Skip to content

Releases: opensearch-project/security

2.0.0.0-rc1

03 May 20:37
f234782
Compare
Choose a tag to compare

Compatible with OpenSearch 2.0.0-rc1

Enhancements

  • Remove checked-in zip files (#1774)
  • Introduce dfm_empty_overrides_all setting to enable role without dls/fls to override roles with dls/fls (#1735)
  • Add depreciation notice to security tools (#1756)
  • [Practice] Reverting changes (#1754)
  • Renames securityconfig folder to config in bundle step and makes relevant changes (#1749)
  • Updated issue templates from .github. (#1740)
  • Updates Dev guide (#1590)
  • List out test failures in CI log (#1737)
  • Make Git ignore out/ directory (#1734)
  • Fix data-stream name resolution for wild-cards (#1723)
  • Remove support for JDK14 (#1720)
  • Speeding up tests (#1715)
  • Fix min_doc_count handling when using Document Level Security (#1714)
  • Set the mapped security roles of the user so these can be used by the DLS privileges evaluator. Allow security roles to be used for DLS parameter substitution. Fixes opensearch-project/security/#1568 (#1588)
  • Convert Plugin install to only build once (#1708)
  • Upgrade to Gradle 7 (#1710)
  • Move CodeQL into parallel workfow (#1705)
  • Seperate BWC tests into parallel workflow (#1706)
  • Fixes broken test due to unsupported EC using JDK-17 (#1711)
  • Centralize version settings (#1702)
  • Remove TransportClient auth/auth (#1701)
  • Add new code hygiene workflow (#1699)
  • Remove JDK8 from CI (#1703)
  • Add CI check for demo script (#1690)
  • Introduce BWC tests in security plugin (#1685)
  • Correct the step name in CI (#1683)
  • Add support for DLS Term Lookup Queries (#1541)

Bug fixes

  • Add signal/wait model for TestAuditlogImpl (#1758)
  • Switch to log4j logger (#1751)
  • Remove sleep when waiting for node closure (#1722)
  • Remove explictt dependency on jackson-databind (#1709)
  • Fix break thaat was missed during a merge (#1707)
  • Revert "Replace opensearch class names with opendistro class names during serialization and restore them back during deserialization (#1278)" (#1691)
  • Update to most recent verson of jackson-databind (#1679)
  • Fixed rest status for the replication action failure with DLS/FLS and (#1677)
  • Downgrade Gradle version (#1661)

Maintenance

  • Incremented version to 2.0-rc1. (#1764)
  • Upgrade to opensearch 2.0.0 alpha1 (#1741)
  • Upgrade to OpenSearch 2.0.0 (#1698)
  • Move to version 2.0.0.0 (#1695)

1.3.1.0

31 Mar 21:05
efc2741
Compare
Choose a tag to compare

Compatible with OpenSearch 1.3.1

Bug fixes

  • Fix min_doc_count handling when using Document Level Security (#1712)

Maintenance

  • Bump plugin version to 1.3.1.0 and OpenSearch dependency version to 1.3.1 (#1697)
  • Add 1.3.1 release notes (#1713)

1.3.0.0

18 Mar 03:13
9bf0ab8
Compare
Choose a tag to compare

Compatible with OpenSearch 1.3.0

Enhancements

  • Adds CI support for Java 8, 11 and 14 (#1580)
  • Updates the test retry-count to give flaky tests more chances to pass (#1601)
  • Adds support for OPENSEARCH_JAVA_HOME (#1603)
  • Adds auto delete workflow for backport branches (#1604)
  • Create the plugin-descriptor programmatically (#1623)
  • Add test to make sure exception causes aren't sent to callers (#1639)
  • Switch gradle to info logging for improved test debugging (#1646)
  • Remove artifact step from CI workflow (#1645)
  • Adds ssl script (#1530)
  • Adds Java-17 to CI matrix (#1609)
  • Reverts ssl script PR (#1637)
  • Remove java17 from 1.3 build matrix (#1668)

Bug fixes

  • Bumps JJWT version (#1589)
  • Updates backport workflow with custom branch and github app (#1597)
  • Always run checks on PRs (#1615)
  • Adds 'opens' command-line argument for java.io libraries to unblock build (#1616)
  • Adds jacoco report and pass the location to codecov (#1617)
  • Fixes the settings of roles_separator (#1618)
  • Use standard opensearch.version property (#1622)

