Alien v3.3.33

Bug Fixes

• warn when CLI selects the system manager (#992)(bd2c1c8)
• classify input validation status metadata as 400 (#994) (cli)(1505e72)
• bound implicit Machines compute capacity (#995) (preflights)(1070abe)
• preserve rejected log search status and message (#997) (cli)(f19845c)
• resolve workspace for API-key commands (#998) (cli)(d85e4f7)
• release setup lease when preparation fails (#996) (cli)(a6639f5)
• forward update-pending retry decisions to the store (#1003) (manager)(d63982b)
• normalize empty network IDs in setup handoffs (#1001)(100f299)
• keep discovered AWS network zones across setup re-registration (#1008)(aa42e2f)
• grant registry access only on the project's own repository for worker images (#1016)(3476bf1)
• resolve registry repository project before image access (#1009)(2f21e05)
• answer 503 retryable when the manager cannot verify credentials (#1015)(1bd35c2)
• fail fast on stalled CLI connects and retry them (#1014)(d077644)
• give acquiring runners the config the manager loop runs with (#1012)(51d3f1c)
• keep updating AWS deployments set up before the key availability grant (#1023)(02dbe9a)
• keep updating GCP deployments set up before the Cloud KMS activation (#1024)(5197ca0)
• keep key availability when a key check fails transiently (#1025)(166a6d1)
• remove unused credential mint endpoint (#1013)(288780d)
• retry failed standalone setup through the manager (#1011)(85cd341)
• use the AWS Query protocol for CloudWatch metrics (#1017)(ee2beb0)
• show successful build preflight warnings without tracing (#1021)(3fecaba)
• grant compute security group discovery permissions (#1022)(7d64eae)
• destroy deployments rejected before setup (#1020)(3e31d39)
• preserve mixed success bodies in Rust API generation (ALIEN-1505) (#1032)(735ad2c)
• accept CloudFormation string booleans in key and Kubernetes cluster import data (#1038)(d036c05)
• retry IAM grants rejected while a custom role undelete propagates (#1035) (gcp)(10362c1)
• refuse to create a same-named deployment in a new group (#1037) (cli)(6d8ec02)
• stop re-acquiring deployments it cannot provision every tick (#1039) (manager)(eab0c18)
• log refused registry pulls and pushes, and stop cleanup's false refusals (#1042) (manager)(36416ae)
• let teardown drop a key that failed before it was created (#1041) (infra)(f5aa70e)
• keep installed volume sizes over stale setup values and lower release defaults (#1040)(dd74630)
• finish destroy when the deletion removed the deployment token (#1045)(34fb7e4)
• preserve deployment reads across output schema additions (#1046)(6a13104)
• settle interrupted controllers before planning recovery (#1048)(d3470dc)
• use patched asynchronous DNS dependencies for SQS (#1044)(cbaf1e8)
• recover interrupted local development sessions (#1043)(a89b013)
• destroy a tracked deployment by its ID (#1049) (cli)(05a4db0)
• assign each Azure management grant only at the scope it names (#1052)(1129674)
• give every Azure management scope its own Terraform role (#1054)(f0e77ae)
• let the Azure container role snapshot its disks (#1053)(29a3e5e)
• let the Azure management identity join gateway subnets and public IPs (#1034)(0f74494)
• let the Azure compute management role delete scale sets and the cluster NSG (#1036)(2f92ca7)
• avoid redundant aws sandbox image builds and expose range headers (#1057)(dda040e)
• let the Azure management role join the compute network security group (#1059)(38ab09a)
• never adopt or delete an AWS bucket this deployment did not create (#1060)(b252953)
• never adopt or delete AWS build projects and registry roles this deployment did not create (#1063)(d9b0b52)

Features

• add project administrator API keys to SDK and CLI (#993)(1493ce7)
• add native encryption keys for databases and volumes (#1005)(230e1fe)
• configure persistent volume capacity per deployment (#1000)(407e1e8)
• add quota outcomes and deployment error presentation (#1026)(2a9bf01)
• check AWS network compute and Lambda quota demand (#1027)(d4ac8fd)
• check GCP compute and project IAM quotas (#1028)(508a30d)
• check Azure compute quotas and SKU restrictions (#1029)(2bffaba)
• validate aggregate IAM policy and template limits (#1030)(9ab099c)
• use per-project image repositories on gcp (#1018)(dc96f3f)
• represent restricted deployment teardown credentials (#999) (manager)(f0aa193)
• build a Sandbox from source on Azure and GCP (ALIEN-1504) (#1050) (sandbox)(66da8ce)
• manage infrastructure updates for own-environment installations (#1002)(ae776dc)

Miscellaneous

• release v3.3.33 (#1051)(1337727)

Testing

• fix compute planner fixtures for persistent storage encryption key (#1019)(9ac3cd0)

Revert

• restricted deployment teardown credentials (#999) (#1058)(bacb80a)