brigade

TODO

• Improved git repository integration:
  • Relax regex for validating git URLs
  • Support authenticating to private repos with basic auth (using a personal access token, for instance)
  • Re-implement git-initializer component for Azure DevOps compatibility
• Bug fix: Do not mount shared workspaces to workers as read-only
• Extensive documentation updates
• Minor dependency updates

• Re-implement git-initializer component (again) to work with Azure DevOps
• Bug fix: Do not mount shared workspaces to workers as read-only

• Minor dependency updates
• Relax regex for validating git URLs
• Support authenticating to private repos with basic auth (using a personal access token, for instance)
• Re-implement git-initializer component using git2go
• Extensive documentation updates

• Features:
  • Support for externally hosted MongoDB
  • Source and type filter flags added to brig event list command
  • Information about job fallibility now shared from worker to API server (gateways can utilize this information in determining how to report job failures "upstream")
• Numerous bug fixes:
  • Builds failing on M1 Macs
  • Deleting a non-existing project tells you you're unauthorized
  • Setting secrets on a non-existing project tells you you're unauthorized
• Security:
  • Updated dependencies
  • All images audited to reduce attackable surface; all components run as non-root
  • All images scanned for vulnerabilities during CI
  • SBOMs generated and published for each image during release process
  • All images signed during release process
• Project maintenance:
  • Upgraded to Go 1.18
  • Improved test coverage
  • Drastically improved devx
  • Extensive documentation improvements

Special thanks to first time contributors:

• @sourikghosh
• @Sync271
• @hamees-sayed
• @AnuragThePathak
• @dtaskai
• @mariuskimmina

Brigade v2.3.1 offers a faster and smoother installation process as compare to previous versions. Services no longer "flap" while waiting for their network-bound dependencies to be satisfied.

This RC offers a faster and smoother installation process. Services shouldn't "flap" while waiting for their network-bound dependencies to be satisfied.

• brig term now tests connection to API server before launching the UI. (#1777)
• brig project update has a new --create flag to create the project if it doesn't already exist. (#1783)
• If applicable, worker containers now remove @brigadecore/brigadier from your script's package.json before executing dependency resolution since that package is polyfilled afterwards regardless. For scripts that depend only on @brigadecore/brigadier, this means workers can execute without any runtime dependency on npmjs.org. (#1797)
• API has a new "whoami" endpoint. (#1796)
• Helm chart exposes a new option for users to automatically be granted read-only permissions upon first login. (#1801)
• API has a new/improved endpoint for querying project-level role assignments. The older endpoint remains for backwards compatibility.(#1806)
• Known vulnerabilities in npm package remediated (#1790)

This release adds one very small feature -- the ability to access event qualifiers and labels using Brigadier.

See our QuickStart for instructions to get you started!

This release will be the final Brigade 2 beta release. Look for RC.1 by week's end.

Here are some non-exhaustive highlights of this release:

• Extensive documentation updates
• Streamlined QuickStart
• Removed extraneous options from chart
• Added post-install notes to chart
• Upgraded MongoDB
• Support Linux/arm64 deployments
• Support Windows/amd64 workloads (control plane must still be Linux)
• Support for restricting workloads to particular nodes
• Support for multiple Brigade deployments per Kubernetes cluster
• Bug fixes
• Security improvements
• UX improvements
• Performance improvements