v1.1.0
    • PDF

    v1.1.0

    • PDF

    Article summary

    Dependencies

    Glasswall Halo v2.4.3

    Glasswall Halo Services (Image Tags)

    ServiceContainer RepositoryTag
    cdrplatform-engineglasswallhub.azurecr.io/cdrplatform-engine87692
    cdrplatform-sync-apiglasswallhub.azurecr.io/cdrplatform-sync-api87709
    cdrplatform-report-extractorglasswallhub.azurecr.io/cdrplatform-report-extractor87707
    cdrplatform-cleanupglasswallhub.azurecr.io/cdrplatform-cleanup87691
    cdrplatform-rabbitmqglasswallhub.azurecr.io/cdrplatform-rabbitmq85056

    Glasswall Halo Helm Chart Versions

    ServiceContainer RepositoryTag
    cdrplatform-rabbitmqglasswallhub.azurecr.io/helm/cdrplatform-rabbitmq0.6.0
    cdrplatform-external-secretsglasswallhub.azurecr.io/helm/cdrplatform-external-secrets0.3.3
    cdrplatform-storageglasswallhub.azurecr.io/helm/cdrplatform-storage0.5.2
    cdrplatform-engineglasswallhub.azurecr.io/helm/cdrplatform-engine0.1.19
    cdrplatform-sync-apiglasswallhub.azurecr.io/helm/cdrplatform-sync-api0.2.6
    cdrplatform-cleanupglasswallhub.azurecr.io/helm/cdrplatform-cleanup0.0.2
    cdrplatform-report-extractorglasswallhub.azurecr.io/helm/cdrplatform-report-extractor0.0.2

    Service Versions (Image Tags)

    ServiceContainer RepositoryTag
    constellations-scan-controllerglasswallhub.azurecr.io/constellations-scan-controller87726
    constellations-page-scannerglasswallhub.azurecr.io/constellations-page-scanner87725
    constellations-scan-preprocessorglasswallhub.azurecr.io/constellations-scan-preprocessor87727
    constellations-cdr-enablerglasswallhub.azurecr.io/constellations-cdr-enabler88005
    constellations-event-collationglasswallhub.azurecr.io/constellations-event-collation87723
    constellations-event-projectionglasswallhub.azurecr.io/constellations-event-projection87724

    Helm Chart Versions

    ChartChart RepositoryVersion
    constellations-scan-controllerglasswallhub.azurecr.io/helm/constellations-scan-controller1.0.0
    constellations-page-scannerglasswallhub.azurecr.io/helm/constellations-page-scanner0.1.2
    constellations-scan-preprocessorglasswallhub.azurecr.io/helm/constellations-scan-preprocessor0.1.2
    constellations-cdr-enablerglasswallhub.azurecr.io/helm/constellations-cdr-enabler0.1.2
    constellations-event-collationglasswallhub.azurecr.io/helm/constellations-event-collation0.1.2
    constellations-event-projectionglasswallhub.azurecr.io/helm/constellations-event-projection1.0.0
    constellations-rabbitmqglasswallhub.azurecr.io/helm/constellations-rabbitmq0.1.5
    constellations-autoscalingglasswallhub.azurecr.io/helm/constellations-autoscaling0.2.0
    constellations-external-secretsglasswallhub.azurecr.io/helm/constellations-external-secrets0.0.2

    New Features

    • Security updates have been applied to all Constellations services, guaranteeing that each dependency aligns with its latest recommended and secure versions.

    Updated Glasswall Halo

    • Constellations has been upgraded to harness the capabilities of the latest Glasswall Halo release. This updated version incorporates bug fixes and also integrates essential security enhancements, such as:
      • An extensive enhancement to the core of our CDR technology—the embedded engine, is unveiled with Release 5.
        • Please note, this includes updates to the licensing functionality. For more information, please contact us.
      • We have introduced a significant improvement in the handling of file cleanup - please see Glasswall Halo v2.2.0.
      • Updates in archive file handling have been implemented to enhance performance and resilience. Refer to Glasswall Halo v2.2.1 for details.
      • We've implemented a significant security enhancement: all Glasswall assets pertaining to Halo code and deliverables, including container images, are now signed by default. This ensures an added layer of trust and authenticity in our system.

    Known Issues

    • Issue: In the event of a dead-letter on the cdr-enablement queue, the GET Scan Summary endpoint response may show a lower value for numberOfProcessedFiles compared to numberOfFiles.
      • Impact: This discrepancy can lead to confusion regarding the actual number of files processed during a scan.
    • Issue: For scans marked as Errored, the status response may return a null value for ScanEndTime.
      • Impact: The absence of a valid ScanEndTime can hinder accurate tracking and analysis of scan durations for errored scans.
    • Issue: The constellations-scan-preprocessor service may encounter errors while attempting to write to the FileMetadata Cosmos container, resulting in duplicate cdr-enablement messages. As a consequence, individual files may be processed multiple times.
      • Impact: Duplicate file processing can lead to resource utilisation inefficiencies and potential delays in overall scan completion.
    • Issue: When Constellations encounters an archive in a source container during autoscaling, only one new pre-warmed cdrplatform-engine pod will scale up.
      • Impact: This behaviour can introduce a slight processing delay for archives, as additional scaling of cdrplatform-engine pods is contingent on the engine-requests queue in the CDR Platform.
    • Issue: When restarting your cluster, a timing issue with the deployment of RabbitMQ can cause the Constellations services to hang, and not fail their liveness probes.
      • Impact: This can lead to confusion after a cluster-wide restart. The problem can be solved by restarting all pods in the following namespaces: scan-management, cdr-enabler and event-collation.

    Documentation

    API Documentation

    Constellations Documentation


    Was this article helpful?

    What's Next