Release Notes for Self-Hosted Styra DAS
Self-Hosted Styra DAS 0.16.3 was released on November 27th, 2024.
New Features and Changes
Beta UI name transition and additions
The Beta UI label is transitioning to "New UI", with the existing UI labeled as "Legacy UI".
Added Workspace-level decision logs view and decision timeseries metrics graphs to the Usage tab. Added kind (system, stack, library) filter to Workspace search. Additional support for more System and Stack user role types in the policy editor. Added the list of all the user's roles to the user info dialog.
Upgraded to OPA v0.70.0
The internal version of OPA used by Styra DAS has been upgraded to OPA 0.70.0.
Improved performance for /v2/authz/rolebindings API in tenants with many resources
In tenants with hundreds of resources (Systems, Stacks, and Libraries) and hundreds of users and API tokens, the v2 authz rolebindings endpoint performance could slow to 6+ seconds, especially in self-hosted environments using a PostgreSQL database for the DAS data layer. Moving to a multi-threaded architecture improves this endpoint's performance in these scenarios, reducing request times by up to 2/3 while still preserving pagination ordering.
Return sample batch count in logreplay APIs
The /v1/logreplay
and /v2/logreplay
APIs have been updated to additionally return the count
for each batch object in samples
.
SLP memory and CPU config options in Kubernetes system install customization
The Kubernetes system type now allows for customizing the SLP memory and CPU resource requests and limits during install asset configuration.
Relay client v0.1.11 base image hardened to remove unnecessary libraries with CVEs
In the relay client v0.1.11 release, the base image has been hardened to remove libraries with new CVEs and which were not used by the client.
Fixed Issues
Slow initial UI load for Workspace admins with many systems and users
In tenants with several hundred systems and several hundred users, the initial UI load for a Workspace admin user could be slowed by several seconds.
Policy editor auto preview and validate triggered before policy publishing
After running preview or validate in the policy editor, any code change to a policy would prematurely trigger a rerun of preview or validate automatically, which could result in an error for an invalid or incomplete policy change.
Data source conflict error not displayed
In some cases, if a Git or HTTPS data source path and name conflicted with an existing data source, the conflict error would not be displayed in the UI.
Workspace access control missing roles and SSO claims
When viewing the Workspace-level access control tab, access control resources may not have been shown depending on navigation path to the tab.
Library roles assigned via SSO claims couldn't edit policies
Users assigned the LibraryOwner or LibraryEditor roles via SSO claims could not edit Library files.
SSO configuration modal missing rolebindings
In some cases, the SSO configuration modal did not display the configured SSO rolebindings.
500 response on Terraform run task configuration API instead of 403
Users with System roles without permissions for Terraform run task configuration received a 500 API response instead of the expected 403.
Users with WorkspaceViewer role cannot view Workspace tabs
Users with only a WorkspaceViewer role could not access Workspace-level tabs in the UI.
Users with SystemOwner role could not modify bundle registry settings
SystemOwner role users were not able to access and edit system bundle registry settings as expected.
UI policy editor error on autocomplete of long complex strings
In some rare cases in the UI policy editor, autocomplete of a very long complex string could result in a UI error.