Redis Software release notes 8.2.x

Database-scoped management roles. Data path command auditing.

​​Redis Software version 8.2 is now available!

Highlights

This version offers:

• Database-scoped management roles

• Data path command auditing

• FIPS 140-3 support

Detailed release notes

For more detailed release notes, select a build version from the following table:

Version changes

Breaking changes

Redis Software version 8.2.0 introduces the following breaking changes:

• Local import from Redis Software system directories is no longer supported. To improve security, database imports that use the mount_point source can no longer read files from Redis Software system directories, including /opt/redislabs, /var/opt/redislabs, /etc/opt/redislabs, and any of their subdirectories.

  • Import operations that reference files in these directories now fail.

  • Store import files in a non-system location accessible to Redis Software before you start the import.

• smtp_password is now a write-only field in the Cluster API. To improve security, the API no longer returns the SMTP password in responses to GET /v1/cluster, and the Cluster Manager UI no longer reads or displays the existing password.

  • Applications or scripts that previously expected smtp_password to be returned by the Cluster API no longer receive this field.

  • When you update SMTP settings, the existing password cannot be retrieved. To change the SMTP password, provide a new password as part of the update request.

• Custom module upload is disabled by default. To improve security, custom (user-defined) module uploads are now disabled by default. A new cluster setting, allow_modules_upload, controls access to the custom module upload APIs. When this setting is disabled (the default), requests to POST /v2/modules/user-defined and POST /v2/local/modules/user-defined/artifacts return 403 modules_upload_disabled, regardless of user role.

  • To enable custom module uploads, set allow_modules_upload to true with a PUT /v1/cluster request.

  • Applications or automation that call the custom module upload APIs directly receive a 403 modules_upload_disabled response until the setting is enabled.

  • Existing functionality for listing, deleting, and loading modules is unchanged.

OpenSSL version

Redis Software version 8.0.16 and later requires OpenSSL 3.3 or later.

Reserved ports

Make sure the following ports are open before upgrading Redis Software.

The following port was added as a reserved port in Redis Software version 8.0.18; however, it is optional instead of reserved in Redis Software version 8.0.20-44:

Ports reserved as of Redis Software version 7.22.0:

Ports reserved as of Redis Software version 7.8.2:

See Ports and port ranges used by Redis Software for a complete list.

Deprecations

API deprecations

• The db_conns_auditing cluster policy and database configuration field is deprecated. Use the audit_settings.audit_mode field instead. Setting db_conns_auditing to true is equivalent to setting audit_mode to connection. See Audit events for the current auditing configuration.

• The gradual_src_mode, gradual_sync_mode, and gradual_sync_max_shards_per_source parameters are deprecated. Use gradual_sync_policy instead. You can set it with rladmin tune db or the REST API.

• The old_password field in POST /v1/users/password and PUT /v1/users/password requests is deprecated and ignored. It was optional and had no effect when adding or resetting a password, so you can remove it from these requests. old_password is still required for DELETE /v1/users/password, which uses it to identify the password to delete.

• The following REST API fields, deprecated since Redis Software version 6.4.2, are removed in this release:

  • use_ipv6 (cluster object) — use use_external_ipv6 instead.

  • redis_cleanup_job_settings (job scheduler object) — use persistence_cleanup_scan_interval instead.

Internal monitoring and v1 Prometheus metrics deprecation

The existing internal monitoring engine is deprecated. We recommend transitioning to the new metrics stream engine for improved performance, enhanced integration capabilities, and modernized metrics streaming.

V1 Prometheus metrics are deprecated but still available. To transition to the new metrics stream engine, either migrate your existing dashboards using this guide or use new preconfigured dashboards.

As part of the transition to the metrics stream engine, some internal cluster manager alerts were deprecated in favor of external monitoring solutions. See the alerts transition plan for guidance.

Supported platforms

The following table provides a snapshot of supported platforms as of this Redis Software release. See the supported platforms reference for more details about operating system compatibility.

✅ Supported – The platform is supported for this version of Redis Software and Redis Stack modules.

⚠️ Deprecation warning – The platform is still supported for this version of Redis Software, but support will be removed in a future release.

1. The RHEL-compatible distributions CentOS, CentOS Stream, Alma, and Rocky are supported if they have full RHEL compatibility. Oracle Linux running the Red Hat Compatible Kernel (RHCK) is supported, but the Unbreakable Enterprise Kernel (UEK) is not supported.

2. The server version of Ubuntu is recommended for production installations. The desktop version is only recommended for development deployments.

3. See the Redis Enterprise for Kubernetes documentation for details about support per version and Kubernetes distribution.

4. Docker images of Redis Software are certified for development and testing only.

5. Supported only if FIPS was enabled during RHEL installation to ensure FIPS compliance.

6. Amazon Linux 2023 support was added in Redis Software version 8.0.20.

Known issues

• RS155734: Endpoint availability metrics do not work as expected due to a calculation error.

Known limitations

Redis Search query failures during rolling upgrades across the 8.4 version boundary

Redis Search queries can fail during a rolling upgrade when a cluster contains shards running Redis versions earlier than 8.4 and shards running Redis version 8.4 or later, due to an internal protocol change introduced in version 8.4. This issue affects only clusters where parallel_shards_upgrade has been changed from its default value of 0. If both conditions apply, expect Redis Search downtime until all nodes are upgraded.

Trim ACKED not supported for Active-Active 8.4 databases

For Active-Active databases running Redis database version 8.4, the ACKED option is not supported for trimming commands.

Rolling upgrade limitation for clusters with custom or deprecated modules

Due to module handling changes introduced in Redis Software version 8.0, upgrading a cluster that contains custom or deprecated modules, such as RedisGraph and RedisGears v2, can become stuck when adding a new node to the cluster during a rolling upgrade.

Module commands limitation during Active-Active database upgrades to Redis 8.0

When upgrading an Active-Active database to Redis version 8.0, you cannot use module commands until all Active-Active database instances have been upgraded. Currently, these commands are not blocked automatically.

Redis 8.0 database cannot be created with flash

You cannot create a Redis 8.0 database with flash storage enabled. Create a Redis 8.0 database with RAM-only storage instead, or use Redis 8.2 for flash-enabled (Redis Flex) databases.

New Cluster Manager UI limitations

The following legacy UI features are not yet available in the new Cluster Manager UI:

• Purge an Active-Active instance.

  Use crdb-cli crdb purge-instance instead.

• Search and export the log.