terrakube-io/terrakube 2.31.0

on GitHub

What's Changed

Important

This release include the following important changes:

• Support for structured output in the UI.
• Federated authentication support, so you can use Github tokens or any other token issuer to authenticate with Terrakube dynamically.
• Improve how to share states between workspace.
• Experimental support for shared webhooks.

Features

• Support multiple secrets, ConfigMap envFrom, and pod template annotations for ephemeral executor pods by @putz612 in #3149
• feat(ui): implement formatted structured plan output and improve terraform importer by @alfespa17 in #3133
• feat: configure HikariCP for improved datasource connection pooling by @alfespa17 in #3028
• feat: Atlantis-style PR workflow for webhook events by @klinux in #2987
• feat: update buildpack to jammy-java-tiny:0.0.104 in registry POM by @alfespa17 in #3040
• feat: update buildpack to jammy-java-tiny:0.0.104 in api POM by @alfespa17 in #3041
• feat: support global KEEP_JOB_HISTORY with workspace override by @leobin001 in #3042
• feat: introduce federated authentication support for enhanced multi-issuer handling by @alfespa17 in #3045
• feat: skip Spring Boot image building in workflows and set pullPolicy to IF_NOT_PRESENT in POM files by @alfespa17 in #3070
• feat: add unit tests for AWS/Azure/GCP storage services across all implementations by @alfespa17 in #3072
• feat: add startup tests for MSSQL and PostgreSQL using Testcontainers by @alfespa17 in #3069
• feat: add unit tests for WorkspaceService and update TfCloudController response types by @alfespa17 in #3090
• feat: Adding code owner by @alfespa17 in #3092
• feat: Improved devcontainer support (linux/windows) by @alfespa17 in #3095
• feat: add support for global and shared remote state configuration in workspaces by @alfespa17 in #3097
• feat: Introduced access denial handling with detailed error messages. by @alfespa17 in #3098
• feat: add claim conditions to federated credentials by @p2pdkivenko in #3114
• feat(executor): add support for custom ephemeral configuration labels by @alfespa17 in #3139
• feat(executor): integrate TerrakubeClient in SetupWorkspaceImpl and PlanStructuredOutputService by @alfespa17 in #3161
• refactor(encryption): reuse SecureRandom instance for IV generation in EncryptionService by @alfespa17 in #3162
• feat(security): add JWT-based authentication and security configuration for executor by @alfespa17 in #3164
• feat(webhooks): shared repo-level VCS webhooks v3 by @alfespa17 in #3147

Fixes

• fix(ui): Disable splitting of build artifacts for antd to avoid runtime errors by @MatthewJohn in #3017
• fix: remove redundant Azure Storage Blob version by @alfespa17 in #3020
• fix: add instanceOwner-based permission checks in TeamTokenController by @alfespa17 in #3023
• fix(ui): Add regex validation for workspace webhook branch/file fields by @hirokimatsueda in #3026
• fix: standardize boolean property usage in RBAC changelog updates by @alfespa17 in #3027
• Fix VCS form validation to prevent PKCS#1 private key errors by @hirokimatsueda in #3029
• fix(ui): Add pull requests read permission to GitHub App setup instructions by @hirokimatsueda in #3063
• fix: set default false for pr_workflow_enabled in webhook_event table by @alfespa17 in #3067
• fix: Allow unauthed requests to /terraform/index.json by @ivarmedi in #3068
• fix: sonar issues by @alfespa17 in #3073
• fix: sonar issues by @alfespa17 in #3074
• fix: handle InterruptedException in GitLabWebhookService by @alfespa17 in #3075
• fix: use temporary directories for workspace setup by @alfespa17 in #3076
• fix: ssh folder logic generation using a temp folder by @alfespa17 in #3087
• fix(ui): use GraphQL for organization list to fix slow load times by @rtrompier in #3088
• fix: update GitHub workflows to use specific action commit by @alfespa17 in #3089
• fix: handle default export for Ansi component in TerminalOutput by @alfespa17 in #3118
• fix(executor): handle InterruptedException in PlanStructuredOutputService by @alfespa17 in #3142
• fix(workflows): update permissions in manual_release.yml for improved security [skip ci] by @alfespa17 in #3143
• fix(workflows): bump action versions in manual_release.yml by @alfespa17 in #3145

Dependencies

New Contributors

• @MatthewJohn made their first contribution in #3017
• @hirokimatsueda made their first contribution in #3026
• @leobin001 made their first contribution in #3042
• @putz612 made their first contribution in #3149

Full Changelog: 2.30.0...2.31.0