Skip to content

Commit 94ce5fd

Browse files
greyscaledgreyscaled
authored
Release 1.20.0 (coder#406)
1 parent 2485a83 commit 94ce5fd

File tree

14 files changed

+298
-18
lines changed

14 files changed

+298
-18
lines changed

‎admin/appearance.md

Lines changed: 17 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,20 +6,35 @@ description: Learn how to augment the dashboard appearance.
66
Coder offers you appearance customization options for the following:
77

88
- System banner messages
9+
- Service banner messages
910
- The terms of service display
1011

11-
## System banner messages
12+
## System banners
1213

1314
To customize your system banner messages:
1415

1516
1. Go to **Manage** > **Admin** > **Appearance** in the Coder UI.
16-
1. Toggle the switch to **On**.
17+
1. Toggle the **System Banner** switch to **On**.
1718
1. Set your **Background Color**, and provide the text you want to be displayed
1819
in your **Header** and **Footer**.
1920
1. Click **Save Preferences** to save your changes.
2021

2122
![System appearance](../assets/system-banners.png)
2223

24+
## Service banners
25+
26+
The service banner allows you to display a message to all users of your Coder
27+
system. The user can dismiss the message at any time and Coder will not display
28+
a banner until you change the message (or disable and re-enable the current
29+
message).
30+
31+
1. Go to **Manage** > **Admin** > **Appearance** in the Coder UI.
32+
1. Toggle the **Service Banner** switch to **On**.
33+
1. Set the **Message**.
34+
1. Click **Save Preferences**.
35+
36+
![Service banner](../assets/service-banners.png)
37+
2338
## Terms of service
2439

2540
To enable the display of terms of service and to edit the text displayed:

‎admin/security.md

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
---
2+
title: Browser Security
3+
description: Learn about Coder's browser security options.
4+
---
5+
6+
Coder offers two browser security features that you can choose to enable. These
7+
are available under **Manage** > **Admin** > **Infrastructure**.
8+
9+
## HTTP Strict Transport Security
10+
11+
If you are serving Coder over HTTPS, we recommend enabling the
12+
**Strict-Transport-Security Header** option, which adds the [HTTP Strict
13+
Transport Security] header to responses. This browser feature requires future
14+
requests to occur over HTTPS.
15+
16+
[http strict transport security]:
17+
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
18+
19+
![HTTP Strict Transport Security](../assets/http-strict-transport-security.png)
20+
21+
## Secure Cookie
22+
23+
The **Secure Cookie** option controls the [`secure` property of cookies] that
24+
Coder issues. This prevents browsers from sending sensitive cookies, such as
25+
those containing credentials, over unencrypted (HTTP) connections. We recommend
26+
enabling this setting if you are serving Coder over HTTPS.
27+
28+
[`secure` property of cookies]:
29+
https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies
30+
31+
![Secure Cookie](../assets/secure-cookie.png)

‎admin/templates.md

Lines changed: 58 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,64 @@ description:
55
As Code Template
66
---
77

8-
The **Templates** tab features a form you can use for generating an embeddable
8+
The **Templates** tab features options that control the behavior of workspace
9+
templates.
10+
11+
The **Enable using Workspace Templates** toggle allows you to enable or disable
12+
the creation of [workspaces](../workspaces/index.md) using predefined templates
13+
located in Git repositories.
14+
15+
![Enable workspace templates](../assets/enable-ws-templates.png)
16+
17+
## Template policy (alpha)
18+
19+
If you enable the use of workspace templates, a **template policy** allows you
20+
to control which fields users can set and which values can be used when they
21+
define their workspaces.
22+
23+
The default template policy is as follows:
24+
25+
```yaml
26+
version: "0.2"
27+
workspace:
28+
configure:
29+
start:
30+
policy: write
31+
dev-urls:
32+
policy: write
33+
specs:
34+
kubernetes:
35+
container-based-vm:
36+
policy: write
37+
cpu:
38+
policy: write
39+
disk:
40+
policy: write
41+
env:
42+
policy: write
43+
gpu-count:
44+
policy: write
45+
image:
46+
policy: write
47+
labels:
48+
policy: read
49+
memory:
50+
policy: write
51+
node-selector:
52+
policy: read
53+
tolerations:
54+
policy: read
55+
```
56+
57+
Underneath the policy template preview, you can either upload your policy or you
58+
can drag-and-drop the file onto the UI. Click **Save** to persist your changes.
59+
60+
If, at any time, you want to remove your policy and use Coder's default policy,
61+
click **Reset to default**.
62+
63+
## Embeddable Button
64+
65+
The Embeddable Button section features a form you can use for generating an embeddable
966
button. This button makes it easy for developers to use your
1067
[workspace template](../workspaces/workspaces-as-code/index.md).
1168

