Revision 29

resources:
- jimm-image: jimm:latest
resource-revision: 28

-  promtail-bin: 
   resource-revision: 1

Static resources:
Released to '3/edge' at 09:26 UTC on 21 May 2024

What's Changed

• Local dev env by @ale8k in #867
• Minor fix for the jimmctl model-status command. by @alesstimec in #862
• Refactor the add model method. by @alesstimec in #903
• Removed push from ci workflow. by @alesstimec in #908
• check and remove jimm snap during upgrades by @tcuthbert in #910
• Update to Juju 2.9.42 and some compatibility changes. by @alesstimec in #914
• Fix add-controller by @ale8k in #923
• CSS-2522 Adds Sphinx documentation according to the Diataxis framework. by @alesstimec in #927
• CSS-2435 Tutorial on group and access management. by @alesstimec in #929
• Fix for compose and updated instructions by @kian99 in #943
• Updated to juju 3.1.4 by @alesstimec in #959
• Switches machine charm to data platform libs. by @alesstimec in #962
• CSS-4546 - Backport ci/cd and supporting files by @kian99 in #963
• Css 4587 backport generic fixes by @kian99 in #965
• Css 4116/backport crossmodel queries by @ale8k in #964
• Fix for vault image by @kian99 in #967
• Removed documentation folder by @kian99 in #966
• Backport working workflows from feature-rebac by @kian99 in #975
• workflow improvements by @kian99 in #978
• Different tag for machine charm by @kian99 in #979
• Backported workflow fixes from feature-rebac by @kian99 in #980
• CSS-4607 Update charms to use the latest openfga relation library. by @alesstimec in #981
• CSS-4547 Backports charm changes from feature-rebac into main. by @alesstimec in #982
• Added build tag to include version info in Docker build by @kian99 in #983
• CSS-4705 k8s charm: Fix for the vault relation. by @alesstimec in #985
• Pin pydantic version by @kian99 in #987
• General fixes after QA by @alesstimec in #988
• JIMM k8s charm fixes by @kian99 in #989
• Charms update openfga library 01 by @alesstimec in #986
• K8s charm install dashboard fix 01 by @alesstimec in #992
• Fix for dashboard file by @kian99 in #993
• Fix for the stop method. by @alesstimec in #994
• CSS-4739 Removes the dashboard resource. by @alesstimec in #996
• Quick refactor of the controller-info command by @ale8k in #995
• CSS-4744 - Merge main forward into feature-rebac by @kian99 in #984
• CSS-4743 Added JIMM and controller bundles. by @alesstimec in #991
• Refactor controller info by @ale8k in #997
• CSS-4747 Remove the jimm snap before attempting to install it. by @alesstimec in #998
• moving from CanonicalLtd to canonical by @mina1460 in #1001
• Replaced tabs with spaces to improve help output by @kian99 in #1000
• backports changes back to feature-rebac by @mina1460 in #1003
• Tweaked workflows by @kian99 in #970
• Renamed canonicalltd to canonical by @kian99 in #1004
• CSS-4803 - Vault relation fixes and extra logging by @kian99 in #1002
• Merge main to feature-rebac by @kian99 in #1006
• Checkout without shallow to grab tags by @kian99 in #1009
• Css 4824/expire audit logs by @ale8k in #1007
• Purge logs cmd by @mina1460 in #1008
• Upgrade openfga to 1.2.0 by @mina1460 in #1010
• CSS-4936 Postgres as secret backend by @kian99 in #1011
• Fix check relation cmd typos by @mina1460 in #1012
• Fix dots in usernames issues by @mina1460 in #1015
• Defer database event when username is None by @babakks in #1005
• CSS-4745 Enable remote debugging JIMM (container) by @babakks in #1014
• CSS-4745 Improve local dev env with cloud-init commands by @babakks in #1013
• Less defers in charm by @kian99 in #1017
• Fix to use postgres as the controller credential store by @kian99 in #1016
• CSS-4792 Resolve controller jimm tag by @alesstimec in #1019
• Charms add jwt expiry by @alesstimec in #1020
• Main to rebac by @kian99 in #1022
• CSS-4745 Fix remove cloud failure by @babakks in #1024
• CSS-4745 Improve dev environment (debugging + controller setup) by @babakks in #1023
• CSS-5179 Audit log enhacement by @kian99 in #1026
• CSS-4603 Refactor toward using canonical/ofga by @babakks in #990
• CSS-5106 Makes macaroon expiry duration configurable. by @alesstimec in #1029
• Tweak how GetControllerCredentials works by @kian99 in #1025
• ci/cd base by @mina1460 in #1028
• Jimmctl automated CI/CD Snap release by @mina1460 in #1031
• Revert "backports changes back to feature-rebac (#1003)" by @kian99 in #1030
• Tweak ofga list objects return type by @kian99 in #1032
• Css 4790/better error masking by @mina1460 in #1035
