Version 6.0.4

Bugfix release:

• Snapshot workflow uses the correct permissions view.
• Fixed Puppet documentation table primary key, causing duplicate tags being displayed.
• Display the Puppet documentation @param text

Version 6.0.3

Bugfix release:

• Fixed issue with reports generated from a noop run displaying as their failed or changed status.
• Fixed inconsistencies between /puppet/nodes and /dashboard
• Removed timestamp condition from the statistics for Puppet on /dashboard
• Updated version string
• Refactored NeoCortex task for syncing Puppet stats with Graphite to use direct PuppetDB queries

Version 6.0.2

Bugfix release:

• Fix speed issues with /puppet/nodes and /puppet/search

Version 6.0.1

Bugfix release:

• Allow any user with permission to edit a node's Puppet classification (edit.puppet) to also classify the node into any of the infrastructure environments (Irrespective of their permission on the environment itself).
• Fix g.db not being initialised in the teardown function.

Version 6.0

• RHEL 8 support
• Allow for custom swap disk sizes in RHEL, as well as disabling swap. Swap disks are also separate
• New Puppet layout featuring Infrastructure, Service and Dynamic environments to delegate access appropriately and ease the development of changes to module and new modules
• Access to Puppet documentation directly within Cortex
• An improved permissions model
• Integration with Tenable.io
• A new Add Virtual Disk workflow
• A hopeful fix for the long-standing database-lock bug
• Further Python 3 fixes
• Certificate notes are now added to to the expiry notification e-mails/tickets
• Numerous other bug fixes / code improvements.

Version 5.2.2

Bugfix release: fix a remaining Python 3 migration bug with ServiceNow VM builds. Also increase the size of the id column on the events table as (2^23)-1 IDs is too small

Version 5.2.1

Mostly a bugfix release, but also has IPv6 support for buildvm

Version 5.1

This release contains:

ADCS ("Enterprise CA") certificates can be created through the certificate workflow
Enterprise CA certificates are automatically generated for Linux boxes (and will be automatically deployed by Puppet in a following Puppet change)
These certificates are also automatically tidied up on decommission
Certificate inventory API - allows old Let's Encrypt certificates to be automatically removed from the list when renewed
Bug fix: Rubrik tab now shows the correct VM if there are two VMs with similar/identical names
Dashboard and system info views no longer generate an error if PuppetDB is down
In progress task events will now be able to have hyperlinks to systems and subtasks
All the HTML converted to Bootstrap 4
Rubrik tab now has a link to the Rubrik UI for the system
Additional Cortex config items: RUBRIK_VIEW_URL
Additional buildvm options: SB_DEFAULT_SAN_DOMAIN, ENTCA_SERVERS
Additional decom options: ENTCA_SERVERS
Additional certmgr options: ENTCA_SERVERS, and additional create_ssl_profile parameter to PROVIDERS

Version 5.0

This version contains a number of new features, improvements and bugfixes:

• BREAKING CHANGE: Python 3 is now required, along with py3dns, and a recent version of pyOpenSSL (in addition to the previously required python packages)
• BREAKING CHANGE: *OS_TYPES required in buildvm config for mapping templates to OS types
• BREAKING CHANGE: *SET_BACKUP required in buildvm config for setting backup flag for new VMs
• Added an certificate scanning and expiry notification tool
• Snapshots of VMs or groups of VMs can now be taken in Cortex
• Puppet statistics are now presented per-environment, and logged to Grafana similarly
• Replaced the ServiceNow "tab" on the system view with an External Links dropdown that links to both ServiceNow and Satellite 6
• Added a Cortex CLI tool for initial setup and other tasks
• Code converted to Python 3
• Autocomplete in Puppet ENC editor
• Advanced search queries on the systems view, which will be deployed elsewhere later
• Default Rubrik policies can now be enforced
• Workflows can be "locked" from the UI - useful for when vCenter/Infoblox/Templates are being updated
• Workflows can be disabled in configuration
• Frequent tasks can be hidden from the events view
• Bugfix: Update systems table to remove VM UUID after decomission
• Statistics on front page are now clickable links for further detail
• REQTASKs now allowed on standard VM build / new server allocation
• Bugfix: LDAP group cache now expires correctly
• vCenter folder can be chosen when creating a VM
• Bugfix: Windows VMs now restart properly when built
• Added a "server-side no-op" function to the Cortex Puppet Bridge to allow for Puppet upgrades
• Decom workflow checking is now farmed out to a task to prevent 504 Gateway Timeouts if the check takes some time
• Bugfix: Sliders on Standard VM workflow didn't necessarily validate properly
• Bugfix: Replace YAML.load() loader with safe_load.
• Bugfix: LDAP group cache now expires correctly
• Bugfix: Systems register API works correctly

New config options:

• DEFAULT_DOMAIN: A default domain to suffix on when doing DNS lookups
• KNOWN_DOMAIN_SUFFIXES: Second-level domains that are subdomains within DEFAULT_DOMAIN
• CERT_SCAN_IP_RANGES: Ranges of IP addresses to scan for certificates
• CERT_SCAN_PORTS: Port numbers to scan within those IPs for certificates
• CERT_SCAN_PORTS_STARTTLS: A map of port numbers to STARTTLS implementations. Currently implemented are smtp, imap, and ldap.
• CERT_SCAN_WORKERS: The number of worker processes to start when running the certificate scan
• CERT_SCAN_THREAD_TIMEOUT: The maximum amount of time (in seconds) for a single IP:Port to sccan
• CERT_SCAN_EXPIRE_NOT_SEEN: Expire certificates from the database if they've not been seen in a scan in this number of days
• CERT_SCAN_EXPIRE_RESULTS: Expire scan results from the database when they're older than this number of days
• CERT_SCAN_NOTIFY: When and how to notify about expiring certificates.
• FAVOURITE_CLASSES: Classes to show specific favourite lists for in the navigation bar (previously was fixed to srv and play)

Version 4.0.4.1

This is a minor bug-fix that solves an issue where expiry e-mails were sent a day early.