v0.5.0

Container Images

• registry.anvil.rcac.purdue.edu/anvilops/anvilops:0.5.0@sha256:bef59e47603e9aa0c532834c38733e08dafcba66686251a27dfb8f4495271db9
• registry.anvil.rcac.purdue.edu/anvilops/migrate-db:0.5.0@sha256:c60c582c97a58d0ad3087fe5bf6bacb96e6a1f13cd42f3e948348168c7da8faa
• registry.anvil.rcac.purdue.edu/anvilops/file-browser:0.5.0@sha256:b60d7bffc81ce7ed062da1d4f92868530cdbfb1ce33cf410c4f2b6564b52a937
• registry.anvil.rcac.purdue.edu/anvilops/dockerfile-builder:0.5.0@sha256:15f886549da51e91ac09fbfe35676c042957a751e190fe1c4b11f7944f723898
• registry.anvil.rcac.purdue.edu/anvilops/railpack-builder:0.5.0@sha256:354a04fc06ef1db24894428ee16fe79c9df48b9206452643a762ab1ffa32b64a
• registry.anvil.rcac.purdue.edu/anvilops/helm-deployer:0.5.0@sha256:ac0c23f32bd4a0d0b0a2327cd97af2cad595266d5230d8af341fcc392f669047
• registry.anvil.rcac.purdue.edu/anvilops/log-shipper:0.5.0@sha256:b14155ca02d36a235f64d7e8ba7c3910489f4ff1d3332a9757b0bf724aeed478
• registry.anvil.rcac.purdue.edu/anvilops/railpack-frontend:0.23.0@sha256:2ec7688363c7e74e0ad8f1e32c0623ac6bd1ca29256e55c9033661b6da39cf0b
• registry.anvil.rcac.purdue.edu/anvilops/railpack-builder:0.23.0@sha256:18e669fd8165249480031cf5aee53c06c542ef81e86212beeab3151ec50a1d91
• registry.anvil.rcac.purdue.edu/anvilops/railpack-runtime:0.23.0@sha256:7ee4ade68d41b1f1f7e1fd1f93ff782f29043d07ae338f77a413d6cd5e1e84ff

Install with Helm

helm install anvilops --version 0.5.0 oci://registry.anvil.rcac.purdue.edu/anvilops/chart/anvilops

What's Changed

• EnvVarGrid fixes by @skkra0 in #32
• Rancher OIDC by @skkra0 in #33
  • Rancher can now be used as an authentication provider, starting from Rancher version 2.12
• Helm UI by @skkra0 in #54
  • Users can now install Helm charts from preconfigured templates in charts/templates/.
  • A configuration file inside the Helm chart allows AnvilOps to create a configuration form displayed to the user to fill in Helm values.
  • This feature is intended to be used for common dependencies, like databases, caches, and object storage services.
  • See charts/templates/README.md for more details.
• Buildkit Network Policies by @skkra0 in #58
  • The BuildKit daemon is now only allowed to communicate with the build job pods and the internet (to push images and download dependencies in builds).
  • Build job pods are now only allowed to communicate with the BuildKit daemon, the internet (to clone repositories), and the AnvilOps backend (to push build logs and status updates).
• Custom domain support by @FluxCapacitor2 in #63
  • Users can add their own domains to their AnvilOps apps.
  • AnvilOps handles the process of generating a TLS certificate via Let's Encrypt.
• CSRF and XSS protection by @skkra0 in #59
  • Endpoints that use "unsafe" request methods require a CSRF token, which is unique to the current session.
  • This prevents a class of attacks where an attacker convinces the user to submit a form that causes AnvilOps to run a destructive action, like deleting an app.
  • This PR also adds a Content Security Policy to help prevent Cross-Site Scripting (XSS) attacks.
• Rootless Buildkitd by @skkra0 in #62
  • The BuildKit daemon now runs as a non-root user to reduce the attack surface in the event of a container escape vulnerability.
• App config form improvements by @skkra0 in #61
  • App group names now must be unique within an organization.
  • AnvilOps now gracefully handles cases where an app's first deployment was never created due to an unexpected error.
• File browser pods now start more reliably (dd37168)
  • When a volume is in RWO mode, AnvilOps now adds a pod affinity to the file browser pod that ensures it's scheduled on the same node as the pod that's currently using the volume.
• AnvilOps now responds gracefully when an organization's Git provider gets disconnected, e.g. when the GitHub App is uninstalled (5b6f4eb — 5a198a4)

Version bumps:

• Update Railpack to 0.20.0 by @FluxCapacitor2 in #31
• Update Railpack to 0.23.0 by @FluxCapacitor2 in #39
• Update builder images to Ubuntu 26.04 LTS by @FluxCapacitor2 in #48
• Securely pin versions in GitHub actions by @skkra0 in #60
• Dependabot pull requests and other security updates are omitted for brevity.

