v4.1.2 Release Notes

Important

v4.1.2 requires Elasticsearch v7.x. Please refer to Upgrading and Elasticsearch Upgrade Documentation before installing or upgrading to v4.1.2 if your Appliance’s Elasticsearch is external.

Important

v3.6.0 or later required to upgrade to 4.1.2. Upgrading from v3.6.x to v4.x contains upgrades to MySQL, RabbitMQ, and Elasticsearch. Please refer to Upgrade Requirements before upgrading. When upgrading from v3.6.x to v4.x a database backup is recommended due to MySQL version upgrade.

Important

It is recommend to upgrade existing VM and Host Agents after upgrading to v4.1.2 for Automation tasks with large task outputs/results when executing over Morpheus Agent Command Bus.

New Features

Agents: FIPS enabled packages installed when FIPS is enabled on target

Morpheus will now use FIPS enabled agent packages when FIPS is enabled.

  • The Agent install process will detect if FIPS is enabled on the target VM or Host, and then call the package morpheus-node-fips or morpheus-vm-node-fips instead of the non-FIPS compliant packages during the agent install process.
  • The Appliance repo will contain both non-FIPS and FIPS package versions.
Agent: SSL Verification of Agent Communications option added

SSL Verification of Agent Communications can now be enforced.

  • Enable SSL Verification of Agent toggle added to /admin/settings#!appliance
  • Enabling SSL Verification of Agent Communications requires a valid Certificate be installed on the Appliance. - If Enable SSL Verification of Agent is enabled and the Appliance has a valid 3rd party SSL Certificate and the verify peer is set on the Agent, the Agent can connect to the Appliance. - If Enable SSL Verification of Agent is enabled and the Appliance has a self-signed Certificate (default), the Agent will not be able to connect to the Appliance. - SSL Verification of Agent Communications requires the node’s Agent configuration to have morphd['verify_peer'] = true set in /etc/morpheus/morpheus-node.rb.
Appliance: Elasticsearch 7 upgrade
4.1.2 installs and requires Elasticsearch v7.x.
  • For Appliances with the default local Elasticsearch, no action is required.
  • For existing Appliances using an external Elasticsearch Host, Cluster or Service, Elasticsearch v7.x upgrade is required.
  • New installations require any external Elasticsearch Host, Cluster or Service to be on Elasticsearch v7.x.
  • Elasticsearch v5.6 was the previous version used by Morpheus. Please refer to Elasticsearch Upgrade Documentation for upgrade instructions.

Important

Elasticsearch 7.x is required for v4.1.2+. Running Morpheus v4.1.2 with Elasticsearch 5.x or 6.x is NOT supported.”

Appliance: Nginx now defaults to tls 1.2 only
The default Nginx config removes support for tls 1.0 and 1.1.
  • Some older OS’s such as CentOS 6 will not be able to install the Morpheus Agent or communicate with the Appliance without updating the image or configuring nginx to allow lower tls versions via morpheus.rb config.
  • Windows versions such as Windows 2008 require .net 4.5 minimum
Appliance: Redis removed
Redis dependency has been removed for security enhancements. Redis is no longer installed or required.
Apps: Kubernetes: Spec-Based App: Parsing errors surfaced
When provisioning Kubernetes Spec-Based Apps, syntax and/or parsing errors are now surfaced in the UI.
Azure: ARM Spec Templates & Layouts
ARM Spec Templates & Layouts - Users can now create an ARM layout type and then select a Spec Template created with an ARM template. - The options in the ARM template then appear in the instance wizard. Upon provision, Morpheus will look through the template and create matching resource records in Morpheus mapped to those created in Azure. - - - Post-provision, records will also be created for any additional indirect resources that are created during provisioning. - ARM Spec Templates support Local, Repository and URL Sources. - Spec Templates: /provisioning/library/resource-specs”
Azure: ARM Templates: Custom naming of parameters for display
Currently, the key in an Azure ARM template is used as the display name. See https://bertram.d.pr/13G6gf. Now, a user can specify ‘fieldLabel’ under the ‘metadata’ block for a parameter and that will be picked up and displayed as the label when provisioning.
Azure: CSP and EA price sync
Azure EA (enterprise agreement) and CSP (Cloud Solution Provider) pricing support added.

