Skip to content

Commit b32c659

Browse files
authored
[docs] chore(breaking-changes): add 2.2.0 breaking changes (#255)
1 parent 7c10be0 commit b32c659

4 files changed

Lines changed: 71 additions & 12 deletions

File tree

docs/deployment/breaking-changes.md

Lines changed: 43 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -6,12 +6,38 @@ Please follow the migration guides if you need to upgrade your platform.
66

77
## Breakdown per version
88

9-
This table regroups all the breaking changes introduced, with the corresponding version in which the change was implemented.
9+
This table regroups all the breaking changes introduced, with the corresponding version in which the change was
10+
implemented.
1011

11-
| Change | Deprecated in | Changed in |
12-
|:--------------------------------------|:--------------|:-----------|
13-
| [OpenAEV encryption of secret](#openaev-encryption) | - | 2.1.0 |
14-
| [OpenAEV renaming](#openaev-renaming) | 1.18.20 | 2.0.0 |
12+
| Change | Deprecated in | Changed in |
13+
|:------------------------------------------------------------|:--------------|:-----------|
14+
| [OpenCTI / OpenAEV compatibility](#octi-oaev-compatibility) | - | 2.2.0 |
15+
| [OpenAEV encryption of secret](#openaev-encryption) | - | 2.1.0 |
16+
| [OpenAEV renaming](#openaev-renaming) | 1.18.20 | 2.0.0 |
17+
18+
## OpenAEV 2.2.0
19+
20+
### Introduction
21+
22+
<a id="octi-oaev-compatibility"></a>
23+
24+
#### Scenario Generation from OpenCTI Security Coverage
25+
26+
In **OpenAEV 2.2.0**, the interconnection between OpenCTI and OpenAEV requires matching major versions:
27+
28+
- **OpenAEV 2.2.0** only works with **OpenCTI V7**
29+
- **OpenCTI V7** only works with **OpenAEV 2.2.0**
30+
31+
Due to API and interconnection changes introduced in OpenCTI V7, previous versions of OpenCTI are not compatible
32+
with OpenAEV 2.2.0, and conversely, OpenCTI V7 is not compatible with earlier versions of OpenAEV.
33+
34+
!!! success "Resolved in OpenAEV 2.2.1"
35+
36+
Backwards compatibility with older OpenCTI versions has been restored starting from **OpenAEV 2.2.1**. This breaking change only affects **OpenAEV 2.2.0**.
37+
38+
If you are upgrading to OpenAEV 2.2.0, please make sure to upgrade both OpenCTI and OpenAEV simultaneously to avoid service disruption.
39+
40+
For more details, see [this migration guide](breaking-changes/2.2.0-opencti-security-coverage.md)
1541

1642
## OpenAEV 2.1.0
1743

@@ -20,7 +46,9 @@ This table regroups all the breaking changes introduced, with the corresponding
2046
<a id="openaev-encryption"></a>
2147
#### OpenAEV encryption
2248

23-
With the introduction of the OpenAEV catalog, built-in connectors now store their configuration in the database. To ensure security, secrets and passwords within these configurations must be encrypted. This requires two new mandatory properties to be configured.
49+
With the introduction of the OpenAEV catalog, built-in connectors now store their configuration in the database. To
50+
ensure security, secrets and passwords within these configurations must be encrypted. This requires two new mandatory
51+
properties to be configured.
2452

2553
For more details, see [this migration guide](breaking-changes/2.1.0-encrypting-password.md)
2654

@@ -29,14 +57,19 @@ For more details, see [this migration guide](breaking-changes/2.1.0-encrypting-p
2957
### Deprecation
3058

3159
<a id="openaev-renaming"></a>
60+
3261
#### OpenAEV renaming
3362

34-
Following the evolution of scope in OpenBAS (Open Breach & Attack Simulation), it was decided to rename the project to OpenAEV (Open Adversarial Exposure Validation).
63+
Following the evolution of scope in OpenBAS (Open Breach & Attack Simulation), it was decided to rename the project to
64+
OpenAEV (Open Adversarial Exposure Validation).
3565

36-
This platform allows you to entirely create custom attack scenarios to emulate on endpoints. You can even create your own automated tabletop crisis simulation.
66+
This platform allows you to entirely create custom attack scenarios to emulate on endpoints. You can even create your
67+
own automated tabletop crisis simulation.
3768

38-
All those changes require manual modifications to upgrade from previous versions of OpenBAS, even if a lot have been automated.
69+
All those changes require manual modifications to upgrade from previous versions of OpenBAS, even if a lot have been
70+
automated.
3971

40-
Take note that the first startup can be longer, all modifications have to be applied, and it can take a bit longer than usual.
72+
Take note that the first startup can be longer, all modifications have to be applied, and it can take a bit longer than
73+
usual.
4174

4275
For more details, see [this migration guide](breaking-changes/2.0.0-openaev-renaming.md)
Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
# Scenario Generation from OpenCTI Security Coverage
2+
3+
!!! info ""
4+
5+
* **Introduced in**: `OpenAEV 2.2.0`
6+
* **Resolved in**: `OpenAEV 2.2.1`
7+
8+
## Description of changes
9+
10+
In **OpenAEV 2.2.0**, the interconnection between **OpenCTI** and **OpenAEV** requires matching major
11+
versions:
12+
13+
- **OpenAEV 2.2.0** only works with **OpenCTI V7**
14+
- **OpenCTI V7** only works with **OpenAEV 2.2.0**
15+
16+
Due to API and interconnection changes introduced in OpenCTI V7, previous versions of OpenCTI are not compatible
17+
with OpenAEV 2.2.0, and conversely, OpenCTI V7 is not compatible with earlier versions of OpenAEV.
18+
19+
!!! success "Resolved in OpenAEV 2.2.1"
20+
21+
Backwards compatibility with older OpenCTI versions has been restored starting from **OpenAEV 2.2.1**. This breaking change only affects **OpenAEV 2.2.0**.
22+
23+
If you upgrade to OpenAEV 2.2.0 without upgrading OpenCTI, the interconnection will not function properly. Both
24+
platforms
25+
must be upgraded simultaneously when moving to OpenAEV 2.2.0.

mkdocs.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -138,6 +138,7 @@ nav:
138138
- Migration guides:
139139
- OpenAEV renaming: deployment/breaking-changes/2.0.0-openaev-renaming.md
140140
- OpenAEV encryption: deployment/breaking-changes/2.1.0-encrypting-password.md
141+
- Scenario Generation from OpenCTI Security Coverage: deployment/breaking-changes/2.2.0-opencti-security-coverage.md
141142
- User Guide:
142143
- Getting started: usage/getting-started.md
143144
- Foundations:

overrides/main.html

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -8,8 +8,8 @@
88
{% endblock %}
99

1010
{% block announce %}
11-
Breaking Changes in OpenAEV 2.1
12-
<a href="{{ '/2.1.X/deployment/breaking-changes/2.1.0-encrypting-password/' }}">
11+
Breaking Changes in OpenAEV 2.2.0 — Resolved in 2.2.1
12+
<a href="{{ '/2.1.X/deployment/breaking-changes/2.2.0-opencti-security-coverage/' }}">
1313
<strong>Click here to go to the migration guide.</strong>
1414
</a>
1515
{% endblock %}

0 commit comments

Comments
 (0)