Egress-Only Agent Connections
Connected Host Clusters now communicate to the Loft Platform via egress connections only. Previously, the Platform would reach out to each connected cluster to communicate with the remote vClusters. This change enhances security, simplifies connecting private clusters to the Platform, avoids creating non-expiring Kubeconfigs, and makes it more scalable by moving functionality into the Loft Agent.
For more information, please take a look at the Loft documentation.
Notable Changes
- Loft Platform now uses vCluster v0.19.3 as the default version
- vCluster that were created externally (e.g. Helm, Argo CD) are now automatically imported into the Loft Platform
- We added the ability to clone vCluster templates
- vCluster and Loft Platform configurations are now validated in the editor UI
- Backup and restore the Loft Platform via the UI
- We now support installing Helm Apps with schema validation, which previously would fail.
Other Changes
- feat: Check connectivity to Loft router prior to configuring it by @ThomasK33
- feat: We now allow ignoring useragents for Sleep Mode
- feat: Added embedded derp mesh to Loft by @ThomasK33
- feat: Added import / export to workspaces / fix nonce by @FabianKramm
- feat: Added passwordRef & usernameRef to apps by @FabianKramm
- feat: Added clusters/accesskey by @FabianKramm
- feat: Added online status to clusters by @ThomasK33
- feat: Added automatic virtual cluster import by @FabianKramm
- feat: Agent Upgrade Flow using NetworkPeer by @ThomasK33
- feat: allow ignoring useragents for sleepmode
- feat(apigateway): Added endpoints to create, serve and apply Loft backups by @pascalbreuninger
- feat(cli): Create instance now allows specifying labels/annotations for instances
- feat(cli): Added --product flag to loftctl start by @pascalbreuninger
- feat(cli): Added get cluster-access-key command by @ThomasK33
- feat(ui) - The Platform admin ui now displays a settings preview
- feat(ui): runners ui by @andyluak
- feat(ui): Accessing sleeping spaces if pods found is now allowed by @andyluak
- feat(ui): Hide refresh license when offline by @andyluak
- feat(ui): Added editor for workspace template definition by @pascalbreuninger
- feat(ui): Icons and monaco are now lazy loaded by @andyluak
- feat(ui): Tooltip displayed when Project quota is reached by @andyluak
- feat(ui): DevPod workspaces by @andyluak
- feat(ui): Restrict UI based configuration of Helm managed virtual cluster instances by @pascalbreuninger
- feat(ui): New cluster connect flow by @andyluak
- feat(ui): Added trial ended page by @pascalbreuninger
- feat(ui): Preserve view in project change by @andyluak
- feat(ui): Standardized status columns by @andyluak
- feat(ui): Improved visibility of sleep mode by @andyluak
- feat(ui): Hide editor secret values @andyluak
- fix(ui): Crashing page on yaml editor by @andyluak
- fix(ui): Style consistency by @andyluak
- fix(ui): Sidebar updates by @andyluak
- fix(ui): Age column filtering by @andyluak
- fix(ui): Scrollbar when collapsing by @andyluak
- fix(ui): Find default DevPod template if all templates are allowed by @pascalbreuninger
- fix(ui): Align profile menu avatar with other nav items by @pascalbreuninger
- fix(ui): Remove helm managed warning from vcluster objects by @pascalbreuninger
- fix(ui): Login improvements by @andyluak
- fix(ui): Force logout after error during login on /login page by @pascalbreuninger
- fix(ui): vCluster status sync by @andyluak
- fix(ui): unable to deploy manifests by @andyluak
- fix(ui): Quota percentage now shows a status bar for bigint based quantities by @pascalbreuninger
- fix(ui): Remove confusing text about kubectl app by @matskiv
- fix(loftctl): filter DevPod.Pro projects for runner access by @pascalbreuninger
- fix(router): Disable loft router on startup if config does not use router domains by @ThomasK33
- fix: Rename default devpodworkspacetemplates by @pascalbreuninger
- fix: Improved handling of editor errors by @andyluak
- fix: Use insecure skip verify for runner task logs by @lizardruss
- fix: Reconciler panic & vcluster upgrade by @FabianKramm
- fix: Improve logging for failed cluster access by @rohantmp
- fix: Use forked Helm with skip-schema-validation by @rohantmp
- fix: Loft login message & remove trace output by @FabianKramm
- fix: Proxy-handler connection by @FabianKramm
- fix: Project roles now include DevPod.Pro workspace instances by @pascalbreuninger
- fix: Loft config update & Loft upgrade timeout by @FabianKramm
- fix: Allow features that are active, included & preview by @FabianKramm
- fix: Validate clusterref for existing VirtualCluster and Spaces by @neogopher
- fix: Allow service account token for cluster / direct virtual cluster by @FabianKramm
- fix: Conditions & patch helper usage issues by @lizardruss
- fix: Updated Loft vars cluster to work with projects by @lizardruss
- fix: A Space from a different project is able to take over namespace owned by someone else by @lizardruss
- fix: Rancher integration problem by @FabianKramm in https://github.com/loft-sh/loft-enterprise/pull/2427 [Alpha]
- fix: Logging of debug errors by @FabianKramm in https://github.com/loft-sh/loft-enterprise/pull/2428
- refactor(ui): Improved vCluster logging by @FabianKramm
- refactor: Improved DevPod logging by @FabianKramm
- refactor: Use new vCluster telemetry
- refactor: Automatically set forwardToken to true on import by @FabianKramm
- refactor: Remove replace imports by @FabianKramm