Acorn - v0.9.0

🎉 Acorn v0.9.0 is now available! 🎉

New Features

AML Rewrite - We've rewritten AML (Acorn Markup Language) from the ground-up. This is the language that powers Acornfiles. This re-implementation is mostly transparent to users but gives us much more power and flexibility moving forward. The source code for AML can be found here.

Built-in cloning - The acorn dev command has a new --clone flag. This will cause the acorn dev command to clone the source code for a running app and launch a dev session using it.

Parameterized basic secret generation - When generating a basic secret, you can now control the character set and length for the username and password.

What's Changed

• Add the ability to specify unlimited for individual resources by @tylerslaton in https://github.com/acorn-io/runtime/pull/2109
• Publish docs for v0.8 by @njhale in https://github.com/acorn-io/runtime/pull/2140
• Quiet more install output by @cjellick in https://github.com/acorn-io/runtime/pull/2141
• Fix issue with Project storage by @tylerslaton in https://github.com/acorn-io/runtime/pull/2142
• Remove nightly EKS tests by @thedadams in https://github.com/acorn-io/runtime/pull/2147
• Fix: Importing Private Keys (SSH Keys) for signing and deny them for verification (#2063 + #2115) by @iwilltry42 in https://github.com/acorn-io/runtime/pull/2145
• change: adjustments to support ImageRoleBindings in Manager by @iwilltry42 in https://github.com/acorn-io/runtime/pull/2118
• change: always use internal image ref for IAR validation, if possible (#2067) by @iwilltry42 in https://github.com/acorn-io/runtime/pull/2113
• Return 403 instead of 401 when failing to pull an image for image details by @g-linville in https://github.com/acorn-io/runtime/pull/2151
• Refactor GenericMap to prevent managedField issues by @njhale in https://github.com/acorn-io/runtime/pull/2080
• Updates for new API groups by @thedadams in https://github.com/acorn-io/runtime/pull/2157
• fix: pulling an image twice failed as we provided the wrong repoDigest by @iwilltry42 in https://github.com/acorn-io/runtime/pull/2156
• add: default acorn.io/signed-name annotation for signatures (opt-out for verification) (#2149) by @iwilltry42 in https://github.com/acorn-io/runtime/pull/2150
• change: only exclude AcornDNS cluster domains from cert-manager annotations (#2153) by @iwilltry42 in https://github.com/acorn-io/runtime/pull/2154
• Add karpenter do-evict annotation when scale is nil or 1 by @StrongMonkey in https://github.com/acorn-io/runtime/pull/2159
• Stop setting auto-upgrade to false on update (#2161) by @thedadams in https://github.com/acorn-io/runtime/pull/2162
• Account for scale of a container when creating a QuotaRequest by @tylerslaton in https://github.com/acorn-io/runtime/pull/2165
• Fix app validation when computeclasses change on stop by @njhale in https://github.com/acorn-io/runtime/pull/2164
• Split resources into BaseResources and QuotaRequestResources by @tylerslaton in https://github.com/acorn-io/runtime/pull/2143
• Cache image metadata to speed image details call by @ibuildthecloud in https://github.com/acorn-io/runtime/pull/2169
• Revert "Cache image metadata to speed image details call" by @ibuildthecloud in https://github.com/acorn-io/runtime/pull/2172
• Cache image metadata to speed image details call by @ibuildthecloud in https://github.com/acorn-io/runtime/pull/2173
• require command to be passed to acorn kube command (#1184) by @keyallis in https://github.com/acorn-io/runtime/pull/2168
• Cancel imagedatacache purge when context is canceled by @ibuildthecloud in https://github.com/acorn-io/runtime/pull/2175
• change: allow non-file input for acorn image sign --key by @iwilltry42 in https://github.com/acorn-io/runtime/pull/2167
