v0.9.0

🎉 Acorn v0.9.0 is now available! 🎉

New Features

AML Rewrite - We've rewritten AML (Acorn Markup Language) from the ground-up. This is the language that powers Acornfiles. This re-implementation is mostly transparent to users but gives us much more power and flexibility moving forward. The source code for AML can be found here.

Built-in cloning - The acorn dev command has a new --clone flag. This will cause the acorn dev command to clone the source code for a running app and launch a dev session using it.

Parameterized basic secret generation - When generating a basic secret, you can now control the character set and length for the username and password.

What's Changed

• Add the ability to specify unlimited for individual resources by @tylerslaton in #2109
• Publish docs for v0.8 by @njhale in #2140
• Quiet more install output by @cjellick in #2141
• Fix issue with Project storage by @tylerslaton in #2142
• Remove nightly EKS tests by @thedadams in #2147
• Fix: Importing Private Keys (SSH Keys) for signing and deny them for verification (#2063 + #2115) by @iwilltry42 in #2145
• change: adjustments to support ImageRoleBindings in Manager by @iwilltry42 in #2118
• change: always use internal image ref for IAR validation, if possible (#2067) by @iwilltry42 in #2113
• Return 403 instead of 401 when failing to pull an image for image details by @g-linville in #2151
• Refactor GenericMap to prevent managedField issues by @njhale in #2080
• Updates for new API groups by @thedadams in #2157
• fix: pulling an image twice failed as we provided the wrong repoDigest by @iwilltry42 in #2156
• add: default acorn.io/signed-name annotation for signatures (opt-out for verification) (#2149) by @iwilltry42 in #2150
• change: only exclude AcornDNS cluster domains from cert-manager annotations (#2153) by @iwilltry42 in #2154
• Add karpenter do-evict annotation when scale is nil or 1 by @StrongMonkey in #2159
• Stop setting auto-upgrade to false on update (#2161) by @thedadams in #2162
• Account for scale of a container when creating a QuotaRequest by @tylerslaton in #2165
• Fix app validation when computeclasses change on stop by @njhale in #2164
• Split resources into BaseResources and QuotaRequestResources by @tylerslaton in #2143
• Cache image metadata to speed image details call by @ibuildthecloud in #2169
• Revert "Cache image metadata to speed image details call" by @ibuildthecloud in #2172
• Cache image metadata to speed image details call by @ibuildthecloud in #2173
• require command to be passed to acorn kube command (#1184) by @keyallis in #2168
• Cancel imagedatacache purge when context is canceled by @ibuildthecloud in #2175
• change: allow non-file input for acorn image sign --key by @iwilltry42 in #2167
• Adjust RBAC to run on OpenShift by @sam6258 in #2158
• fix acorn kube -w by @keyallis in #2181
• change: early validation of signature annotations before signing (#2177) by @iwilltry42 in #2178
• Add service container labels by @thedadams in #2182
• add: ImageRoleAuthorizations and improve shared ImageSelector logic (#2148) by @iwilltry42 in #2160
• Add aditional top level keys by @cloudnautique in #2188
• Add details as a long-running resource by @thedadams in #2190
• AML Rewrite by @ibuildthecloud in #2191
• Fix broken args in acornfile by @ibuildthecloud in #2193
• Fix upgrade with existing invalid acornfiles by @ibuildthecloud in #2194
• Don't rename acornfile as that causes too obscure of errors by @ibuildthecloud in #2195
• Add pragma header to force amlv0 syntax by @ibuildthecloud in #2196
• Don't use @ in passwords as that break connections strings by @ibuildthecloud in #2197
• Switch to using Deference by @cjellick in #2198
• Bump aml by @ibuildthecloud in #2199
• fix: empty name sent via imageSAR by @iwilltry42 in #2200
• Add missing permission for jobs by @StrongMonkey in #2189
• fix: early capture non-file input for image sign by @iwilltry42 in #2202
• add: matchimageopts for imageselector (to bypass signature cache) by @iwilltry42 in #2201
• fix: newconfig always overwrote feature map by @iwilltry42 in #2203
• fix: nil map assignment in features config by @iwilltry42 in #2204
• Make the MarshalJSON method on GenericMap a pointer receiver by @thedadams in #2209
• fix: acorn:project:admin add get/list/watch for infos by @iwilltry42 in #2208
• Capture app spec in AppCreate event details by @njhale in #2210
• add: IRA Superadmin by @iwilltry42 in #2212
• Record what defaultVolumeSize was used in the Defaults section of AppInstanceStatus by @tylerslaton in #2213
• Allow images when feature flags are disabled by @thedadams in #2214
• change: move role definitions around (aws specific and infra specific) by @iwilltry42 in #2216
• Re-evaluate image permissions for failing apps by @thedadams in #2218
• Use stage app image when determining when to re-evaluate permissions by @thedadams in #2219
• Stop re-evaluating failed apps if IRA hasn't changed by @thedadams in #2220
• Make cluster-scoped permission encompass project-scoped by @thedadams in #2207
• Bump release to 1.21 by @cjellick in #2221
• Always set the defaults.VolumeSize if its nil by @tylerslaton in #2222
• Make dev logging be able to be capture and not go to stdout/err by @ibuildthecloud in #2224
• Don't set omitempty for fields in the Resources struct by @tylerslaton in #2223
• Bump baaah dependency to pickup trigger fix by @thedadams in #2227
• Don't add compute for Jobs to QuotaRequestInstances by @tylerslaton in #2225
• Improve error messaging for QuotaRequestInstances by @tylerslaton in #2217
• Add new --volume-size-default install flag by @tylerslaton in #2215
• Bump AML for bug fixes by @ibuildthecloud in #2231
• Fix for quota requests not being processed (#1378) by @thedadams in #2232
• change: ensure that we only renew the original Acorn TLS (wildcard) certificate by @iwilltry42 in #2235
• change: proper error handling for fetching pubkeys from GitHub API (#2185) by @iwilltry42 in #2183
• Fix missing permissions error message by @thedadams in #2241
• Fix issue with updates not being blocked by QuotaRequest restrictions by @tylerslaton in #2239
• Fix an issue with default VolmeStorage not being accounted for in QuotaRequests by @tylerslaton in #2240
• add dev clone to cli (#1421) by @keyallis in #2229
• Parameterize basic secret generation (#2192) by @njhale in #2242
• Fix issue where existing volumes would be double counted when bound into an App by @tylerslaton in #2244
• change: move actual permissions to .status + apply IRAs to consumed permissions by @iwilltry42 in #2226
• change: also recheck permissions if generation changed but image didn't by @iwilltry42 in #2248
• Add range syntax sugar for secret generation by @njhale in #2250
• constant fix by @ibuildthecloud in #2253
• Check if dir is a git repo before adding remote in it (#2245) by @keyallis in #2249
• Fix edge case in range syntax sugar by @njhale in #2255
• handle dev clone on nested acorns (#2247) by @keyallis in #2252
• Bump aml by @ibuildthecloud in #2257
• Add info -A by @ibuildthecloud in #2099
• Ensure that the status.Defaults.VolumeSize is used if a binding has no size specified by @tylerslaton in #2254
• fail to run dev clone if the directory already exists and is non empty (#2258) by @keyallis in #2259
• Generate docs for 0.9 release by @njhale in #2263
• Remove unneeded egress restrictions on builder pods by @g-linville in #2260

New Contributors

• @sam6258 made their first contribution in #2158

Full Changelog: v0.8.0...v0.9.0