Skip to content

Commit 90ebd16

Browse files
greyscaledgreyscaled
authored
Release 1.19 (#313)
1 parent d2401aa commit 90ebd16

File tree

11 files changed

+231
-80
lines changed

11 files changed

+231
-80
lines changed

‎admin/devurls.md

Lines changed: 43 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -51,3 +51,46 @@ The final step to enabling dev URLs is to update your wildcard DNS record. Get
5151
the **ingress IP address** using `kubectl --namespace coder get ingress` and
5252
point your wildcard DNS record (e.g., \*.my-custom-domain.io) to the ingress IP
5353
address.
54+
55+
## Setting dev URL access permissions
56+
57+
Once you've enabled dev URLs for users, you can set the **maximum access
58+
level**. To do so, go to **Manage** > **Admin**. On the **Infrastructure** tab,
59+
scroll down to **Dev URL Access Permissions**.
60+
61+
<table>
62+
<tr>
63+
<th>Maximum access level</th>
64+
<th>Description</th>
65+
</tr>
66+
<tr>
67+
<th>Public</th>
68+
<td>Accessible by anyone with access to the
69+
network your cluster is on</td>
70+
</tr>
71+
<tr>
72+
<th>Authenticated</th>
73+
<td>Accessible by any authenticated Coder user</td>
74+
</tr>
75+
<tr>
76+
<th>Organization</th>
77+
<td>Accessible by anyone in the user's organization</td>
78+
</tr>
79+
<tr>
80+
<th>Private</th>
81+
<td>Accessible only by the user</td>
82+
</tr>
83+
</table>
84+
85+
![Setting dev URL permissions](../assets/admin-devurl-permissions.png)
86+
87+
You can set the maximum access level, but developers may choose to restrict
88+
access further.
89+
90+
For example, if you set the maximum access level as
91+
**Authenticated**, then any dev URLs created for workspaces in your Coder
92+
deployment will be accessible to any authenticated Coder user.
93+
94+
The developer, however, can choose to set a stricter permission level (e.g.,
95+
allowing only those in their organization to use the dev URL). Developers cannot
96+
choose a more permissive option.

‎admin/workspace-management/ssh-access.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@ RUN echo "PermitUserWorkspace yes" >> /etc/ssh/sshd_config && \
4242
```
4343

4444
Then, make sure that you're creating your workspaces with the
45-
[CVM option](https://coder.com/docs/workspaces/cvms) enabled.
45+
[CVM option](../../workspaces/cvms.md) enabled.
4646

4747
> If Coder detects a running TCP server on port 22, it will forward incoming SSH
4848
> traffic to this server. This means that workspaces should not run a TCP server
@@ -87,7 +87,7 @@ HOSTNAME=dev
8787
CODER_USERNAME=john
8888
SSH_AUTH_SOCK=/home/coder/.coder-ssh-agent.sock
8989
PWD=/home/coder
90-
CODER_ASSETS_ROOT=/opt/coder
90+
CODER_ASSETS_ROOT=/var/tmp/coder
9191
HOME=/home/coder
9292
LANG=en_US.UTF-8
9393
CODER_CPU_LIMIT=24.00
@@ -98,9 +98,9 @@ CODER_IMAGE_TAG=latest
9898
CODER_IMAGE_DIGEST=sha256:1586122346e7d9d64a0c49a28df7538de4c5da5bfe0df672b1552dd52932c9a7
9999
SERVICE_URL=https://extensions.coder.com/api
100100
CODER_IMAGE_URI=codercom/enterprise-base:ubuntu
101-
PATH=/usr/local/google-cloud-sdk/bin:/home/coder/go/bin:/home/linuxbrew/.linuxbrew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/opt/coder/coder-cli
101+
PATH=/usr/local/google-cloud-sdk/bin:/home/coder/go/bin:/home/linuxbrew/.linuxbrew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/tmp/coder/coder-cli
102102
BASE_PATH=/proxy/workspaces/60162f9e-78809dfc9a9e24b8f5e580ff/ide
103-
_=/opt/coder/envagent
103+
_=/var/tmp/coder/envagent
104104
105105
# ----------------- END CODER -----------------------
106106
```

