diff --git a/source/_static/badges/ent-cloud-dedicated.rst b/source/_static/badges/ent-cloud-dedicated.rst new file mode 100644 index 00000000000..56430fc4df0 --- /dev/null +++ b/source/_static/badges/ent-cloud-dedicated.rst @@ -0,0 +1,18 @@ +:orphan: +:nosearch: + +.. raw:: html + +
+ +|plans-img| Available only on `Enterprise `__ plans + +|deployment-img| Available only for `Cloud Dedicated `__ deployments + +.. |plans-img| image:: ../_static/images/badges/flag_icon.svg + +.. |deployment-img| image:: ../_static/images/badges/deployment_icon.svg + +.. raw:: html + +
diff --git a/source/configure/reporting-configuration-settings.rst b/source/configure/reporting-configuration-settings.rst index 2f4d26502f9..269f29ffe45 100644 --- a/source/configure/reporting-configuration-settings.rst +++ b/source/configure/reporting-configuration-settings.rst @@ -22,7 +22,7 @@ Site statistics | sessions, commands, webhooks, active users, connections, | - ``config.json setting``: N/A | | and playbooks. | - Environment variable: N/A | +---------------------------------------------------------------+-------------------------------------------------------------+ -| **Note**: Inactive and deactivated users, as well as remote users in | +| **Note**: Deactivated users as well as synthetic users in | | `Microsoft Teams integrations `__ | | and `shared channels users `__, aren't counted towards the total number of active users. | +---------------------------------------------------------------+-------------------------------------------------------------+ @@ -39,7 +39,7 @@ Team statistics | number of public and private channels, total post count, and | - ``config.json`` setting: N/A | | count of paid users (self-hosted only). | - Environment variable: N/A | +---------------------------------------------------------------+---------------------------------------------------------------+ -| **Note**: Inactive and deactivated users are not counted towards the total number of active users. | +| **Note**: Deactivated users are not counted towards the total number of active users. | +---------------------------------------------------------------+---------------------------------------------------------------+ ---- diff --git a/source/deploy/legacy-self-hosted-changelog.md b/source/deploy/legacy-self-hosted-changelog.md index a823b0128e7..d1ada9fb7f8 100644 --- a/source/deploy/legacy-self-hosted-changelog.md +++ b/source/deploy/legacy-self-hosted-changelog.md @@ -18,6 +18,10 @@ From Mattermost v9.2, see the [Mattermost Changelog](/deploy/mattermost-changelo ## Release v9.1 - [Feature Release](https://docs.mattermost.com/upgrade/release-definitions.html#feature-release) +- **9.1.5, released 2024-01-09** + - Mattermost v9.1.5 contains medium severity level security fixes. [Upgrading](https://docs.mattermost.com/upgrade/upgrading-mattermost-server.html) to this release is recommended. Details will be posted on our [security updates page](https://mattermost.com/security-updates/) 30 days after release as per the [Mattermost Responsible Disclosure Policy](https://mattermost.com/security-vulnerability-report/). + - Mattermost v9.1.5 contains the following functional changes: + - Fixed an issue where invalid reactions could be added to posts. Added default limit of the number of reactions per post. - **9.1.4, released 2023-11-29** - Mattermost v9.1.4 contains medium severity level security fixes. [Upgrading](https://docs.mattermost.com/upgrade/upgrading-mattermost-server.html) to this release is recommended. Details will be posted on our [security updates page](https://mattermost.com/security-updates/) 30 days after release as per the [Mattermost Responsible Disclosure Policy](https://mattermost.com/security-vulnerability-report/). - Mattermost v9.1.4 contains no database or functional changes. @@ -267,6 +271,12 @@ Multiple setting options were added to ``config.json``. Below is a list of the a ## Release v8.1 - [Extended Support Release](https://docs.mattermost.com/upgrade/release-definitions.html#extended-support-release-esr) +- **8.1.8, released 