‎assets/enable-ws-templates.png

65.7 KB
Loading

‎assets/http-strict-transport-security.png

102 KB
Loading

‎assets/secure-cookie.png

101 KB
Loading

‎assets/service-banners.png

62.9 KB
Loading

‎assets/wac-intellisense-demo.gif

830 KB
Loading

‎changelog/1.20.0.md

Lines changed: 53 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,53 @@
1+
---
2+
title: "1.20.0"
3+
description: "Released on 06/16/2021"
4+
---
5+
6+
### Breaking changes ❗
7+
8+
There are no breaking changes in 1.20.0.
9+
10+
### Features ✨
11+
12+
- web: **Alpha**. Added the ability to set a site-wide workspace template policy
13+
at **Manage > Admin > Templates > Template Policy**. If not set, Coder uses
14+
the provided default.
15+
- web: Added the `node-selector`, `tolerations`, and `annotations` fields to
16+
workspace templates.
17+
- other: Added a new JSON schema for writing Coder workspace as code templates
18+
with code completion and syntax checking.
19+
- web: Added a service banner that's displayed to all users of the system. The
20+
message can be used with existing messages. It can be dismissed by each user
21+
at any point and will not be shown again until there is a new message.
22+
- web: Added text wrapping to system banners.
23+
- infra: Added a `CODER_RUNTIME` environment variable that indicates whether a
24+
workspace is CVM-enabled or not.
25+
- web: Updated UI to display decommissioned workspaces that are awaiting
26+
deletion.
27+
- web: Added ability to filter the audit log by the _auto-off_ action.
28+
29+
### Bug fixes 🐛
30+
31+
- web: Fixed bug causing duplicate fetch requests on page load.
32+
- web: Fixed issue causing private dev URLs to load as blank pages for
33+
unauthorized users (users will now see an error page).
34+
35+
### Security updates 🔐
36+
37+
- web: Require administrative permissions to view workspaces belonging to other
38+
users; previously, users could view others' workspace metadata
39+
- web: Added content security policy (CSP) to help protect against cross-site
40+
scripting attacks.
41+
- web: Added opt-in for HTTP Strict Transport Security. This setting can be
42+
managed at **Manage > Admin > Infrastructure > HTTP Strict Transport
43+
Security**.
44+
- web: Added opt-in for secure cookies. This setting can be managed at
45+
**Manage > Admin > Infrastructure > Secure Cookie**.
46+
- web: Use strong cryptographic APIs to generate client-side tokens.
47+
- infra: Upgraded control plane containers from Red Hat UBI 8.3 to 8.4, and
48+
switch from ubi to ubi-minimal to reduce image contents.
49+
- infra: Enable read-only root filesystem for control plane containers, by
50+
default. You can override this with the Helm `coderd.securityContext` setting.
51+
- web: Resolved CVE-2021-23364 in browserslist.
52+
- web: Resolved CVE-2021-23358 in underscore.
53+
- web: Resolved CVE-2020-7753 in trim.

‎guides/troubleshooting/docker-problems.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
2-
title: Docker key storage issues
3-
description: Learn how to solve Docker key storage issues inside Coder workspaces.
2+
title: Docker troubleshooting
3+
description: Learn how to solve Docker issues inside Coder workspaces.
44
---
55

66
When using Coder, you may encounter the following error:

0 commit comments

Comments
 (0)