Release Notes for Styra DAS On-Premises 0.5.5

Styra DAS On-premises version 0.5.5 was released on December 8, 2021.

Release Summary

This release delivers the new features and enhancements and the list of issues fixed in Styra DAS On-premises 0.5.5. The latest Release Notes for Styra DAS is available here.

New Features and Enhancements

This section describes the new features and enhancements in Styra DAS On-premises 0.5.5.

Backend

• This release improves the error handling and messaging in some scenarios when configuring Git storage for systems, stacks, or workspace policies.

• The installation script bucket URL now reflects the S3 bucket endpoint parameter and utilizes Kubernetes secrets and envFrom instead of explicit environment variables.

• This release updates the Envoy and Istio systems' OPA instances configured in Quick Starts to only listen on localhost. However, diagnostic endpoints like health are still open generally on port 8282.

GUI

• Starting with this release, the Delete operation on systems, stacks, and libraries is moved from the Settings pane into the DAS inventory menu.

• Support for multiple Quick Starts in progress at once.

• This release introduces multiple Preview enhancements.

• Decisions now display time in Coordinated Universal Time (UTC) instead of local time.

• Adds tabs to the tokens UI to manage user vs system tokens.

• Starting with this release, you can now create HTTP data sources in the UI from a system.

• Libraries now default to refs/heads/main instead of refs/heads/master. Existing libraries that point to refs/heads/master will continue to work as expected.

Metrics

• Starting with this release, the timeseries Prometheus metrics is expanded to include Custom system types.

On-Premise

• Fine-Grained Access Control for DAS (Authorization v2) is now Beta for on-premises deployments. For instructions on how to trigger the automatic migration from Authorization v1 and enable the new capabilities such as SSO-based permissions and more granular RBAC roles.

Security

• This release adds rules to mitigate ingress-nginx Common Vulnerabilities and Exposures (CVE) in all Kubernetes versions.

• Styra DAS now enforces a [Content Security Policy](https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP) to help guard against certain types of attacks, including Cross-Site Scripting and data injection attacks.

Systems

• Policy editor can now autocomplete data sources for systems, stacks, libraries, and so on.

Issues Fixed

This section describes the issues fixed in Styra DAS On-premises 0.5.5.

API

• Fixed the errors and warnings in OpenAPI v2 specification.

• Fixed an issue where empty passphrase was sent to secrets API only when the non private key (secret) fields were updated.

Decisions

• log replay could return incorrect results consisting of errors if a new stack matching replayed system selectors was added after decisions were made without changing of the system policies.

Git

• Styra DAS blocked the Git configuration with host that was set to link-local addresses.

• Fixed an issue in the Git synchronization logic.