Release Changes¶
This document contains the updates against the previous releases. To see the release contents, please review the release summaries.
This is a summary of the updates made to the published releases. The sections are organized by RackN release trees.
Release v4.13¶
DRP¶
v4.13.23 (2024/09/06)¶
- Fix crash when running jobs while returning Parameter data
v4.13.22 (2024/09/04)¶
- Increase performance of concurrent jobs (remove single lock)
v4.13.21 (2024/08/30)¶
- Increase performance of Job/Machine Patch operations
- Update
drpcli system upgrade
command to be cluster aware.
v4.13.20 (2024/08/20)¶
- Fix license machine counting issues
v4.13.19 (2024/08/08)¶
- Allow self upgrade to handle issues around non-root cases better
v4.13.18 (2024/08/08)¶
- Fix Filter object to be Paramers so that the task-library can load.
v4.13.17 (2024/08/01)¶
- Enabled job sweeper to run every hour (like it should have been). Active systems will notice this less.
v4.13.16 (2024/07/29)¶
- Fail endpoint when DRP fails to update or all pending actions fail.
- Fix start-up validation failure around template references
- Fix MSM memory/crash loop when failing to upgrade a downstream endpoint
- Reduce artifact syncing to the MSM
- Streamline endpoint update from MSM
v4.13.15 (2024/07/15)¶
- Fix ESXi bootenv issue with path expansion (adds backs compatability for older ESXi bootenvs)
v4.13.14 (2024/07/12)¶
- SECURITY: Denial of service due to improper 100-continue handling in net/http info
- SECURITY: Denial of service via malicious preflight requests in github.com/rs/cors info
- SECURITY: Gin mishandles a wildcard in the origin string in github.com/gin-contrib/cors info
- Handle missing bootenv when handling DHCP Discovers/Requests - caused a crash loop
v4.13.13 (2024/06/20)¶
- Start DRP if DNS ports are block and log warnings to fix upgrade issues
- Allow plugins to specify secure parameters
- Emit more static filesystem errors
- Fix vulnerability in golang code
- Handle PTR requests across zones
- Add DNS wildcard support
- Fix arm path handling for sledgehammer and other bootenvs
- Add more stack traces for API panic paths
- Automatically set machine arch from DHCP packets (if known)
- Fix license expire calculations
v4.13.12 (2024/04/26)¶
- Add SkipDAD option on subnets / reservations in objects
- Fix Ux* models crashing server as params
v4.13.11 (2024/04/23)¶
- Fix start-fail loop when lease is deleted before machine in same transaction
v4.13.10 (2024/04/22)¶
- Fix database growth overtime. 2 restarts are required for this fix to be completely installed.
- Looking up parameters performance improved after addition of IPAM dynamic parameters feature
- Handle secure parameters when loading plugins.
- Expand connection cancel error messages
- Improve performance of catalog construction
- Fix archive exploding
v4.13.9 (2024/04/05)¶
- SECURITY: Update net and net/http library to handle vulnerability info
- Fix websocket infinite loop
v4.13.8 (2024/03/20)¶
- SECURITY: Update protobuf library to handle vulnerability info
v4.13.7 (2024/03/19)¶
- Send expanded decrypt URI to the plugin handing secure parameter decryption
v4.13.6 (2024/03/13)¶
- Fix race condition in endpoint managning backend code of the manager. This could cause actions to get lost.
v4.13.5 (2024/03/11)¶
- Update terraform digital ocean integration fix (v4.13.4 - rackn/provision tree)
- Add ReplaceWritable to the VersionSet Component to allow for the manager to push content with ReplaceWritable flag set.
- Fix pool operations will restart workflows set if they are the same as existing workflows
- Enforce that only one universal-application-* profile can be on the system at a time. This fixes resource-brokers setting pipelines.
v4.13.4 (2024/03/04)¶
- SECURITY: Fix leak of ad-auth user into job logs. CVE-2024-RKN0001
- Handle null ptrs for searching
v4.13.3 (2024/03/03)¶
-
dr-waltool / passive replication (manager) - decouple locking when doing a backup or manager sync. This will prevent the system from becoming unresponsive on hung or stalled backups.
-
FEATURE: Allow for RBAC to restrict values in a role.
- e.g.
machines.update:Workflow:univeral-discover.*
- This will only allow the user to set the Workflow field on a machine to
universal-discover
.
