ROH 6.34.2.0 Release

Release Overview

Release Name: ROH Beta Maintenance Release

Release Type: Maintenance

Release Number: 6.34.2.0

Purpose

RegScale Orchestration Hub (ROH) enables organizations to automate the import and export of data between RegScale and external systems through configurable integrations and commands.

This beta release is intended for early adopters and validation of core orchestration capabilities. Functionality, supported integrations, and performance characteristics may change before General Availability (GA). This maintenance release delivers reliability, security, and supportability improvements for early adopters, summarized below.

What's Fixed

• Single sign-on now returns you to Orchestration Hub. After signing in with SAML, the browser was left on the linked RegScale instance instead of being returned to Orchestration Hub, so the Orchestration Hub session was never established. RegScale now records the address the sign-in started from and returns the browser there. This requires RegScale 6.34.2.0 or newer and the setting described under Deployment Notes.
• Orchestration Hub now starts on hosts with FIPS mode enforced. The database driver previously carried its own bundled cryptography library rather than using the host's approved one, which stopped the service from starting on a FIPS-enforcing host. Database connections now use the system cryptography provider.
• Amazon S3 sources accept temporary credentials. A source configured with a session token, as used for temporary or federated AWS access, now works for scheduled jobs and not only for the connection test.
• Log timestamps state their time zone explicitly. Every timestamp is recorded in UTC and labelled as such, so logs gathered from different hosts can be compared and correlated reliably.
• The scheduler no longer restarts repeatedly on a fresh Kubernetes install. The Helm chart's health check for the scheduler component relied on a utility that is not present in the shipped image, which caused the scheduler to be restarted continuously.

Maintenance and Updates

• Reduced operating-system vulnerabilities in the shipped container images. Components that were not required at run time have been removed from the published images, lowering the number of reported operating-system vulnerabilities.
• Updated bundled dependencies. Third-party libraries have been advanced to current versions, including security fixes for the asynchronous networking and HTML-parsing libraries and an update to the database driver.
• Expanded self-hosted deployment documentation. Guidance for Helm-based installation and for Kubernetes deployment and maintenance has been extended.

Deployment Notes

This release requires RegScale 6.34.2.0 or newer for all customers. Confirm the platform version before rolling out Orchestration Hub 6.34.2.0.

Customers using SAML single sign-on must set one additional value. Configure the ROH_PUBLIC_URL environment variable to the full URL and hostname at which Orchestration Hub is reached — for example https://servicename-oh.example.tld, resolved to the customer's own endpoint. RegScale uses this value to return the browser to the Orchestration Hub instance after sign-in; without it, the browser is left on the RegScale instance and the Orchestration Hub session is not established.

No other configuration change is required. Existing integration, source, and single sign-on settings are otherwise unaffected.