helm/coder-v2/coder 2.16.0

v2.16.0

on Artifact Hub

Changelog

Announcements

This is our largest Coder release since the launch of V2.

v2.16.0 introduces Organizations, Custom Roles, and Notifications in beta. Support for the new RBAC features (Custom Roles and Multi-Org) are limited to customers with a Premium license. Read our release blog for more information.

BREAKING CHANGES

• Add --default-token-lifetime (#14631, fccf6f1) (@ethanndickson)

  Breaks tokens created by directly calling /users/{user}/keys/tokens [post] without a lifetime in the request body. The new default TTL for these tokens is 7 days, down from 30. Lifetime should already be specified when calling this endpoint directly. This is unlikely to break any existing workflows.

• Add summary to coder ping (#14762, b7c574f) (@ethanndickson)

  The new default behavior of coder ping is to ping indefinitely until an interrupt is detected alike many other ping commands. Previously, coder ping performed 10 pings by default. The -n argument can be used to perform a fixed number of pings.
  All diagnostics are also now written to stderr, instead of stdout.

Features

Organizations

Organizations introduce tiered RBAC, allowing for finer-grained team isolation within a deployment. Several Coder features previously scoped to the deployment level now exist under organizations, including IdP Sync, Groups, Quotas, and Provisioners. For detailed information on Multi-org functionality, read our release blog and documentation.

This feature requires a premium license.

• Add provisioners view to organization settings (#14501, 84922e2) (@aslilac)

  
  Provisioners are now scoped to organizations, this UI helps view provisioners assigned to each organization and their health.

• Add groups column to members page in organizations (#14620, 90b29df) (@DanielleMaywood)

  
  The new "Members" page in the organization settings. Here you can view and manage all users that belong to this organization.

• Display legacy IdP mappings in IdP sync settings (#14866, 894c758) (@aslilac)

  
  Group and role sync are now scoped to the organization level. This page does not manage CRUD operations for the IdP sync configuration; only displays the mapping between your IdP and Coder. For implementation details see this PR (#14649).

• Add premium license behavior for create organization page (#14650, c6bc741) (@jaaydenh)

  
  This banner will appear in place of the Custom Roles UI for on deployments without a premium license.

• Show organization name in workspaces table (#14547, c249174) (@Parkreiner)

  
  Now that templates belong to an organization, the owning organization name will appear in the workspace listing when multiple organizations exist in a deployment.

• Create IdP sync page skeleton (#14543, 6b9e1d4) (@jaaydenh)
• Get and update group IdP Sync settings (#14647, 5ed065d) (@aslilac)
• Integrate backend with IdP sync page (#14755, a3ebcd7) (@jaaydenh)
• Implement organization role sync (#14649, 7139374) (@Emyrk)
• Implement runtime configuration package with multi-org support (#14624, cb9d40f) (@Emyrk)

  Enables organization-scoped runtime configuration. Read the original proposal for details.

• Add keys to organization provisioner daemons (#14627, 335eb05) (@f0ssel)
• Add SCIM support for multi-organization (#14691, ff1eabe) (@coadler)
• Group provisioners by authentication method (#14580, dda6bdc) (@aslilac)
• Show more detailed provisioner version info (#14593, bbc7b50) (@aslilac)
• Show tags for psk provisioners (#14628, 5be02a2) (@aslilac)
• Remove org flag requirement for provisioners (#14722, 50124fe) (@f0ssel)
• Remove user from groups on org membership delete (#14701, 1e5438e) (@Emyrk)
• Add warning dialog when removing member from organization (#14695, e6cd300) (@jaaydenh)
• Unhide multi-organization cli commands (#14693, be516f9) (@Emyrk)

  Read more on the organizations CLI in our docs.

• CLI: Add command organizations settings show group-sync to fetch group sync settings as json (#14694, d96adad) (@Emyrk)
• Dashboard: Add warnings and status indicator to provisioner groups (#14708, 96e9a4f) (@aslilac)

Custom Roles

Administrators may now define custom roles with granular permission sets, then assign them to users or groups within an organization. This enables high-fidelity RBAC within a Coder deployment. For more information on custom roles, read our release blog and documentation.

