From 017c97f63ba272d01f353945d6032fa4a0f73aff Mon Sep 17 00:00:00 2001 From: stanley Date: Thu, 5 May 2022 17:32:02 +0000 Subject: [PATCH 01/10] Update version info for release - 3.7.0 --- version.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/version.txt b/version.txt index cafa9424..475ba515 100644 --- a/version.txt +++ b/version.txt @@ -1 +1 @@ -3.7dev +3.7 From a5db2cc57974fb61af45dbf53076660089645f87 Mon Sep 17 00:00:00 2001 From: Jacob Floyd Date: Fri, 6 May 2022 19:26:52 -0500 Subject: [PATCH 02/10] Fix upgrade notes for v3.7 --- docs/source/install/upgrades.rst | 4 ++-- docs/source/upgrade_notes.rst | 9 +++++++++ 2 files changed, 11 insertions(+), 2 deletions(-) diff --git a/docs/source/install/upgrades.rst b/docs/source/install/upgrades.rst index 0c69e9bc..c2721172 100644 --- a/docs/source/install/upgrades.rst +++ b/docs/source/install/upgrades.rst @@ -178,7 +178,7 @@ v3.7 .. sourcecode:: bash - sudo st2ctl reload --register-setup-recreate-virtualenvs + sudo st2ctl reload --register-recreate-virtualenvs * As ``_global`` is used for the global overrides file, if your |st2| uses a pack called _global then it will need to be renamed prior to upgrade. @@ -282,7 +282,7 @@ v3.4 .. sourcecode:: bash - sudo st2ctl reload --register-setup-recreate-virtualenvs + sudo st2ctl reload --register-recreate-virtualenvs v3.3 diff --git a/docs/source/upgrade_notes.rst b/docs/source/upgrade_notes.rst index 04dcd8dc..8b03f491 100644 --- a/docs/source/upgrade_notes.rst +++ b/docs/source/upgrade_notes.rst @@ -8,6 +8,15 @@ Upgrade Notes |st2| v3.7 ---------- +* *RockyLinux/RHEL/CentOS 8 only*. Due to the upgrade from python3.6 to python 3.8, all + packs installed prior to upgrade will need to have their virtual environment re-created + after upgrading |st2| packages (on all nodes which run st2actionrunner or st2sensorcontainer + services), using the following command: + + .. sourcecode:: bash + + sudo st2ctl reload --register-recreate-virtualenvs + * API will now set ``Secure`` and ``Samesite=lax`` cookie attribute for the auth cookie which is set when authenticating via auth token / API key in query parameter (this approach is primarily used by st2web). From 7e8ba2cda6e91c7c426d3703655574d0cd8d0e9b Mon Sep 17 00:00:00 2001 From: amanda Date: Thu, 19 May 2022 17:05:41 +0100 Subject: [PATCH 03/10] Update EL8 instructions for Erlang 25 issues --- docs/source/install/rhel8.rst | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/docs/source/install/rhel8.rst b/docs/source/install/rhel8.rst index a4720c38..fb16dce9 100644 --- a/docs/source/install/rhel8.rst +++ b/docs/source/install/rhel8.rst @@ -81,12 +81,18 @@ Install MongoDB, RabbitMQ, and Redis: curl -sL https://packagecloud.io/install/repositories/rabbitmq/erlang/script.rpm.sh | sudo bash curl -sL https://packagecloud.io/install/repositories/rabbitmq/rabbitmq-server/script.rpm.sh | sudo bash sudo yum makecache -y --disablerepo='*' --enablerepo='rabbitmq_rabbitmq-server' - sudo yum -y install erlang + sudo yum -y install erlang-24* sudo yum -y install rabbitmq-server sudo yum -y install redis sudo systemctl start mongod rabbitmq-server redis sudo systemctl enable mongod rabbitmq-server redis +.. note:: + + RabbitMQ currently only has provisional support for Erlang 25, however it is available in the + RabbitMQ-Erlang repository. Problems have been encountered using RabbitMQ with Erlang 25, therefore + it is advised to install the latest Erlang 24 version instead. + Setup Repositories ~~~~~~~~~~~~~~~~~~ From a936a056901bf2a305fa7cd8a04dac65334413d4 Mon Sep 17 00:00:00 2001 From: amanda Date: Tue, 24 May 2022 09:20:28 +0100 Subject: [PATCH 04/10] Slight reword --- docs/source/install/rhel8.rst | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/source/install/rhel8.rst b/docs/source/install/rhel8.rst index fb16dce9..0e1cd85b 