- e.g.
v4.13.2¶
- Speed up catalog rebuilds on the manager by reusing checksum calculations
v4.13.1¶
- Remove a go-routine leak when purging / archiving jobs
UX¶
v4.13.11 (2024/08/14)¶
- Update log scrolling for activities view to increase performance and usability
v4.13.10 (2024/08/05)¶
- Handle pool action enablement when clicking in the UX
v4.13.9 (2024/05/30)¶
- Add confirmation pop-up when changing more than 5 rows or if some rows are not on the current page.
v4.13.8 (2024/05/01)¶
- Fix job view with long logs
v4.13.7 (2024/04/23)¶
- Fix task column links on nested tables
- Fix task log cut-off on failure
- Remove extra render button and add doc links
v4.13.6 (2024/04/22)¶
- Fix resource link reference
- Fix secure parameter infinite loading
v4.13.5 (2024/03/27)¶
- Fix stage hover crash
v4.13.4 (2024/03/08)¶
- FEATURE: Add support for brokers providing options to clusters in creation
- Fix issue with meta data being null
v4.13.3 (2024/03/03)¶
- Fix reservation and lease tables not updating on events.
v4.13.2¶
- Update default bash template to not use ()
- Handle null counts
- IPMI pop-up should not cover names
v4.13.1¶
- Fix job template render source differences
- Fix async closure issue
Provision Content¶
v4.13.17 (2024/08/29)¶
- task-library: Add TPM version to inventory (requires redfish and ipmi configuration). May need to add inventory-check task to pipelines after the ipmi-configure task in pipelines to take full effet.
v4.13.16 (2024/08/05)¶
- content: Add an alma 8.10 and 9.4 sledgehammer to work around secure boot blacklisting grub images
v4.13.15 (2024/07/02)¶
- hpe: Add timeout parameters for some ilorest calls
v4.13.14 (2024/06/26)¶
- drp-community-content: exclude the cdc_eem driver from MAC discovery to prevent duplicate detection failures.
v4.13.13 (2024/05/15)¶
- hpe-support: remove mcp repo because it is gone for most OSes
v4.13.12 (2024/05/01)¶
- drp-community-content: fix debian install
v4.13.11 (2024/04/29)¶
- hpe-support: add parameter to enable ssacli installation
hpe-install-ssacli
- flash: fix error message parameter reference.
v4.13.10 (2024/04/21)¶
- drp-community-content: add missing config file for stage start.
v4.13.9 (2024/04/03)¶
- drp-community-content: Add support for ignore interfaces and drivers during mac address discovery. The defaults allow for ignoring the USB Driver used by Supermicro BMC that generate random mac addresses.
v4.13.8 (2024/04/01)¶
- hpe-support: Don't install a raid tool that conflicts with the raid system
v4.13.7 (2024/03/25)¶
- drp-community-content: Handle spurious files in the sys net space
v4.13.6 (2024/03/22)¶
- drp-community-content: discovery can now have a configurable list of macs to ignore by parameter: discovery-mac-ignore-list
- drp-community-content: Add Supermicro X9 USB BMC NIC MAC to ignore list
- drp-community-content: Add install_lookup function to helper templates that can look-up packages by distro
v4.13.5 (2024/03/11)¶
- drp-community-content: add a bootstrap utility blueprint and task to download a set of bootenvs during the bootstrap phase.
- task-library: Add return-pipeline and return-workflow for the pool-broker to clean up machines on return to the pool.
- task-library: ansible-playbooks can provide a galaxay requirements file.
v4.13.4 (2024/03/08)¶
- flash: Handle AMD HPE packages better
v4.13.3 (2024/03/03)¶
- cloud-wrappers: Update vsphere terraform provider
- cloud-wrappers: Add helpers for resource brokers when creating machines
- cloud-wrappers: vsphere machines can set firmware and secure-boot options
- cloud-wrappers: Add datastore-type to allow for cloud and normal datastore selections
- drp-community-content: Convert centos-8 to alma-9-min as default OS
v4.13.2¶
- drp-community-content: remove dependency upon os-other
v4.13.1¶
- drp-community-content: manager bootstrap should not pull tip packages by default
- drp-community-content: disk-stress test had a typo that was fixed
- os-other: fix broken rhel-7.7 bootenv
Plugins¶
v4.13.20 (2024/09/04)¶
- ipmi: fix ipmi scan machines to have correct ip and mac.
v4.13.19 (2024/08/29)¶
- ipmi: Add redfish actions nextboothttp and forceboothttp to support HTTP booting
v4.13.18 (2024/08/13)¶
- vmware: fix make-esxi.sh to support -8 option
v4.13.17 (2024/08/08)¶
- bios: Fix issue with dell-pending-config-jobs get set to a structure
v4.13.16 (2024/07/12)¶
- SECURITY: Denial of service due to improper 100-continue handling in net/http info
- SECURITY: Leak of sensitive information to log files in github.com/hashicorp/go-retryablehttp info
- SECURITY: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/Azure/azure-sdk-for-go/sdk/azidentity info
- SECURITY: Archiver Path Traversal vulnerability in github.com/mholt/archiver info
v4.13.15 (2024/07/10)¶
- bios: Fix issue with missing function in bios-configure - add setup.tmpl to get helper functions
v4.13.14 (2024/07/09)¶
- vmware: handle config erasure by vmware tools on upgrade/install of vibs
v4.13.13 (2024/05/30)¶
- bios: Update parsing of dell pending jobs - fixes bad parameter error
v4.13.12 (2024/05/15)¶
- vmware: fix make-esxi.sh to work with latest changes and add -8 flag for esxi 8
- vmware: A standard networking task for advanced networking configurations.