This feature requires a premium license.

• Display builtin roles alongside custom roles (#14843, 339eeba) (@jaaydenh)

  
  The new roles listing page -- present under organization settings. Note that the existing Coder-native roles are still present.

• Add resource-action pills to custom roles table (#14354, 093d243) (@jaaydenh)
• Add premium license banner for custom roles page (#14595, 7de576b) (@jaaydenh)

  The premium banner shown above will appear in place of the Custom Roles UI for on deployments without a premium license.

Other feature updates

• Support optional SMTP auth for notifications (#14533, f23a050) (@dannykopping)
• Add 'hidden' option to 'coder_app' to hide app from UI (#14570, 25f1ddb) (@DanielleMaywood)
• Expose current agent connections by type via prometheus (#14612, c8580a4) (@ethanndickson)
• Turn off a notification template via email (#14520, 3301212) (@joobisb)
• Add schema for key rotation (#14662, 45160c7) (@sreya)

  Part of an automated key rotation feature, coming soon.

• Notifications: report failed workspace builds (#14571, 6de5937) (@mtojek)

  
  This new notification will send a weekly report to template administrators summarizing the build failures of associated workspaces.

• Implement key rotation system (#14710, 2d5c068) (@sreya)

  Part of an automated key rotation feature, coming soon.

• Add 'display_name' column to 'workspace_agent_scripts' (#14747, 86f68b2) (@DanielleMaywood)
• Create UI badges for labeling beta features (#14661, 661d226) (@Parkreiner)

  

  The recently released Beta features will be tagged with an appropriate badge in the UI as shown above. To learn more about beta and our feature stages, see the updated feature stage documentation.

• Add agent timings (#14713, ae522c5) (@DanielleMaywood)

  Introduces detailed information on workspace startup times in the workspace_agent_script_timings table. See a example usage in the PR.

• Server: Add workspace timings endpoint (#14648, 705b9cc) (@BrunoQuaresma)
• Add one time passcode columns to users table (#14797, 575925c) (@DanielleMaywood)

  This will be leveraged later to complete a password reset flow for users, rather than relying on their administrators to change it via the API.

• Add endpoint for fetching workspace proxy keys (#14789, 3fdeaf7) (@sreya)
• Allow posting licenses that will be valid in future (#14491, 5bd5801) (@spikecurtis)
• Stop reporting future licenses as errors (#14492, 4eac2ac) (@spikecurtis)

  
  We've improved the UX by allowing admins to upload licenses ahead of their start date rather than hot-swapping on the turn of the day. Now you can safely add multiple licenses that are queued for use after the previous expires.

  Note: this is an internal example, we do not offer licenses without a seat cap.

• Agent: Use tcp for X11 forwarding (#14560, 8f07d33) (@mafredri)
• CLI: Add --provisioner-log-debug option (#14558, bcf9bc3) (@johnstcn)
• Examples: Add root volume parameter, growpart automatically (#14839, 3b5cabb) (@johnstcn)

