Apr 21, 2026 · @lava, @gitryder
Workspace management has been enhanced with new capabilities for administrators. You can now rename workspaces directly from the workspace settings, and the Users tab now provides a unified interface for managing workspace access. Administrators can view all users with access to a workspace in a single table and easily change user roles between member and admin roles using dropdown controls.
Apr 21, 2026 · @lava, @gitryder
The Tenzir Platform now supports organizations, giving teams a shared home for collaborating across workspaces. Organization admins can invite members, assign admin or member roles, and manage which workspaces belong to the organization. Members get access to all workspaces owned by the organization and can leave from their user settings at any time.
Learn more in the organization management guide.
]]>Apr 7, 2026 · @gitryder
We added thousands separators to numeric values in the pipeline Insights tab, making large numbers easier to read at a glance.
Apr 7, 2026 · @gitryder
We fixed an issue where the pipeline table stayed filtered after viewing a pipeline's detail page and navigating away to another tab. Returning to the Pipelines page would show only the previously viewed pipeline, and clearing the search had no effect.
]]>Mar 27, 2026 · @gitryder
You can now choose which fields are visible in the Explorer's table view. When you select a schema in the sidebar, its fields are listed below. Click a field to hide its column from the table. Shift+click a field to show only that field. A "fields hidden" indicator in the table header lets you clear all hidden fields at once. Field selections are remembered per schema and reset when you run a new pipeline.
Mar 26, 2026 · @gitryder
You can now filter events in the Stream view by clicking schemas in the sidebar. The schemas panel shows color-coded dots matching each schema's badge color, and selecting one or more schemas limits the view to only those events. Same-name schema variants are merged into a single entry in the sidebar for easier navigation.
Mar 26, 2026 · @gitryder
We added a new Stream view to the Explorer that shows all pipeline results as a continuous list of expandable events. You can switch between the Table, Chart, and Stream views using the view selector in the toolbar. The Stream view displays events from all schemas together, with color-coded badges to distinguish between them. Each row shows a one-line preview that you can expand to inspect the full event. The view remembers your selection across pipeline runs, and the event list scrolls horizontally as a whole, with schema badges staying pinned on the left.
Mar 13, 2026 · @gitryder
You can now sort the Explorer table by clicking column headers. Sortable columns show a sort indicator, and clicking cycles through ascending, descending, and unsorted states. Sorting works for both top-level and nested fields.
Mar 12, 2026 · @gitryder
You can now click on field names and values in the Explorer inspector to copy them to the clipboard. Field names copy the full dot-separated path, and values copy their TQL representation.
Mar 12, 2026 · @gitryder
You can now select a time range directly from the Explorer header. Choose from quick presets like 5 minutes or 12 hours, or open the custom popover to pick from a grid of relative durations or set an absolute date range. The selector is currently available for pipelines that start with the export operator.
Mar 12, 2026 · @gitryder
We combined the 'About' and 'Install' tabs in the package detail drawer into a single scrollable view. Package information, examples, and configuration options are now shown on one page instead of requiring tab switches.
Mar 24, 2026 · @gitryder
We fixed an issue where custom packages installed on a node were not visible in the library view. Previously, only packages from the official Tenzir library were shown. Custom packages are now included alongside library packages.
Mar 24, 2026 · @gitryder
We fixed a bug where operator description text on the package detail page appeared rotated 90 degrees, overlapping other content.
Mar 17, 2026 · @gitryder
Packages containing user-defined operators can again be installed through the platform. Previously, installing such packages failed because the operator arguments were serialized incorrectly. This only affected installs through the platform UI—command-line package installs were not impacted.
]]>Mar 12, 2026 · @lava
We upgraded Python dependencies and added system-level package upgrades to the Docker images to address known vulnerabilities.
Mar 11, 2026 · @realllydan
We fixed an issue where switching away from a pipeline that has the Insights tab available to one that does not could leave the tab selection in an invalid state.
]]>Mar 10, 2026 · @lava
The app container now supports a PRIVATE_WEBSOCKET_GATEWAY_ENDPOINT environment variable that overrides the existing PUBLIC_WEBSOCKET_GATEWAY_ENDPOINT for calls in the app backend. This allows configuring different endpoints when the frontend and backend live in different networks.
Mar 10, 2026 · @realllydan
The pipeline detail modal now includes an experimental Insights tab that visualizes per-operator backpressure, helping users identify bottlenecks in their pipelines. This tab is only available for pipelines running on the experimental new executor.
Mar 10, 2026 · @lava
We fixed an issue where ephemeral nodes were causing the frontend to fail to render or be displayed with incorrect connection status.
]]>Mar 5, 2026 · @lava
When you click a deep link in Tenzir Platform but aren't logged in, you're now redirected to your original destination after signing in, instead of landing on the home page.