  • ACCOUNT TYPE field added to Azure Cloud settings, with Standard, EA and CSP options.† The Account Type selection determines what prices are synced to Morpheus. Standard is Default and the same prices synced in earlier versions.

  • To change an Azure Cloud Account Type from Standard to either CSP or EA pricing, in Infrastructure -> Clouds, edit the target Azure Cloud. In the Details section, select Standard, CSP, or EA from the ACCOUNT TYPE dropdown. Select SAVE CHANGES. A new cloud sync will be triggered and the specified Account Type pricing will sync.

    Note

    CSP and EA pricing sync is only available for Azure EA (Enterprise Agreement) and CSP (Cloud Solution Provider) subscriptions.

Azure: Virtual Networks filtered
Parent Virtual Networks are no longer listed in Instance, App, Blueprint, Host, Reconfigure, Clone and Network Group Wizards, allowing clearer selection of appropriate Subnet(s). - Previously Virtual Networks would be displayed along with Subnets. If a Virtual Network was selection, Morpheus would round-robin select a subnet in the vnet. - Use Network Groups to place appropriate subnets in a Network Group for round robin provisioning options.
Backups: (GB, 7 DAY TOTAL) added to SIZE OF BACKUPS widget.
Title for “Size of backups” on /backups summary updated to make it clearer the values in the widget reflect the last 7 days and are in GB.
Backups: Tenant Backups Visibility added to Master Tenant

Sub-Tenants Backups are now visible in the Master Tenant for Backups in Clouds owned by the Master Tenant and either shared Publicly or Private and assigned to a Sub-Tenant.

  • Tenant field added to Backup List ( /backups/list) and Backup Details ( /backups/show/{id}) pages.
Clouds: Security & Firewall configuration updates
  • Host Firewall and Local Firewall combined into Local Firewall - Enabling this will control ip table rules on Managed VM’s and Hosts via Security Groups in Clouds without native Security Groups
  • Local Firewall and Cloud Native options removed from Security Server Options - Cloud Native security groups cannot be disabled so they are no longer a configuration option - Local Firewall is now controlled by Local Firewall setting instead of Security Server Setting
  • Security Server setting is for Security Service Integrations such as ACI
Clouds: Type and Status filters added
In the Clouds List page /infrastructure/clouds, Clouds can now be filtered by status (All/Enabled/Disabled) and/or by Cloud Type
Clouds: Cloud Init/ Unattend default Agent Install mode

The default AGENT INSTALL MODE setting for new Clouds is now set to ``Cloud Init / Unattend (when available) ``

  • The setting for existing clouds will not be changed.
  • SSH / WinRM / Gust Execution was previously the default setting and ` Cloud Init / Unattend (when available)` needed to be set manually, which is the recommended Agent Install mode.
Clusters: Create Cluster: Review Tab Enhancements
The Review Tab in the Create Cluster wizard has been update with:
  • Added:
    VOLUME DETAILS, NETWORK DETAILS, SERVICE PLAN, POD CIDR, and LAYOUT
  • Removed:
    GROUP
Convert To Managed: Instance Type list filtered by Role Permissions
The Instance Types available to a user to select from during the Convert to Managed action are now filtered by the users Instance Type Access Role permissions.

