Skip to content

You are viewing documentation for Immuta version 2021.1.

For the latest version, view our documentation for Immuta SaaS or the latest self-hosted version.

Snd: Release Notes

Audience: System Administrators

Content Summary: This page contains release notes for snd.

1.4.0

Upgrade Notes

This release introduces changes to the nginx UID used by container immuta-proxy. Post upgrade, the following commands must be run for existing Immuta installations:

docker container rm --volumes --force immuta-proxy
immuta-snd init
immuta-snd start immuta-proxy

Changes

Fix:

  • When using option --dry-run the filesystem will no longer be touched.
  • Add safe guard to prevent undesirable state. Throw error when user attempts to run immuta-snd down; immuta-snd start.

Update:

  • Update nginx config. Remove the "ssl" directive in favor of the "listen ... ssl" directive.

Feature:

  • Adjust nginx worker processes on startup.
  • Run nginx as a non-root UID.
  • Support appending nginx directives to the server block with TOML key proxy.additional_config.
  • Optionally publish PostgreSQL port 5432 with TOML key db.publish_port.
  • Update default Immuta version to 2021.4.1.

1.3.4

Changes

Fixed:

  • Fix loading of external cert/key when configured via TOML.

1.3.3

Changes

Feature:

  • Determine service container UID on runtime.

1.3.2

Changes

Update:

  • Update nginx image to 1.20.1 to mitigate CVE-2021-23017

Feature:

  • Support TLS v1.3 by default

1.3.1

Changes

Fix:

  • Fix permissions that weren't getting set correctly for immuta-db in 2021.2.0.
  • Fix edge-case where images weren't being pulled when immuta.docker_image_pull_policy was not set to Always.
  • Respect immuta.logging_level set in immuta.toml.

1.3.0

Changes

Fix:

  • Fix CLI option --tls-cipher-suite.

Feature:

  • Determine container UID/GUID on runtime.
  • Update default Immuta version to 2021.2.0.

1.2.1

Changes

Fix:

  • Fix restore from backup functionality. Bug originally introduced in 1.2.0.

1.2.0

Changes

Fix:

  • Update Docker minimum version to 17.07. When using an older version Docker would throw an error when option --password-stdin was passed.

Feature:

  • Update default Immuta version to 2021.1.1
  • Increase default /dev/shm size in immuta-db to 1GB. Refer to toml db.shared_memory.size or cli option --db-shm-size
  • Support multiple log levels. May be overridden with toml immuta.logging_level.
  • Add Docker pull policy and default to IfNotPresent. Refer to toml immuta.docker_image_pull_policy or cli option --docker-pull-policy
  • Support alternative memory limit units (i.e, b, k, m).
  • Support custom TLS cipher lists. To use feature gate configure_tls_ciphers must be enabled. Refer to toml immuta.tls_cipher_suite or cli option --tls-cipher-suite.
  • Support HTTP Strict Transport Security (HSTS) in immuta-proxy.
  • Support nontraditional docker executable paths. Refer to environment variable IMMUTA_SND_CONTAINER_RUNTIME.

1.1.2

Changes

Fix:

  • Fix visual bug where the system's default hostname is printed to stdout even if the immuta.hostname is overridden.
  • Fix edge-case where Docker named volumes were not removed during destroy.

Feature:

  • Update default Immuta version to 2020.4.1.
  • Update memcached image to 1.6.
  • Update nginx image to 1.18.