Feb 18, 2026 · @gitryder
We improved how the nodes list loads, making dependent views feel faster and more responsive across the platform.
Feb 27, 2026 · @gitryder
We fixed an issue where profile images from Gravatar and Microsoft accounts were blocked by the content security policy, causing broken or missing avatars.
Feb 27, 2026 · @gitryder
We fixed an issue where the diagnostics pane could show diagnostics from a different pipeline than the one currently open in the detail modal.
Feb 18, 2026 · @gitryder
We fixed an issue where the context list could appear in a random order when no search was active, causing items to jump around. The list now uses a stable alphabetical order so it stays consistent and easier to interact with.
Feb 18, 2026 · @gitryder
We fixed an issue where opening a pipeline link for a workspace you don’t have access to would log you out. You are now redirected to the access page where you can open the link in your default workspace.
]]>Feb 18, 2026 · @gitryder
We improved the clarity and usability of Explorer charts. Legends are now collapsible, easier to read, and support filtering series directly. Pie chart legends adapt better to available space, and tooltips provide clearer information.
We also expanded the chart color palette for better visual distinction between series, fixed bar chart x-axis labels overlapping when there are many data points, and refined chart layout and behavior for a smoother overall experience.
Feb 18, 2026 · @gitryder
Resolved an issue where your Google profile picture did not appear in the workspace switcher. The image now loads and displays correctly.
Feb 17, 2026 · @lava
Fixed a bug where the static workspace synchronization used stale loop variables during cleanup, causing stale workspaces to persist and the last configured workspace to be incorrectly deleted.
Feb 17, 2026 · @gitryder
We fixed an issue where pressing ESC to close a pipeline detail view caused the pipeline list to stop responding to clicks.
]]>Feb 17, 2026 · @gitryder
We updated the Platform's underlying framework dependencies to include their latest security fixes.
]]>Feb 10, 2026 · @lava
We upgraded pnpm to 9.15.0 in the frontend Docker image to address CVE-2024-53866.
]]>You can now click on the Ingress or Egress legend item to isolate that series in the activity chart. Clicking again shows both series, making it easier to analyze each metric when lines overlap.
Feb 6, 2026 · @gitryder
We added a toggle in the Explorer table Inspector that lets you wrap lines for easier reading.
We now display the current platform version at the bottom of the workspace switcher dropdown,️ making it easier to always see which version you’re on.
Jan 28, 2026 · @gitryder · #38
We added sorting for the Live Activity column in the pipelines table, so you can easily order pipelines by their activity level.
Jan 28, 2026 · @gitryder · #29
We unified the Available and Installed library tabs into a single view, so you can see which packages are installed without switching tabs. You can also uninstall packages directly from the same page.
Feb 9, 2026 · @lava
We fixed a bug in the Inspector where strings containing backslashes were not displayed correctly. Backslashes were not being escaped in TQL string rendering. For example, a string like Hello \World\ was previously rendered as "Hello \World\" instead of "Hello \\World\\". The fix ensures backslashes are properly escaped when displayed.
We fixed an issue where the workspace switcher dropdown did not open on the pipeline detail page.
Fixed a bug that could leave users with a stale user key in their session, causing authentication failures. The platform now proactively checks for expired user keys and refreshes them automatically.
]]>Jan 22, 2026 · @lava
The platform frontend now supports configurable response headers and Content Security Policy (CSP) for standalone deployments.
Set TENZIR_PLATFORM_UI_ENABLE_RESPONSE_HEADERS_DEFAULT=true to enable default security headers (X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, Cross-Origin-Opener-Policy, Cross-Origin-Resource-Policy). Use TENZIR_PLATFORM_UI_RESPONSE_HEADERS_DEFAULT with a JSON object to override with custom headers.
Set TENZIR_PLATFORM_UI_ENABLE_RESPONSE_HEADERS_HSTS=true to enable HTTP Strict Transport Security for HTTPS deployments.
Set TENZIR_PLATFORM_UI_ENABLE_RESPONSE_HEADERS_CSP=true to enable Content Security Policy, which helps prevent XSS and other injection attacks.
Jan 21, 2026 · @gitryder · #19
We improved how pipeline details load, making the view faster than before when navigating between pipelines. We also added a close button next to the overflow menu on the right so you can quickly exit a pipeline while browsing pipeline details.
Jan 20, 2026 · @lava
Authentication tokens (idToken and userKey) are now stored in the server-side session database instead of browser cookies. This improves security by keeping sensitive tokens accessible only via the session cookie identifier, preventing direct client-side access to authentication credentials.