100644 --- a/docs/source/install/rhel8.rst +++ b/docs/source/install/rhel8.rst @@ -89,8 +89,8 @@ Install MongoDB, RabbitMQ, and Redis: .. note:: - RabbitMQ currently only has provisional support for Erlang 25, however it is available in the - RabbitMQ-Erlang repository. Problems have been encountered using RabbitMQ with Erlang 25, therefore + RabbitMQ currently only has preview support for Erlang 25, however it is available in the + RabbitMQ-Erlang repository. Whilst Erlang 25 support is in preview (https://www.rabbitmq.com/which-erlang.html) it is advised to install the latest Erlang 24 version instead. From d32353c4a1b384fe2a6815e5e13f06c87549d24f Mon Sep 17 00:00:00 2001 From: amanda Date: Tue, 7 Jun 2022 13:51:46 +0100 Subject: [PATCH 05/10] Update Ubuntu instructions for erlang 24 --- docs/source/install/u18.rst | 30 ++++++++++++++++++++++-------- docs/source/install/u20.rst | 30 ++++++++++++++++++++++-------- 2 files changed, 44 insertions(+), 16 deletions(-) diff --git a/docs/source/install/u18.rst b/docs/source/install/u18.rst index 5af8d2ec..e379710a 100644 --- a/docs/source/install/u18.rst +++ b/docs/source/install/u18.rst @@ -39,23 +39,30 @@ Install MongoDB, RabbitMQ, and Redis: # Add keys latest RabbitMQ and RabbitMQ-erlang # Team RabbitMQ's main signing key curl -1sLf "https://keys.openpgp.org/vks/v1/by-fingerprint/0A9AF2115F4687BD29803A206B73A36E6026DFCA" | sudo gpg --dearmor | sudo tee /usr/share/keyrings/com.rabbitmq.team.gpg > /dev/null - # Launchpad PPA that provides modern Erlang releases - curl -1sLf "https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xf77f1eda57ebb1cc" | sudo gpg --dearmor | sudo tee /usr/share/keyrings/net.launchpad.ppa.rabbitmq.erlang.gpg > /dev/null - # PackageCloud RabbitMQ repository - curl -1sLf "https://packagecloud.io/rabbitmq/rabbitmq-server/gpgkey" | sudo gpg --dearmor | sudo tee /usr/share/keyrings/io.packagecloud.rabbitmq.gpg > /dev/null + # CloudSmith PPA that provides modern Erlang releases + curl -1sLf "https://dl.cloudsmith.io/public/rabbitmq/rabbitmq-erlang/gpg.E495BB49CC4BBE5B.key" | sudo gpg --dearmor | sudo tee /usr/share/keyrings/io.cloudsmith.dl.rabbitmq.erlang.gpg > /dev/null + # CloudSmith RabbitMQ repository + curl -1sLf "https://dl.cloudsmith.io/public/rabbitmq/rabbitmq-server/gpg.9F4587F226208342.key" | sudo gpg --dearmor | sudo tee /usr/share/keyrings/io.cloudsmith.dl.rabbitmq.gpg > /dev/null # Add apt repositories maintained by Team RabbitMQ sudo tee /etc/apt/sources.list.d/rabbitmq.list < /dev/null - # Launchpad PPA that provides modern Erlang releases - curl -1sLf "https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xf77f1eda57ebb1cc" | sudo gpg --dearmor | sudo tee /usr/share/keyrings/net.launchpad.ppa.rabbitmq.erlang.gpg > /dev/null - # PackageCloud RabbitMQ repository - curl -1sLf "https://packagecloud.io/rabbitmq/rabbitmq-server/gpgkey" | sudo gpg --dearmor | sudo tee /usr/share/keyrings/io.packagecloud.rabbitmq.gpg > /dev/null + # CloudSmith PPA that provides modern Erlang releases + curl -1sLf "https://dl.cloudsmith.io/public/rabbitmq/rabbitmq-erlang/gpg.E495BB49CC4BBE5B.key" | sudo gpg --dearmor | sudo tee /usr/share/keyrings/io.cloudsmith.dl.rabbitmq.erlang.gpg > /dev/null + # CloudSmith RabbitMQ repository + curl -1sLf "https://dl.cloudsmith.io/public/rabbitmq/rabbitmq-server/gpg.9F4587F226208342.key" | sudo gpg --dearmor | sudo tee /usr/share/keyrings/io.cloudsmith.dl.rabbitmq.gpg > /dev/null # Add apt repositories maintained by Team RabbitMQ sudo tee /etc/apt/sources.list.d/rabbitmq.list < Date: Tue, 7 Jun 2022 14:00:18 +0100 Subject: [PATCH 06/10] See if apt-update fixes circleCI attempting to get old libsasl --- .circleci/config.