Skip to content

Releases: plumber-cd/runtainer

v0.2.0

13 Oct 06:57
a447f28
Compare
Choose a tag to compare

BREAKING CHANGES

  • Will no longer set fsGroup to the current host GID by default.
  • Will now set runAsUser to the current host UID and runAsGroup to the current host GID instead.
  • Added new --run-as-current-user and --run-as-current-group options to disable this new behavior.

Should be fine for most cases, but note that depending on what is in the image - it might break stuff sometimes.
Some images might rely on the user home directory. This new behavior is changing the user id, so the home directory bundled with the image no longer accessible.
In other cases, some software might not like that the current id set to the user that doesn't exists in the system. I.e.:

runtainer -q alpine whoami
whoami: unknown uid 1000

Also in this release

  • Updated all dependencies

v0.1.6

01 May 03:33
4a9d178
Compare
Choose a tag to compare

Changed

  • Force secure 0600 on the mounted secrets, but since we are using fsGroup - kubernetes will force 0640 to it.
  • Fix error adding multiple items to --secret-volume by allowing them to be added individually as item.
    This usually warrants major version bump since it is not backward compatible, but it is a hotfix to a feature that was just released and never worked, so it's fine.
  • Implement --disable-discovery that allows to disable all or one-by-one elements of automatic discovery

v0.1.5

01 May 02:15
b084be8
Compare
Choose a tag to compare

Added

  • Add options to --secret-env and --secret-volume
  • With --secret-env you can now specify custom prefix
  • With --secret-volume you can now specify custom mountPath and items

v0.1.4

01 May 01:46
9a50674
Compare
Choose a tag to compare

Added

  • Forward $SSH_AUTH_SOCK in to the container
  • Implement secrets injection --secret-env and --secret-volume

v0.1.3

06 Oct 20:42
3162413
Compare
Choose a tag to compare
  • Implemented --secret/-S

v0.1.2

28 Sep 16:40
Compare
Choose a tag to compare
  • Fix terminal TTY (regression in v0.1.1)

v0.1.1

28 Sep 00:01
Compare
Choose a tag to compare
  • Fixed terminal resizing and wrapping

v0.1.0

27 Sep 07:23
Compare
Choose a tag to compare

BREAKING CHANGES

  • Docker CLI is no longer used
  • RT now uses K8s Go Client to run container in a pod
  • There are substantial breaking changes in RT CLI arguments to back up that change

v0.0.2

26 Aug 03:06
91abf78
Compare
Choose a tag to compare

Added

  • Added --dry-run mode to print out what it normally would run otherwise
  • Implemented env variables discovery mechanism similar to what's for volumes
  • env was moved out of host in config files - now it's a root level map
  • [Discovery/AWS]: Add AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_SESSION_TOKEN, AWS_ROLE_SESSION_NAME, AWS_STS_REGIONAL_ENDPOINTS and AWS_SDK_LOAD_CONFIG
  • Helm discovery was not enabled
  • Implemented Terraform discovery

v0.0.1

23 Aug 00:28
32cdcf5
Compare
Choose a tag to compare

Added

  • Initial release