Manage 2.1.0 and 2.1.1 are now available from the Chef downloads site. Manage 2.1.1 is a security release to address a cross site scripting vulnerability that was discovered to exist in previous versions of Manage, including 2.1.0 and the 1.x series.
Manage 2.1.0 is a major version bump from 1.21.1 to 2.1.0, with the major change being that the package is now called “chef-manage” instead of “opscode-manage.” While Manage 2.1.0 is a major version bump because of the name change, you shouldn’t find breaking changes or a major overhaul of the web interface.
When using Chef server 12.3.1 or earlier and running on Ubuntu, chef-server-ctl install opscode-manage
will install a version prior to 2.1.0. To install the latest version, you must use apt-get install chef-manage
. This will be fixed in a future Chef server release.
When using Enterprise Linux, chef-server-ctl install opscode-manage
will install the latest version of chef-manage.
Manage 2.1.0 also introduces email verification on sign up. After filling out the sign up form, you’ll receive an email with a link that will let you complete the sign up process. This ensures that when users sign up, the email address they are using belongs to them.
As a reminder, you’ll need to have mail relay configured on your Chef server to ensure it can send any emails for sign up, organization invitations, and password resets.
The full change log for these releases (since 1.21.1) is here: https://manage.chef.io/changelog