Skip to content

Releases: PaladinCloud/CE

3.0.6

28 Aug 11:22
Compare
Choose a tag to compare
  1. Lambda runtime update
  2. db version update
  3. docker image fix

3.0.5

28 Mar 14:34
Compare
Choose a tag to compare

Release Updates

Important Information

  • Please note that this release contains MySQL version upgrade.
  • This release is for NEW installs only - If you are already in previous versions of Paladin Cloud please do not upgrade to the current version. We will be coming up with the migration plan in the upcoming release.

Installer Changes

  • Lambda runtime updated
  • MySQL version update as 5.7 version is deprecated by AWS
  • Updated API Gateway Keys expiration

What's Changed

Full Changelog: 3.0.4...3.0.5

3.0.4

19 Dec 17:35
50003ab
Compare
Choose a tag to compare

Release Updates

Installer Changes

  • Updated the web app docker image to use the official docker image from Nginx to resolve the installation issue.

What's Changed

Full Changelog: 3.0.3...3.0.4

3.0.3

09 Nov 17:01
Compare
Choose a tag to compare

Release Updates

Installer Changes

  • Updated the GPG Key for Nginx to solve the installation issue.

What's Changed

Full Changelog: 3.0.2...3.0.3

3.0.2

31 Oct 16:52
Compare
Choose a tag to compare

Release Updates

Installer Changes

  • Corrected the UI dependency which is causing the build failure.
  • Increased MySQL version as the current version is deprecated by AWS.

What's Changed

Full Changelog: 3.0.1...3.0.2

3.0.1

11 Oct 17:00
Compare
Choose a tag to compare

Release Updates

UI Changes

  • Fixed bugs across the application
  • Enhanced the filtering on UI list views

Policy Updates

  • Added 3 Azure and 2 GCP cost policies
  • Updated the Policy documentation
  • Enhanced the Policy implementation for a few policies.
  • Other minor policy fixes and updates
  • Updated the resolution links for all the policies to point to appropriate descriptions

Other Updates

  • Fixed bugs related to Azure and GCP autofix functionality

What's Changed

Read more

3.0.0

02 Aug 16:43
Compare
Choose a tag to compare

Please note this is a breaking change and existing users would need to re-install the Paladin Cloud

  • As this is a breaking change, please uninstall the existing stack using sudo python3 manager.py destroy command.
  • Also, please terminate the existing ec2 instance which was used for installation.
  • Post uninstallation, please use the latest AMIs to set up a new ec2 instance to start installing Paladin Cloud 3.0.0
  • Here are the updated installation instructions.

Release Updates

UI Changes

  • Updated UI screens and filters
  • Ability to disable the policies in Admin UI
  • Improved Autofix workflow
  • Ability to re-arrange the dashboard widgets in a session.
  • Other bugs across the application

New Features

New self-service Admin UI screens

  • Users
  • Plugins
  • Policy
  • Asset Groups

New Notifications framework

  • Updated Notification UI screen
  • Added in-app notifications feature

Policy Changes

  • New policies are added
  • Recategorised and added new policies under Cost
  • Updated the Policy descriptions
  • Fixed bugs in some existing policies

Plugin Changes

  • New Tenable plugin with new policies to report vulnerabilities.
  • Ability to push Redhat ACS notifications. Please note that this integration is currently manual.

Elastic Search Upgrade

  • We have upgraded Elasticsearch 5.5 to OpenSearch 2.5.

Installation Changes

  • Python and Terraform upgrades.
  • Installation instructions are updated please refer to the latest instructions here.

What's Changed

Read more

2.0.2

14 Mar 12:33
Compare
Choose a tag to compare

Updates

  • Fixed below issues:
    • UI unresponsive post access token expiry.
    • Data Shipper issue in collecting daily trends for asset groups, which fixed the problems with Asset, Category and Policy Compliance trends not reporting the latest trends
    • Made the Policy Parameters editable for configurable policies
    • Fixed bug with the VPC peering policy
    • Corrected the permissions issue while collecting the region data for S3
    • Modified the layout of the edit policy screen to improve the user experience
    • Fixed a bug while creating the sticky exceptions
  • We have updated the Policy Category nomenclature. Users migrating from the previous releases need to follow these steps to update the historical Policy Category Nomenclature.
  • We are now using the AWS SecurityAudit policy for installation. The same is needed to install Paladin or monitor a cloud account. We will update the wiki accordingly

Known Issues

  • We have identified the below issue during our test cycle and the same will be fixed in the upcoming releases:
    • Observed that the operations trend line missing for GCP in certain cases.
    • Distribution Across Application widget intermittently missing data in Policy Compliance UI
    • Tagging Summary counts are not matching in certain cases in Tagging Compliance screen.

What's Changed

Full Changelog: 2.0.1...2.0.2

2.0.1

27 Feb 10:29
Compare
Choose a tag to compare

Updates

  • Fixed minor issues across policy metadata, UI and installer.
  • This release changed the variable in default.local.py, so existing users must merge their local.py with the latest changes from default.local.py before redeploying.

What's Changed

Full Changelog: 2.0.0...2.0.1

2.0.0

17 Feb 13:16
Compare
Choose a tag to compare

Introducing Cognito

  • We have moved out from default DB-based authentication and authorization to AWS Cognito.
  • Now both Authentication and Authorization in the App are done through Cognito.
  • We are working on user management using Cognito and the same would be released in the next release. Till then, users need to manage the users directly using Cognito service.
  • We will update the wiki on how user management and Azure AD setup can be done using Cognito.
  • As we are adding Cognito for the first time, existing users need to re-create their Paladin Cloud users in Cognito.
  • Installation readme will be updated accordingly.

Policy Updates

  • We have changed the nomenclature in the Paladin Cloud on how we manage the rules/policies. Earlier there were Rules and Policies in the system, now we have completely moved out from rules. Now We just have Policies. Documentation pages will be updated accordingly.
  • Added 8 new policies across AWS and GCP
  • Also updated Policy metadata of the major policies by reviewing their documentation, category, and severity.
  • We are improving the wiki for the existing policies. This is an ongoing effort.

UI Updates

  • New Policy Admin screen replaced the old Rules and Policy screen.
  • Fixed bugs across the application

Installer Updates

  • Added the required configurations to default.local.py for Cognito.
  • Updated elastic search default shard size from 3 to 1 to improve the read performance. There will be no change for current users.
  • Reduced the permissions needed for installing the Paladin Cloud further. Documentation will be updated in the coming days accordingly.
  • Introduced a new configuration parameter in local.py for mandatory tags. Now users can define the mandatory tags before redeploying or installing.
    The same will be used across the UI to filter the assets and run the tagging policies.
  • As the new configurations are added to default.local.py in this release, current users need to merge the new default.local.py with their existing local.py before redeploying.

What's Changed

Read more