• Adjust RBAC to run on OpenShift by @sam6258 in https://github.com/acorn-io/runtime/pull/2158
• fix acorn kube -w by @keyallis in https://github.com/acorn-io/runtime/pull/2181
• change: early validation of signature annotations before signing (#2177) by @iwilltry42 in https://github.com/acorn-io/runtime/pull/2178
• Add service container labels by @thedadams in https://github.com/acorn-io/runtime/pull/2182
• add: ImageRoleAuthorizations and improve shared ImageSelector logic (#2148) by @iwilltry42 in https://github.com/acorn-io/runtime/pull/2160
• Add aditional top level keys by @cloudnautique in https://github.com/acorn-io/runtime/pull/2188
• Add details as a long-running resource by @thedadams in https://github.com/acorn-io/runtime/pull/2190
• AML Rewrite by @ibuildthecloud in https://github.com/acorn-io/runtime/pull/2191
• Fix broken args in acornfile by @ibuildthecloud in https://github.com/acorn-io/runtime/pull/2193
• Fix upgrade with existing invalid acornfiles by @ibuildthecloud in https://github.com/acorn-io/runtime/pull/2194
• Don't rename acornfile as that causes too obscure of errors by @ibuildthecloud in https://github.com/acorn-io/runtime/pull/2195
• Add pragma header to force amlv0 syntax by @ibuildthecloud in https://github.com/acorn-io/runtime/pull/2196
• Don't use @ in passwords as that break connections strings by @ibuildthecloud in https://github.com/acorn-io/runtime/pull/2197
• Switch to using Deference by @cjellick in https://github.com/acorn-io/runtime/pull/2198
• Bump aml by @ibuildthecloud in https://github.com/acorn-io/runtime/pull/2199
• fix: empty name sent via imageSAR by @iwilltry42 in https://github.com/acorn-io/runtime/pull/2200
• Add missing permission for jobs by @StrongMonkey in https://github.com/acorn-io/runtime/pull/2189
• fix: early capture non-file input for image sign by @iwilltry42 in https://github.com/acorn-io/runtime/pull/2202
• add: matchimageopts for imageselector (to bypass signature cache) by @iwilltry42 in https://github.com/acorn-io/runtime/pull/2201
• fix: newconfig always overwrote feature map by @iwilltry42 in https://github.com/acorn-io/runtime/pull/2203
• fix: nil map assignment in features config by @iwilltry42 in https://github.com/acorn-io/runtime/pull/2204
• Make the MarshalJSON method on GenericMap a pointer receiver by @thedadams in https://github.com/acorn-io/runtime/pull/2209
• fix: acorn:project:admin add get/list/watch for infos by @iwilltry42 in https://github.com/acorn-io/runtime/pull/2208
• Capture app spec in AppCreate event details by @njhale in https://github.com/acorn-io/runtime/pull/2210
• add: IRA Superadmin by @iwilltry42 in https://github.com/acorn-io/runtime/pull/2212
• Record what defaultVolumeSize was used in the Defaults section of AppInstanceStatus by @tylerslaton in https://github.com/acorn-io/runtime/pull/2213
• Allow images when feature flags are disabled by @thedadams in https://github.com/acorn-io/runtime/pull/2214
• change: move role definitions around (aws specific and infra specific) by @iwilltry42 in https://github.com/acorn-io/runtime/pull/2216
• Re-evaluate image permissions for failing apps by @thedadams in https://github.com/acorn-io/runtime/pull/2218
• Use stage app image when determining when to re-evaluate permissions by @thedadams in https://github.com/acorn-io/runtime/pull/2219
• Stop re-evaluating failed apps if IRA hasn't changed by @thedadams in https://github.com/acorn-io/runtime/pull/2220
• Make cluster-scoped permission encompass project-scoped by @thedadams in https://github.com/acorn-io/runtime/pull/2207
• Bump release to 1.21 by @cjellick in https://github.com/acorn-io/runtime/pull/2221
