|
3 | 3 | Upgrade Notes
|
4 | 4 | =============
|
5 | 5 |
|
| 6 | +.. _ref-upgrade-notes-v3-9: |
| 7 | + |
| 8 | +|st2| v3.9 |
| 9 | +---------- |
| 10 | + |
| 11 | + * Compatibility updates. |
| 12 | + - Linux distribution support for Ubuntu 22.04 Jammy and RockyLinux 9 (RHEL9 compatible) has been added. Support for Ubuntu 18.04 Focal and CentOS 7 has been removed. |
| 13 | + - Python versions from ``3.8`` to ``3.11`` are supported along with the removal of ``3.6`` support. |
| 14 | + - MongoDB compatibility ranges from ``4.x`` to ``v7.x`` for the official MongoDB database. |
| 15 | + |
| 16 | + * Configuration updates required in ``st2.conf``. |
| 17 | + |
| 18 | + Several ``st2.conf`` database options have been renamed or deprecated. Most of the options will continue to work using their old name. |
| 19 | + However, if you use `[database].ssl_keyfile` and/or `[database].ssl_certfile`, you MUST migrate to `[database].tls_certificate_key_file`. |
| 20 | + This new option expects the key and certificate in the same file. Use something like the following to create that file from your old files: |
| 21 | + |
| 22 | + .. code-block:: |
| 23 | +
|
| 24 | + cat path/to/ssl_keyfile path/to/ssl_certfile > path/to/tls_certificate_key_file |
| 25 | + |
| 26 | + |
| 27 | + Other options that were renamed under ``[database]`` are (more details available in ``st2.conf.sample``): |
| 28 | + |
| 29 | + * ``ssl`` -> ``tls`` |
| 30 | + * ``ssl_cert_reqs`` -> ``tls_allow_invalid_certificates`` (opt type change: string -> boolean) |
| 31 | + * ``ssl_ca_certs`` -> ``tls_ca_file`` |
| 32 | + * ``ssl_match_hostnames`` -> ``tls_allow_invalid_hostnames`` (meaning is inverted: the new option is the opposite of the old) |
| 33 | + |
| 34 | + |
6 | 35 | .. _ref-upgrade-notes-v3-8:
|
7 | 36 |
|
8 | 37 | |st2| v3.8
|
@@ -53,7 +82,7 @@ Upgrade Notes
|
53 | 82 | * As part of extending RBAC support to include protecting access to datastore operations, if
|
54 | 83 | you have RBAC enabled and any workflows access the datastore, then any user with execute
|
55 | 84 | permissions for those workflows will need to be assigned an RBAC role with the appropriate
|
56 |
| - key_value_pair permissions. |
| 85 | + key_value_pair permissions. |
57 | 86 | Further information can be found in the :doc:`RBAC documentation <rbac>`.
|
58 | 87 |
|
59 | 88 | * Additional garbage collection options are available to automatically delete old tokens.
|
@@ -102,7 +131,7 @@ Upgrade Notes
|
102 | 131 |
|
103 | 132 | * As part of extending RBAC support to include protecting access to datastore operations, if
|
104 | 133 | you have RBAC enabled and any sensors access the datastore, then the ``sensor_service`` user will
|
105 |
| - need to be assigned an RBAC role with the appropriate key_value_pair permissions. |
| 134 | + need to be assigned an RBAC role with the appropriate key_value_pair permissions. |
106 | 135 | Further information can be found in the :doc:`RBAC documentation <rbac>`.
|
107 | 136 |
|
108 | 137 | .. _ref-upgrade-notes-v3-6:
|
@@ -156,10 +185,10 @@ Upgrade Notes
|
156 | 185 |
|
157 | 186 | * ``%`` interpolation in st2 configuration parameters is no longer supported. Update your configuration
|
158 | 187 | parameters to fix strings if you use ``%`` interpolation to lookup keys as part of your parameter.
|
159 |
| - |
| 188 | + |
160 | 189 | Now ``%`` is a valid character in parameter values.
|
161 |
| - |
162 |
| - This increases security because passwords with a ``%`` in it do no longer result into an error. |
| 190 | + |
| 191 | + This increases security because passwords with a ``%`` in it do no longer result into an error. |
163 | 192 |
|
164 | 193 | * The underlying database field type for storing large values such as action execution result has
|
165 | 194 | changed for various database models (ActionExecutionDB, LiveActionDB, WorkflowExecutionDB,
|
@@ -288,11 +317,11 @@ Upgrade Notes
|
288 | 317 | the ``/opt/stackstorm/st2`` virtualenv. This is caused by the fact that the core ``st2``
|
289 | 318 | package no longer bundles in the ``pyasn1`` module, so it will be absent post-upgrade.
|
290 | 319 | Running following command will be necessary for ``st2auth`` to function again:
|
291 |
| - |
| 320 | + |
292 | 321 | .. code-block:: bash
|
293 | 322 |
|
294 | 323 | /opt/stackstorm/st2/bin/pip install pyasn1
|
295 |
| - |
| 324 | +
|
296 | 325 |
|
297 | 326 | .. _ref-upgrade-notes-v3-0:
|
298 | 327 |
|
@@ -405,7 +434,7 @@ Upgrade Notes
|
405 | 434 | ``sudo st2ctl reload --register-runners`` command.
|
406 | 435 |
|
407 | 436 | Keep in mind that all the runners which are installed inside |st2| virtual environment are now
|
408 |
| - automatically loaded and registered on each |st2| service start up. You only need to run |
| 437 | + automatically loaded and registered on each |st2| service start up. You only need to run |
409 | 438 | ``sudo st2ctl reload --register-runners`` if you are using runner outside the service context or
|
410 | 439 | if you didn't restart the services.
|
411 | 440 |
|
|
0 commit comments