Currencies: Brazil, Chile currencies added

Google Cloud: Shared network support added

Instances: Warning message added for “Force Delete” option
Checking “Force Delete” when deleting now displays a warning message “After force deleting you may need to remove the corresponding infrastructure manually”, as force deletes can leave target resources up if Morpheus is unable to validate their removal.
Identity Sources: SAML: Logout Redirect improvements
Logout Redirect functionality improved for SAML Identity Source Integrations when the Logout Redirect URL is specified.
Identity Sources: SAML: Azure AD SAML Graph support
Azure AD SAML now supports graph links in saml responses for Azure AD SAML, sent when the number of groups a user is a member exceeds 150.
Library: Option Types: Typeahead now returns value(s) only
Typeahead Option Types now return value(s) only, like Select List Option Types. Previously [name:name, value:value] was returned.
Networks: Cloud List Filter
Cloud Type Filter added to /infrastructure/networks
NSX: NSX-V Enhancements

Major additions to NSX-V Integration

  • Logical Routers section added with Logical Router creation
  • Summary view added with Global, System and Component statuses, additional stats
  • Switches section added
  • Firewall section added with Group and Rule creation
  • Edge Gateway detail section added with Summary, Firewall, DHCP and Routing sections
  • Enhanced capabilities for NSX object creation during provisioning
  • Refresh Action added for NSX Integrations
Openstack: Backups: Storage Provider options added
Openstack backup creation now allows for choosing a storage provider. Openstack Backup/Restores work with Local disk types, Volume disk types and Multiple disks.
Openstack: Migrations

Ability to migrate an Instance from an openstack-based cloud to any other openstack-based cloud

Note

Migrations to OTC/Huawei will not be supported via the Migrations tool in Morpheus. This capability will only be covered via instance clone

Openstack: Support for multiple Routers within the same network
Support added for multiple Routers within the same network. Previously, only one Router could be created per Network.
Policies: New Backup Targets Policy
Backup Targets Policy Type added. A master account can determine storage provider options for backups with Backup Targets policies.
Policies: New Delayed Removal Policy

Delayed Removals allow for soft deletion of Instances and Apps. Instead of deleting immediately, Instances and Apps with a Delayed Removal policy applied will be shutdown upon deletion request and hidden by default from the ui. The Instance/App will then be in Pending Removal status.

  • If no action is taken, the resources will be deleted in the timeframe set in the policy.
  • An Undo Delete action is available for Instance and Apps in pending removal status. Triggering Undo Delete will remove the scheduled deletion and restore the Instance or App status to stopped.
  • A new Pending Removal filter has been added to /provisioning/instances and /provisioning/apps
  • Delayed Removal policies do not current apply to Docker Hosts or Discovered VM’s.
  • Available Scopes for Delayed Removal policies are Global, Cloud, Group, User and Role and can be applied to a single or multiple Tenants.
Policies: New Message of the Day (MOTD) Policy

Message of the Day”” Policy for displaying Alerts in Morpheus.

  • Configurable as a pop-up or full-page notification with Info, Warning and Critical message types.
  • Includes new Role Permission: Admin: Message Of the Day - None/Full
Provisioning: Actions removed for Canceled or Denied Instances & Apps.
On Instance and App detail pages, invalid Instance and Node Actions are no longer listed for Instances with a status of Canceled or Denied (Approval).
Provisioning: System ‘Existing’ Instance Layouts removed.

v4.1.2 no longer seeds the legacy and disabled “Existing” System Layout options.

  • The “Existing” layout options, used for adding non-inventoried/discovered hosts and vm’s in older releases, no are longer supported/retired.
  • Existing Hosts, Virtual Machines and Bare Metal can be added in the Infrastructure -> Hosts section, or through Cloud Discovery.
Roles: Identity Sources: Roles Admin permission
Role permission for Identity Sources allowing the user to only edit Role Mappings and no other settings of the Identity Source.
ServiceNow Plugin: App Provisioning
Apps from Blueprints can now be provisioned from ServiceNow via the Morpheus ServiceNow App. Blueprint section added to the ServiceNow Integration details page in Morpheus for managing the Blueprints exposed in ServiceNow.
ServiceNow: Plugin Support added for vCD, Xen, and ESXi Cloud Types
The Morpheus ServiceNow Plugin now supports vCloud Director (vCD), Xen, and ESXi Cloud Types.
Tasks: “WinRM Script” renamed “Powershell Script”

The WinRM Script Task type has been renamed Powershell Script, as the Task Type supports Command Bus, Local and Guest Execution in addition to WinRM connections for executing Powershell Scripts.

