All posts by Tomaz Muraus

StackStorm v3.0.1

May 30, 2019
By Tomaz Muraus

Today we are happy to announce StackStorm v3.0.1.

This is a first bug fix patch / patch release in the v3.0.x release series. It includes the following bug fixes and improvements:

  • Fix a bug in the remote command and script runner so it correctly uses SSH port from a SSH config
    file if ssh_runner.use_ssh_config parameter is set to True and if a custom (non-default)
    value for SSH port is specified in the configured SSH config file
  • Update pack install action so it works correctly when python_versions pack.yaml metadata attribute is used in combination with --python3 ” st2 pack install” flag.
  • Add source_channel back to the context used by Mistral workflows for executions which are triggered via ChatOps (using action alias). In StackStorm v3.0.0, this variable was inadvertently removed from the context used by Mistral workflows.
  • Fix a bug with timestamp attribute in the execution.log attribute being incorrect when server time where st2api is running was not set to UTC.
  • Fix a bug with some packs which use --python3 flag (running Python 3 actions on installation where StackStorm components run under Python 2) which rely on modules from Python 3 standard library which are also available in Python 2 site-packages (e.g. concurrent) not working correctly. In such scenario, package / module was incorrectly loaded from Python 2 site-packages instead of Python 3 standard library which broke such packs.
  • Remove policy-delayed status to avoid bouncing between delayed statuses in st2scheduler service.
  • Truncate some database index names so they are less than 65 characters long in total. This way it also works with AWS DocumentDB which doesn’t support longer index name at the moment.

    NOTE: AWS DocumentDB is not officially supported. Use at your own risk.
  • Fix a possible shell injection in the linux.service action. User who had access to run this action could cause a shell command injection by passing a compromised value for either the service or action parameter.


Thanks to everyone who has contributed to this release.

Special thanks to James Robinson (Netskope and Veracode) for reporting the security issue in linux.service action.


As always, make sure you have backups first. Then follow the standard Upgrade Instructions.

StackStorm v2.10.4

March 15, 2019
By Tomaz Muraus

Today we are happy to announce StackStorm v2.10.4.

This is another bug fix release in the v2.10.x release series. It includes the following bug fixes and improvements:

  • Fix inadvertent regression in notifier service which would cause generic action trigger to only be dispatched for completed states even if custom states were specified using action_sensor.emit_when config option.
  • Make sure we don’t log auth token and api key inside st2api log file if those values are provided via query parameter and not header (?x-auth-token=foo, ?st2-api-key=bar).
  • Fix rendering of {{ config_context. }} in orquesta task that references action from a different pack
  • Add missing default config location (/etc/st2/st2.conf) to the following services: st2actionrunner, st2scheduler, st2workflowengine.
  • Update statsd metrics driver so any exception thrown by statsd library is treated as non-fatal.


As always, make sure you have backups first. Then follow the standard Upgrade Instructions.

2018 Year in Review & 2019 StackStorm User Survey

Jan 30, 2019
By Tomaz Muraus

2018 is behind us and first of all we would like to thank all of our users, community members and customers for supporting us and making 2018 a successful year.

In this post we would like to have a look at the various things we have released and important milestones we have reached in 2018.

In addition to that, we would like to ask you to spare 10 minutes of your time by completing the StackStorm 2019 User Survey. Completing the survey will give us a better idea on how you use StackStorm. This will help us prioritize our feature development for 2019, make StackStorm better and help you become more successful.


StackStorm v2.9.2 and v2.10.1: A Security Release (CVE-2018-20345)

Dec 20, 2018
By Tomaz Muraus

Today we are announcing the release of StackStorm v2.9.2 and StackStorm v2.10.1.

Those two patch releases fix a security issue which has been reported to us this week by one of our users (Alexandre Juma – thanks!).


Say hello to StackStorm v2.7

April 16, 2018
by Tomaz Muraus

Spring is here and with that we are happy to announce a new StackStorm release: v2.7. This release includes various new features, improvements and bug-fixes. The biggest change you’ll notice is improved Mistral performance. Read on for more details on this, and everything else we’ve done:


New in StackStorm 2.5: Real-time action output streaming

November 07, 2017
by Tomaz Muraus

StackStorm v2.5.0 has been released recently. In addition to Inquiries, it includes another widely requested feature – real-time output of actions.

Real-time action output streaming allows users to see any output produced by an action in real-time.

This makes troubleshooting and debugging actions much easier and faster. It is especially handy in environments where StackStorm is used as a CI / CD tool and for long running actions (do you have a long running action which builds and installs a software package and you want to see the progress in real-time? Now that and a lot more is possible).

Prior to this release, it was only possible to see the output once the action has finished (well, there were some workarounds which involved using “tail” command, but those workarounds had many limitations and issues).


StackStorm v1.6.0 is here

August 10, 2016
By Tomaz Muraus

A good month after releasing StackStorm v1.5.0 we are happy to announce the release of StackStorm v1.6.0.

This release includes various new features and improvements described below.

Concurrency policy improvements

We have listened to feedback from our users and updated action concurrency policies to allow action execution to be canceled instead of just delayed when a concurrency threshold is reached.

This feature comes handy in situations where multiple users request the same action, but the action is already running because of the first request.


StackStorm v1.5.1 released

July 13, 2016
By Tomaz Muraus

Today we are happy to announce the release of StackStorm v1.5.1.

This is primarily a bug-fix release which includes bug fixes and improvements for some of the features which have been introduced in StackStorm v1.5.0.

Release Highlights

  • Fix trigger registration when using st2-register-content script with –register-triggers flag.
  • Fix an issue with CronTimer sometimes not firing due to TriggerInstance creation failure.
  • Add support for default values when a new pack configuration is used. Now if a default value is specified for a required config item in the config schema and a value for that item is not provided in the config, default value from config schema is used.
  • Support for posixGroup in the enterprise LDAP authentication backend

We would like to thank Cody A. Ray for reporting the first two issues and also helping us debug and troubleshoot the second one. In addition to that, we would also like to thank lbogardi and Steven Bakker for reporting the LDAP backend limitation and also proposing a solution for it.

If you are running StackStorm v1.5.0 we would like to encourage you to upgrade to the latest release and if you are not running StackStorm v1.5 yet, we would also encourage you to upgrade so you can utilize cool new features such as Improved Pack Configuration, Datastore Secrets and more.

Improved pack configuration, user scoped datastore items and secure secrets store

June 30, 2016
By Tomaz Muraus

The last couple of months, since the Brocade acquisition, have been pretty busy for us here at StackStorm. We have been getting to know our new friends at Brocade, learning the typical networking use-cases and figuring out how we can use StackStorm to automate them and bring all the DevOps and data-center automation goodness to the networking space, while keeping StackStorm a generic DevOps automation platform.

As always, we have continued to support our users and the community. We also haven’t been slacking with the StackStorm feature development and improvements. We have worked hard to bring you two new releases in the last 2 months – StackStorm v1.4 and StackStorm v1.5.

StackStorm v1.5 which has been released just recently includes many new features and improvements so if you haven’t already, I would encourage you to go check it out.

Today I will talk about the one of the major new features in StackStorm v1.5 which has been discussed and requested many times in the past already. That is improved pack configuration.


Brocade Acquisition FAQ

Directions and Roadmap

Q: What will happen with StackStorm open-source project?

A: No change: StackStorm automation platform will continue to be actively developed, and stays open-source under Apache 2.0. StackStorm Community product remains available as a free download.