated apps to use Dash Design Kit version v1.7.0.
App Catalog: Updated apps to use Snapshot Engine version v2.2.3.
Documentation: Updated documentation to use Dash Design Kit version v1.7.0, Snapshot Engine version v2.2.3, and Dash Embedded v.2.6.0.
Documentation: Updated the Portal page with DE5-specific information.
Documentation: Moved Dash User Analytics documentation from the App Catalog app to its own section.
System administration/installation: Increased size of large-header-client-buffers to allow for 16k headers, resolving issues with large headers when SAML is enabled.
System administration/installation: Split the infrastructure provisioning portion of the installation script into its own script.
System administration/installation: Pinned the versions of several tools installed by the infrastructure provisioning and installation scripts.
System administration/installation: Upgraded the Kubernetes version to v1.23.
System administration/installation: Set max-pod to 250 in the AKS infrastructure provisioning script.
System administration/installation: Reduced the memory requests that the core system makes.
Fixed a bug where users with the admin and licensed_user roles could not clone a co-owned app over SSH.
Fixed a bug where users with the licensed_user role only were able to see SSH public keys added by other users (administrators can still see all SSH public keys added to Dash Enterprise).
Fixed a bug where the menu for giving app co-ownership or viewer access to groups would display an extra child group if the administrator had chosen to nest groups. For example, Dash Enterprise displayed both “parentgroup/childgroupA” and “childgroupA”. The latter had no effect if used.
Fixed a bug where a user with a license seat would encounter an error when initializing apps if their username was set to “admin”.
Fixed a bug where it was possible to update environment variables before a workspace was finished deploying, resulting in an empty workspace.
Fixed a bug where Dash apps with their viewer access level set to Unauthenticated and Visible in Portal set to Yes were not visible in the Portal.
Fixed a bug where Dash apps with their viewer access level set to Authenticated and Visible in Portal set to Yes were visible in the Portal to unauthenticated users.
Fixed a bug where changes in the Customize Portal modal that were cancelled would remain the next time the modal was opened.
Fixed a bug where Source control: Git in workspaces would display “No repository found” instead of the files changed.
Fixed a bug where deleting apps that had managed Redis or Postgres databases or workspaces did not delete the pods and volumes for those databases or workspaces from the Kubernetes cluster.
Fixed a bug where a workspace created off a commit of a deployed Conda app would display a prompt to choose a Python interpreter.
Fixed a bug where Dash apps using the rpy2 package would fail to deploy.
Removed the Status column in the Dash Enterprise Users table that displayed “Active” for all users regardless of activity.
Documentation: Removed the “Analytics” page, which contained DE4-specific information.
5.0.0-LA4
Added support for Snapshot Engine by introducing v2.2.1 (dash-snapshots==2.2.1):
Fixed relative path for serving PDFs with Dash Enterprise 5.
Introduced Dashboard Engine v1.1.1 (dashboard-engine==1.1.1):
Fixed performance for dataframes that contain columns with a datetime type.
Pinned xarray version to resolve incompatibility with numpy.
Introduced Dash Enterprise Auth v0.1.0 (dash-enterprise-auth==0.1.0):
Added style argument to create_logout_button.
Changed the logout button creation to use a raw html.A if on Dash Enterprise 5.
Added a persistent filesystem feature. The persistent filesystem is created upon first app deployment or workspace creation and is shared between the app and workspace.
Added admin-configurable pod and PVC limits that prevent users from creating new apps, services, or workspaces when those limits are reached.
Added a “Nearing System Limits” warning at the top of the App Manager when the pod or PVC count is close to reaching the admin-set limits.
Added PIP_EXTRA_INDEX_URL and PIP_TRUSTED_HOST environment variables to Workspaces.
Added support for Conda in Workspaces.
App Catalog: Added new app “Managing Dependencies with Conda” that demonstrates how to install packages with Conda instead of pip.
App Catalog: Added new app “Accessing an App Viewer’s Username” that uses dash-enterprise-auth.
App Catalog: Added new app “Oracle App” that demonstrates how to make SQL queries to an Oracle XE database.
Documentation: Added new page Persistent Filesystem.
Documentation: Added new page Pod and Volume Limits.
Documentation: Added new page “Connecting to Your Kubernetes Cluster”.
Documentation: Added new page “Examining Your Kubernetes Cluster with Lens”
Documentation: Added new page Upgrading Dash Enterprise.
Documentation: Added new page Developing Apps when Dash Enterprise Is Internet-Restricted.
Documentation: Added new page DE4 to DE5 Migration.
System administration/installation: Added support for installing on Google Cloud GKE standard (Kubernetes version 1.21), including the option to install airgapped (Beta).
System administration/installation: Added support for internal load balancers.
System administration/installation: Added DUO and ADFS identity providers to the Keycloak IdP wizard.
System administration/installation: Added aggregated logs to the support bundle.
System administration/installation: Added more status fields for DashEnterprise, Buildstack, and Appstack custom resources.
Changed the default viewer access level on new Dash apps to Restricted.
Improved app initialization to display an error message and prevent initialization if an invalid character is entered in the app name.
Improved the error message that appears during app initialization when the pod or PVC limit is reached.
Made searching for users and groups more intuitive and improved filtering.
App Catalog: Updated some apps that still used DE4 files and package versions.
Documentation: Updated Dash AG Grid examples to run when Dash Enterprise is airgapped.
Documentation: Updated the Deploy Dash Apps to Dash Enterprise page with DE5-specific information.
Documentation: Updated the procedure for generating a support bundle on the Support page.
Documentation: Updated the App Structure, Buildpacks, and Deployment Lifecycle page with DE5-specific information.
Documentation: Updated the Dash App Authentication page with details on package changes.
Documentation: Updated Workspaces content, adding new Jupyter screenshots and content.
Documentation: Updated logo and favicon.
System administration/installation: Simplified configuration during initial installation.
System administration/installation: Amalgamated all core system databases to a single Postgres instance.
Fixed a bug where app co-owners were unable to deploy changes over SSH.
Fixed a bug where predeploy scripts in Dash apps were not executed.
Fixed a bug where opening a workspace would sometimes fail with “redirected too many times”.
Fixed a bug where manually installing APT packages in an empty workspace would not work.
Fixed a bug where removing a thumbnail from an app did not correctly remove it from the Settings page.
Fixed a bug where editing the portal title, description, or white labelling option was not possible unless the logo was also edited.
Removed the deprecated co_owner role from Keycloak. App owners can manage co-owners from the App Manager.
Documentation: Removed footer, ads, and coding language menu.