• Always set the defaults.VolumeSize if its nil by @tylerslaton in https://github.com/acorn-io/runtime/pull/2222
• Make dev logging be able to be capture and not go to stdout/err by @ibuildthecloud in https://github.com/acorn-io/runtime/pull/2224
• Don't set omitempty for fields in the Resources struct by @tylerslaton in https://github.com/acorn-io/runtime/pull/2223
• Bump baaah dependency to pickup trigger fix by @thedadams in https://github.com/acorn-io/runtime/pull/2227
• Don't add compute for Jobs to QuotaRequestInstances by @tylerslaton in https://github.com/acorn-io/runtime/pull/2225
• Improve error messaging for QuotaRequestInstances by @tylerslaton in https://github.com/acorn-io/runtime/pull/2217
• Add new --volume-size-default install flag by @tylerslaton in https://github.com/acorn-io/runtime/pull/2215
• Bump AML for bug fixes by @ibuildthecloud in https://github.com/acorn-io/runtime/pull/2231
• Fix for quota requests not being processed (#1378) by @thedadams in https://github.com/acorn-io/runtime/pull/2232
• change: ensure that we only renew the original Acorn TLS (wildcard) certificate by @iwilltry42 in https://github.com/acorn-io/runtime/pull/2235
• change: proper error handling for fetching pubkeys from GitHub API (#2185) by @iwilltry42 in https://github.com/acorn-io/runtime/pull/2183
• Fix missing permissions error message by @thedadams in https://github.com/acorn-io/runtime/pull/2241
• Fix issue with updates not being blocked by QuotaRequest restrictions by @tylerslaton in https://github.com/acorn-io/runtime/pull/2239
• Fix an issue with default VolmeStorage not being accounted for in QuotaRequests by @tylerslaton in https://github.com/acorn-io/runtime/pull/2240
• add dev clone to cli (#1421) by @keyallis in https://github.com/acorn-io/runtime/pull/2229
• Parameterize basic secret generation (#2192) by @njhale in https://github.com/acorn-io/runtime/pull/2242
• Fix issue where existing volumes would be double counted when bound into an App by @tylerslaton in https://github.com/acorn-io/runtime/pull/2244
• change: move actual permissions to .status + apply IRAs to consumed permissions by @iwilltry42 in https://github.com/acorn-io/runtime/pull/2226
• change: also recheck permissions if generation changed but image didn't by @iwilltry42 in https://github.com/acorn-io/runtime/pull/2248
• Add range syntax sugar for secret generation by @njhale in https://github.com/acorn-io/runtime/pull/2250
• constant fix by @ibuildthecloud in https://github.com/acorn-io/runtime/pull/2253
• Check if dir is a git repo before adding remote in it (#2245) by @keyallis in https://github.com/acorn-io/runtime/pull/2249
• Fix edge case in range syntax sugar by @njhale in https://github.com/acorn-io/runtime/pull/2255
• handle dev clone on nested acorns (#2247) by @keyallis in https://github.com/acorn-io/runtime/pull/2252
• Bump aml by @ibuildthecloud in https://github.com/acorn-io/runtime/pull/2257
• Add info -A by @ibuildthecloud in https://github.com/acorn-io/runtime/pull/2099
• Ensure that the status.Defaults.VolumeSize is used if a binding has no size specified by @tylerslaton in https://github.com/acorn-io/runtime/pull/2254
• fail to run dev clone if the directory already exists and is non empty (#2258) by @keyallis in https://github.com/acorn-io/runtime/pull/2259
• Generate docs for 0.9 release by @njhale in https://github.com/acorn-io/runtime/pull/2263
• Remove unneeded egress restrictions on builder pods by @g-linville in https://github.com/acorn-io/runtime/pull/2260

New Contributors

• @sam6258 made their first contribution in https://github.com/acorn-io/runtime/pull/2158

Full Changelog: https://github.com/acorn-io/runtime/compare/v0.8.0...v0.9.0