Skip to main content

5.3.0 Release Notes

5.3.0 Release Notes

Name: "Etna turquoise lamp"
Release Date: May 20th, 2024

Overview

Version 5.3.0 is here! Check out the new features and enhancements for PagerDuty Runbook Automation (formerly Rundeck Enterprise) and Rundeck Community included in this release.

Concurrent Executions Performance Degradation

There is a bug in this release that causes execution failures when there are 10 or more concurrent executions.
To mitigate this issue, add the following to Configuration Management or to rundeck-config.properties:

dataSource.properties.maximumPoolSize=100

A permanent fix will be available in the next release.

Highlights

Project Runner Management Early Access

Users can now create, download, and manage Enterprise Runners from within Projects.
This gives teams more autonomy and flexibility with their automation and decreases their dependency on the tool administrators of Runbook Automation (cloud or self-hosted).

Project Runner Management

To try out project-based Runner Management, submit the Early Access form here and select Project Runner Management. We will respond promptly with instructions on how to enable the feature. Read more about Runner management here.

New PagerDuty Job Steps

Among the more common use cases for Runbook Automation (cloud or self-hosted) is incident automation — either for retrieving diagnostics or carrying out remediation. To assist users with further automating the incident process, Runbook Automation can now natively invoke PagerDuty Incident Workflows.
This release includes both a Job Step and a Notification plugin to start an Incident Workflow.
These plugins better enable users to connect the technical infrastructure processes with the communication and collaboration processes as part of their incident response.
Read more about the new plugins here.

SFTP Option for Script Execution & File Transfer

The SSH File Transfer plugin (powered by SSHJ) now includes an option to use SFTP (Secure File Transfer Protocol) instead of SCP (Secure Copy Protocol) for securely executing scripts and transferring files. As of recently, SFTP is the recommended method for dispatching files over networks. In conjunction with the Enterprise Runner, this allows users to confidently execute scripts and transfer files in their most secure environments.
We will continue to support SCP in the SSHJ plugin for the foreseeable future. Read more about the SFTP option for our SSHJ plugin here.

Note: SCP was flagged with a Moderate level CVE by Red Hat. You can read the details of the CVE here.

Additional Updates

  • Configurable maximum log size for Job execution logs
  • Performance improvement for Runbook Automation users with large numbers of Job executions through Runners.
  • Update http-step plugin to mitigate CVE-2023-24621
  • Additional plugin credentials are now treated as secrets:
    • framework.plugin.UserGroupSource.OktaGroupSource.apiToken
    • rundeck.security.oauth.okta.clientSecret
    • rundeck.security.oauth.azure.clientSecret
    • framework.plugin.ExecutionFileStorage.org.rundeck.amazon-s3.AWSSecretKey
  • Additional ACL policies for project-based Runner management
  • Fix: OpenSSH CopyFile not working on Docker
  • Fix: duplicate user entries when using LDAP and case sensitivity
  • Fix: Error when using step labels with Ruleset workflow strategy
  • Fix: Autotakeover resuming executions that use a Runner
  • Update Azure and SSHJ plugins to mitigate CVE-2021-29425
  • Update spring to 5.3.34 to mitigate CVE-2024-22262
  • Fix: log event metadata produces errors when using specific log filters
  • Update nimbus-jose dependencies and constraints to mitigate CVE-2023-52428
  • Fix: Docker image ignoring value of JVM_MAX_RAM_PERCENTAGE
  • Fix: intermittent 500 errors when querying the execution metrics through the API
  • Fix: Database errors when upgrading to 5.2.0 while using Microsoft SQL Server.
  • Upgrade Grails to 6.1

Rundeck Open Source Product Updates

Here is a link to the full list of public PRs

Ansible Plugin Updates

Community Contributors

Submit your own Pull Requests to get recognition here!

Staff Contributors