From 0feb32b0f85c49420cf2dde8c9c8e56af1fb5dd9 Mon Sep 17 00:00:00 2001
From: Scott Anderson <sanderson@users.noreply.github.com>
Date: Mon, 15 Apr 2024 15:09:11 -0600
Subject: [PATCH] InfluxDB 2.7.6 (#5424)

* 2.7.5 and 2.7.6 release notes, add strong passwords, closes #5417

* Apply suggestions from code review

* Apply suggestions from code review

Co-authored-by: Jason Stirnaman <stirnamanj@gmail.com>

* Apply suggestions from code review

---------

Co-authored-by: Jason Stirnaman <stirnamanj@gmail.com>
---
 .../influxdb/v2/reference/config-options.md   | 55 ++++++++++++++++++-
 .../v2/reference/release-notes/influxdb.md    | 38 +++++++++++++
 data/influxd_flags.yml                        |  3 +
 data/products.yml                             |  2 +-
 4 files changed, 96 insertions(+), 2 deletions(-)

diff --git a/content/influxdb/v2/reference/config-options.md b/content/influxdb/v2/reference/config-options.md
index dd2bd6f71..bd500d2ca 100644
--- a/content/influxdb/v2/reference/config-options.md
+++ b/content/influxdb/v2/reference/config-options.md
@@ -172,6 +172,7 @@ To configure InfluxDB, use the following configuration options when starting the
 - [storage-wal-max-write-delay](#storage-wal-max-write-delay)
 - [storage-write-timeout](#storage-write-timeout)
 - [store](#store)
+- [strong-passwords](#strong-passwords)
 - [testing-always-allow-setup](#testing-always-allow-setup)
 - [tls-cert](#tls-cert)
 - [tls-key](#tls-key)
@@ -2750,9 +2751,61 @@ store = "bolt"
 
 ---
 
+### strong-passwords
+
+Require passwords to have at least eight characters and include characters from
+at least three of the following four character classes:
+
+- uppercase (`A-Z`)
+- lowercase (`a-z`)
+- numbers (`0-9`)
+- special characters (`!@#$%^&*()_+`)
+
+| influxd flag         | Environment variable       | Configuration key  |
+| :------------------- | :------------------------- | :----------------- |
+| `--strong-passwords` | `INFLUXD_STRONG_PASSWORDS` | `strong-passwords` |
+
+###### influxd flag
+```sh
+influxd --strong-passwords
+```
+
+###### Environment variable
+```sh
+export INFLUXD_STRONG_PASSWORDS=true
+```
+
+###### Configuration file
+{{< code-tabs-wrapper >}}
+{{% code-tabs %}}
+[YAML](#)
+[TOML](#)
+[JSON](#)
+{{% /code-tabs %}}
+{{% code-tab-content %}}
+```yml
+strong-passwords: true
+```
+{{% /code-tab-content %}}
+{{% code-tab-content %}}
+```toml
+strong-passwords = true
+```
+{{% /code-tab-content %}}
+{{% code-tab-content %}}
+```json
+{
+  "strong-passwords": true
+}
+```
+{{% /code-tab-content %}}
+{{< /code-tabs-wrapper >}}
+
+---
+
 ### testing-always-allow-setup
 Ensures the `/api/v2/setup` endpoint always returns `true` to allow onboarding.
-This configuration option is primary used in continuous integration tests.
+This configuration option is primarily used in continuous integration tests.
 
 **Default:** `false`
 
diff --git a/content/influxdb/v2/reference/release-notes/influxdb.md b/content/influxdb/v2/reference/release-notes/influxdb.md
index e84d3dbc6..e4b94960f 100644
--- a/content/influxdb/v2/reference/release-notes/influxdb.md
+++ b/content/influxdb/v2/reference/release-notes/influxdb.md
@@ -8,6 +8,44 @@ menu:
 weight: 101
 ---
 
+## v2.7.6 {date="2024-04-12"}
+
+### Bug Fixes
+
+- Fix `panic index out of range` error for invalid series keys.
+- Update broken Flux and performance tests.
+- Do not panic when querying empty tags.
+- Improve shard deletion.
+- Return and respect cursor errors.
+- Update constant time code to make password strength calculations more constant.
+
+### Features
+
+- Add optional [stricter password requirements](/influxdb/v2/reference/config-options/#strong-passwords).
+
+### Maintenance
+
+- Upgrade to Go to 1.21.9.
+
+## v2.7.5 {date="2024-01-05"}
+
+### Bug Fixes
+
+- Only execute `init_config` on install.
+- Enable `Secure` when using TLS and enable `HttpOnly`.
+- Correctly return `4xx` errors instead of `5xx` errors.
+- Prevent retention service from creating orphaned shard files.
+
+### Features
+
+- Add authenticating ID and user ID to request logging.
+- Write detailed logs from endpoint detection and response (EDR) failures.
+
+### Maintenance
+
+- Emit build commands during tests.
+- Upgrade Flux to 0.194.5.
+
 ## v2.7.4 {date="2023-11-14"}
 
 _Internal changes only._
diff --git a/data/influxd_flags.yml b/data/influxd_flags.yml
index f18d78ab1..381edc6b5 100644
--- a/data/influxd_flags.yml
+++ b/data/influxd_flags.yml
@@ -170,6 +170,9 @@
 - flag: "--store"
   added: 2.0
 
+- flag: "--strong-passwords"
+  added: 2.7
+
 - flag: "--testing-always-allow-setup"
   added: 2.0
 
diff --git a/data/products.yml b/data/products.yml
index f71f739ca..b0bf42b02 100644
--- a/data/products.yml
+++ b/data/products.yml
@@ -21,7 +21,7 @@ influxdb:
     - v1.7
   latest: v2.7
   latest_patches:
-    v2: 2.7.5
+    v2: 2.7.6
     v1: 1.8.10
   latest_cli:
     v2: 2.7.3