Release Notes for Styra DAS
This page describes the release notes for Styra DAS delivered in September 2021.
Release Summary
Styra is built on the Open Policy Agent (OPA), a popular and widely deployed open source project developed by the founders of Styra. With primary credibility for the underlying technology, the Styra team and technology are both proven in production across verticals. Styra enables enterprises to define, enforce, validate, and continually monitor security, compliance and operational policies across the cloud-native application stack. Styra has reinvented the authorization solutions to mitigate customer risk, and reinforce commitment to trust and transparency in safeguarding customers’ data. Styra’s Declarative Authorization Service (DAS) is a sophisticated management plane that provides context-based guardrails, built from a graphical policy library to mitigate risk, reduce human error and accelerate development. Styra makes it possible for enterprises to implement policy-as-code controls and to prove their effectiveness to both internal and external security and compliance audiences.
September 28, 2021
This Styra DAS 20210928 release delivers the following new enhancements and list of fixed issues.
New Features and Enhancements
This section describes the new enhancements in Styra DAS 20210928.
API
- This release optimizes the creation of stacks and underlying resources, significantly reducing the amount of time it takes to create a new stack.
CLI
-
The
styra-cli
, replay, stacks compliance, and systems compliance APIs have been extended to mockopa.runtime
andhttp.send
results. Specify“mocks”: {“opa.runtime“: {"test":"test1"} }
or{"http.send": {"data" : [{"url": "https://sample.com/test"``, "method": "get", "result": {"status_code": 404 }}]}
on the logreplay, stacks, and systems compliance API requests.curl -X POST -H 'authorization: bearer XXXXX' -H 'styra-tenant: test' -H 'Content-Type: application/json' https://test.styra.com/v1/systems/YYYYY/validate/compliance -d '{"mode":"all", "mocks": {"http.send": {"data" : [{"url": "https://sample/test", "method": "get", "result": {"status_code": 404 }}]}, "opa.runtime": {"result": {"test":"test1"}}}}'
The
http.send
mock is an array of mock results; one per URL and method. If there is no match, it invokeshttp.send
.For
styra-cli
, update the.styra.yaml
file and add amocks
configuration:checks:
deployments:
system_id: YYYYY
mutating: false
mocks: '{"http.send": {"data" : [{"url": "https://sample/test", "method": "get", "result": {"status_code": 404 }}]}, "opa.runtime": {"result": {"test":"test1"}}}'
policy: admission_control
files:
- services/*/deployment.yaml
GUI
- This release decreases the time taken when previewing a policy. The Preview button now only checks the currently open policy for syntax errors before evaluating the input and showing output.
Systems
This release introduces the native support of Istio, Kong Mesh, and Kuma within Styra DAS, enabling users to combine service mesh solutions with the only authorization management platform that supports trusted cloud architecture. The Service Mesh system types: Istio, Kong Mesh, and Kuma are available across all DAS editions. Styra DAS allows teams to manage policies across a broad spectrum of systems, like Kubernetes, microservices, and public cloud.
With Styra DAS and your chosen service mesh, you can do the following tasks:
-
Automate policy-as-code based control for services.
-
Govern, monitor, and audit traffic flow and decisions for real-time verification.
-
Increase application reliability with policy-based traffic management.
Issues Fixed
This section describes the issues fixed in Styra DAS 20210928.
GUI
-
This release introduced a change that restored support to run the compliance validation on user-created monitor policy for Custom systems.
-
Fixed an issue for incorrect display of data sources or policies that had dots in their names.
Metrics
- Fixed
metrics-exporter
cleanup routine mistakenly pruning still in-use secrets.
September 21, 2021
This Styra DAS 20210921 release delivers the following new enhancements and fixed issue.
New Features and Enhancements
This section describes the new enhancements in Styra DAS 20210921.
Data Sources
- Terraform stacks now has the ability to add data sources.
Policy Bundle
- This release introduces the ability to control or tag a DAS-built bundle so that the user knows the DAS-built bundle contains the latest bulk upload of policy.
Issues Fixed
This section describes the issue fixed in Styra DAS 20210921.
Git
- Fixed an issue that did not allow changing workspace Git configuration on some conditions.
September 14, 2021
This Styra DAS 20210914 release delivers the following new enhancements and list of fixed issues.
New Features and Enhancements
This section describes the new enhancements in Styra DAS 20210914.
Git
- When configuring Git storage for a system or stack, users can now test the configuration before saving it. This surfaces errors before the configuration is finalized, therefore reducing troubleshooting time and increasing correctness.
GUI
- This release enhances the Quick Start home UI for users to easily view on smaller windows and see the Close button when using light theme.
Issues Fixed
This section describes the issues fixed in Styra DAS 20210914.
Git
- System delete behavior was modified to not wipe out the associated Git secret if it is not system-specific. A system-specific secret is created with the prefix
systems/SYSTEM_ID/*
. The modified delete behavior ensures that shared secrets reused for multiple entities in Styra DAS were not affected by the deletion of any one of the linked entities. Additionally, system-specific secrets would continue to be deleted when the associated system was marked for deletion.
GUI
-
Fixed an issue that caused the UI to show a blank screen when navigating to the Deployments tab under the SYSTEMS pane.
-
Fixed an issue where the current Quick Start step failed to display a number.
September 7, 2021
This Styra DAS 20210907 release delivers the following new enhancements and list of fixed issues.
New Features and Enhancements
This section describes the new enhancements in Styra DAS 20210907.
Git
- Git data source plugin will now use the
HTTP_PROXY
settings from the environment. This ensures that libraries configured with Git will behave similar to a system’s Git integration.
GUI
- This release introduces a new Quick Start landing page or dialog that shows all the currently available Quick Starts.
Issues Fixed
This section describes the issues fixed in Styra DAS 20210907.
Systems
-
Fixed an issue where a system could not be created immediately after deleting a system; when those two systems share a Git configuration. Previously, one system had to wait up to 10 minutes before the system with identical Git configuration could be created.
-
Fixed an issue where deleting a system will no longer delete it’s corresponding Git secret, if the secret was not created by Styra DAS.