2024-01-09** + - Mattermost v8.1.8 contains low to medium severity level security fixes. [Upgrading](https://docs.mattermost.com/upgrade/upgrading-mattermost-server.html) to this release is recommended. Details will be posted on our [security updates page](https://mattermost.com/security-updates/) 30 days after release as per the [Mattermost Responsible Disclosure Policy](https://mattermost.com/security-vulnerability-report/). + - Fixed an issue with double URL encoding of Oauth redirect URI params. + - Pre-packaged Jira plugin version [v4.0.1](https://github.com/mattermost/mattermost-plugin-jira/releases/tag/v4.0.1). Also see [v4.0.0](https://github.com/mattermost/mattermost-plugin-jira/releases/tag/v4.0.0) for recent breaking changes. + - Mattermost v8.1.8 contains the following functional changes: + - Fixed an issue where invalid reactions could be added to posts. Added default limit of the number of reactions per post. - **8.1.7, released 2023-11-29** - Mattermost v8.1.7 contains low to medium severity level security fixes. [Upgrading](https://docs.mattermost.com/upgrade/upgrading-mattermost-server.html) to this release is recommended. Details will be posted on our [security updates page](https://mattermost.com/security-updates/) 30 days after release as per the [Mattermost Responsible Disclosure Policy](https://mattermost.com/security-vulnerability-report/). - Mattermost v8.1.7 contains no database or functional changes. diff --git a/source/deploy/mattermost-changelog.md b/source/deploy/mattermost-changelog.md index 0d402592abf..acc6b5fc19e 100644 --- a/source/deploy/mattermost-changelog.md +++ b/source/deploy/mattermost-changelog.md @@ -119,6 +119,10 @@ See [this walkthrough video](https://www.youtube.com/watch?v=eXA8emM97Bo) on som ## Release v9.2 - [Feature Release](https://docs.mattermost.com/upgrade/release-definitions.html#feature-release) +- **9.2.4, released 2024-01-09** + - Mattermost v9.2.4 contains medium severity level security fixes. [Upgrading](https://docs.mattermost.com/upgrade/upgrading-mattermost-server.html) to this release is recommended. Details will be posted on our [security updates page](https://mattermost.com/security-updates/) 30 days after release as per the [Mattermost Responsible Disclosure Policy](https://mattermost.com/security-vulnerability-report/). + - Mattermost v9.2.4 contains the following functional changes: + - Fixed an issue where invalid reactions could be added to posts. Added default limit of the number of reactions per post. - **9.2.3, released 2023-11-29** - Mattermost v9.2.3 contains medium severity level security fixes. [Upgrading](https://docs.mattermost.com/upgrade/upgrading-mattermost-server.html) to this release is recommended. Details will be posted on our [security updates page](https://mattermost.com/security-updates/) 30 days after release as per the [Mattermost Responsible Disclosure Policy](https://mattermost.com/security-vulnerability-report/). - Mattermost v9.2.3 contains no database or functional changes. diff --git a/source/guides/cloud-workspace-management.rst b/source/guides/cloud-workspace-management.rst index 8fd61fae46a..b9b635bfc7f 100644 --- a/source/guides/cloud-workspace-management.rst +++ b/source/guides/cloud-workspace-management.rst @@ -15,3 +15,4 @@ Cloud workspace management * :doc:`Workspace usage ` - Keep your workspace active. * :doc:`Workspace migration ` - Migrate your workspace using the mmctl tool. * :doc:`Cloud data residency ` - Find information about your data in the Cloud. +* :doc:`Cloud Bring Your Own Key (BYOK) ` - Learn how to manage data encryption processes within a Mattermost Cloud Enterprise Dedicated deployment. diff --git a/source/install/download-latest-tarball.rst b/source/install/download-latest-tarball.rst index 4febd48d0f5..b50ecd7dca5 100644 --- a/source/install/download-latest-tarball.rst +++ b/source/install/download-latest-tarball.rst @@ -35,7 +35,7 @@ Using ``wget``, download the Mattermost Server release you want to install.
