feat: Bolt TLS in Memgraph HA + fix for mg-exporter when TLS is used#1641
Merged
Conversation
as51340
added
status: ready
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
as51340
changed the title
vpavicic
added a commit
that referenced
this pull request
Jun 17, 2026
* Add Memgraph v3.11.0 and Lab v3.11.0 release note titles Co-authored-by: Cursor <cursoragent@cursor.com> * Update the release docs start skill * Add mgp_graph_get_start_timestamp / Graph.start_timestamp (#1640) Documents the transaction starting timestamp exposed to procedures. The value stays stable across USING PERIODIC COMMIT boundaries, making it usable as a per-query cache key. Pairs with memgraph/memgraph#4167. * docs: document start_time and elapsed_ms columns in SHOW TRANSACTIONS (#1627) Add the two new columns to the schema table and example outputs, note that snapshot rows now populate them at the top level, and update the snapshot-progress callout to mention the brief window where start_time can read as null. * feat: Ignore --query-modules-directory on coordinators (#1636) * feat: Document init container chown (#1637) * Schema (node/rel)_type_properties docs (#1638) * docs(schema): document expanded output of schema type-properties procedures Update the Output, Usage, and Example sections of schema.node_type_properties and schema.rel_type_properties to describe the new sourceNodeLabels, targetNodeLabels, propertyObservations, and totalObservations columns and the (relType, sourceNodeLabels, targetNodeLabels) partitioning for the rel-properties procedure. Replace example result tables with output captured against the updated procedures. * docs(schema): fix Kept key value in schema.assert example The Kept row of the schema.assert example showed "id" for a unique constraint on a single property, but the procedure emits "[id]" (the stringified property list) for that action. * feat: Add support for MCP authorization using OAuth (#1644) * Document cross_database module (deprecates migrate in 3.11) (#1634) Add the cross_database reference page covering all procedures (bolt, neo4j, mysql, postgresql, sql_server, oracle_db, s3, arrow_flight, duckdb, servicenow), the Bolt type conversion rules (including the lossy 30-days-per-month Duration flattening), the same-parameters guard, and the migrate.* alias table. Reduce the migrate page to a redirect stub pointing at cross_database; the migrate.* names continue to work via Memgraph's callable-mapping aliases, but the canonical reference now lives at cross_database. * docs: Bolt TLS (#1641) * Apply the docs merging skill - pass #1 * Add changelog items * feat: Intra-cluster TLS-secured communication (#1647) * feat: Intra-cluster TLS * docs: Document charts-side of the reload feature * Add v3.11.0 release notes for remaining milestone PRs. Document breaking changes, features, and bug fixes from memgraph#3923 through #4240. Co-authored-by: Cursor <cursoragent@cursor.com> * feat: Add support for standalone chart labels (#1645) * feat: HA chart log_retention_days (#1646) * Add v3.11.0 release notes for #4188, #4211, #4229, and #4246. Complete milestone changelog coverage for slow-query logging, GC visibility, planner crash fix, and database drop crash fix. Co-authored-by: Cursor <cursoragent@cursor.com> * docs: align schema procedure types and mandatory with new semantics (#1648) - propertyTypes now lists the connector-recognised type strings (Boolean, Float, DateTime, Point, etc.) - mandatory for nodes is driven by existence constraints; for relationships it is always false - Example output tables and explanatory text updated to match Pairs with memgraph/memgraph#4186. * docs: add toBooleanOrNull, toFloatOrNull, toIntegerOrNull, toStringList (#1651) * docs: add toBooleanOrNull, toFloatOrNull, toIntegerOrNull, toStringList Document the new *OrNull scalar conversions and toStringList in the function reference, and note that the list conversions null out non-convertible elements per element. Drop these conversion functions from the unsupported-functions list. * docs: document point string representation from toString * docs: show garbage collector in SHOW TRANSACTIONS (#1652) * feat: show garbage collector in SHOW TRANSACTIONS * docs: note gc rows cannot be terminated and are filtered like snapshot rows * docs: document slow and failed query logging (#1654) Add a Slow and failed query logging section to the logs page covering the [slow-query]/[failed-query] streams, line format, the DDL timing limitation, and runtime/per-session configuration. List the new --log-min-duration-ms, --log-failed-queries and --log-query-plan flags and their runtime settings, and note SET SESSION SETTING / RESET SESSION SETTING per-session overrides. * docs: update SHOW STORAGE INFO global/per-DB split and SHOW LICENSE INFO (#1655) * docs: update SHOW STORAGE INFO global/per-DB split and SHOW LICENSE INFO Reflect show_storage_info_disk_fix changes: - Rewrite bare SHOW STORAGE INFO to instance-only schema; add breaking-change callout (field renames + global_isolation_level/global_storage_mode now report startup defaults). - Document SHOW STORAGE INFO ON CURRENT DATABASE and correct enterprise gating (non-default DB only). - Add memory_limit_policy row + evaluation matrix to SHOW LICENSE