Skip to content

Releases: PaladinCloud/CE

3.0.5

28 Mar 14:34
@santhosh-challa santhosh-challa
3.0.5
264bc45
Compare
Choose a tag to compare
3.0.5 Latest
Latest

Release Updates

Important Information

  • Please note that this release contains MySQL version upgrade.
  • This release is for NEW installs only - If you are already in previous versions of Paladin Cloud please do not upgrade to the current version. We will be coming up with the migration plan in the upcoming release.

Installer Changes

  • Lambda runtime updated
  • MySQL version update as 5.7 version is deprecated by AWS
  • Updated API Gateway Keys expiration

What's Changed

Full Changelog: 3.0.4...3.0.5

Contributors

rnithinpaladin
Assets 2

3.0.4

19 Dec 17:35
@santhosh-challa santhosh-challa
3.0.4
50003ab
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
3.0.4

Release Updates

Installer Changes

  • Updated the web app docker image to use the official docker image from Nginx to resolve the installation issue.

What's Changed

Full Changelog: 3.0.3...3.0.4

Contributors

rnithinpaladin
Assets 2

3.0.3

09 Nov 17:01
@santhosh-challa santhosh-challa
3.0.3
342efab
Compare
Choose a tag to compare
3.0.3

Release Updates

Installer Changes

  • Updated the GPG Key for Nginx to solve the installation issue.

What's Changed

Full Changelog: 3.0.2...3.0.3

Contributors

rnithinpaladin
Assets 2

3.0.2

31 Oct 16:52
@santhosh-challa santhosh-challa
3.0.2
4fb11cc
Compare
Choose a tag to compare
3.0.2

Release Updates

Installer Changes

  • Corrected the UI dependency which is causing the build failure.
  • Increased MySQL version as the current version is deprecated by AWS.

What's Changed

Full Changelog: 3.0.1...3.0.2

Contributors

sidharthjain-zemoso and rnithinpaladin
Assets 2

3.0.1

11 Oct 17:00
@santhosh-challa santhosh-challa
3.0.1
f732f1b
Compare
Choose a tag to compare
3.0.1

Release Updates

UI Changes

  • Fixed bugs across the application
  • Enhanced the filtering on UI list views

Policy Updates

  • Added 3 Azure and 2 GCP cost policies
  • Updated the Policy documentation
  • Enhanced the Policy implementation for a few policies.
  • Other minor policy fixes and updates
  • Updated the resolution links for all the policies to point to appropriate descriptions

Other Updates

  • Fixed bugs related to Azure and GCP autofix functionality

What's Changed

Read more

Contributors

plyubich, raviteja-mandala, and 10 other contributors
Assets 2

3.0.0

02 Aug 16:43
@santhosh-challa santhosh-challa
3.0.0
4cba378
Compare
Choose a tag to compare
3.0.0

Please note this is a breaking change and existing users would need to re-install the Paladin Cloud

  • As this is a breaking change, please uninstall the existing stack using sudo python3 manager.py destroy command.
  • Also, please terminate the existing ec2 instance which was used for installation.
  • Post uninstallation, please use the latest AMIs to set up a new ec2 instance to start installing Paladin Cloud 3.0.0
  • Here are the updated installation instructions.

Release Updates

UI Changes

  • Updated UI screens and filters
  • Ability to disable the policies in Admin UI
  • Improved Autofix workflow
  • Ability to re-arrange the dashboard widgets in a session.
  • Other bugs across the application

New Features

New self-service Admin UI screens

  • Users
  • Plugins
  • Policy
  • Asset Groups

New Notifications framework

  • Updated Notification UI screen
  • Added in-app notifications feature

Policy Changes

  • New policies are added
  • Recategorised and added new policies under Cost
  • Updated the Policy descriptions
  • Fixed bugs in some existing policies

Plugin Changes

  • New Tenable plugin with new policies to report vulnerabilities.
  • Ability to push Redhat ACS notifications. Please note that this integration is currently manual.

Elastic Search Upgrade

  • We have upgraded Elasticsearch 5.5 to OpenSearch 2.5.

Installation Changes

  • Python and Terraform upgrades.
  • Installation instructions are updated please refer to the latest instructions here.