Internal changes:

• Constructor dependency injection by @FluxCapacitor2 in #44
  • All AnvilOps service functions are now in their own classes which accept dependencies as constructor parameters, which makes the system much easier to test.
• Set up Vitest for unit testing by @FluxCapacitor2 in #49
  • Automated tests run on every push and pull request with the ability to use an in-memory PGlite database.

Full Changelog: v0.4.2...v0.5.0

v0.4.2

Container Images

• registry.anvil.rcac.purdue.edu/anvilops/anvilops:0.4.2@sha256:d721238c21b1fefd7437c544094aa7521938b2671681593d1e8e6eaf94b2fd7e
• registry.anvil.rcac.purdue.edu/anvilops/migrate-db:0.4.2@sha256:345dc24da96044ae648fc7583ec853c0143c2b33313dc04f8ead534df5405336
• registry.anvil.rcac.purdue.edu/anvilops/file-browser:0.4.2@sha256:7897cc2877eba214a1d4ae80a9f994082db8d6b9d480b8e4f7911424c4d08e39
• registry.anvil.rcac.purdue.edu/anvilops/dockerfile-builder:0.4.2@sha256:3f5fdc893ea65fae3b7c3e3b451cc2da1c17693af409715ad3986f6ec4618810
• registry.anvil.rcac.purdue.edu/anvilops/railpack-builder:0.4.2@sha256:5d2dc757a6256f46d351fa6920c944b54b1e122fd1f2701c2cea648f3f84c751
• registry.anvil.rcac.purdue.edu/anvilops/helm-deployer:0.4.2@sha256:8c00f8c6dc4f38860580ab151eeea83d558193792db915c3e933bebec33b3c38
• registry.anvil.rcac.purdue.edu/anvilops/log-shipper:0.4.2@sha256:1bb974716725744e29c24102696671d2fb9996440feaea5acb7fe726f0217c15
• registry.anvil.rcac.purdue.edu/anvilops/railpack-frontend:0.17.1@sha256:260abee6b67c17a71db43ca6d27a27036776d5b8d8da49347dc6bd8b1c85c24b
• registry.anvil.rcac.purdue.edu/anvilops/railpack-builder:0.17.1@sha256:a98f18ce38aef3425eada7a95d7b85693075dd6afdc64f20ed74ce847c15cde5
• registry.anvil.rcac.purdue.edu/anvilops/railpack-runtime:0.17.1@sha256:cc2f030774f3998ae3c95eea1a1c8358e7fd8d5e4ebf6597d254576179953cd9

Install with Helm

helm install anvilops --version 0.4.2 oci://registry.anvil.rcac.purdue.edu/anvilops/chart/anvilops

What's Changed

• Fixed an issue that prevented GitHub webhooks from triggering new deployments

Full Changelog: v0.4.1...v0.4.2

v0.4.1

Container Images

• registry.anvil.rcac.purdue.edu/anvilops/anvilops:0.4.1@sha256:9fb1cc1d8f14a87db739894d4020ddb006e1cc0b6cf13e8247edae8425ff88c7
• registry.anvil.rcac.purdue.edu/anvilops/migrate-db:0.4.1@sha256:38370dc871f30231b158c685961548fa239947bfc8d42aece376bc0dbebacebd
• registry.anvil.rcac.purdue.edu/anvilops/file-browser:0.4.1@sha256:07a7495696c152c60cd3292c57344557358859c40887663b74019a3fa3a07ec3
• registry.anvil.rcac.purdue.edu/anvilops/dockerfile-builder:0.4.1@sha256:484e9fa53c51dc99074a1d919f8b9f15e8b41fe09b1eb190d242e9079e7c5b9a
• registry.anvil.rcac.purdue.edu/anvilops/railpack-builder:0.4.1@sha256:fbae01fe90dc70d6f534959e7dd4b5fc2357714864d715b06864e5b8816110f9
• registry.anvil.rcac.purdue.edu/anvilops/helm-deployer:0.4.1@sha256:32ec83e8feb62124cc1d0f688f03afacc21126d430103e55c1eb6dfa03bffa16
• registry.anvil.rcac.purdue.edu/anvilops/log-shipper:0.4.1@sha256:432e184bb874c77baca23929973ccd6ce41e5e627e6a455e4a62797fc4308740
• registry.anvil.rcac.purdue.edu/anvilops/railpack-frontend:0.17.1@sha256:260abee6b67c17a71db43ca6d27a27036776d5b8d8da49347dc6bd8b1c85c24b
• registry.anvil.rcac.purdue.edu/anvilops/railpack-builder:0.17.1@sha256:a98f18ce38aef3425eada7a95d7b85693075dd6afdc64f20ed74ce847c15cde5
• registry.anvil.rcac.purdue.edu/anvilops/railpack-runtime:0.17.1@sha256:cc2f030774f3998ae3c95eea1a1c8358e7fd8d5e4ebf6597d254576179953cd9