- wget https://releases.mattermost.com/8.1.7/mattermost-8.1.7-linux-amd64.tar.gz + wget https://releases.mattermost.com/8.1.8/mattermost-8.1.8-linux-amd64.tar.gz Copied to clipboard
diff --git a/source/manage/cloud-byok.rst b/source/manage/cloud-byok.rst new file mode 100644 index 00000000000..57de32f9499 --- /dev/null +++ b/source/manage/cloud-byok.rst @@ -0,0 +1,81 @@ +Cloud Dedicated Bring Your Own Key +=================================== + +.. include:: ../_static/badges/ent-cloud-dedicated.rst + :start-after: :nosearch: + +Bring Your Own Key (BYOK) provides Enterprise Cloud customers with autonomy over their encryption key life cycle. BYOK supports encryption at rest with custom KMS keys that the enterprise provides and maintains. + +BYOK requires a subscription to Mattermost Cloud Enterprise Dedicated, which offers enhanced data security and compliance by ensuring that enterprises have full control over their data encryption processes. + +In Mattermost Cloud Enterprise Dedicated, you can use KMS keys in 2 ways: + +- One KMS key for all services; or, +- Per-service KMS keys (EBS, RDS, S3) + - Keys do not need to be unique to each service. + - All services must be encrypted at rest. + - Selective enablement of this feature can be supported. + - In cases where a global database is needed, we recommend providing 2 KMS keys (1 per region). + +Configure BYOK +------------------------ +1. Enterprise customer provides their AWS KMS ARN to the Mattermost Infrastructure SRE team. +2. Enterprise customer adds the following blocks to their KMS Policy for the AWS KMS ARN provided: + +.. code-block:: JSON + + { + "Sid": "Allow use of the key", + "Effect": "Allow", + "Principal": { + "AWS": "arn:aws:iam:::user/mattermost-cloud--provisioning-" + }, + "Action": [ + "kms:Encrypt", + "kms:Decrypt", + "kms:ReEncrypt*", + "kms:GenerateDataKey*", + "kms:DescribeKey" + ], + "Resource": "" + }, + { + "Sid": "Allow use of the key role nodes", + "Effect": "Allow", + "Principal": { + "AWS": "arn:aws:iam:::role/nodes.-kops.k8s.local" + }, + "Action": [ + "kms:Encrypt", + "kms:Decrypt", + "kms:ReEncrypt*", + "kms:GenerateDataKey*", + "kms:DescribeKey" + ], + "Resource": "" + }, + +3. The Mattermost Infrastructure SRE team updates the kops cluster and S3, RDS resources after the KMS policy is updated on the customer's end. + +Alternatively, the Enterprise customer can provide an external key (non-KMS) to the Mattermost Infrastructure SRE team that Mattermost maintains on behalf of the customer. +This path offers less control to customers but simplifies the setup process. + +Requirements +~~~~~~~~~~~~~~~~~~~~~~~ + +- Customers must own their AWS Account. (In the alternative path mentioned above this is delegated to Mattermost.) +- Customers oversee the maintenance life cycle of their custom KMS key. +- A valid AWS KMS ARN for encrypting storage and databases should be provided to the Infrastructure SRE team. +- The customer should incorporate the provided policy blocks from the Infrastructure SRE team into their KMS key policy. + +Considerations +~~~~~~~~~~~~~~~~~~~~~~~ +- Changing the AWS KMS key in the database necessitates downtime due to AWS Aurora's encryption `limitations. `__ +- Proper communication is essential for setting expectations and scheduling changes. + +Conclusion +-------------- + +If you are a large enterprise with compliance requirements, or are working in highly-regulated industries, using Mattermost Cloud Dedicated with BYOK ensures full data control. + +For any further assistance or queries, `contact our support team `__. diff --git a/source/manage/logging.rst b/source/manage/logging.rst index 37fab65eb24..e46049aedb5 100644 --- a/source/manage/logging.rst +++ b/source/manage/logging.rst @@ -461,7 +461,7 @@ Frequently asked questions Does Mattermost have an audit log besides the system ``auditd``? ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -Yes. See the `audit logging <#audit-logging-experimental-beta>`__ documentation for details. +Yes. See the `audit logging <#audit-logging-beta>`__ documentation for details. When syslog is configured as the target, does it contain the IP address of the emitter of the data (i.e., the Mattermost app node)? ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ @@ -486,4 +486,4 @@ See `enable-webhook-debugging `__ \ No newline at end of file +See `maximum-field-size `__ diff --git a/source/upgrade/extended-support-release.rst b/source/upgrade/extended-support-release.rst index 6c4f8cc1667..142d335c809 100644 --- a/source/upgrade/extended-support-release.rst +++ b/source/upgrade/extended-support-release.rst @@ -49,7 +49,7 @@ What are the current supported Extended Support Release versions? +-------------+----------------+------------------+------------------+--------------------------------------------------------------------------------------------+-----------------------------------------------------+ | Version | Type | Release Date | End of Support | Latest Dot Release Download link | Upgrade Notes | +=============+================+==================+==================+============================================================================================+=====================================================+ -| 8.1 | Feature | August 16, 2023 | May 15, 2024 | `8.1.7 `_ | | +| 8.1 | Feature | August 16, 2023 | May 15, 2024 | `8.1.8 `_ | | +-------------+----------------+------------------+------------------+--------------------------------------------------------------------------------------------+-----------------------------------------------------+ | 7.8 | Feature | February 16, 2023| November 15, 2023| `7.8.15 `_ | | +-------------+----------------+------------------+------------------+--------------------------------------------------------------------------------------------+-----------------------------------------------------+ diff --git a/source/upgrade/version-archive.rst b/source/upgrade/version-archive.rst index 3807dde2828..66fe80700bb 100644 --- a/source/upgrade/version-archive.rst +++ b/source/upgrade/version-archive.rst @@ -20,22 +20,22 @@ Mattermost Enterprise Edition v9.3.0 - `View Changelog `__ - `Download `__ - - ``https://releases.mattermost.com/9.2.3/mattermost-9.2.3-linux-amd64.tar.gz`` - - SHA-256 Checksum: ``1063a605cb9f7d57eef36919897502914af55b991b147ee48a73bc323569062a`` - - GPG Signature: https://releases.mattermost.com/9.2.3/mattermost-9.2.3-linux-amd64.tar.gz.sig -Mattermost Enterprise Edition v9.1.4 - `View Changelog `__ - `Download `__ - - ``https://releases.mattermost.com/9.1.4/mattermost-9.1.4-linux-amd64.tar.gz`` - - SHA-256 Checksum: ``7fa2da26022b214796fac59669fd475237bf67bd8c7c2b9ae75d905f0e7528b1`` - - GPG Signature: https://releases.mattermost.com/9.1.4/mattermost-9.1.4-linux-amd64.tar.gz.sig +Mattermost Enterprise Edition v9.2.4 - `View Changelog `__ - `Download `__ + - ``https://releases.mattermost.com/9.2.4/mattermost-9.2.4-linux-amd64.tar.gz`` + - SHA-256 Checksum: ``ad4ef2354aeec0d8c0ec9ced92265de58352f7826f6e7bb4facf7a701e874cd4`` + - GPG Signature: https://releases.mattermost.com/9.2.4/mattermost-9.2.4-linux-amd64.tar.gz.sig +Mattermost Enterprise Edition v9.1.5 - `View Changelog `__ - `Download `__ + - ``https://releases.mattermost.com/9.1.5/mattermost-9.1.5-linux-amd64.tar.gz`` + - SHA-256 Checksum: ``1cf5c7d68a837d746fdb30f2fe88abbb34ca0badd9f4b297d18988c691f47b35`` + - GPG Signature: https://releases.mattermost.com/9.1.5/mattermost-9.1.5-linux-amd64.tar.gz.sig Mattermost Enterprise Edition v9.0.5 - `View Changelog `__ - `Download `__ - ``https://releases.mattermost.com/9.0.5/mattermost-9.0.5-linux-amd64.tar.gz`` - SHA-256 Checksum: ``5ed5118cb6bdb089fd47a087eea75746044acc3716162d7c1c40beaa6468941c`` - GPG