INFO. - Add ShowStorageInfo global metric to monitoring. - Fix stale field references across storage-memory-usage, transactions, vector-search, enabling-memgraph-enterprise, backup-and-restore, and migration pages. * docs: align SHOW STORAGE INFO gating/output notes with disk-fix branch - faq: bare SHOW STORAGE INFO is instance-level only; node/relationship counts moved to the per-database variant. - tenant-profiles: only non-default DB requires Enterprise; default DB and ON CURRENT DATABASE work on all editions. - release-notes: note Community-edition support for ON DATABASE <default> / ON CURRENT DATABASE. * docs: clarify per-database SHOW STORAGE INFO field tables are a memory subset The per-database tables in storage-memory-usage and tenant-profiles list only the memory-related fields; point readers to the complete 15-field set in server-stats and stop implying the memory subset is the full output. * docs: stop calling per-database introspection queries all "new" Only SHOW STORAGE INFO ON CURRENT DATABASE is new in 3.11; ON DATABASE <name> (#3952) and SHOW MEMORY INFO predate it. Reword the lead-in and point to the availability note for the per-query edition/privilege split. * docs: fix ME license-types memory-gating to match code and SHOW LICENSE INFO The license memory limit gates (license.cpp): AI_PLATFORM limits the graph_memory_tracker (graph + query, the query+graph_memory_tracked arena), not "graph only"; ENTERPRISE limits total memory (graph + query + vector index). Align the License types table with memory_limit_policy, server-stats, and vector-search. Also fix the --memory-limit anchor. * docs: Describe RedHat HA chart (#1656) * Stripped relwithdebinfo build (#1659) * update ddebugging page * update direct download links * update debugging page * feat: add elementId function (#1657) * feat: document elementId function * docs: trim elementId description to mirror id() * docs: session trace now emits into the main log instead of per-session files (#1661) Rewrite the Session trace section to reflect memgraph#4149: --query-log-directory and per-session {uuid}.log files are removed; SET SESSION TRACE ON now emits tagged [session=<uuid>] events into the main log at INFO (visible when --log-level is INFO or lower). Remove the --query-log-directory configuration flag row. * doc: Document multi-tenant monitoring (#1635) * doc: Document OpenMetrics monitoring * doc: Restore text about resetting counters * Add v3.11.0 release notes for #4230, #4247, #4264, #4265, and #4273. Co-authored-by: Cursor <cursoragent@cursor.com> * Document ascending PR order for release notes and PR lists in skills. Co-authored-by: Cursor <cursoragent@cursor.com> * new: Add Lab 3.11.0 release notes (#1663) * document direct scraping of openmetrics from Memgraph in kubernetes (#1662) * feat: document virtual graphs via derive() (#1664) * feat: document virtual graphs via derive() Document the derive() aggregation function for building in-query virtual (derived) graphs, covering the concept, options (virtualEdgeType, relationshipProperties, source/target node label and property overlays, undirectedEdgeTypes), per-key node inheritance, and usage examples in run-algorithms. Add derive() to the graph projection functions reference. * Remove version note from derive() functions reference entry * feat: document vector index on label/edge-type combinations (#1665) Document the new vector index DDL shapes (single, any '|', all '&', and wildcard) for both CREATE VECTOR INDEX and CREATE VECTOR EDGE INDEX, the edge '&' rejection, overlapping-index behavior, and how each mode renders in SHOW INDEX INFO. Update the SHOW VECTOR INDEX INFO label field description and refresh the walkthrough outputs for the new :Label display. * feat: document fuzzy text search (#1666) * feat: document fuzzy text search and the search config map Document the new optional config map for the text_search search and regex_search procedures (limit plus fuzzy_distance, fuzzy_prefix and fuzzy_transpositions), add a dedicated Fuzzy search section with examples, and note that limit moved from a positional argument into the config map. * docs: remove nonexistent limit param from text_search.aggregate text_search.aggregate / aggregate_edges take (index_name, search_query, aggregation_query); there is no limit argument. * Update sitemap for v3.11.0 (add cross_database page). Co-authored-by: Cursor <cursoragent@cursor.com> --------- Co-authored-by: Cursor <cursoragent@cursor.com> Co-authored-by: Ivan Milinović <44698587+imilinovic@users.noreply.github.com> Co-authored-by: Andi Skrgat <andi8647@gmail.com> Co-authored-by: Vlasta <vlasta.pavicic@memgraph.io> Co-authored-by: andrejtonev <29177572+andrejtonev@users.noreply.github.com> Co-authored-by: Dr Matt James <mattkjames7@gmail.com> Co-authored-by: colinbarry <colin.barry@memgraph.io> Co-authored-by: Toni <toni.lastre@memgraph.io> Co-authored-by: David Ivekovic <david.ivekovic@memgraph.io>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Release note
Described how should Bolt TLS be set-up in helm charts for Memgraph HA.
Related product PRs
PRs from product repo this doc page is related to:
memgraph/helm-charts#246
Checklist:
bugfixorfeaturelabel, based on the product PR type you're documenting