Release Notes for Styra DAS On-Premises 0.5.6

Styra DAS On-premises version 0.5.6 was released on January 11, 2022.

Release Summary

This release delivers the new features and enhancements and the list of issues fixed in Styra DAS On-premises 0.5.6. The latest Release Notes for Styra DAS is available here.

New Features and Enhancements

This section describes the new features and enhancements in Styra DAS On-premises 0.5.6.

Backend

• The built-in http.send function is available with a limitation, where the enable_redirect option is always set to false, and setting to true is not allowed.

• When the GIT_IN_MEMORY_ONLY feature flag is enabled for a cluster, data sources based on Git repositories will be kept in-memory instead of being saved to disk. This is also true for Git repositories that hold policies for systems, stacks, and so on. You may want to increase the memory on affected pods if your Git repositories are very large.

• This release delivers new versions of datasources-agent and styra-local-plane (SLP). Their versions are now 1.2.0 and 0.5.0 respectively.

GUI

• This release adds Google Storage selection to the Policy bundle registry drop down in bundle registry.

• Adds a button to Decision Export that allows users to test their current export configuration.

• Allows the configuration of Export Interval in the Decision Export settings pane.

• Bundle Registry and User Activity Export updates the user interface that match each other as well as Decision Export’s new user interface.

• OPA v0.34.0 introduced the in operator that requires a future import statement to opt-in. DAS policy editor now supports the in operator and will auto import the opt-in statement once if it detects that the policy is utilizing the in operator.

• This release adds a menu selection for Activity Types: All or Audit. Using these selections, you can filter whether the User Activity log displays certain event types.

• Starting with this release, the Preview and Validate are redesigned to have tabs for each section.

  • Add UI support in Preview and Validate to mock responses when using http.send and opa.runtime.

  • OPA v0.34.0 introduces a print() function for debugging purposes. In addition to showing the output, previewing a policy also shows the print statements.

Security

• This release adds additional decision masking examples to Kubernetes systems.

Issues Fixed

This section describes the issues fixed in Styra DAS On-premises 0.5.6.

Backend

• Fixed an issue for datasources-agent when filtering the contents of data sources, and additionally error reporting was provided. For styra-local-plane, the performance of decisions processing was improved.

GUI

• Removed the top-right bundle download in favor for the bundle downloads in each of the bundle cards. Fixed each bundle download card with the correct download filename and extension.

Relay Client

-The relay workflow was affected due to changes in verifying egress connections. Fixed the relay workflow by ensuring that relay-server is reachable from the Git synchronization logic.

Systems

• Fixed an issue where slashes were not properly escaped for label names in the mutating rules Inject Missing Labels and Add Namespace Labels to Resource for the Kubernetes system type.

• Removed the pods and certificatesigningrequest subresources from the Kubernetes mutating webhook install manifest.