  • Existing WinRM Script Tasks are not affected, this is only a label change.
Tasks: Remote Shell, Local Shell, SSH Script Tasks Merged into “Shell Script”
With the addition of task execution targets, the fRemote Shell Script, Local Shell Script and SSH Script task types offered redundant functionality and have been have been merged into a single “Shell Script” task type.
Tasks: Shell Task: KEY Field Added
Keys can now be used on Shell Tasks when using Remote Execution Targets
Tenants: Logouts now redirect to subdomain login
When logging out of a sub-tenant, users are now redirected to the Tenants login url, rather than the Master Tenant login url.
UI: Alarm Icon with Alarm Count badge added to Global Header

Alarm Icon added to Global Header that links to Operations: Health: Alarms.

  • Active Alarm Count displayed with Badge on Alarm Icon
  • 100 or more alarms will display as 99+
  • Alarm Icon links to Operations: Health: Alarms
  • Alarm Count Icon
VM “Dashboard” tab renamed “Summary”
The “Dashboard” tab on Virtual Machine Detail pages (/infrastructure/servers/{id}) has been renamed to “Summary”

Virtual Images: “OCI” added to Image Type Filter for Oracle Cloud Images

Whitelabel: Security Banner section added

The Security Banner section in /admin/settings#!whitelabel displays content on the login screen for Security and Consent messaging and warnings.

  • Applicable at Global and Tenant levels
  • Security Banner input field accepts plain text and markdown
  • Content is displayed below login section in scoped /login/auth pages.
Workflows Provision Phase support for Cluster/Host Provisioning
In addition to Post-Provision phases, Provision phases now supported for Workflows executed during Cluster and Host Provisioning

API Enhancements

CLI Enhancements

Note

CLI v4.1.9 corresponds to the release of the Morpheus API version 4.1.2

  • New command appliance-settings
  • New command provisioning-settings
  • New command whitelabel-settings
  • New command log-settings
  • New command approvals
  • New command budgets
  • New command health
  • New command service-plans
  • New command prices
  • New command price-sets
  • Updated command logs output format to match more closely with the UI. This includes logs list, instances logs, apps logs, etc.
  • Updated command cypher put to support more flexible format and store secret values as a string or object. Default TTL is now unlimited (0.)
  • Updated command workflows add to create operational workflows, associate option types and to prompt for inputs.
  • New subcommands workflows execute and tasks execute.
  • Updated prompting to support dependsOnCode option type setting. This improves prompting for commands like instances add where irrelevant or duplicate option prompts could be seen.

CVE’s Addressed

  • CVE-2012-5783
  • CVE-2012-6153
  • CVE-2012-6708
  • CVE-2013-6440
  • CVE-2015-1796
  • CVE-2015-1796
  • CVE-2015-9251
  • CVE-2016-7954
  • CVE-2018-12629
  • CVE-2019-0232
  • CVE-2019-10072
  • CVE-2019-10202
  • CVE-2019-10202
  • CVE-2019-12402
  • CVE-2019-16869
  • CVE-2019-16892
  • CVE-2019-16942
  • CVE-2019-16943

Fixes

  • Administration: Disabling a user account now clears user access token session

  • Agent Installation: SSH validation when using cloud-init agent install mode timeout increased from 2 seconds to 60 seconds

  • Ansible: Integration detail pages now display streaming output of workflow runs

  • API: Added support for both resourcePoolId & vmwareResourcePoolId for specifying VMware Resource Pool.