Bug fixes

• Improve coordination logging (#14556, 7b39f6b) (@spikecurtis)
• Improve duplicate template version name error (#14572, 208a5be) (@ethanndickson)
• Analyze build times over 30 days not 30 months (#14584, 8b1c46f) (@dannykopping)
• Prevent dbmem reading other groups when getting group members (#14581, 918bea1) (@ethanndickson)
• Prefer organization display name for workspaces table (#14617, 9da6467) (@Parkreiner)
• Limit OAuth redirects to local paths (#14585, 328e696) (@sreya)
• Avoid logging no such process errors for process priority (#14655, 9f49729) (@sreya)
• Suppress benign errors when listing processes (#14660, bfdc29f) (@sreya)
• Only allow submitting form if changes have been made (#14602, 9006b21) (@DanielleMaywood)
• Fix tailnet remoteCoordination to wait for server (#14666, 2df9a3e) (@spikecurtis)
• Close SSH sessions bottom-up if top-down fails (#14678, 6ff9a05) (@spikecurtis)
• Make cli respect deployment --docs-url (#14568, 37885e2) (@ethanndickson)
• Handle new agent stat format correctly (#14576, 922f4c5) (@f0ssel)
• Set TCPMaxRetries to 5 for reasonable timeouts on send (#14746, 6d99298) (@spikecurtis)
• Improve provisioner details layout and show count line (#14749, 3338f32) (@aslilac)
• Use latest build version name on workspace page (#14771, b4f54f3) (@ethanndickson)
• Avoid showing "multiple tags" for simple tag sets on provisioners page (#14804, 2cffb55) (@aslilac)
• Make sure avatar data for owner displays correctly (#14812, 8403dd5) (@Parkreiner)
• Show paywall and correctly display auto create groups for IdP sync (#14800, 9ea2f6f) (@jaaydenh)
• Improve provisioner key CLI usability (#14834, 5cc5bbe) (@f0ssel)
• Server: Check if timings can be read (#14697, 370f0b9) (@BrunoQuaresma)
• Documentation: Update terraform backend link (#14663, 9dc8e0f) (@ethanndickson)
• Documentation: Add dotfiles module reference (#14675, 07d1478) (@doodzik)
• Documentation: Add coderd_workspace_latest_build_status prometheus metric (#14828, fb28979) (@ethanndickson)
• Helm: Use list instead of dict for tolerations (#14604, d1db11a) (@anakaiti)
• Provisioner: Do not log entire resources (#14538, 5366f25) (@johnstcn)
• Dashboard: Fix agent logs streaming for third party apps (#14541, 242b1ea) (@BrunoQuaresma)
• Dashboard: Only show method warning if some template is using it (#14565, 84d312c) (@BrunoQuaresma)
• Dashboard: Strip version build info from docs link URLs (#14601, 85cc695) (@SomewhatJustin)
• SDK: Validate various names locally (#14551, 8f85464) (@ethanndickson)

Documentation

• Add networking troubleshooting page (#14548, cd7ce8e) (@ethanndickson)
• Update architecture diagrams (#14567, c1bb5ab) (@ericpaulsen)
• Fix SCIM env var (#14618, eb646f0) (@ericpaulsen)
• Enable Microsoft Teams Notifications (#14781, e086d78) (@mtojek)
• Mark Teams integration as beta (#14793, c6e4428) (@mtojek)
• Enable Slack notifications (#14830, a3ffab6) (@mtojek)
• Fix process-logging.md to replace deprecated items (#14842, 5246f8d) (@rogmanster)
• Improve content of frontend contributing guide (#14619, 40688e4) (@jaaydenh)
• Correct inaccuracies in the "Docker in Workspaces" page (#14546, 4421063) (@phorcys420)
• Remove dead links to unmaintained vs-code-server template (#14559, bd90740) (@johnstcn)
• Update with content on organizations, premium licensing (#14778, d04eaf8) (@bpmct)
• Update devcontainer docs (#14850, 62047e5) (@johnstcn)

  Envbuilder, our open-source project for building dev environments from Devcontainers and Dockerfiles, has just reached it's v1.0 launch. Read more in our release blog.

Chores

• Only show license expiry warning for deployment admins (#14488, e5d4f35) (@ethanndickson)

  Previously, license expiry errors were shown to users in an orange banner. We've hidden these from developers as they cannot take action in response to them.

• In-code documentation for RBAC usage (#14065, 914f35a) (@dannykopping)
• Read template tar from stdin if stdin is not a tty (#14643, efd532e) (@ethanndickson)
• Add group_ids filter to /groups endpoint (#14688, c330af0) (@Emyrk)
• Update workspaces page filter to include organization controls (#14597, 5aa54be) (@Parkreiner)
• Improve coder server ux (#14761, b894407) (@ethanndickson)
• Rename default organization from 'first-organization' to 'coder' (#14808, 5c977c6) (@Emyrk)
• Examples: Update to use envbuilder provider` (#14831, 4be5b2f) (@johnstcn)

  Envbuilder has just reached it's v1.0 launch, along with it comes the Envbuilder Terraform Provider. Read more in our release blog.

• Dashboard: Add Cursor IDE icon (#14743, db7b411) (@matifali)

  Check out the new Cursor module in our registry.

Compare: v2.15.0...v2.16.0

Container image

• docker pull ghcr.io/coder/coder:v2.16.0

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.