Maintenance

  • Updates bug template (#1582)
  • Updates jackson-databind library version (#1584)
  • Upgrades Kafka version (#1598)
  • Upgrades Guava version (#1594)
  • Update maintainers list (#1607)
  • Exclude velocity 1.7 from OpenSAML dependency (#1606)
  • Migrate build system to gradle (#1592)
  • Updates documentation for practices for maintainers (#1611)
  • Remove jcenter repository (#1625)
  • Remove '-SNAPSHOT' from opensearch.version in plugin descriptor (#1634)
  • Add git ignore for VScode IDE settings (#1629)
  • Remove netty-tcnative dependency to unblock security plugin build on ARM64 (#1649)
  • Add plugin-descriptor.properties to .gitignore (#1651)
  • Removes Github DCO action as it is replaced by Github app (1657)
  • Configure ML reserved roles and system indices (#1662)
  • Release Notes for 1.3.0.0 (#1671)

Version 1.2.4.0

27 Jan 15:18
Compare
Choose a tag to compare

Compatible with OpenSearch 1.2.4

Maintenance

  • Bump log4j-core from 2.17.0 to 2.17.1 (#1551)
  • Update CXF version to 3.4.5 (#1540)
  • Version bump to 1.2.4.0 (#1558)
  • Release notes for 1.2.4.0 (#1569)

Release 1.2.3.0

23 Dec 14:55
4569984
Compare
Choose a tag to compare

Compatible with OpenSearch 1.2.3

Maintenance

  • Bump log4j-core from 2.16.0 to 2.17.0 (#1535)

Release 1.2.2.0

16 Dec 17:50
Compare
Choose a tag to compare

Compatible with OpenSearch 1.2.2

Maintenance

  • Bumping log4j to 2.16.0 (#1525)

Release 1.2.1.0

13 Dec 23:02
Compare
Choose a tag to compare

Compatible with OpenSearch 1.2.1

Maintenance

  • Bumping log4j to 2.15.0 (#1520)

Release 1.2.0.0

23 Nov 19:37
Compare
Choose a tag to compare

Compatible with OpenSearch 1.2.0

Enhancements

  • Add observability permissions and index (#1484)
  • Add AD validate, multi-category results API permissions to AD read access (#1480)

Bug fixes

  • Fix to include hidden indices when resolving wildcards (#1472)

Maintenance

  • Adding DCO check to repo (#1468)
  • Moved dco.yml to workflows folder (#1469)
  • Incremented version to 1.2.0.0-SNAPSHOT (#1464)
  • Moved SNAPSHOTS repo to project level (#1479)
  • Update OpenSearch core dependency version to 1.2.0 (#1482)
  • Bump xmlsec from 2.2.0 to 2.2.3 (#1450)
  • Create 1.2.0.0 release notes (#1494)
  • Updated copyright notices (#1477)
  • Updated release notes for 1.2 with copyright updates (#1496)

Release 1.1.0.0

06 Oct 17:00
6436c15
Compare
Choose a tag to compare

Compatible with OpenSearch 1.1.0

Enhancements

  • Added replication specific roles and system index to the configuration (#1408)
  • Handled DLS/FLS/Field masking for replication actions (#1330)
  • Extended role injection support for cross cluster requests (#1195)
  • Added changes to support validation of security roles for plugins (#1367)
  • Adding the default role for IM plugin (#1427)

Maintenance

  • Upgrade OpenSearch version to 1.1.0 (#1335)
  • Incremented version to 1.1.0.0-SNAPSHOT. (#1429)
  • Remove alerting and ism indices from protected indices usage in sample configuration (#1416)
  • Build against OpenSearch 1.1.0-SNAPSHOT. (#1430)
  • Create release notes 1.1.0.0 (#1440)
  • Switch opensearch from 1.x to 1.1 (#1445)

Release 1.0.1.0

10 Sep 04:30
385d6da
Compare
Choose a tag to compare

Compatible with OpenSearch 1.0.0.

Bug fixes

  • Return HTTP 409 if get parallel put request (#1158)
  • Add validation for null array DataType (#1157)
  • Add support for ResolveIndexAction handling (#1312)
  • Fix LDAP authentication when using StartTLS (#1415)
  • Fix index permissions for negative lookahead and negated regex index patterns (#1300)

Maintenance

  • Fix maven build ${version} deprecation warning (#1209)
  • Fix race condition on async test for PR #1158 (#1331)
  • Build OpenSearch in CD workflow in order to build security plugin (#1364)
  • Update checkNullElementsInArray() unit test to check both error message and error code instead of only checking the error code (#1370)
  • Add themed logo to README (#1333)
  • Checkout OpenSearch after Cache in CD (#1410)
  • Address follow up comments for PR #1172 (#1224)
  • Upgrade CXF to v3.4.4 (#1412)
  • Bump version to 1.0.1.0 (#1418)