Concourse v6.6.0 Release Notes
Release Date: 2020-10-02 // over 3 years ago-
๐ฑ ๐จ Breaking
๐ The
concourse worker
process now depends, viagdn
v1.19.16, on runc v1.0.0-rc91. There is a known issue with using BPM to manage newer versions of runc, which has been resolved in bpm-release v1.1.9. So if your concourse is deployed using BOSH, you will also need to use at least BPM 1.1.9. After upgrading, if you start to see build steps erroring with a message like:runc run: exit status 1: container_linux.go:349: starting container process caused "process_linux.go:439: container init caused \"process_linux.go:405: setting cgroup config for procHooks process caused \\"failed to write \\\\"c 5:1 rwm\\\\" to \\\\"/sys/fs/cgroup/devices/system.slice/concourse.service/garden/a206550f-f6dd-4609-4f13-0a11afd3fd93/devices.allow\\\\": write /sys/fs/cgroup/devices/system.slice/concourse.service/garden/a206550f-f6dd-4609-4f13-0a11afd3fd93/devices.allow: operation not permitted\\"\""
โฌ๏ธ then you probably need to upgrade BPM. Thanks @tlwr for investigating this!
๐ฑ โ๏ธ Features
๐ Allow rotating the encryption key via
concourse migrate
(#5980) @aoldershaw ๐concourse migrate
can be called with--old-encryption-key
to rotate the database encryption key as a one-time operationconcourse web
still accepts--old-encryption-key
- You should stop any ATCs prior to running this command
๐ Support SAML 2.0 as an auth backend (#5998) @adnankobir ๐
๐ง Use the configured resolv.conf for containerd (#6001) @YoussB ๐
๐ฑ
set_pipeline
step header indicates whether changes were applied (#6011) @andy-paine ๐- If a
set_pipeline
step made any changes, it will indicate by highlighting in yellow and displayingpipeline config changed
message when hovered over the step.๐ Allow the fly http transport to use client certificates (#6017) @avanier ๐
- Adds new
--client-cert
and--client-key
flags to thefly login
command. The provided client certificates will then be used by fly's http transport.โ Add new default values to the Guardian flags
network-pool
andmax-containers
(#6031) @muntac ๐๐ Allow statx in containerd (#6045) @muntac ๐
- Update containerd's seccomp profile to allow the
statx
system call. This lets basic commands likels -l
to be executed.๐ฑ Enable secret caching for
var_sources
. (#6046) @evanchaoli ๐๐ฑ Custom background image (#6053) @andy-paine ๐
Pipeline authors can now include a custom
background_image
under thedisplay
key in pipeline config e.g:display: background_image: https://avatars1.githubusercontent.com/u/7809479?s=400&v=4
๐ฑ ๐ Bug Fixes
๐ฑ Return real JSON from
fly get-team --json
(#5996) @agurney ๐- The
--json
flag onfly get-team
is meant to yield a structured JSON representation of the team data, including auth details, but instead just gave{}
. Now it works as intended.๐ฑ Admins can only login to teams that exist (#6021) @izabelacg ๐
- Previously admins could log into any team, even if the team did not exist. Admins can still log into any team but now fly verifies that the team exists before saving the target to
.flyrc
.โฑ Request schedule when cancelling a pending build (#6023) @xtremerui ๐
- Fix a bug that a build can't be cancelled if it is in pending state because of unsatisfiable inputs
๐ฑ Enable
fly validate-pipeline
to accept--enable-across-step
(#6027) @flavorjones ๐- Enable
fly validate-pipeline
to accept--enable-across-step
and recognizeacross
as a valid step.๐ Fix build reaper missing builds due to pagination (#6051) @chenbh ๐
- Fixed the build reaper missing builds
- Fixed pagination bugs on the resource version and job builds pages
๐ Fix a bug where running
fly execute
fails in an environment when all workers are tagged. (#6059) @aledeganopix4d ๐๐ Fix horizontal scrolling on build page (#6083) @zoetian ๐
๐ฑ Only set Guardian flag default when flag not provided by user (#6087) @muntac ๐
- Only pass garden the configured defaults within Concourse for the guardian flags
max-containers
andnetwork-pool
if it is not set through the garden config file, environment variables or flags.
๐ฑ ๐คท No Impact
๐ฑ Deflake k8s topgun (#6030) @jamieklassen ๐
๐ build(deps): bump yargs-parser from 13.1.1 to 13.1.2 (#6047) @dependabot ๐
๐ฑ Remind people they need JS to run the browser app (#6065) @steadysupply ๐
๐ฑ Use atc.TaskEnv type in task step (#6066) @vito ๐
๐ Make
--client-cert
flag name consistent betweenfly login
andfly sync
(#6068) @aoldershaw ๐๐ฑ Skip yarn benchmark until dependency is fixed (#6078) @clarafu ๐