v4.13.11 (2024/05/01)¶
- vmware: fix checksums in vcf-5.0.0 pipeline
- vmware: Update network and hostname task to use ParamExpand.
v4.13.10 (2024/04/05)¶
- SECURITY: Update net and net/http library to handle vulnerability info
v4.13.9 (2024/04/06)¶
- blancco-lun-eraser: Update the plugin with the latest Blancco tooling and workflows
v4.13.8 (2024/04/01) - Requires DRP v4.11.32 or higher¶
- image-deploy: Add curtin/patches parameter to allow for hacking on curtin
- image-deploy: allow curtin dd to work on md raid devices
- raid: Allow bootenv of raid-encryption to be set in the flexiflow list
- raid: Rework raid-install-tools to allow for future and past raid tools
- raid: Update the perccli tools
- raid: Fix perccli to stop if it finds unparsable data
- raid: Fix perccli-json to handle bus data better
- azkeyvault: Add support for certificates and update docs
v4.13.7 (2024/03/20)¶
- SECURITY: all: Update protobuf library to handle vulnerability info
v4.13.6 (2024/03/19) - Requires DRP v4.13.7 or higher¶
- awssecman: New plugin that can used AWS security manager to retrieve secrets.
- azkeyvault: New plugin that can used Azure Key Vaults to retrieve secrets.
- cmdvault: New plugin that can used command line tools to get secrets.
v4.13.5 (2024/03/13)¶
- ipmi: Update redfish library and ipmi-status-validation to fail on critial errors and optionally on warnings
v4.13.4 (2024/03/11)¶
- vmware: update bootenvs with group-by data
- vmware: improve the esxi-image-install to handle device paths and better error handling
v4.13.3 (2024/03/03)¶
- raid: fix perccli2 issues around clear and quoted names
v4.13.2¶
- raid: fix perccli2 to have a force on the clear function
v4.13.1¶
- ipmi: Fix Lenovo naming in IPMI to set IMM.IMMInfo_Name to the machine name.
RackN Plugins¶
v4.13.4 (2024/07/12)¶
- SECURITY: Denial of service due to improper 100-continue handling in net/http info
- docker-context: fix podman mount options for drpcli in the container
v4.13.3 (2024/04/05)¶
- SECURITY: Update net and net/http library to handle vulnerability info
v4.13.2 (2024/03/20)¶
- SECURITY: all: Update protobuf library to handle vulnerability info
- SECURITY: all: Update net library to handle vulnerability
- SECURITY: all: Update crypto library to handle vulnerability
v4.13.1 (2024/03/03)¶
- billing: remove from tree because it is embedded in DRP
Universal¶
v4.13.3 (2024/07/29)¶
- add esxi-standard-network config to the esxi config pipeline elements
v4.13.2 (2024/03/22)¶
- universal-decommission can now replace some or all of the default decommission tasks.
v4.13.1 (2024/03/03)¶
- Convert centos-8 to alma-9-min as base OS.
- Reorder discover classifier to enable specific profiles to be applied instead of general profiles
Cohesity¶
v4.13.1 (2024/03/20)¶
- Add support for the Cohesity 6.6.0d release
Release v4.12¶
DRP¶
v4.12.28 (2024/09/06)¶
- Fix crash when running jobs while returning Parameter data
v4.12.27 (2024/09/04)¶
- Increase performance of concurrent jobs (remove single lock)
v4.12.26 (2024/08/29)¶
- Increase performance of Job/Machine Patch operations
- drpcli golang security updates
v4.12.25 (2024/04/22)¶
- Fix database growth overtime. 2 restarts are required for this fix to be completely installed.
v4.12.24 (2024/03/20)¶
- SECURITY: Update protobuf library to handle vulnerability info
v4.12.23 (2024/03/19)¶
- Send expanded decrypt URI to the plugin handing secure parameter decryption
v4.12.22 (2024/03/04)¶
- SECURITY: Fix leak of ad-auth user into job logs. Security (AD-AUTH User Disclosure (CVE-2024-RKN0001))
- Handle null ptrs for searching
v4.12.21 (2024/03/03)¶
- dr-waltool / passive replication (manager) - decouple locking when doing a backup or manager sync. This will prevent the system from becoming unresponsive on hung or stalled backups.
