Snd: Release Notes

Audience: System Administrators

Content Summary: This page contains release notes for snd.

1.4.1

Changes

Feature:

• Support disabling automatically configuring logging driver via TOML or CLI option --feature-gates configure_logging=false.

  [immuta.feature_gates]
  configure_logging = false
  

1.4.0

Upgrade Notes

This release introduces changes to the nginx UID used by container immuta-proxy. Post upgrade, the following commands must be run for existing Immuta installations:

docker container rm --volumes --force immuta-proxy
immuta-snd init
immuta-snd start immuta-proxy

Changes

Fix:

• When using option --dry-run the filesystem will no longer be touched.
• Add safe guard to prevent undesirable state. Throw error when user attempts to run immuta-snd down; immuta-snd start.

Update:

• Update nginx config. Remove the "ssl" directive in favor of the "listen ... ssl" directive.

Feature:

• Adjust nginx worker processes on startup.
• Run nginx as a non-root UID.
• Support appending nginx directives to the server block with TOML key proxy.additional_config.
• Optionally publish PostgreSQL port 5432 with TOML key db.publish_port.
• Update default Immuta version to 2021.4.1.

1.3.4

Changes

Fixed:

• Fix loading of external cert/key when configured via TOML.

1.3.3

Changes

Feature:

• Determine service container UID on runtime.

1.3.2

Changes

Update:

• Update nginx image to 1.20.1 to mitigate CVE-2021-23017

Feature:

• Support TLS v1.3 by default

1.3.1

Changes

Fix:

• Fix permissions that weren't getting set correctly for immuta-db in 2021.2.0.
• Fix edge-case where images weren't being pulled when immuta.docker_image_pull_policy was not set to Always.
• Respect immuta.logging_level set in immuta.toml.

1.3.0

Changes

Fix:

• Fix CLI option --tls-cipher-suite.

Feature:

• Determine container UID/GUID on runtime.
• Update default Immuta version to 2021.2.0.

1.2.1

Changes

Fix:

• Fix restore from backup functionality. Bug originally introduced in 1.2.0.

1.2.0

Changes

Fix:

• Update Docker minimum version to 17.07. When using an older version Docker would throw an error when option --password-stdin was passed.

Feature:

• Update default Immuta version to 2021.1.1
• Increase default /dev/shm size in immuta-db to 1GB. Refer to toml db.shared_memory.size or cli option --db-shm-size
• Support multiple log levels. May be overridden with toml immuta.logging_level.
• Add Docker pull policy and default to IfNotPresent. Refer to toml immuta.docker_image_pull_policy or cli option --docker-pull-policy
• Support alternative memory limit units (i.e, b, k, m).
• Support custom TLS cipher lists. To use feature gate configure_tls_ciphers must be enabled. Refer to toml immuta.tls_cipher_suite or cli option --tls-cipher-suite.
• Support HTTP Strict Transport Security (HSTS) in immuta-proxy.
• Support nontraditional docker executable paths. Refer to environment variable IMMUTA_SND_CONTAINER_RUNTIME.

1.1.2

Changes

Fix:

• Fix visual bug where the system's default hostname is printed to stdout even if the immuta.hostname is overridden.
• Fix edge-case where Docker named volumes were not removed during destroy.

Feature:

• Update default Immuta version to 2020.4.1.
• Update memcached image to 1.6.
• Update nginx image to 1.18.