Install with Helm

helm install anvilops --version 0.4.1 oci://registry.anvil.rcac.purdue.edu/anvilops/chart/anvilops

What's Changed

• Fixed an issue with the log viewer that prevented build logs from updating in realtime
• Made deployment statuses update faster in the UI when viewing build logs
• Fixed error messages caused by attempting to decode the body of empty HTTP responses

Full Changelog: v0.4.0...v0.4.1

v0.4.0

Container Images

• registry.anvil.rcac.purdue.edu/anvilops/anvilops:0.4.0@sha256:597eea5c0e93cf5b225607a2c7123bbae6b4188259665daaf67ad6ed7bca3771
• registry.anvil.rcac.purdue.edu/anvilops/migrate-db:0.4.0@sha256:38a47bb2e79cb5283573cad7ab4af897d12ef816f1d59fb4053c3158b8a37393
• registry.anvil.rcac.purdue.edu/anvilops/file-browser:0.4.0@sha256:00e555e016be67f5ad9951b2289b162f822156d0b5b2c05bfaad552563fe5585
• registry.anvil.rcac.purdue.edu/anvilops/dockerfile-builder:0.4.0@sha256:dc33128ef0686f40dabbbd3f86312d10ff8f2b265de1fa5f8d2590182f7e1d0c
• registry.anvil.rcac.purdue.edu/anvilops/railpack-builder:0.4.0@sha256:f3622079f99864171ee20f37dce3afc6cad6363826e81835929fbc3c43a54481
• registry.anvil.rcac.purdue.edu/anvilops/helm-deployer:0.4.0@sha256:4e4ccce4d3ad33721effe58a47dc06f451cd3758b854baacf89bd21258f400e8
• registry.anvil.rcac.purdue.edu/anvilops/log-shipper:0.4.0@sha256:34e5660c95df243371f6ad4ed6a60901b9eec4eb53d66fea341d245bf605b471
• registry.anvil.rcac.purdue.edu/anvilops/railpack-frontend:0.17.1@sha256:260abee6b67c17a71db43ca6d27a27036776d5b8d8da49347dc6bd8b1c85c24b
• registry.anvil.rcac.purdue.edu/anvilops/railpack-builder:0.17.1@sha256:a98f18ce38aef3425eada7a95d7b85693075dd6afdc64f20ed74ce847c15cde5
• registry.anvil.rcac.purdue.edu/anvilops/railpack-runtime:0.17.1@sha256:cc2f030774f3998ae3c95eea1a1c8358e7fd8d5e4ebf6597d254576179953cd9

Install with Helm

helm install anvilops --version 0.4.0 oci://registry.anvil.rcac.purdue.edu/anvilops/chart/anvilops

What's Changed

• Selecting namespace in create-app forms by @skkra0 in #18
• Refresh kubeconfig and rancher API token every month by @skkra0 in #15
• Display current version number and build date on the frontend by @FluxCapacitor2 in #19
• Network isolation by @skkra0 in #13
• Make Git provider generic by @FluxCapacitor2 in #8
• Switch frontend to rolldown-vite for faster build times by @FluxCapacitor2 in #20
• Set up linting by @FluxCapacitor2 in #14
• Update Railpack to 0.17.1 by @FluxCapacitor2 in #26
• Updating the documentation by @skkra0 in #25
• Image repo by @skkra0 in #28
• Add prompt to retry the most recent deployment if it failed by @FluxCapacitor2 in #22
• Add option to force a rebuild in Configuration tab by @FluxCapacitor2 in #23
• Perform a dry-run Ingress create to verify subdomain does not exist by @FluxCapacitor2 in #27
• Log viewer improvements by @FluxCapacitor2 in #24

