Release Notes: Chef Manage 3.0
Chef Manage provides a web-based user interface that manages Chef Infra nodes and other policy objects, such as data bags and roles, on the instance of Chef Infra Server that it is installed on.
Download the latest version of the chef-manage package for your platform from downloads.chef.io to your Chef Infra Server, then run:
# rpm -Uvh /path/to/chef-manage-*.rpm or # dpkg -i /path/to/chef-manage-*.deb then # chef-manage-ctl reconfigure # chef-server-ctl reconfigure
What’s New in 3.0.16
- Fixed issues adding cookbook constraints to an environment.
- Fixed errors when changing a node’s environment.
- Fixed incorrect cookbook versions being displayed in environments.
- Fixed a blank page being shown when refreshing the databag item page.
Ubuntu 20.04 Support
We added Ubuntu 20.04 packages and continue to support Ubuntu 16.04 and 18.04 packages.
- Embedded Chef Infra Client is upgraded from 14 to 15
- Sidekiq is upgraded from 4.2.10 to 5.2.9
We updated Chef Manage’s Ruby installation from 2.5.5 to 2.6.6. This upgrade improves the performance of the application and resolves the following CVEs:
We updated OpenSSL from 1.0.2u to 1.0.2w to resolve CVE-2020-1968.
We updated the Rack gem used in Chef Manage from 2.0.9 to 2.2.3 to resolve CVE-2020-8184.
We updated the Rails engine used in Chef Manage from 220.127.116.11 to 18.104.22.168 to resolve CVE-2020-15169.
What’s New in 3.0.11
This release includes important dependency updates and support for SSL connections to the Chef Infra Server.
- Rails is upgraded to 5.2.4
- Chef Infra Client is upgraded from 11 to 14
- Sidekiq is upgraded from 2.5 to 4 to improve the background processing
Chef Manage 3.0 now supports SSL communication between Chef Manage and Chef Infra Server. For compatibility with self-signed certificates which are commonly used on the Chef Infra Server, this feature defaults to off in this release.
The SSL support is configured using these settings in the
/etc/chef-manage/manager.rb configuration file. After any changes you must run
sudo chef-manage-ctl reconfigure to apply the changes.
ssl_verify_mode: Configure SSL verification for the connection to the Chef Infra
Server. By default this is set to
:verify_none. Setting this to
will require a Chef Manage to verify the SSL certificate of the Chef Infra Server.
trusted_certs_dir: Provide a path to a directory containing trusted SSL
certificates. This is empty by default, but
/etc/chef/trusted_certs is the
most likely setting for reusing certificates installed by Chef Infra Client.
- Generating a Knife Config now produces a
knife.rbfile. These files have the same format and contents but
config.rbhas been preferred file name since Chef Infra Client 12.0.
- Minor UI bug fixes
Supported Infra Server Versions
Chef Manage 3.0 is compatible with Chef Infra Server 12 and later. Users are always encouraged to stay up to date on Chef Infra Server releases to ensure they have the latest security updates.
Added Platform Support
- RHEL 7
- RHEL 8
- Ubuntu 16.04
- Ubuntu 18.04
Removed Platform Support
- Ubuntu 10.04
- Ubuntu 12.04
- Ubuntu 14.04
What’s New in 2.5.16
- Embedded Chef Infra Client upgraded from 12.19.36 to 12.22.5
What’s New in 2.5.15
- Replaced links to the legacy IRC channel with links to Chef Community Slack.
- Allow uppercase letters to be used in data bag names.
- Hide the reporting tab when Chef Reporting is not installed on the system.
- Added Strict-Transport-Security headers to all pages.
- Sanitized HTML errors in JSON error output to prevent possible reflected XSS in the case of script tags being passed in as part of the URL of a JSON request.
Was this page helpful?