25.06.002 changelog

25.06.002

Released on 17 June, 2025.

Server

Fixes

  • In order to prevent a potentially ambiguous boot-up sequence: The configuration file /etc/bowtie-service.d/document-id.conf is specified as the preferred location for the BOWTIE_DOCUMENT_ID parameter.
  • Fixed an issue with Incus images failing to boot by including EFI-enabled disk images.

Features

  • Single sign-on (SSO) files may now be managed via the control plane web interface.
  • Controller host load metrics are now included in support bundles.
  • A new Grafana dashboard now ships with default Controller installations that visualizes access policy queue metrics.
  • Marked Controllers images on GCP as GVNIC compatible.
  • Controller support bundles now include limited certificate information as well as sanitized cluster membership information.

Client

Fixes

  • When the external IP address of a Bowtie controller is within the range of a local non-default non-Bowtie network previous versions of the Bowtie client had trouble accessing that controller. This has been fixed.
  • Connections over https tunnels now work better across network changes.
  • Linux: fixed a bug in the network status indicator where disabled interfaces were not being properly ignored.
  • Set the client status to “Initializing” if the block list is not loaded yet. Empty block lists are now handled correctly.
  • In prior versions, if your authorization timed out you may not be able to access the login page without authorization.

Meta Control Plane

Fixes

  • wget and curl download commands now wrap URLs in quotes to avoid breaking interactions with user shells.