• CSS-5266 - Tweak length check to require at least 1 region and controller by @kian99 in #1034
• Update dockerfile for JIMM image by @kian99 in #1033
• Main to rebac by @kian99 in #1036
• Fixes for migration and OpenFGA port by @kian99 in #1038
• Smoke test by @kian99 in #1039
• Enable Postgres store tests by @babakks in #1040
• Enable importing models created by local users by @kian99 in #1037
• Better logging in model proxy and macaroon discharger by @kian99 in #1041
• CSS-4838 Audit Log improvements by @kian99 in #1042
• Fix jimmctl snap by @ale8k in #1044
• Merge 'main' into 'forward-jimmctl-changes' by @ale8k in #1045
• CSS-5672 Adds declared caveats to the discharge macaroon. by @alesstimec in #1047
• Added codeowners file. by @alesstimec in #1048
• CSS-3595 JIMM uses JWT to log in to individual controllers. by @alesstimec in #1046
• AddController: added public address port check. by @alesstimec in #1049
• Add test for ParseRelation function by @kian99 in #1050
• CSS-5673 Fixes GetApplicationOfferConsumeDetails. by @alesstimec in #1052
• checkout v4 and get tags by @mina1460 in #1055
• CSS-5674 Replace database-stored access with OpenFGA by @babakks in #1051
• Remove extra snap permission from jimmctl snap by @kian99 in #1059
• Merge main forward by @kian99 in #1056
• Tweak import model to avoid manual construction of user tag string by @kian99 in #1062
• CSS-5866 - Add all Juju providers to JIMM's global provider registry by @kian99 in #1058
• Update juju dependency and GetConsumeDetails cleanup. by @alesstimec in #1063
• remove unshallow because repo is now complete by @mina1460 in #1064
• Refactors the JWT token generator and adds unit tests for it. by @alesstimec in #1061
• Improve the addCloudToController facade by @kian99 in #1065
• Update snapcraft.yaml by @kian99 in #1066
• Fixes the dashboard relation of the machine charm by @alesstimec in #1068
• CSS-5674 Re-enable tests for modify model/cloud access by @babakks in #1067
• Fixes linting errors. by @alesstimec in #1070
• Another fix for the dashboard relation. by @alesstimec in #1071
• Merge main forward by @kian99 in #1074
• CSS-5976 Remove unused grant/revoke controller access method by @babakks in #1073
• CSS-6043 Remove cloud users by @kian99 in #1075
• Local setup improvements by @kian99 in #1085
• Support running on ARM by @huwshimi in #1088
• Removed unused files by @kian99 in #1087
• Drops old facade versions. by @alesstimec in #1086
• CSS-5202 remove postgress access checks by @kian99 in #1093
• Change error to errors in the JSON key for audit logs by @kian99 in #1095
• CSS-6238 Bringing back basic auth for controllers. by @alesstimec in #1096
• Refactored creation of DB objects and permissions in tests by @kian99 in #1097
• CSS-6047 Remove Users.AuditLogAccess field by @babakks in #1079
• Extra setup details by @huwshimi in #1089
• Add explanation on removeTuples operation being non-atomic by @babakks in #1084
• CSS-6080 refactor everyone access by @kian99 in #1098
• Remove unused tables and columns by @kian99 in #1099
• Update juju dependency to latest 3.3 by @kian99 in #1094
• Updated workflow to push charm to v3 channel by @kian99 in #1102
• New github workflow to check signed commits by @mina1460 in #1104
• Add JImmAdmin field to User struct by @kian99 in #1101
• CSS-6203 Implements InitiateMigration. by @alesstimec in #1100
• Internal model migration by @kian99 in #1107
• CSS-6435 update migrated models by @kian99 in #1109
• Allow non-admins to use the checkRelation by @kian99 in #1111
• Minor improvements to README and makefile cleanup by @kian99 in #1110
• Updated go version in go.mod by @kian99 in #1114
• Update v2 to v3 where appropriate by @kian99 in #1113
• Replace model life strings with constants by @kian99 in #1112
• Ensure all workflows use correct go version by @kian99 in #1115
• CSS-5100 Remove SQLite by @babakks in #1108
• Update channel to 3/edge by @kian99 in #1117
• Refactors dialing by @alesstimec in #1120
• fix typos and misspells by @mina1460 in #1121
• Add permissions to JWT by @alesstimec in #1119
• Changes the discharge endpoint by @alesstimec in #1118
• CSS-6081 Add-model check when creating a model by @alesstimec in #1116
• chore(add keycloak to compose): adds keycloak to the compose with a preconfigured realm and client by @ale8k in #1123
• Moving access related logic from jujuapi to jimm. by @alesstimec in #1122
• docs(keyclaok readme): add a README to describe why keycloak, and det… by @ale8k in #1124
