Skip to main content

Release Notes for Styra DAS

This page describes the release notes for Styra DAS delivered in December 2021.

Release Summary​

Styra is built on the Open Policy Agent (OPA), a popular and widely deployed open source project developed by the founders of Styra. With primary credibility for the underlying technology, the Styra team and technology are both proven in production across verticals. Styra enables enterprises to define, enforce, validate, and continually monitor security, compliance and operational policies across the cloud-native application stack. Styra has reinvented the authorization solutions to mitigate customer risk, and reinforce commitment to trust and transparency in safeguarding customers’ data. Styra’s Declarative Authorization Service (DAS) is a sophisticated management plane that provides context-based guardrails, built from a graphical policy library to mitigate risk, reduce human error and accelerate development. Styra makes it possible for enterprises to implement policy-as-code controls and to prove their effectiveness to both internal and external security and compliance audiences.

December 21, 2021​

This Styra DAS 20211221 release delivers the following new enhancements and issues fixed.

New Features and Enhancements​

This section describes the new enhancements in Styra DAS 20211221.

GUI​

  • Bundle Registry and User Activity Export updates the user interface that match each other as well as Decision Export’s new user interface.

  • This release adds a menu selection for Activity Types: All or Audit. Using these selections, you can filter whether the User Activity log displays certain event types.

  • OPA v0.34.0 introduced the in operator that requires a future import statement to opt-in. DAS policy editor now supports the in operator and will auto import the opt-in statement once if it detects that the policy is utilizing the in operator.

Issues Fixed​

This section describes the issue fixed in Styra DAS 20211221.

API​

  • Fixed an issue when some POST|PUT|PATCH endpoints did not have the body parameter.

Systems​

  • Fixed an issue where slashes were not properly escaped for label names in the mutating rules Inject Missing Labels and Add Namespace Labels to Resource for the Kubernetes system type.

December 14, 2021​

This Styra DAS 20211214 release delivers the following new enhancements and issues fixed.

New Features and Enhancements​

This section describes the new enhancements in Styra DAS 20211214.

API​

  • This release supports the API specifications in OpenAPI v3 format.

GUI​

  • This release allows the configuration of Export Interval in the Decision Export settings pane.

Issues Fixed​

This section describes the issue fixed in Styra DAS 20211214.

Systems​

  • Removed the pods and certificatesigningrequest subresources from the Kubernetes mutating webhook install manifest.

December 7, 2021​

This Styra DAS 20211207 release delivers the following new enhancements and issues fixed.

New Features and Enhancements​

This section describes the new enhancements in Styra DAS 20211207.

API​

  • This release delivers API specification version v2.0.0 and deprecates API specification version v1.0.0. All definitions are renamed by adding path prefix to solve the collisions in different structures from different packages with same name. Definition with name v1.ErrorResponse is renamed to meta.v1.ErrorResponse.

Backend​

  • When the GIT_IN_MEMORY_ONLY feature flag is enabled for a cluster, data sources based on Git repositories will be kept in-memory instead of being saved to disk. This is also true for Git repositories that hold policies for systems, stacks, and so on. You may want to increase the memory on affected pods if your Git repositories are very large.

  • The built-in http.send function is available with a limitation, where the enable_redirect option is always set to false, and setting to true is not allowed.

  • This release delivers new versions of datasources-agent and styra-local-plane (SLP). Their versions are now 1.2.0 and 0.5.0 respectively.

GUI​

  • This release adds a button to Decision Export that allows users to test their current export configuration.

  • Starting with this release, the Preview and Validate are redesigned to have tabs for each section.

    • Add UI support in Preview and Validate to mock responses when using http.send and opa.runtime.

    • OPA v0.34.0 introduces a print() function for debugging purposes. In addition to showing the output, previewing a policy also shows the print statements.

  • This release adds Google Storage selection to the Policy bundle registry drop down in bundle registry. It also adds fields to the Bundle Registry form that allow users to manually add their access key and secret.

Security​

  • This release adds additional decision masking examples to Kubernetes systems.

Issues Fixed​

This section describes the issues fixed in Styra DAS 20211207.

Backend​

  • Fixed an issue for datasources-agent when filtering the contents of data sources, and additionally error reporting was provided. For styra-local-plane, the performance of decisions processing was improved.

Data Sources​

  • Fixed an issue when a data source agent pod crashed and remained in crash loop, because it was not able to delete the objects without namespaces.

GUI​

  • Removed the top-right bundle download in favor for the bundle downloads in each of the bundle cards. Fixed each bundle download card with the correct download filename and extension.