Release 9.2.40.1¶

Updated Ranger Admin Email Validation¶

Ranger Admin email validation now allows a 2-character local part (for example, ab@company.com) and domains with up to 6 labels (for example, user@dev.engineering.ind.bigbiz.us). Emails with a 1-character local part (for example, a@company.com) or a 1-character first domain label (for example, user@d.example.com) are still rejected.

Upgraded to Apache Solr 10.0.0¶

Self-Managed Solr now runs Apache Solr 10.0.0, replacing 9.10.1 (Kubernetes install mode only). Privacera Manager starts a Solr 10 cluster alongside the existing one, moves every service across, and copies your audit, Discovery and PolicySync data over in the background. Solr 9 is retired only after the copy is verified, and its volumes are kept so you can roll back. There is no downtime beyond the normal upgrade restarts.

Solr is upgraded to 10.0.0 to resolve critical CVEs on the Solr 9.10.1 image and its bundled Jetty.

For prerequisites, monitoring, rollback and troubleshooting, see the Solr 10 upgrade guide. To stay on Solr 9, see Rolling back to Solr 9.

Configurable collection shards, replicas and retention¶

Solr collection shards, replicas and retention are now set from Privacera Manager with SOLR_COLLECTION_<collection>_NUM_SHARDS, SOLR_COLLECTION_<collection>_NUM_REPLICAS and SOLR_COLLECTION_<collection>_TTL_DAYS (and SOLR_DISCOVERY_COLLECTIONS_* for the Discovery collections together). Upgraded deployments keep the layout they already have.

Updated Apache Zookeeper Dependencies¶

Upgraded Apache Zookeeper dependencies to address known security vulnerabilities identified in the CVE (Common Vulnerabilities and Exposures) report.

Configurable retention for Discovery Solr collections¶

Discovery Solr collections now support configurable document retention (TTL). See Solr Collection Retention (TTL) for Privacera Discovery for defaults and configuration.

Databricks Unity Catalog Connector — Per-Event Lake Formation Routing for AWS Table-Level Federation¶

For AWS Table-Level Federation, the Databricks Unity Catalog connector can now route its on-demand Lake Formation sync to the destination carried in the event, instead of always using the connector's configured Lake Formation catalog. When a table event includes an lf_table_level_fed_details block, the forwarded sync uses that block's catalog, schema, and region.

AWS Lake Formation Connector — On-Demand Sync Removes Deleted Tables and Databases¶

An on-demand sync for a table or database already deleted from the AWS Glue catalog previously failed repeatedly with an entity not found error. The connector now removes the deleted resource — and, for a database, its tables — so the sync completes successfully.

Updated PolicySync Dependencies for Databricks SQL Analytics Connector¶

Upgraded PolicySync dependencies to address known security vulnerabilities identified in the CVE (Common Vulnerabilities and Exposures) report for the Databricks SQL Analytics connector.

Sign-In and User Creation Support for Subdomain Email Addresses¶

You can now sign in and create users with email addresses whose domain includes a subdomain, such as user@dept.division.example.com, which the Portal previously rejected as invalid.

Base Image Upgraded¶

Updated the base image to a newer Debian version to address known security vulnerabilities identified in the CVE (Common Vulnerabilities and Exposures) report.

Updated Grafana Image¶

Upgraded Grafana dependencies to address known security vulnerabilities identified in the CVE (Common Vulnerabilities and Exposures) report.

Updated Prometheus Image¶

Upgraded Prometheus dependencies to address known security vulnerabilities identified in the CVE (Common Vulnerabilities and Exposures) report.

Updated Metrics Annotation Job Image¶

Upgraded Metrics Annotation Job dependencies to address known security vulnerabilities identified in the CVE (Common Vulnerabilities and Exposures) report.

Updated Opentelemetry-collector Image¶

Upgraded Opentelemetry-collector dependencies to address known security vulnerabilities identified in the CVE (Common Vulnerabilities and Exposures) report.

Updated Post Install Job Image¶

Upgraded Post Install Job dependencies to address known security vulnerabilities identified in the CVE (Common Vulnerabilities and Exposures) report.

Updated Trino Plugin Dependencies¶

Upgraded Trino plugin dependencies to address known security vulnerabilities identified in the CVE (Common Vulnerabilities and Exposures) report.

Trust3 AI Cloud as a Runtime Plane¶

You can now run your connectors on a runtime plane that Trust3 hosts for you, so you no longer need a Kubernetes cluster of your own. It is set up automatically for your tenant, and appears alongside any runtime planes you run in your own cloud account.

Upgrades no longer fail partway through¶

Fixed an issue that could stop a runtime plane upgrade before it finished.

UserSync — a second connector of the same type keeps its settings¶

If you added a second UserSync connector of the same type, its settings were cleared when the runtime plane restarted. They are now kept.

Runtime planes no longer get stuck during setup¶

Fixed an issue that could leave a new runtime plane stuck partway through setup, with no way to finish it.

Settings are kept when automatic upgrades are turned off¶

On a runtime plane with automatic upgrades turned off, changes you made to its settings could be lost. They are now kept.

Start, stop, and restart buttons follow the action you choose¶

These buttons now do what you clicked, instead of changing based on whether the application is currently healthy.