Full Changelog: v0.3.0...v0.4.0

v0.3.0

Container Images

• registry.anvil.rcac.purdue.edu/anvilops/anvilops:0.3.0@sha256:0074c28bb2c4c74ea323e0f1167f9f3021c0f1a2a911974e7b91116878ff5b13
• registry.anvil.rcac.purdue.edu/anvilops/migrate-db:0.3.0@sha256:6054a9c4e2345f771a0bc0b9833cb5189ba4519bca632df1266791bd82047931
• registry.anvil.rcac.purdue.edu/anvilops/file-browser:0.3.0@sha256:9f01e349a0dd5a49a00730ed638dec381acfb6b5e2496471e1e395de1bd457cf
• registry.anvil.rcac.purdue.edu/anvilops/dockerfile-builder:0.3.0@sha256:c23a64b80ea381d732642c90bf67da80d27ce97999e665b34d1bf9121c361e69
• registry.anvil.rcac.purdue.edu/anvilops/railpack-builder:0.3.0@sha256:b30c26f9ef107c78b831c4127c57c36d6c572e8c007b012688455a0d915689d6
• registry.anvil.rcac.purdue.edu/anvilops/helm-deployer:0.3.0@sha256:60199df66c63df6db4f30aaa97dadfc3be8d4cf78a56516e733b2fa87a5da394
• registry.anvil.rcac.purdue.edu/anvilops/log-shipper:0.3.0@sha256:35ece5c02641eee92bfd0ee386056af8fd857bc5b379393c957e5fb8e8c39350
• registry.anvil.rcac.purdue.edu/anvilops/railpack-frontend:0.17.0@sha256:aa2c58772b4cb9851767647b898e537ebb06067aadc2b62f51c97acdce2a61bc
• registry.anvil.rcac.purdue.edu/anvilops/railpack-builder:0.17.0@sha256:a98f18ce38aef3425eada7a95d7b85693075dd6afdc64f20ed74ce847c15cde5
• registry.anvil.rcac.purdue.edu/anvilops/railpack-runtime:0.17.0@sha256:cc2f030774f3998ae3c95eea1a1c8358e7fd8d5e4ebf6597d254576179953cd9

Install with Helm

helm install anvilops --version 0.3.0 oci://registry.anvil.rcac.purdue.edu/anvilops/chart/anvilops

What's Changed

• Add OpenTelemetry instrumentation for logs, traces, and metrics by @FluxCapacitor2 in #11

Full Changelog: v0.2.0...v0.3.0

v0.2.0

Container Images

• registry.anvil.rcac.purdue.edu/anvilops/anvilops:0.2.0@sha256:edd2a250840bf1eee9cec7a81a00ad204c6c695e41250ea15d06bead3b6e8116
• registry.anvil.rcac.purdue.edu/anvilops/migrate-db:0.2.0@sha256:dee2df735235a880dcaa3c80ec8d958743baa61b79bc62f15fe0543534bdc4a3
• registry.anvil.rcac.purdue.edu/anvilops/file-browser:0.2.0@sha256:4d581633d522ffa2d09583da48c38ba74653ee5401164ece5eb1205cb63f0dfe
• registry.anvil.rcac.purdue.edu/anvilops/dockerfile-builder:0.2.0@sha256:87ebab52ef688e08c86628004bc6d9be5ecfb8e4501b21e045d9a0fa4c0d8fd9
• registry.anvil.rcac.purdue.edu/anvilops/railpack-builder:0.2.0@sha256:d9c9c240fce02029cc0758cc03c3fb8878e47e42b953157ea690ad88bfb8d7a9
• registry.anvil.rcac.purdue.edu/anvilops/helm-deployer:0.2.0@sha256:d67d1283920e00d20591cea564f798f9c76b62a84317402137b577749df444c9
• registry.anvil.rcac.purdue.edu/anvilops/log-shipper:0.2.0@sha256:0383304327d644c8d835edcabcdca4ef9573102d190ce2b74967c1567a615695
• registry.anvil.rcac.purdue.edu/anvilops/railpack-frontend:0.15.4@sha256:ee70ab404505ce41ad52c15e1340d25384e9e76408d29910c6a302d61f497c4c
• registry.anvil.rcac.purdue.edu/anvilops/railpack-builder:0.15.4@sha256:a98f18ce38aef3425eada7a95d7b85693075dd6afdc64f20ed74ce847c15cde5
• registry.anvil.rcac.purdue.edu/anvilops/railpack-runtime:0.15.4@sha256:cc2f030774f3998ae3c95eea1a1c8358e7fd8d5e4ebf6597d254576179953cd9

Install with Helm

helm install anvilops --version 0.2.0 oci://registry.anvil.rcac.purdue.edu/anvilops/chart/anvilops

What's Changed

• No expose by @skkra0 in #3
• Move database operations to a separate module by @FluxCapacitor2 in #5
• Update deps by @FluxCapacitor2 in #4
• Bump actions/checkout from 4 to 6 by @dependabot[bot] in #2
• Move API handler implementations to service directory by @FluxCapacitor2 in #6

New Contributors

• @dependabot[bot] made their first contribution in #2

Full Changelog: https://github.com/PurdueRCAC/AnvilOps/commits/v0.2.0