RisingWave Console release notes

​

SQL TLS support

• Adds shared PostgreSQL connection configuration across Console SQL paths.
• Adds per-cluster SQL TLS modes with system trust or inline CA bundles.
• Supports TLS for imported and Console-managed clusters, including a managed-cluster hotfix.
• Applies the selected cluster’s TLS settings to both SQL Editor and background queries.

​

Docker images

• Standard image (v0.7.9)
• Bundled PostgreSQL (v0.7.9-pgbundle)
• Air-gapped image (airgap-v0.7.9)
• Air-gapped image with bundled PostgreSQL (airgap-v0.7.9-pgbundle)

​

SQL TLS support

• Adds shared PostgreSQL connection configuration across Console SQL paths.
• Adds per-cluster SQL TLS modes, including certificate and hostname verification.
• Supports system trust and inline CA bundles for on-premises deployments.
• Applies the selected cluster’s TLS settings to both SQL Editor and background queries.

​

Docker images

• Standard image (v0.7.8)
• Bundled PostgreSQL (v0.7.8-pgbundle)
• Air-gapped image (airgap-v0.7.8)
• Air-gapped image with bundled PostgreSQL (airgap-v0.7.8-pgbundle)

​

Security headers

• Adds application-managed HTTP security response headers to Console HTML, API, authentication, static, and error responses.
• Adds baseline-v1 and strict-v1 security profiles, optional HSTS, and validated organization-specific headers.
• Supports strict cross-origin isolation headers for enterprise deployments.

​

Docker images

• Standard image (v0.7.7)
• Bundled PostgreSQL (v0.7.7-pgbundle)
• Air-gapped image (airgap-v0.7.7)
• Air-gapped image with bundled PostgreSQL (airgap-v0.7.7-pgbundle)

​

Role-based access control and deployment fixes

• Adds server-side enforcement and UI controls for admin, operator, and viewer roles.
• Adds user-role storage and restores a soft-deleted user when the same user name is created again.
• Fixes discovery of externally managed cert-manager installations, including installations in cert-manager-system. Console receives read-only discovery permissions and does not manage the external installation.
• Limits React Query garbage-collection time to five minutes.

​

Docker images

• Standard image (v0.7.6)
• Bundled PostgreSQL (v0.7.6-pgbundle)
• Air-gapped image (airgap-v0.7.6)
• Air-gapped image with bundled PostgreSQL (airgap-v0.7.6-pgbundle)

​

Cluster management and reliability

• Supports custom RisingWave version tags when creating a cluster.
• Improves license-expiration handling with degraded startup, pre-expiry warnings, an ungated status endpoint, and a recovery flow.
• Improves the object-store WARP benchmark with Hummock metrics, baselines, and UI updates.
• Tolerates transient Grafana dashboard and GitHub release lookup failures.
• Fixes large-cookie handling and embeds the release version correctly in built binaries.

​

Docker images

• Standard image (v0.7.5)
• Bundled PostgreSQL (v0.7.5-pgbundle)
• Air-gapped image (airgap-v0.7.5)

​

SSO deployment and user administration

• Adds complete SSO error handling and a server-side session revocation flow.
• Adds local-user administration for listing users, creating users, resetting passwords, and deleting users.
• Adds one-command SSO development and Kubernetes deployment overlays for external PostgreSQL and bundled PostgreSQL installations.
• Adds a Dex sidecar, automatic OIDC client registration, and reverse proxying of Dex endpoints.

​

Docker images

• Standard image (v0.7.4)
• Bundled PostgreSQL (v0.7.4-pgbundle)

​

SSO administration and SQL Editor

• Adds local-user API endpoints and UI scaffolding.
• Adds Dex connector administration, browser-based SSO login, connector-secret redaction, and the SSO administration UI.
• Adds schema search path support to SQL Editor.

​

Docker images

• Standard image (v0.7.3)
• Bundled PostgreSQL (v0.7.3-pgbundle)

​

Docker images

• Standard image (v0.7.2)
• Bundled PostgreSQL (v0.7.2-pgbundle)

​

SSO and license management

• Adds the SSO login flow and Dex sidecar foundation.
• Adds RisingWave license-key management and SQL Editor UX improvements.
• Release images require a signed RisingWave license key with the premium feature at startup.

​

Docker images

• Standard image (v0.7.1)
• Bundled PostgreSQL (v0.7.1-pgbundle)

​

Kubernetes connectivity and UI redesign

• Supports a full Kubernetes service address for cross-namespace Meta access.
• Supports insecureSkipVerify for Prometheus metric stores.
• Allows reconnecting a cluster whose previous record was soft-deleted.
• Redesigns the Console and login page, and restructures deployment assets and user guides.

​

Docker images

• Standard image (0.6.3-p1)
• Bundled PostgreSQL (0.6.3-p1-pgbundle)

​

Registry and session fixes

• Adds private Docker registry configuration to the Settings page.
• Restores a stored session when refresh-token renewal fails.
• Adds the Settings entry to the sidebar.

​

Kubernetes and air-gapped deployment

• Adds Kubernetes cluster connections and refreshes web authentication state management.
• Runs Console containers as a non-root user and removes local build paths from binaries.
• Improves air-gapped deployment readiness, including pre-fetching risectl and private-registry support.
• Adds automated Docker image builds and bundled-PostgreSQL images.
• Adds correctness and hardening fixes for organization scoping, backups, endpoint validation, SQL requests, and Grafana status.

​

Console-Lite basics

• Importing and viewing existing RisingWave clusters.
• Running risectl commands, viewing snapshots, and collecting diagnostics for connected clusters.
• Connecting to databases and running queries in SQL Console.

​

Docker images

• Standard image (v0.5.1)
• Bundled PostgreSQL for amd64 (v0.5.1-pgbundle)
• Bundled PostgreSQL for ARM64 (0.5.1-pgbundle-arm64)