  • Apps: Fix for validation error not exposed when Group is not specified and Instance configuration is extended in App wizard

  • AWS: Fix for Elastic IP assignment when None is selected and subnet does not default to assigning an EIP.

  • AWS: Fix for synced AMI Image location for AMI’s with the same name in two different AWS accounts, with an AWS cloud added for each account.

  • Azure: Fix for Azure Discovered VM’s usage records.

    Note

    If inventory level is set to basic, Morpheus does not know the power state of discovered VMs. Usage records will only be created as Stopped in this case.

  • Azure: Fix for validation of minimum root volume size requirement on Private Azure Images

  • Budgets. Fix for displayed currency when USD is not specified

  • CLI: Fixed an error seen on Windows with select prompting.

  • CLI: Fixed shell prompt still having ansi coloring with shell -C and after coloring off.

  • CLI: Fixed issue with -r [remote] still using the previous remote’s active group for instances add, clusters add, apps add.

  • CLI: Fixed issue with the -F, –fields not excluding keys outside of the object scope. eg. meta: {…}.

  • Docker: Fix for inaccurate Used Memory stat on Docker Hosts with running Instances

  • ESXi: Fix for updating Image Store on Cloud Configuration not saving, using previous Image Store.

  • Infrastructure Clouds Actions menu

  • Instances: Instance status now reflected as unknown if the VM has been deleted in the target Cloud

  • Instances: Reconfigure: Fix for adding networks during a reconfigure to a sub-tenant instance using a master-tenant owned private service plan.

  • Nutanix: Fix for default Plan selection when reconfiguring an Instance when scoped plan has been deactivated

  • Openstack: Fix for Security group rules not being created when the destination is a Security group

  • OpenStack: Fix for sync of Security Groups that have been renamed in Openstack after initial sync

  • Plans & Pricing: Fix for Price Sets displaying default Resource Pool (if set) instead of saved Resource Pool.

  • Policies: Shutdown and Expiration policies no longer allow negative values

  • Provisioning: Fix for allowing customization of additional volume sizes when CUSTOMIZE ROOT VOLUME is unchecked in selected Service Plan

  • Provisioning: Fix for Ansible Tower section not expanding to expose the validation message when a required field is empty.

  • Provisioning: Fix for scenarios when Option Type requirement is not validated

  • Provisioning: Price estimates in provisioning instance wizard now incorporate selected resource pool as a price parameter

  • Provisioning: Validation added for Network Static IP fields

  • Recent Activity: Fix for User Filter only listing first 25 Users

  • Reports: Cloud Cost Reports now include subtenant costs when filtering by subtenant Cloud

  • Reports: Fix for Group Inventory Summary report VM Count

  • SAML: Fix for SAML Response signature validation when enabled

  • ServiceNow: Unsupported Instance Types (Google) with typeahead fields removed from ServiceNow Integration EXPOSED LIBRARIES Library Item configuration.

  • Solarwinds: Fix for hostname record update in Solarwinds when IP is reserved

  • Tasks: PROCESS OUTPUT is no longer hidden after the last retry attempt on task history if automation task is ‘RETRYABLE’ and fails.

  • Tenants: Fix for Confirmation emails during Tenant self-registration

  • Tenants: Fix for Tenant deletion when a Storage Server still exists in the Tenant

  • Tenants: Improved error handling for when assigning a managed VM to subtenant that does not have access to the associated Cloud

  • Usage: Fix and additional jobs added to prevent discovered virtual machines from having both running & stopped usage records active.

  • vCloud Director: Provisions now properly fail when there is a Guest Customizations failure

  • vCloud Director: Support added for VCD 9.5 upload api’s removal of support for Content-Length header

  • VMware: Fix for Default Resource Pool specification propagating to sub-tenants

  • VMware: Fix for duplicate storage controller controllerKey values

  • Whitelabel: Fix for favicon not being displayed in Terms of Use or Privacy Policy pages

  • Zerto: Fix for Replication Group sync