Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -17,6 +17,9 @@
>Note: If you experience production issues after upgrading Armory Continuous Deployment, roll back to a previous working version and report issues to [http://go.armory.io/support](http://go.armory.io/support).

## Required Armory Operator version
{{% alert color="warning" title="Important" %}}
[Armory Operator]({{< ref "armory-operator" >}}) has been deprecated and will is considered EOL. Please migrate to the [Kustomize]({{< ref "armory-operator-to-kustomize-migration" >}}) method of deployment.

Check warning on line 21 in content/en/continuous-deployment/release-notes/rn-armory-spinnaker/armoryspinnaker_v2-36-5.md

View workflow job for this annotation

GitHub Actions / vale

[vale] content/en/continuous-deployment/release-notes/rn-armory-spinnaker/armoryspinnaker_v2-36-5.md#L21

[Google.Will] Avoid using ' will '.
Raw output
{"message": "[Google.Will] Avoid using ' will '.", "location": {"path": "content/en/continuous-deployment/release-notes/rn-armory-spinnaker/armoryspinnaker_v2-36-5.md", "range": {"start": {"line": 21, "column": 73}}}, "severity": "WARNING"}
{{% /alert %}}

To install, upgrade, or configure Armory CD 2.36.5, use Armory Operator 1.8.6 or later.

Expand Down Expand Up @@ -56,6 +59,13 @@

## Known issues
<!-- Copy/paste known issues from the previous version if they're not fixed. Add new ones from OSS and Armory. If there aren't any issues, state that so readers don't think we forgot to fill out this section. -->
### Url filtering/restriction on artifact accounts require all available configurations set
In Armory CD 2.36.5 the [url filtering/restriction](#security-enhancement-url-filteringrestriction-capabilities-on-artifact-accounts)

Check warning on line 63 in content/en/continuous-deployment/release-notes/rn-armory-spinnaker/armoryspinnaker_v2-36-5.md

View workflow job for this annotation

GitHub Actions / vale

[vale] content/en/continuous-deployment/release-notes/rn-armory-spinnaker/armoryspinnaker_v2-36-5.md#L63

[Google.WordList] Use 'URL' instead of 'url'.
Raw output
{"message": "[Google.WordList] Use 'URL' instead of 'url'.", "location": {"path": "content/en/continuous-deployment/release-notes/rn-armory-spinnaker/armoryspinnaker_v2-36-5.md", "range": {"start": {"line": 63, "column": 26}}}, "severity": "WARNING"}
was introduced to enhance the security of artifact accounts. When enabled in an artifact account all the configuration options
need to be explicitly set to avoid unexpected behavior/restrictions.

This known issue has been fixed in [Armory CD 2.36.6]({{< ref "armoryspinnaker_v2-36-6" >}})

### Echo Filter enabled pipelines feature
Spinnaker OSS Version 1.31.0 introduced a feature to filter pipelines from front50 , that was disabled by default.
Version 1.35.0 enabled it by default , which is not recommended and can cause issues with automated triggers.
Expand Down Expand Up @@ -88,14 +98,26 @@
accounts:
- name: http_account
urlRestrictions:
allowedDomains:
- mydomain.com
- raw.github.com
- api.github.com
allowedHostnamesRegex: ".*\\..+" #default value
allowedSchemes: #default value
- http
- https
rejectLocalhost: true #default value
rejectLinkLocal: true #default value
rejectVerbatimIps: true #default value
allowedDomains:
- mydomain.com
- raw.github.com
- api.github.com
rejectedIps: [] #default value
excludedDomainTemplate: "(?=.+\\.%s$).*\\..+" #default value
excludedDomains: #default value
- spinnaker
- local
- localdomain
- internal
excludedDomainsFromEnvironment: [] #default value
extraExcludedPatterns: [] #default value
```

By default the configuration blocks any local CIDR ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16), localhost, link local and raw IPs.
Expand Down
Loading