‎assets/admin-devurl-permissions.png

57.7 KB
Loading

‎changelog/1.19.0.md

Lines changed: 74 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,74 @@
1+
---
2+
title: "1.19.0"
3+
description: "Released on 05/19/2021"
4+
---
5+
6+
### Breaking changes ❗
7+
8+
- infra: Workspace assets created by Coder that were previously located at
9+
`/opt/coder`, such as code-server and coder-cli, have been moved to
10+
`/var/tmp/coder`
11+
- infra: Workspaces as code templates have been updated from version _0.1_ to
12+
_0.2_. Existing workspaces using version _0.1_ templates can be rebuilt,
13+
but no new workspaces can be created using the old format.
14+
- web: The workspace as code _Open in Coder_ embeddable button flow no longer
15+
includes a _clone_ step; buttons created from prior versions will still work,
16+
but Coder will not clone the project. To automate project cloning, use
17+
[`workspace.configure.start`](../workspaces/workspaces-as-code/templates.md#workspaceconfigurestart)
18+
- web: The embedded form for workspaces as code located at **Manage** >
19+
**Admin** > **Templates** no longer uses the following fields: **Project
20+
Repository URL** and **Project Git Service**
21+
22+
### Features ✨
23+
24+
- web: Introduced resource quotas to organizations. Resource quotas define the
25+
maximum resource utilization allowable for each member within an organization
26+
for which such quotas are enabled. Modify them at **Manage** >
27+
**Organizations** > **Edit Organization**
28+
- web: Added a reactivation step for returning users that had been marked as
29+
dormant. The reactivation step requires the user to agree to use a license
30+
seat
31+
- web: Added an admin setting controlling the maximum dev URL access level
32+
across all workspaces within the deployment. Modify the maximum dev URL access
33+
level at **Manage** > **Admin** > **Infrastructure** in the card titled **Dev
34+
URL Access Permissions**
35+
- web: The CVM option will be selected by default when creating a custom
36+
environment (if CVMs are enabled at the site level)
37+
- web: Improved display and support for errors returned by an Identity Provider
38+
(IdP) during sign-in
39+
- infra: Changed permissions of `/home/coder/` and subdirectories to _755_ in
40+
control plane containers to support OpenShift `anyuid`
41+
- infra: Workspace builds are now properly validated when setting policy
42+
templates
43+
- code-server: Upgraded code-server to 3.10.1 (latest version)
44+
45+
### Bug fixes 🐛
46+
47+
- web: Fixed issue where the **Edit Workspace** dialog showed the resource
48+
selectors as disabled while still allowing modifications
49+
- web: Fixed issue where the **Edit Workspace** dialog displayed resource
50+
allocation incorrectly if the workspace was initially built using a template
51+
- web: Updated validation logic so that workspaces with invalid names can no
52+
longer be created
53+
- web: Fixed issue causing web-based terminals to show two scrollbars and
54+
overflowing content when system banners are present
55+
- infra: Fixed issue causing workspace autostart to stop or fail intermittently
56+
- web: Fixed issue in the **Audit Logs** preventing users from clearing the
57+
filters
58+
- web: Added a _.csv_ extension to exported audit logs
59+
60+
### Security updates 🔐
61+
62+
- web: Upgraded version of `next` to 10.2.0.
63+
- web: Upgraded and addressed CVE-2021-21306 in `marked`.
64+
- web: Upgraded and addressed Fix CVE-2021-23368 in `postcss`.
65+
- web: Client secret is now omitted from `GET` requests to OAuth configurations.
66+
- web: When authenticating with the CLI, a new API key is always generated.
67+
- web: Fixed authentication for the _watch-update_ workspace endpoint. This was
68+
previously open to any authenticated user
69+
- web: Fixed issue where audit logs for **workspace auto-off** was always
70+
attributed to the site admin; the audit log has been corrected to display the
71+
user owning the workspace.
72+
- infra: Increased the minimum requirement for inbound and outbound connections
73+
to TLS 1.2
74+
- infra: Added debug logs to show TLS certificates

‎guides/troubleshooting/inotify-watch-limits.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -78,9 +78,9 @@ $ ./inotify-consumers
7878
WATCHER
7979
COUNT PID USER COMMAND
8080
--------------------------------------
81-
269 254560 coder /opt/coder/code-server/lib/node /opt/coder/code-server/lib/vscode/out/bootstrap-fork --type=watcherService
82-
5 1722 coder /opt/coder/code-server/lib/node /opt/coder/code-server/lib/vscode/out/vs/server/fork
83-
2 254538 coder /opt/coder/code-server/lib/node /opt/coder/code-server/lib/vscode/out/bootstrap-fork --type=extensionHost
81+
269 254560 coder /var/tmp/coder/code-server/lib/node /var/tmp/coder/code-server/lib/vscode/out/bootstrap-fork --type=watcherService
82+
5 1722 coder /var/tmp/coder/code-server/lib/node /var/tmp/coder/code-server/lib/vscode/out/vs/server/fork
83+
2 254538 coder /var/tmp/coder/code-server/lib/node /var/tmp/coder/code-server/lib/vscode/out/bootstrap-fork --type=extensionHost
8484
2 1507 coder gpg-agent --homedir /home/coder/.gnupg --use-standard-socket --daemon
8585

