Versions Compared

Version Old Version 2 New Version 3
Changes made by

Raido Kaju

Petteri Kivimäki

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

#

Item

Notes

1

Summary of development activities

Summary of ongoing development activities.

2

X-Road 8 status update

3

Open topics

Discussion on open topics.

4

X-Road and X-Road Metrics hotfixes

In X-Road version 7.6.0, support for including the restPath variable in operational monitoring (opmon) data was introduced. While this feature anonymized REST paths based on OpenAPI definitions, it posed a risk of leaking information when:

  • A REST service was not defined by an OpenAPI definition.

  • An undocumented path was used.

To mitigate this risk, we decided to take the following action:

  1. Temporary Disablement

    • A hotfix for X-Road Metrics was released to temporarily disablerestPathinclusion in operational monitoring data.

  2. Upcoming X-Road Hotfix

    • A second hotfix will be released for X-Road with the following changes:

      • Filtering Support: The X-Road version will be included in opmon data to allow version-based filtering.

      • Controlled Path Inclusion: The restPath will be included only if:

        • It is explicitly defined in an OpenAPI definition.

        • It belongs to a non-OpenAPI service and is listed in the endpoints list.

        • In both cases, the path will be anonymized according to the definition.

      • Consumer-Side Restriction: The restPath will never be included in opmon data on the consumer side, as it lacks knowledge of paths and endpoints.

  3. Metrics Update for Safe Handling

    • A new X-Road Metrics version will be released that will determine if restPath can be safely included by checking the X-Road version.

4

Open topics

Discussion on open topics.


Next meetings

  • Meeting 33, April 15 2025, 15:00-16:00 (EEST, UTC+3)

  • Meeting 34, May 15 2025, 15:00-16:00 (EEST, UTC+3)

  • Meeting 35, June 18 2025, 15:00-16:00 (EEST, UTC+3)

  • Meeting 36, August 20 2025, 15:00-16:00 (EEST, UTC+3)

  • Meeting 37, September 17 2025, 15:00-16:00 (EEST, UTC+3)

  • Meeting 38, October 22 2025, 15:00-16:00 (EEST, UTC+3)

  • Meeting 39, November 19 2025, 15:00-16:00 (EET, UTC+2)

  • Meeting 40, December 17 2025, 15:00-16:00 (EET, UTC+2)

  • Meeting 41, January 21 2026, 15:00-16:00 (EET, UTC+2)

  • Meeting 42, February 18 2026, 15:00-16:00 (EET, UTC+2)

  • Meeting 43, March 18 2026, 15:00-16:00 (EET, UTC+2)