padok-team/burrito v0.9.0-rc.1

on GitHub

Changelog

Pre-release major breaking change: Burrito internal logic with Git repositories

This first pre-release version of Burrito 0.9.0 introduce one major change in Burrito's internal logic: how handles Git repositories.

Main changes:

• The TerraformRepositoryController is now synchronizing regularly the content of TerraformRepositories to:

  • annotate automatically TerraformLayers with the last commit available (webhook is not mandatory anymore!)
  • create Git bundles of the last available commit for each branch referenced in layers and store the bundles in Burrito Datastore

• TerraformRuns run on specific commits: this opens the possibility to track which commits have been planned/applied in future releases of Burrito

• The Burrito runners do not need to interact with Git repositories anymore: they just fetch the Git bundle for the commit hash they're running on, from the datastore

• The Git provider credentials system of Burrito has been remade from the ground up:

  • Credentials are defined in secrets with type credentials.burrito.tf/repository or credentials.burrito.tf/shared
  • One credential secret can be used by multiple TerraformRepositories in multiple tenants

📖 Documentation:

• New Git Authentication system
  
• How to migrate to the new authentication system
• How the TerraformRepository Controller works

🛠️ Implementation: 75c98f0: feat(repository): use git bundles in runners + refactor credentials (#605) (@corrieriluca)

When 0.9.0 will be released

We plan to release a stable release of 0.9.0 around the end of October 2025, once we have tested this pre-release in production clusters.

✨ Please give us your feedbacks on the pre-release in the meantime if you can test it in your environment!

Other breaking changes

• e09ad76: chore(helm): allow metadata labels and annotations on all resources (#711) (@seboudry)
  • Some values have changed in the Helm chart regarding annotations:
    • config.annotations => metadata.config.annotations
    • tenants[].serviceAccounts[].annotations => tenants[].serviceAccounts[].metadata.annotations
    • hermitcrab.service.annotations => hermitcrab.service.metadata.annotations
    • server.ingress.annotations => server.ingress.metadata.annotations (important if you have ingress controller specific annotations)

Minor changes / dependency updates

• c2980df: fix(deps): update module cloud.google.com/go/storage to v1.57.0 (#716) (@renovate[bot])

• 5bab5f8: feat(go): update to 1.25 (#718) (@corrieriluca)

• a57ccc1: chore(deps): update docker/dockerfile docker tag to v1.19.0 (#714) (@renovate[bot])

• 10bb34c: chore(deps): update localstack/localstack docker tag to v4.9.2 (#708) (@renovate[bot])

• 0f12b4d: chore(deps): update node.js to v22.20.0 (#715) (@renovate[bot])

• 9e32f2e: chore(release): bump version to v0.8.1 (#710) (@corrieriluca)

• 7bafe5d: chore: fix setup-envtest version in Makefile (#721) (@corrieriluca)