Sentry settings upgrade

This release makes a single change:

• Sentry logs are now sent to a new hosted solution.

Tool release helm chart context fix

This release makes a single change:

• Ensure that chart related context is copied over to new releases and that only valid helm chart names are allowed in releases. See PR: #865

Update to use new Elastic log index

This release introduces two small minor changes:

• The default index in Elastic, used for getting logs, has been updated given @tomskelley-gjs's magnificent work getting that under control. See PR #863 for the details.
• Ensure all the Elastic index references are lower case, and the link for kibana is updated to the new Elastic index. See PR #864 for the details.

Auth0 cookie login failure handling and destructive action alerts

This release introduces two changes,

• Related to the auth0 cookie problem #861
  • Handle cookie auth errors by redirecting to a dedicated login fail endpoint
  • Login fail endpoint
• Related to the destructive action alerts #860
  • All forms that delete things have confirmation alerts.

Dockerfile pulls jsdep image from quay.io

This is the same image but now hosted on (public) quay.io instead to avoid the DockerHub rate limits.

Related to previous v0.27.3 release (we missed this other BASE image as it was in the middle of the Dockerfile).

PR: #856

Dockerfile pulls base alpine image from quay.io

Instead of pulling it from DockerHub as before.

This is to avoid hitting the newly introduced DockerHub pull rate limits which prevent Concourse from successfully releasing the Control Panel.

PR: #855

Revised IAM settings

This release contains a single change:

• Update the IAM settings for S3 buckets so versioned S3 bucket access works with the new Amazon AWS web based UI. (See PRs #854 and related migration script: ministryofjustice/analytics-platform-ops#372).

Accessibility and log handling

This release contains two changes:

• Add an accessibility statement to the website (PR #848)
• Fix 500 errors being thrown if Elastic search is offline (PR #850).

Tool release management for admins

This release adds the necessary functionality to the administrative pages of the control panel to create, retrieve, update and delete releases of tools. Furthermore, releases of tools can be flagged as restricted to a group of users, defined by a comma separated list of usernames.

This work was done as PR #846 with this Trello ticket defining the scoope.

Users see full list of all data sources

Allow users to see every data source (name and admins only) to give them visibility of what's out there and who they need to talk to if they want to get access to certain data.

This doesn't change the current process.

Please refer to PR description and ticket for more information.

PR: #845
Ticket: https://trello.com/c/AIOEPlHG