feast v0.63.0 security fixes: RBAC, TLS, and storage vulnerabilities

Vulnerability Overview In version of the project, there are several security-related vulnerabilities and fixes. These vulnerabilities primarily involve data source filtering, SnowflakeRegistry update paths, subprocess timeouts, GCS/S3 registry storage, Redis RDB persistence, Snowflake testing, Spark context initialization, remote online store type inference errors, JSON overrides, SnowflakeRegistry and Snowflake connection handling, BatchFeatureView with TransformationMode.PYTHON, SELECT queries, pandas mode, SQL strings, LocalOutputNode return values, FeatureView version control support, FAISS online store, Redis and DynamoDB online stores, optional 'org' feature views, RaySource, TLS support, Vector Search support, Milvus online store, performance issues, set GPU support, ray version upper limit, FeatureStore CRD, MaterializerConfig, agg definitions, MongoDB offline store, ODFV input schemas, TokenReview RBAC, and BatchFeatureView computation. Scope of Impact Data Source Filtering: Impacts and methods. SnowflakeRegistry Update Path: Impacts the path. Subprocess Timeout: Impacts the hanging issue in . GCS/S3 Registry Storage: Impacts GCS/S3 registry storage. Redis RDB Persistence: Impacts Redis RDB persistence. Snowflake Testing: Impacts Snowflake testing. Spark Context Initialization: Impacts Spark context initialization. Remote Online Store Type Inference Error: Impacts remote online store type inference. JSON Override: Impacts JSON overrides. SnowflakeRegistry and Snowflake Connection Handling: Impacts SnowflakeRegistry and Snowflake connection handling. BatchFeatureView with TransformationMode.PYTHON: Impacts BatchFeatureView with TransformationMode.PYTHON. SELECT Queries: Impacts SELECT queries. Pandas Mode: Impacts pandas mode. SQL Strings: Impacts SQL strings. LocalOutputNode Return Value: Impacts LocalOutputNode return values. FeatureView Version Control Support: Impacts FeatureView version control support. FAISS Online Store: Impacts FAISS online store. Redis and DynamoDB Online Stores: Impacts Redis and DynamoDB online stores. Optional 'org' Feature View: Impacts optional 'org' feature views. RaySource: Impacts RaySource. TLS Support: Impacts TLS support. Vector Search Support: Impacts Vector Search support. Milvus Online Store: Impacts Milvus online store. Performance Issues: Impacts performance issues. Set GPU Support: Impacts set GPU support. Ray Version Upper Limit: Impacts ray version upper limit. FeatureStore CRD: Impacts FeatureStore CRD. MaterializerConfig: Impacts MaterializerConfig. Agg Definitions: Impacts agg definitions. MongoDB Offline Store: Impacts MongoDB offline store. ODFV Input Schema: Impacts ODFV input schemas. TokenReview RBAC: Impacts TokenReview RBAC. BatchFeatureView Computation: Impacts BatchFeatureView computation. Remediation Data Source Filtering: Add project filters to apply and . SnowflakeRegistry Update Path: Add project ID filter to the SnowflakeRegistry UPDATE path. Subprocess Timeout: Add subprocess timeouts to prevent from hanging. GCS/S3 Registry Storage: Automatically detect GCS/S3 registry storage. Redis RDB Persistence: Disable Redis RDB persistence. Snowflake Testing: Disable Snowflake testing. Spark Context Initialization: Pre-create the S3 event log directory. Remote Online Store Type Inference Error: Fix remote online store type inference errors. JSON Override: Remove selectors and kustomize overrides. SnowflakeRegistry and Snowflake Connection Handling: Resolve multiple errors in SnowflakeRegistry and Snowflake connection handling. BatchFeatureView with TransformationMode.PYTHON: BatchFeatureView with TransformationMode.PYTHON now reads all source columns. SELECT Queries: Support SELECT queries. Pandas Mode: Support pandas mode. SQL Strings: Support SQL strings. LocalOutputNode Return Value: Wrap LocalOutputNode return values. FeatureView Version Control Support: Add FeatureView version control support. FAISS Online Store: Add FeatureView version control support to FAISS online store. Redis and DynamoDB Online Stores: Add FeatureView version control support to Redis and DynamoDB online stores. Optional 'org' Feature View: Add optional 'org' feature view. RaySource: Add RaySource. TLS Support: Add TLS support. Vector Search Support: Add Vector Search support. Milvus Online Store: Add version control support to Milvus online store. Performance Issues: Resolve performance issues in Redis online store. Set GPU Support: Allow setting GPU for ray. Ray Version Upper Limit: Increase the ray version upper limit. FeatureStore CRD: Expose , , and configurations. MaterializerConfig: Make configurable. Agg Definitions: Make agg definitions optional. MongoDB Offline Store: Add MongoDB offline store. ODFV Input Schema: Add optional for ODFV. TokenReview RBAC: Provide minimal TokenReview RBAC for OIDC authentication. BatchFeatureView Computation**: Add BatchFeatureView computation support. POC Code or Exploit Code No specific POC code or exploit code is included in t

Goal Reached Thanks to every supporter — we hit 100%!

feast v0.63.0 security fixes: RBAC, TLS, and storage vulnerabilities

More from this source