8686
278 WATCHERS TOTAL COUNT

‎images/configure.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -200,6 +200,6 @@ coder urls create $CODER_WORKSPACE_NAME 3000 --name webapp
200200
cp settings.json /home/coder/.local/share/code-server/User/settings.json
201201

202202
# Install extensions
203-
/opt/coder/code-server/bin/code-server --install-extension esbenp.prettier-vscode
203+
/var/tmp/coder/code-server/bin/code-server --install-extension esbenp.prettier-vscode
204204
fi
205205
```

‎manifest.json

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -349,6 +349,9 @@
349349
{
350350
"path": "./changelog/index.md",
351351
"children": [
352+
{
353+
"path": "./changelog/1.19.0.md"
354+
},
352355
{
353356
"path": "./changelog/1.18.1.md"
354357
},

‎setup/air-gapped/index.md

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -78,8 +78,6 @@ platform images are hosted in Coder's Docker Hub repo.
7878

7979
[envbox](https://hub.docker.com/r/coderenvs/envbox)
8080

81-
[envbuilder](https://hub.docker.com/r/coderenvs/envbuilder)
82-
8381
[timescale](https://hub.docker.com/r/coderenvs/timescale) (**Note**: We
8482
recommend you only use timescale for evaluation purposes if you don't have an
8583
external PostgreSQL database available. For production workspaces, we strong
@@ -148,7 +146,6 @@ platform images are hosted in Coder's Docker Hub repo.
148146
helm --namespace coder install coder /path/to/coder-X.Y.Z.tgz \
149147
--set cemanager.image=my-registry.com/coderenvs/coder-service:<version> \
150148
--set envproxy.image=my-registry.com/coderenvs/coder-service:<version> \
151-
--set envbuilder.image=my-registry.com/coderenvs/envbuilder:<version> \
152149
--set timescale.image=my-registry.com/coderenvs/timescale:<version> \
153150
--set dashboard.image=my-registry.com/coderenvs/dashboard:<version> \
154151
--set envbox.image=my-registry.com/coderenvs/envbox:<version>
@@ -162,7 +159,6 @@ platform images are hosted in Coder's Docker Hub repo.
162159
--set cemanager.image=$REGISTRY_DOMAIN_NAME/coderenvs/coder-service:<version> \
163160
--set envproxy.image=$REGISTRY_DOMAIN_NAME/coderenvs/coder-service:<version> \
164161
--set envbox.image=$REGISTRY_DOMAIN_NAME/coderenvs/envbox:<version> \
165-
--set envbuilder.image=$REGISTRY_DOMAIN_NAME/coderenvs/envbuilder:<version> \
166162
--set timescale.image=$REGISTRY_DOMAIN_NAME/coderenvs/timescale:<version> \
167163
--set dashboard.image=$REGISTRY_DOMAIN_NAME/coderenvs/dashboard:<version> \
168164
-f registry-cert-values.yml

‎workspaces/cvms.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -23,8 +23,8 @@ By choosing this option, your workspace behaves like a VM or raw host, yet
2323
retains the image, security, and performance properties of typical containers.
2424

2525
To create a workspace capable of securely running system-level applications like
26-
Docker, check the `Run as Container-based Virtual Machine` box when you create a
27-
new workspace.
26+
Docker, make sure that the `Run as Container-based Virtual Machine` box is
27+
checked when you create a new workspace (it should be enabled by default).
2828

2929
![Create CVM](../assets/cvm-create.png)
3030

‎workspaces/getting-started.md

Lines changed: 8 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -37,10 +37,14 @@ image, and runs custom configuration on startup. Learn about the
3737

3838
### Advanced
3939

40-
Coder provides advanced settings that allow you to customize your workspace. You
41-
can choose to run your workspace as a
42-
[Container-based virtual machine](cvms.md), specifying the resources Coder
43-
should allocate.
40+
Coder provides advanced settings that allow you to customize your workspace.
41+
42+
If your Coder deployment has [container-based virtual machines
43+
enabled](../admin/workspace-management/cvms.md), Coder creates your workspace as
44+
a [CVMs](cvms.md) by default (you can opt-out of this setting by unchecking the
45+
**Run as Container-based Virtual Machine** box).
46+
47+
You can also specify the resources Coder should allocate.
4448

4549
> By default, Coder allocates resources (CPU Cores, Memory, and Disk Space)
4650
> based on the parent image.

0 commit comments

Comments
 (0)