Starstruk Logo MarkStarstruk

1.17.0

fosrl/pangolin1.17.0Apr 4, 2026by oschwartz10612

AI Summary

This release introduces full Role-Based Access Control (RBAC), site provisioning keys for streamlined onboarding, and enhanced logging capabilities including SIEM streaming and SSH access.

Key Highlights

  • Multiple role assignment for users (full RBAC)
  • Site provisioning keys for creating sites on first start
  • Log/event streaming (SIEM) and SSH sessions to access logs
  • Region blocking within rulesets to restrict traffic by location

New Features

  • Multiple role assignment for users
  • Improved role mapping handling during auto-provisioning
  • Built-in templates for Google and Azure identity providers
  • Pending sites page for manual approval
  • Editing identifiers of private resources
  • Connection logging of TCP and UDP sessions
  • Domain CRUD endpoints
  • Endpoint to reset bandwidth

Full Release Notes

## Read the Announcement

Read the full announcement with discussion of new features: [Pangolin 1.17 - Multiple roles per user, site provisioning keys, log streaming, and more](https://pangolin.net/news/1-17-release)

## What's Changed

- Add multiple role assignment for users (full RBAC)
- Add improved role mapping handling during auto-provisioning for identity providers
- Add built-in templates for Google and Azure to global identity providers
- Add region blocking within the rulesets to restrict or allow traffic based on geographic location
- Add site provisioning keys to create sites on first start without pre-generating IDs/Secrets
- Add pending sites page, where new sites created with a provisioning key must be manually approved
- Add editing the identifier of private resources
- Add connection logging of every TCP and UDP session through private resources (requires Newt ^1.11.0)
- Add SSH sessions to access logs
- Add log/event streaming (SIEM)
- Add domain CRUD endpoints to integration API
- Add endpoint to reset bandwidth to integration API
- Improve persist user locale preference to database
- Fix display actual values for WireGuard site credentials
- General UI improvements
- Various other bug fixes

**Full Changelog**: https://github.com/fosrl/pangolin/compare/1.16.2...1.17.0

## New Contributors

* @Fizza-Mukhtar made their first contribution in https://github.com/fosrl/pangolin/pull/2573
* @ChanningHe made their first contribution in https://github.com/fosrl/pangolin/pull/2432
* @shreyaspapi made their first contribution in https://github.com/fosrl/pangolin/pull/2524
* @noe-charmet made their first contribution in https://github.com/fosrl/pangolin/pull/2695
* @shleeable made their first contribution in https://github.com/fosrl/pangolin/pull/2653
* @infiniteWays made their first contribution in https://github.com/fosrl/pangolin/pull/2149
* @jaydeep-pipaliya made their first contribution in https://github.com/fosrl/pangolin/pull/2748

## How to Update

> [!IMPORTANT]
> Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise.

[View documentation](https://docs.pangolin.net/self-host/how-to-update)