- Remove a go-routine leak when purging / archiving jobs (drpcli v4.12.9)
v4.12.20¶
- Allow for removal of duplicate objects across layers
Provision Content¶
v4.12.12 (2024/07/02)¶
- hpe: Add timeout parameters for some ilorest calls
v4.12.11 (2024/04/01)¶
- bios: Don't install a raid tool that conflicts with the raid system
v4.12.10 (2024/03/08)¶
- flash: Handle AMD HPE packages better
Plugins¶
v4.12.19 (2024/08/08)¶
- bios: Fix issue with dell-pending-config-jobs get set to a structure
v4.12.18 (2024/07/09)¶
- vmware: handle config erasure by vmware tools on upgrade/install of vibs
v4.12.17 (2024/04/01) - Requires DRP v4.11.32 or higher¶
- raid: Rework raid-install-tools to allow for future and past raid tools
- raid: Update the perccli tools
- raid: Fix perccli to stop if it finds unparsable data
- raid: Fix perccli-json to handle bus data better
v4.12.16 (2024/03/20)¶
- SECURITY: all: Update protobuf library to handle vulnerability info
v4.12.15 (2024/03/19) - Requires DRP v4.12.23 or higher¶
- awssecman: New plugin that can used AWS security manager to retrieve secrets.
- azkeyvault: New plugin that can used Azure Key Vaults to retrieve secrets.
- cmdvault: New plugin that can used command line tools to get secrets.
v4.12.14 (2024/03/13)¶
- ipmi: Update redfish library and ipmi-status-validation to fail on critial errors and optionally on warnings
RackN Plugins¶
v4.12.2 (2024/03/20)¶
- SECURITY: all: Update protobuf library to handle vulnerability info
- SECURITY: all: Update net library to handle vulnerability
- SECURITY: all: Update crypto library to handle vulnerability
Universal¶
v4.12.1 (2024/03/22)¶
- universal-decommission can now replace some or all of the default decommission tasks.
Release v4.11¶
DRP¶
v4.11.32 (2024/03/19)¶
- Send expanded decrypt URI to the plugin handing secure parameter decryption
v4.11.31 (2024/03/03)¶
- dr-waltool / passive replication (manager) - decouple locking when doing a backup or manager sync. This will prevent the system from becoming unresponsive on hung or stalled backups.
- Remove a go-routine leak when purging / archiving jobs (drpcli v4.11.13)
v4.11.30¶
- Allow for removal of duplicate objects across layers
Provision Content¶
v4.11.22 (2024/07/02)¶
- hpe: Add timeout parameters for some ilorest calls
v4.11.21 (2024/04/01)¶
- bios: Don't install a raid tool that conflicts with the raid system
v4.11.20 (2024/03/08)¶
- flash: Handle AMD HPE packages better
Plugins¶
v4.11.18 (2024/08/08)¶
- bios: Fix issue with dell-pending-config-jobs get set to a structure
v4.11.17 (2024/07/09)¶
- vmware: handle config erasure by vmware tools on upgrade/install of vibs
v4.11.16 (2024/04/01) - Requires DRP v4.11.32 or higher¶
- raid: Rework raid-install-tools to allow for future and past raid tools
- raid: Update the perccli tools
- raid: Fix perccli to stop if it finds unparsable data
- raid: Fix perccli-json to handle bus data better
v4.11.15 (2024/03/19) - Requires DRP v4.11.32 or higher¶
- awssecman: New plugin that can used AWS security manager to retrieve secrets.
- azkeyvault: New plugin that can used Azure Key Vaults to retrieve secrets.
- cmdvault: New plugin that can used command line tools to get secrets.
v4.11.14 (2024/03/13)¶
- ipmi: Update redfish library and ipmi-status-validation to fail on critial errors and optionally on warnings
Release Groupings¶
The following are the groupings of updates. There versions travel together. Where possible, the change notes which specific piece is updated.
DRP¶
UX¶
Content Packs¶
- batch
- burnin
- chef-bootstrap
- cisco-support
- classify
- cloud-wrappers
- coreos
- dell-support
- dev-library
- drp-community-content
- drp-community-contrib
- drp-prom-mon
- edge-lab
- flash
- flexiflow
- grafana
- hardware-tooling
- hashicorp
- hpe-support
- image-builder
- krib
- kube-lib
- kubespray
- lenovo-support
- nagios
- napalm
- os-other
- packer-builder
- prometheus
- proxmox
- rancheros
- sledgehammer-builder-centos-7
- sledgehammer-builder
- supermicro-support
- task-library
- terraform
- ubuntuhammer-builder
- validation
- vmware-lib
Plugins¶
- bios
- blancco-lun-eraser
- callback
- certs
- eikon
- endpoint-exec
- event2audit
- filebeat
- image-deploy
- ipmi
- netbox
- packet-ipmi
- raid
- slack
- tower
- triggers
- vault
- virtualbox-ipmi
- vmware
RackN Plugins¶
- ad-auth
- agent
- docker-context
- rack