Jan 19, 2026 · @lava
The seaweed S3 storage component now supports an optional Caddy reverse proxy that improves S3 error handling. Set TENZIR_ENABLE_CADDY=true to enable it. The reverse proxy intercepts 404 responses and returns proper S3-style error messages.
Jan 21, 2026 · @gitryder · #37
We now hide technical error details in error messages. You can click "Show error details" to expand them anytime, and use the copy button to share with support.
Jan 26, 2026 · @lava
Fixed a potential infinite hang in the Tenzir UI that could be triggered by a rare race condition where the Tenzir Node returned duplicate pipeline ids.
Jan 21, 2026 · @gitryder · #19
We fixed an issue where deleting a pipeline could cause the interface to become unresponsive.
]]>You can now use HashiCorp Vault as an external secret store for your workspaces. The integration supports token and AppRole authentication methods, and works with the KV v2 secrets engine. Add a Vault secret store via the CLI:
tenzir-platform secret store add vault \
--address=https://vault.example.com \
--mount=secret \
--token=<token>
Or with AppRole authentication (recommended for production):
tenzir-platform secret store add vault \
--address=https://vault.example.com \
--mount=secret \
--role-id=<id> --secret-id=<id>
The --mount option specifies the path to a KV v2 secrets engine. For Vault
Enterprise, use --namespace to specify the namespace. Vault secrets are
returned as JSON by default. Append a :key suffix to retrieve a specific field
as a string, for example, secret("database:password").
Dec 22, 2025 · @lava
When using a Sovereign Edition instance of the Tenzir Platform with a custom Tenzir Gateway URL, the "Other" tab now displays the gateway endpoint for easy copying.
]]>Dec 16, 2025 · @lava
We switched the docker images used by our example setups from one combined tenzir/platform image for both the Tenzir Platform API and the Tenzir Gateway to use separate images tenzir/platform-api and tenzir/platform-gateway.
⚠️ NOTE: We continue building and uploading the combined tenzir/platform image, although we recommend switching to the new images. Due to an internal CI issue, for versions v1.24.0 and v1.25.0 it is necessary to change the configured command from tenant_manager/* to platform_api/*, for example tenant_manager/rest/server/local.py becomes platform_api/rest/server/local.py. We recommend skipping these versions if possible.
Dec 17, 2025 · @gitryder
The node selector now remembers your last selected node when navigating between pages. Previously, it would reset to the default node unexpectedly.
Dec 17, 2025 · @gitryder
We fixed an issue where negative durations did not display correctly in the app. They now render as expected.
Dec 11, 2025 · @gitryder
We fixed an issue where the footer in the pinned package drawer could become hidden. The layout now adjusts correctly so the install button always stays visible.
]]>Dec 17, 2025 · @lava
Add a new TENZIR_PLATFORM_REQUIRE_CLIENT_CERTS environment variable that, when set to true, requires connecting clients to present a valid certificate signed by one of the CAs specified in TLS_CAFILE.
Dec 10, 2025 · @lava
The Tenzir Gateway now understands the new TENZIR_PLATFORM_REQUIRE_CLIENT_CERTS environment
variable that, when set to true, requires connecting clients to present a valid certificate
signed by one of the CAs specified in TLS_CAFILE.
Dec 17, 2025 · @gitryder
Previously, the total ingress and egress metrics could show incorrect values after reloading the page. They now correctly display data for the last 24 hours.
]]>Dec 17, 2025 · @gitryder
We fixed an issue where dashboard cells with no fixed node ID sometimes did not render. Those cells now display correctly using sensible fallbacks.
]]>Dec 17, 2025 · @gitryder
We replaced text labels with icons for types in the Explorer table header, giving it a cleaner, more compact look. You can hover over any icon to see the full type name.
Dec 17, 2025 · @lava
The docker compose example stacks now add the correct CORS setting for the upload and download endpoints by default.
Dec 17, 2025 · @gitryder
The editor now includes a shortcuts help section that shows useful keyboard shortcuts at a glance. You can open it by clicking the info button next to the copy pipeline link button.
Dec 17, 2025 · @lava
To conform with best practices, we updated the tenzir-seaweed image to use a non-root user by default.
NOTE: This is a breaking change due to the updated permissions of the seaweed data volume.
If you have an existing docker compose stack, either manually specify the root user in your docker-compose.yaml:
services:
seaweed:
user: root
Or run a one-time command after upgrading to change the permissions of the seaweed data volume:
docker compose run --user root --entrypoint /bin/sh seaweed
$ chown -R seaweed:seaweed /var/lib/seaweedfs
Dec 17, 2025 · @gitryder
We fixed an issue that caused the pipeline detail page to show an incorrect background color.
Dec 17, 2025 · @lava
Fixed an issue that could lead to statically configured dashboards not being shown on the Dashboards page.
]]>