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.circleci/config.yml b/.circleci/config.yml index 8b3a5570..3d012d33 100644 --- a/.circleci/config.yml +++ b/.circleci/config.yml @@ -12,6 +12,7 @@ jobs: make st2 - restore_cache: key: v2-dependency-cache-{{ checksum "st2/requirements.txt" }} + - run: sudo apt-get update - run: sudo apt install python3-dev - run: sudo apt install libldap2-dev - run: sudo apt install libsasl2-dev From 58b525df8f447c472c4794c53777167dbbd5c3a2 Mon Sep 17 00:00:00 2001 From: amanda Date: Tue, 12 Jul 2022 18:03:27 +0100 Subject: [PATCH 07/10] Mention sensor_service --- docs/source/rbac.rst | 3 +++ 1 file changed, 3 insertions(+) diff --git a/docs/source/rbac.rst b/docs/source/rbac.rst index 261c1e85..9eeb1586 100644 --- a/docs/source/rbac.rst +++ b/docs/source/rbac.rst @@ -32,6 +32,9 @@ roles. By default when a new |st2| user is created, this user has no roles assigned to it, meaning it doesn't have access to perform any API operation which is behind the RBAC wall. +.. note:: + ``sensor_service`` is the |st2| user which sensors run as. + Role ~~~~ From 034dbb1c4a644b423fe160a9b09553a48af45d98 Mon Sep 17 00:00:00 2001 From: amanda Date: Tue, 12 Jul 2022 16:50:16 +0100 Subject: [PATCH 08/10] Add notes for sensors and RBAC on upgrade --- docs/source/upgrade_notes.rst | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/docs/source/upgrade_notes.rst b/docs/source/upgrade_notes.rst index 8b03f491..a2d403e7 100644 --- a/docs/source/upgrade_notes.rst +++ b/docs/source/upgrade_notes.rst @@ -43,6 +43,11 @@ Upgrade Notes See :doc:`purging old data documentation ` for further information. +* As part of extending RBAC support to include protecting access to datastore operations, if + you have RBAC enabled and any sensors access the datastore, then the ``sensor_service`` will need to + be assigned an RBAC role with the appropriate key_value_pair permissions. + Further information can be found in the :doc:`RBAC documentation `. + .. _ref-upgrade-notes-v3-6: |st2| v3.6 From db9a1d6729da500b2089e9ec87fe6c91c4474c8b Mon Sep 17 00:00:00 2001 From: amanda Date: Tue, 12 Jul 2022 17:43:32 +0100 Subject: [PATCH 09/10] Make explicit its sensor_service user --- docs/source/upgrade_notes.rst | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/source/upgrade_notes.rst b/docs/source/upgrade_notes.rst index a2d403e7..0c41e40b 100644 --- a/docs/source/upgrade_notes.rst +++ b/docs/source/upgrade_notes.rst @@ -44,8 +44,8 @@ Upgrade Notes information. * As part of extending RBAC support to include protecting access to datastore operations, if - you have RBAC enabled and any sensors access the datastore, then the ``sensor_service`` will need to - be assigned an RBAC role with the appropriate key_value_pair permissions. + you have RBAC enabled and any sensors access the datastore, then the ``sensor_service`` user will + need to be assigned an RBAC role with the appropriate key_value_pair permissions. Further information can be found in the :doc:`RBAC documentation `. .. _ref-upgrade-notes-v3-6: From cb4d77d0416aac378364fec6b9eab4887c75cdf7 Mon Sep 17 00:00:00 2001 From: Carlos Date: Mon, 16 Jun 2025 09:21:51 +0200 Subject: [PATCH 10/10] [v3.7] Use version in installation url. --- docs/source/install/index.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/source/install/index.rst b/docs/source/install/index.rst index 04253504..284698d4 100644 --- a/docs/source/install/index.rst +++ b/docs/source/install/index.rst @@ -53,7 +53,7 @@ on Ubuntu, or ``sudo yum install curl nss`` on RHEL/RockyLinux/CentOS. Then run .. code-block:: bash - bash <(curl -sSL https://stackstorm.com/packages/install.sh) --user=st2admin --password=Ch@ngeMe + bash <(curl -sSL https://stackstorm.com/packages/v3.7/install.sh) --user=st2admin --password=Ch@ngeMe This is an opinionated installation of |st2|. It will download and install all components, as per the :doc:`single host reference deployment <./overview>`. It assumes that you have a clean, basic