• CSS-6700 add service account to auth model by @kian99 in #1125
• CSS-6774 rework auth model by @kian99 in #1132
• CSS-6763 Introduce addServiceAccount method by @kian99 in #1127
• CSS-6701 Rename User to Identity by @babakks in #1133
• CSS-6764 update cloud creds by @kian99 in #1134
• feat(auth service device flow): introduces an auth service capable of… by @ale8k in #1137
• CSS-6765 list svcacc cloud creds by @kian99 in #1136
• CSS-6766 implement grant access to service account by @kian99 in #1138
• Base of service account plugin by @kian99 in #1140
• CSS-6952 add service account command by @kian99 in #1141
• CSS-6954 list service account command by @kian99 in #1143
• feat(oauth2.go): introduce JWT creation and validation for CLI sessions by @ale8k in #1142
• Refactor JWKS cache by @kian99 in #1148
• CSS-6955 Add grant command to service-accounts CLI by @babakks in #1146
• CSS-6953 Add update-credentials command to service-accounts CLI by @babakks in #1145
• Plug oauth authenticator into jimm by @ale8k in #1144
• CSS-6973 Create juju jaas snap by @kian99 in #1149
• CSS-7031 Make jaas snap ci/cd by @kian99 in #1150
• CSS-7048 Create Keycloak users in tests by @babakks in #1153
• Css 6714/implement login device by @ale8k in #1151
• CSS-7094 Make commands top level by @kian99 in #1156
• Merge latest v3 changes to feature-oidc by @kian99 in #1154
• Merge feature service accounts by @kian99 in #1158
• Css 6715/implement get device session token by @ale8k in #1157
• CSS-7044 Added mock authenticator by @kian99 in #1160
• CSS-7034 add more svc acc facade tests by @kian99 in #1161
• CSS-6718 add oauth relation to k8s charm by @kian99 in #1164
• feat(oauth login browser): implements /auth/login by @ale8k in #1166
• CSS-6717 add machine charm oauth by @kian99 in #1165
• Change keycloak database backend by @kian99 in #1169
• Various device flow fixes. by @alesstimec in #1168
• Css 6646/callback endpoint by @ale8k in #1170
• Css 6646/sessions by @ale8k in #1171
• CSS-7640 Adds LoginWithClientCredentials to Admin facade version 4. by @alesstimec in #1172
• CSS-7418 rip candid by @kian99 in #1167
• RIP Candid - Follow up by @kian99 in #1174
• Update test Postgres DB name by @kian99 in #1173
• CSS-7081 Add OAuth-specific methods to secrets store by @babakks in #1175
• Model proxy admin facade methods by @alesstimec in #1177
• Browser cookie sessions by @ale8k in #1178
• CSS-7854 Model proxy login with cookie by @alesstimec in #1181
• Css 6659/implement logout endpoint by @ale8k in #1179
• Css 6648/implement whoami endpoint by @ale8k in #1180
• CSS-7780 Stores login message separately. by @alesstimec in #1182
• Plug redirect url into service.go by @ale8k in #1184
• Css 7801/document browser flow by @ale8k in #1183
• Update jimm-auth.md by @kian99 in #1186
• Update charms for browser flow by @ale8k in #1185
• Various OAuth fixes by @alesstimec in #1187
• Removed candid config from k8s charm by @kian99 in #1188
• Removed candid from machine charm by @kian99 in #1189
• Various OIDC related fixes. by @alesstimec in #1191
• Add @serviceaccount domain to service accounts by @babakks in #1190
• feat(sanitise identity ids): identity Ids cannot contain underscores,… by @ale8k in #1192
• Oauth2 test fix by @ale8k in #1193
• Call UserInfo instead of verifying ID token. by @alesstimec in #1194
• CSS-8226 Vault k8s relation by @alesstimec in #1197
• CSS-8240 New openfga relation by @kian99 in #1198
• small cosmetic changes by @ale8k in #1201
• Improve k8s charm test coverage by @kian99 in #1199
• Update Traefik cert's SAMs by @babakks in #1203
• CSS-8326 Update k8s charm readme by @kian99 in #1200
• CSS-8435 Push images to ghcr by @kian99 in #1207
• Apply proxy login fix with Terraform by @kian99 in #1204
• CSS-8325 Jimm k8s charm integration tests by @kian99 in #1205
• CSS-8386 Use oauth state by @kian99 in #1208
• Revert "Call UserInfo instead of verifying ID token." by @alesstimec in #1196
• Fix oauth browser flow - cookie cross-origin by @kian99 in #1209
• Device code for VM charm by @alesstimec in #1211
• Use Vault KV2 by @kian99 in #1214
• Adds UUID to groups by @alesstimec in #1213
• Include auth model in OCI image by @kian99 in #1212
• Upgrade to juju 3.5 by @ale8k in #1206
• Feature OIDC by @ale8k in #1195

New Contributors

• @tcuthbert made their first contribution in #910
• @huwshimi made their first contribution in #1088

Full Changelog: rev7...v3-k8s-rev29