Signature: https://releases.mattermost.com/9.0.5/mattermost-9.0.5-linux-amd64.tar.gz.sig -Mattermost Enterprise Edition v8.1.7 *Extended Support Release (ESR)* - `View Changelog `__ - `Download `__ - - ``https://releases.mattermost.com/8.1.7/mattermost-8.1.7-linux-amd64.tar.gz`` - - SHA-256 Checksum: ``78e448a192e8c5676fb91962ac9edd8c14e0b9e233973221440a14472e7ccc20`` - - GPG Signature: https://releases.mattermost.com/8.1.7/mattermost-8.1.7-linux-amd64.tar.gz.sig +Mattermost Enterprise Edition v8.1.8 *Extended Support Release (ESR)* - `View Changelog `__ - `Download `__ + - ``https://releases.mattermost.com/8.1.8/mattermost-8.1.8-linux-amd64.tar.gz`` + - SHA-256 Checksum: ``391b75cc68dccde5bc5f0283c14c66cc055591c08f773f677d66a6f312fc3139`` + - GPG Signature: https://releases.mattermost.com/8.1.8/mattermost-8.1.8-linux-amd64.tar.gz.sig Mattermost Enterprise Edition v8.0.4 - `View Changelog `__ - `Download `__ - ``https://releases.mattermost.com/8.0.4/mattermost-8.0.4-linux-amd64.tar.gz`` - SHA-256 Checksum: ``185e57bba4bcefd316cf1f83cfc73556c0646d6ea935e11be53ee1881817bf74`` @@ -357,22 +357,22 @@ Mattermost Team Edition v9.3.0 - `View Changelog `__ - `Download `__ - - ``https://releases.mattermost.com/9.2.3/mattermost-team-9.2.3-linux-amd64.tar.gz`` - - SHA-256 Checksum: ``5d8757d27e63082417d259e6264d7918f49832809187a86fbb93b7502696a646`` - - GPG Signature: https://releases.mattermost.com/9.2.3/mattermost-team-9.2.3-linux-amd64.tar.gz.sig -Mattermost Team Edition v9.1.4 - `View Changelog `__ - `Download `__ - - ``https://releases.mattermost.com/9.1.4/mattermost-team-9.1.4-linux-amd64.tar.gz`` - - SHA-256 Checksum: ``0e622b736730a2f4402587e62be54cf14b882538e878c424b12c012b7bfd85c3`` - - GPG Signature: https://releases.mattermost.com/9.1.4/mattermost-team-9.1.4-linux-amd64.tar.gz.sig +Mattermost Team Edition v9.2.4 - `View Changelog `__ - `Download `__ + - ``https://releases.mattermost.com/9.2.4/mattermost-team-9.2.4-linux-amd64.tar.gz`` + - SHA-256 Checksum: ``5887d169cc138beee8eea8f1b3b006877d13515cd70fb948fdfa0e4069ff4702`` + - GPG Signature: https://releases.mattermost.com/9.2.4/mattermost-team-9.2.4-linux-amd64.tar.gz.sig +Mattermost Team Edition v9.1.5 - `View Changelog `__ - `Download `__ + - ``https://releases.mattermost.com/9.1.5/mattermost-team-9.1.5-linux-amd64.tar.gz`` + - SHA-256 Checksum: ``0e876e1ab71a2a2035881371e0098a032b4ac7ac6dc4cabd8b8082f4357d8053`` + - GPG Signature: https://releases.mattermost.com/9.1.5/mattermost-team-9.1.5-linux-amd64.tar.gz.sig Mattermost Team Edition v9.0.5 - `View Changelog `__ - `Download `__ - ``https://releases.mattermost.com/9.0.5/mattermost-team-9.0.5-linux-amd64.tar.gz`` - SHA-256 Checksum: ``2aa5abe8dc65d6083c719ee0824e87f76d49d68c8ba8b6937c24295bfcc43dfc`` - GPG Signature: https://releases.mattermost.com/9.0.5/mattermost-team-9.0.5-linux-amd64.tar.gz.sig -Mattermost Team Edition v8.1.7 *Extended Support Release (ESR)* - `View Changelog `__ - `Download `__ - - ``https://releases.mattermost.com/8.1.7/mattermost-team-8.1.7-linux-amd64.tar.gz`` - - SHA-256 Checksum: ``6c708371bfa0573e36d9949dc4c4b34d102f02a37c6cb844934af3874c025544`` - - GPG Signature: https://releases.mattermost.com/8.1.7/mattermost-team-8.1.7-linux-amd64.tar.gz.sig +Mattermost Team Edition v8.1.8 *Extended Support Release (ESR)* - `View Changelog `__ - `Download `__ + - ``https://releases.mattermost.com/8.1.8/mattermost-team-8.1.8-linux-amd64.tar.gz`` + - SHA-256 Checksum: ``47aa923b58070fbfc2975458a2e011b09365c3fb64d74dc118356bbb476cbb9e`` + - GPG Signature: https://releases.mattermost.com/8.1.8/mattermost-team-8.1.8-linux-amd64.tar.gz.sig Mattermost Team Edition v8.0.4 - `View Changelog `__ - `Download `__ - ``https://releases.mattermost.com/8.0.4/mattermost-team-8.0.4-linux-amd64.tar.gz`` - SHA-256 Checksum: ``2c1dbff642b429abf4af39d32ea047a42ada8c57ebbf3cd9a3617243e4807ccf``