Release Notes

Changes You Need to Know!

v2021.2.1

New Features

• Simplified Environment creation with a single step form.

• Added Blueprint UI Schema template creation.

• Added ability to remove an organization user.

• Credentials are now added with form and managed as a list.

Fixes

• Updated Environment state that occasionally prevented delete without re-apply.

• Fixed documentation links in the portal .

v2021.1.7

New Features

• Dynamic IPv4 IP support on AWS.

• Managed Instance deployment across multiple Resource Groups.

Fixes

• Updated AWS subnet range selection with discovered networks.

• Changes to folder isolation when deploying to multiple AWS resource groups.

• Cleanup of leftover Azure database objects

v2021.1.6

(The 2021 1.3 through 1.5 releases were internal-only.)

New Features

• Standalone, public- and private-attached container support for Azure.

• Support for Virtual Machine Scale Sets on AWS and Azure.

• Portal support for switching organizations

• Updated API to get credentials as a top level function

• Added copy function to job details

• Highlight objects for the destroy phase in job details

Fixes

• Fix some autonaming length violations on Azure.

• Fix Azure MSSQL database with multiple resource groups failing to add a private endpoint.

• Fix Azure MSSQL database consumption with readonly property.

• Fix using multiple secrets with a vm or scaleset on Azure.

• Handle OSProvisioningTimedOut error on Azure by retrying.

• Updated job overview when running preview

• Updated collaborator duplicate permissions

v2021.1.2

Fixes

• Improvements to handling of managed images on Azure.

• Added the ability to use an Azure managed image from another account (so long as your account has permissions).

• Better error message when attempting to import an AWS network that does not exist.

v2021.1.1

Happy New Year everyone!

New Features

• Database as a Service support, see managed.database for more details.

Fixes

• Preview action now shows up in the job list as "preview" instead of "simulate".

• When specifying an image, the publisher/product/sku are no longer needed for AWS.

• Job details no longer show informational messages as warnings.

• Job details now shows the discovery phase.

• Importing an Azure Subnet that has no Network Security Group now models the subnet as public.

v2020.12.3

New Features

• Import support for networking.subnet on Azure.

• Role Based Access Control Teams support.

• Reduced Environment Job load times.

Fixes

• Updated RBAC ownership views for blueprints and Environments.

• Updated organization collaborator permissions for observer objects.

• Changed handling of users invited to multiple orgs.

v2020.12.2

New Features

• Import support for networking.network on Azure.

Fixes

• Custom image specification in Azure was being ignored.

• Azure destroy does not always clean up private DNS and resource group.

• Read-only compute.vm with nic that has no Network Security Group on Azure could not be used.

• Scalability improvements.

v2020.12.1

Schema Changes

• The readonly property now recursively applies to all resources defined inline. For example, a compute.vm declared readonly will cause any inline compute.nic, storage.disk to also be considered readonly.

Bug Fixes

• Improved error message when certain cross-region resource configuration attempts are made, for example configuring a subnet in one region to be part of a network in another region.

• Changed firewall clipping warnings to informational messages when they are from: any.

• Fixed attempting to deploy a public load balancer on AWS with DNS fails with the following error: "Reason: 'NoneType' object is not iterable"

• Improved error handling for a variable declared without a type.

v2020.11.8

Bug Fixes

• Fixed a device placement issue on AWS using images with data disks and a disk in the blueprint.

• Fixed some blueprint load error messages to be more informative.

v2020.11.7

(Versions 11.4 through 11.6 were internal-only)

Schema Changes

• Added security.secret for injecting secrets into the venue, enabling secure VM bootstrapping:

  • Supported on Azure with Key Vaults

  • AWS SSM support will arrive soon

• Moved beta.dns to networking.dns. Existing blueprints are upgraded internally before a job is started.

• Removed support for secret-type default variable values.

New Features

• Added support for importing existing networks and subnets on AWS.

• Added support for private load balancers on AWS and Azure.

• Added support for management of DNS zones on AWS (Azure already had support).

• Added support for registering balancers with an A record ALIAS on AWS and Azure.

• Added support for using a secret to full a public key property.

• Removed support for user-scoped secrets and added support for environment-scoped secrets.

• Organization Owners now have access to everything in the organization.

Bug Fixes

• RBAC: blueprint collaborators should not be able to delete them.

• RBAC: organization observers should not be able to create environments and blueprints.

• RBAC: some roles were getting stranded when their targets or subjects were deleted.

• RBAC: adding a blueprint to an environment does not assign an observer role granting it access to read the blueprint.

• RBAC: portal UI controls are enabled even though roles prevent the action.

v2020.11.3

(Versions 11.1 and 11.2 were internal-only)

Breaking Changes

• AWS: Support identically named load balancers and target groups in different folders. Load balancers and target groups require unique names per region per account, so deploying those resources from the same blueprint into different folders requires making the names predictably unique.

