Skip to main content

Release 0.5.10 — Okta Directory Sync, Slack Slash-Command Prefix, and UI Improvements

Sri Aradhyula
Sri Aradhyula

Released: 2026-06-08 Chart: oci://ghcr.io/cnoe-io/charts/ai-platform-engineering:0.5.10 Previous release: 0.5.9

Highlights​

0.5.10 ships Okta directory sync using the Okta SDK with JIT provisioning and an admin UI for managing sync rules, derives Slack slash-command prefix from APP_NAME so multi-tenant installs can namespace commands, adds dynamic nav overflow and a compact right-cluster header, and makes config-driven agent panels expandable.

What's New​

Identity / RBAC​

  • Okta directory sync — full Okta SDK-based group sync with JIT provisioning: users are created on first group-sync run, memberships are kept current, and the IdP-sync admin UI lets operators map Okta groups to CAIPE teams with live preview (#1783)
  • Admin RBAC fixes — several admin role-check edge cases fixed alongside the Okta sync work (#1783)

Slack​

  • Slash-command prefix from APP_NAME — the bot derives its slash-command prefix from APP_NAME instead of a hardcoded /caipe, so multi-tenant or custom-branded installs route commands correctly (#1785)
  • DM-only enforcement on all commands — all slash commands now enforce DM-only delivery consistently (#1785)

UI​

  • Dynamic nav overflow — the top navigation bar handles overflow gracefully with a collapsible menu on narrow viewports (#1777)
  • Compact right cluster — the header right-side controls (user menu, notifications) are compacted for more content space (#1777)
  • Screenshot in report dialog — the feedback/report dialog now includes an optional screenshot attachment (#1777)
  • Expandable config-driven agent panels — config-driven agent sidebar panels are now expandable so long agent descriptions are visible without truncation

CI / Release​

  • release-prerelease.yml — new workflow for coordinated release-candidate builds that bumps version files before tagging
  • Self-healing retag walk-back — all container build workflows now include the self-healing retag logic to recover from transient registry failures

Bug Fixes​

  • docs: escape MDX JSX brace sets in the FGA module-api spec that caused the Docusaurus build to fail
  • ci: restore build_all input name in A2A/MCP sub-agent workflows

Breaking Changes​

Slack: slash-command prefix​

If you have Slack automations or user documentation referencing /caipe commands, update them to match your APP_NAME setting. The default (APP_NAME=caipe) produces the same /caipe prefix, so most installs are unaffected.

Upgrade​

helm upgrade ai-platform-engineering \
  oci://ghcr.io/cnoe-io/charts/ai-platform-engineering \
  --version 0.5.10 \
  -f your-values.yaml

Upgrade Guide: 0.5.9 → 0.5.10​

Okta directory sync (optional)​

To enable Okta group sync, add to your values:

idpSync:
  okta:
    enabled: true
    domain: your-org.okta.com
    existingSecret: okta-api-token-secret  # key: token

Then configure sync rules in Admin → Identity Group Sync → Okta.

Slack slash-command prefix​

No action needed if APP_NAME is unset or equals caipe. If APP_NAME is a custom value, update any Slack workflow automations that hardcoded /caipe.

No data migrations required​

No MongoDB schema migrations are required for this upgrade.