Changes in 4.9.0
Key changes
Red Hat 9 and Ubuntu 22.04 Support
KX Delta Platform 4.9.0 now fully supports installations on:
- Red Hat Enterprise Linux 9 (RHEL 9)
- Rocky Linux 9.0
- Ubuntu 22.04 (LTS)
Analyst Visuals
You can now create Analyst Visuals based on the aggregated data of multiple databases.
KX Platform 4.9.0 introduces a dedicated process for handling Analyst Visuals requests. The new AV process comes with several benefits:
- it reduces the load of database processes
- it stores and manages all Analyst Visuals entities at a single location
- it enables Analyst Visual plots to be based on data collected from multiple target database processes
KX Control UI Upgrade
The KX splash screen and KX Control UI have been modernized with new icons and color scheme to align with the KX look and feel.
Enhanced Security
User access restrictions
You can now restrict all URLs/IPs by default for users connecting to the UI using configuration. Thus, new users do not have unrestricted access before they are added to the correct entitlement groups.
Restricted evaluation
Users with read permission on a process can now perform IPC calls to protected q processes. These calls evaluate with reval. This ensures the state of the process is not changed and the user cannot run system calls or access directories above the process working directory. Users can also connect Analyst to permissioned processes in read mode, allowing a restricted access to the IDE.
API calls to the process are still executed as normal. The user only needs read access on the API being called.
Client system calls
You can now use an instance configuration option to preload Analyst in q processes. This allows processes with client system calls disabled to connect to Analyst in lite mode, without editing the process template. This also reduces the load time for Analyst on first connect.
Control can now cleanly shut down processes with client system calls disabled.
Replication
Added bulk local repo syncing to follower processes when connecting to the leader. This allows the follower process to synchronize significantly faster with the leader in entity heavy environments.
Software Installation and Packaging
Dashboards rename
The HTML5DDashboards package has been renamed to be 'KXDashboards'. The package version is separate to KX Delta Platform release versions. The latest version of the KX Delta Platform installer automatically detects this change and upgrades with the renamed package.
Administrator password
During fresh deploys, the installer now prompts for a new Administrator password. To configure this, see the options in Install config options.
Custom environment variables
You can now add a section for custom environment variables to your install profile. This section is transcribed into the delta.profile during install, and allows you to add non-package specific environments.
Logging
A new feature is available to print the UTC offset of the host server's time zone after the timestamp in log messages. This feature can be useful for a Control cluster that orchestrates q processes running on servers located in different time zones.
PyKX
PyKX has been upgraded to 2.5.2.
MQTT
New configuration options are available for customizing your MQTT asset install. You can now enable ssl and set the path to the Eclipse Maho libraries at install time.
CVE Remediation
In version 4.9.0, 3rd party library dependencies have been upgraded and tested to resolve CVEs as they are reported by regulatory bodies. This includes upgrading SSL protocols and ciphers, which can now be configured as required: Install config options
Compatibility and license information
Dashboards Breaking Change.
KX Delta Platform version 4.9.0 comes with Dashboards version 2.2.3. Due to ongoing security improvements, earlier versions of Dashboards are not compatible.
OpenSSL3 Compatability
Note: By default Red Hat 9 and Ubuntu 22 use OpenSSL 3. While TLS certificates don’t generally need to be updated when migrating to a newer version of Red Hat or Ubuntu, you should make sure that your cryptographic configurations are compatible with the newer OpenSSL version. Testing and reviewing are recommended. Visit https://docs.openssl.org/3.0/ and follow the migration guide for specific guidance and best practices.