New Features

• Added support for private load balancers on AWS.

• Allow Azure load balancers to target secondary NICs on a VM.

• Added support for discovering networks and subnets on AWS with the import directive.

Schema Changes

• Added compute.nic:consumes.

• Moved compute.vm:services to compute.nic:provides.

• Moved networking.balancer:public to networking.balancer:scope.

Bug Fixes

• Azure deploy of VMs when specifying an availability zone fails with error "object of type 'ODataV4Format' has no len()"

• Attempting to deploy a load balancer fails ""'Box' object has no attribute 'zone'""

• Failed to associate EIP jumphost-default-webservice-jumpzone-eip-0: An error occurred (`InvalidAllocationID.NotFound) when calling the AssociateAddress operation: The allocation ID 'eipalloc-08b0e6bf608619b7e' does not exist

• AWS load balancer validation failed with "NoneType has no State"

v2020.10.3

New Features

• Added support for importing certificates:

  • Added support for multi-line variables and secrets.

  • Removed the prerequisite of a manually created managed identity for Azure load balancers.

  • Removed the prerequisite of manually imported certificates for load balancers on AWS and Azure.

• Added support for ICMP (ping) control in firewalls.

Fixes

• Error message pop-ups that were too large could not be dismissed.

v2020.10.2

Schema Changes

• Added default_policy to subnet.

• Removed firewall deny rules (always use the Principal of Least Privilege philosophy).

• In network and subnet resources, the scope property setting for private has been split into private-with-internet and private-no-internet for better control over access.

• Promoted the load balancer and service definitions from beta to networking.

v2020.10.1

New Features

• Support for organization secrets and secret type variables has been added.

Portal Changes

• Secrets can be managed through the portal organization settings.

• Blueprints are now locked for others when someone else is editing one.

• Presets are now easier to identify in the environment panel.

• Presets are now easier to use by providing a pop-up menu of available choices.

• Clicking on the job step status icon now opens the status details.

Schema Changes

• Variables can now be type: secret.

• In network and subnet resources, the properties public and isolated have been replaced with scope. The functionality remains the same.

Fixes

• Honor balancer range on Azure.

• Properly clip firewall rules on isolated subnets in AWS.

v2020.9.5

We've changed our release versioning to include the year, month, and ordinal of the release.

New Features

• Support for obtaining a bearer token through the API has been added.

• Added the ability to invite additional users into an Organization.

• Added role-based access control.

Schema Changes

• Added the pad() function so that count can optionally be zero-padded.

2020-09-03

• compute.nic resources now require a firewall to be specified.

• Added support for Azure short-term credentialing.

• Fixed some networking-related provisioning issues.

2020-08-19

• Added informational messages to job details for highlighting decisions made by the engine.

• Added a session-based client-side cache for just-in-time credentials and simplified input.

• Improved the sign-up process.

• Fixed a web page error that occurred when an environment was deleted.

• Fixed issues removing AWS credentials.

2020-08-07

• Added short-term credential management leveraging AWS STS.

• Added informational feedback to deliver intent-based decisions in the job details, for example selecting a compute.vm instance type from cores and memory.

• Added support for https balancing on Azure with SSL/TLS Policy selection.

• Allow security.certificate on Azure to refer to existing certs by key store secret id.

• Added support for configuring health checks on beta.service objects:

  • healthy status codes

  • healthy and unhealthy thresholds

  • interval and timeout

  • request path

• Made health check status code ranges easier to specify.

• Fixed network security group for isolated subnets on Azure.

2020-07-30

• Allow security.certificate on AWS to refer to existing certs by ARN.

• Fix issue reading AWS ACM-generated certificates.

• Improve name disambiguation rules on AWS for storage.blobstore.

• Improve AWS autozoning to include connected resources in decision-making.

• Improve parallel processing support for subnets on AWS.

• Added examples to the documentation.

2020-07-27

• Added support for configuring virtual machines at boot time through userdata.

• Fix availability zone preparation in AWS.

• Fix parallel execution of subnet creation with ipv6 in AWS.

• Fix AWS RequestLimitExceeded handling.

• Fix "missing plan" error on Azure when using a third party marketplace image.

• Ensure VMs with extensions added after provisioning due to policy do not interfere with destruction on Azure.

• Use environment name in job detail output.

2020-07-13

• The new documentation web site went live. (Even scarier, the line above was written a week before it happened!)

2020-06-30

• Added support for https load balancing on AWS.

2020-06-23

• AWS - added load balancer support for configuring healthy health check responses.

• AWS - added load balancer support for associating a CNAME with the balancer in an existing DNS Zone.

2020-06-12

• Added beta.dns pre-release DNS schema.

• Azure: support for public and private zone management. compute.nic can be associated with an A record in a zone.

2020-05-29

• Added support for http load balancing on AWS and Azure.