Release Announcement: Telegraf 1.8.2, InfluxDB 1.6.4 and InfluxDB Enterprise 1.6.4

By Tim Hall / Product
Oct 29, 2018

Navigate to:

Three new maintenance releases are available now.

The InfluxDB Enterprise release includes an important correction which addresses a potential security issue. To address the security issue, a breaking change has been introduced.

If you have enabled authentication within the configuration file for InfluxDB Enterprise meta nodes, you are now required to provide an internal-shared-secret.

Here are the details:

If [meta] auth-enabled is set to true, the [meta] internal-shared-secret value must also be set in the configuration.

If it is not set, an error will be logged and influxd-meta process will not start.

Previously, authentication could be enabled without setting an internal-shared-secret. The security risk was that an unset (empty) value could be used for the internal-shared-secret, seriously weakening the JWT authentication used for intra-node communication.

Recommendation: Review Production Installation Configurations

The Production Installation documentation has been updated to highlight these configuration settings, including changing shared-secret to internal-shared-secret and adding missing steps for configuration settings of data nodes and meta nodes. All Enterprise users should review their current configurations to ensure that you are using the correct configuration settings to properly enable JWT authentication for intra-node communication.

If you need additional help or clarification, contact our support team via [email protected].

Telegraf 1.8.2 includes improvements to the following plugins:

  1. Aerospike Input (aerospike)
    • We have added support for unsigned integers in this plugin.
  2. Docker Input (docker)
    • Fixed an issue where the name of the docker instance was not being reported properly.
  3. Filecount Input (filecount)
    • Resolved an error where the plugin would crash if fileinfo was nil on Windows systems.
  4. Logparser Input (logparser)
    • We no longer pass empty measurement names to the output.
  5. MongoDB Input (mongodb)
    • Lowered authorization errors to debug level in this input.
  6. MQTT Consumer Input (mqtt_consumer)
    • Reworked the connection lifetime for this plugin.
  7. Ping Input (ping)
    • Resolved an issue where we were not returning the correct response code on this input.
  8. VMware vSphere Input (vsphere)
    • This plugin now honors SOAP timeouts.
  9. x509 Certificate Input (x509_cert)
    • Fixed a segmentation fault when the tls config was not set.

The binaries for the latest open source release can be found on our downloads page. For our InfluxDB Enterprise customers, log in to the InfluxDB Enterprise portal and download the latest binaries from there.