What's Changed

Read more

Contributors

astra1, ujwalkumar1995, and 21 other contributors
Assets 2

2.0.2

14 Mar 12:33
@santhosh-challa santhosh-challa
2.0.2
55b501d
Compare
Choose a tag to compare
2.0.2

Updates

  • Fixed below issues:
    • UI unresponsive post access token expiry.
    • Data Shipper issue in collecting daily trends for asset groups, which fixed the problems with Asset, Category and Policy Compliance trends not reporting the latest trends
    • Made the Policy Parameters editable for configurable policies
    • Fixed bug with the VPC peering policy
    • Corrected the permissions issue while collecting the region data for S3
    • Modified the layout of the edit policy screen to improve the user experience
    • Fixed a bug while creating the sticky exceptions
  • We have updated the Policy Category nomenclature. Users migrating from the previous releases need to follow these steps to update the historical Policy Category Nomenclature.
  • We are now using the AWS SecurityAudit policy for installation. The same is needed to install Paladin or monitor a cloud account. We will update the wiki accordingly

Known Issues

  • We have identified the below issue during our test cycle and the same will be fixed in the upcoming releases:
    • Observed that the operations trend line missing for GCP in certain cases.
    • Distribution Across Application widget intermittently missing data in Policy Compliance UI
    • Tagging Summary counts are not matching in certain cases in Tagging Compliance screen.

What's Changed

Full Changelog: 2.0.1...2.0.2

Contributors

santhosh-challa, raviteja-mandala, and 9 other contributors
Assets 2

2.0.1

27 Feb 10:29
@santhosh-challa santhosh-challa
2.0.1
e5b8106
Compare
Choose a tag to compare
2.0.1

Updates

  • Fixed minor issues across policy metadata, UI and installer.
  • This release changed the variable in default.local.py, so existing users must merge their local.py with the latest changes from default.local.py before redeploying.

What's Changed

Full Changelog: 2.0.0...2.0.1

Contributors

santhosh-challa, sidharthjain-zemoso, and 2 other contributors
Assets 2

2.0.0

17 Feb 13:16
@santhosh-challa santhosh-challa
2.0.0
e93b5bf
Compare
Choose a tag to compare
2.0.0

Introducing Cognito

  • We have moved out from default DB-based authentication and authorization to AWS Cognito.
  • Now both Authentication and Authorization in the App are done through Cognito.
  • We are working on user management using Cognito and the same would be released in the next release. Till then, users need to manage the users directly using Cognito service.
  • We will update the wiki on how user management and Azure AD setup can be done using Cognito.
  • As we are adding Cognito for the first time, existing users need to re-create their Paladin Cloud users in Cognito.
  • Installation readme will be updated accordingly.

Policy Updates

  • We have changed the nomenclature in the Paladin Cloud on how we manage the rules/policies. Earlier there were Rules and Policies in the system, now we have completely moved out from rules. Now We just have Policies. Documentation pages will be updated accordingly.
  • Added 8 new policies across AWS and GCP
  • Also updated Policy metadata of the major policies by reviewing their documentation, category, and severity.
  • We are improving the wiki for the existing policies. This is an ongoing effort.

UI Updates

  • New Policy Admin screen replaced the old Rules and Policy screen.
  • Fixed bugs across the application

Installer Updates

  • Added the required configurations to default.local.py for Cognito.
  • Updated elastic search default shard size from 3 to 1 to improve the read performance. There will be no change for current users.
  • Reduced the permissions needed for installing the Paladin Cloud further. Documentation will be updated in the coming days accordingly.
  • Introduced a new configuration parameter in local.py for mandatory tags. Now users can define the mandatory tags before redeploying or installing.
    The same will be used across the UI to filter the assets and run the tagging policies.
  • As the new configurations are added to default.local.py in this release, current users need to merge the new default.local.py with their existing local.py before redeploying.

What's Changed

Read more

Contributors

santhosh-challa, sidharthjain-zemoso, and 8 other contributors
Assets 2

1.5.2

06 Jan 17:34
@santhosh-challa santhosh-challa
1.5.2
37ec873
Compare
Choose a tag to compare
1.5.2

Policy Updates

  • Added 11 new policies across Azure and GCP
  • Fixed the bugs with the existing policy metadata/documentation.
  • We are improving the wiki for the existing rules. This is an ongoing effort.

UI Updates

  • Fixed bugs across the application

Installer Changes:

  • Users do not need to expose port 80 post installation now. We have fixed the issue and now the installer will expose port 80 to CIDR only.
  • Added the tags to all the missing installer resources.
  • Added the ability to configure the batch compute instance and the batch job VCPU and RAM.
  • Please note that we have added missing tags to AWS Batch resources. You need to destroy the Batch resources before upgrading the Paladin Cloud. Please follow the commands mentioned in the doc to destroy the Batch resources before upgrading to the current release

Known Issues

  • We are testing the 4 GCP policies, these may not be fully functional in this release.

What's Changed

New Contributors

Full Changelog: 1.5.1...1.5.2

Contributors

santhosh-challa, raviteja-mandala, and 10 other contributors
Assets 2