claude code agent
21b5ec3e05
fix(automation): git-stack honesty + ECR registry refresh + interval floor ( #11 review)
...
F1: Stop routing git-backed stacks through a per-tick RedeployWhenChanged for
image-only updates. The git redeploy path short-circuits when the commit is
unchanged (so an upstream-digest update never applies) yet still git-fetches
every tick. Git stacks are now detect-only in the auto-apply path; their image
update lands on the next git change or via manual "Update now". File (non-git)
stacks still force-pull-redeploy immediately. The AutoUpdatePanel text no longer
promises daemon auto-update for git/externally-managed containers.
F2: Resolve registries for the file-stack redeploy the same way the established
userless/system path (RedeployWhenChanged) does, via the new
deployments.ResolveStackRegistries: scope to the stack author's endpoint access
and RefreshAndPersistECRTokens, instead of hand-passing Registry().ReadAll().
ECR-backed stacks now auto-update with fresh tokens.
F3: Add a 1m floor for the auto-update poll interval, enforced in the settings
Validate and mirrored in the frontend validation.
F4: Thread the application shutdownCtx into NewService and use it as the base
for the heal/update job operation contexts, so shutdown cancels in-flight work.
F5: Correct the updateEndpoint comment about monitor-only badge-cache warming
(only in-scope monitor-only containers are status-checked).
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-29 10:24:58 +03:00
Chaim Lev-Ari
fcdd6b4510
feat(stacks): use source id to create git stacks [BE-13043] ( #2870 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-15 18:49:26 +03:00
andres-portainer
1765e41fd4
feat(ssrf): implement an SSRF protection mechanism BE-13021 ( #2818 )
2026-06-09 00:41:42 -03:00
Oscar Zhou
5cdd0023d7
fix(registry): suppress ecr token pre-validation error with warning log [BE-13059] ( #2827 )
2026-06-09 10:58:50 +12:00
andres-portainer
df7a4b5d6f
feat(gitops): improve the data model BE-12919 ( #2819 )
2026-06-08 15:01:55 -03:00
andres-portainer
ab4626e7de
feat(workflows): introduce Artifacts BE-12919 ( #2740 )
2026-05-26 16:17:32 -03:00
andres-portainer
3d09c70e13
feat(sources): add sources and workflows to the backend BE-12919 ( #2666 )
2026-05-20 20:42:10 -03:00
Oscar Zhou
49ef33d9f3
fix(stack): defer git metadata write until after deployment [BE-12946] ( #2626 )
2026-05-15 10:57:13 +12:00
Devon Steenberg
3b0f1eca4b
feat(swarm): port swarm to use libstack [BE-11476] ( #2486 )
2026-05-14 10:13:19 +12:00
Oscar Zhou
a117e514e4
fix(stack): persist CreatedBy before deployment to prevent broken auto update [BE-12939] ( #2588 )
2026-05-11 12:54:04 +12:00
Oscar Zhou
c3b0b9a2e0
fix(ecr): prevent deadlock on ECR token refresh during stack deployment [BE-12842] ( #2564 )
2026-05-07 08:34:19 +12:00
Oscar Zhou
92bbfb8fa3
chore(remote): add log for resolved unpacker image [BE-12884] ( #2459 )
2026-05-01 17:03:40 +12:00
Oscar Zhou
463d539194
refactor(stack): change stack update flow to async model [BE-12741] ( #2306 )
2026-04-22 10:05:17 +12:00
Chaim Lev-Ari
744a31a354
feat(stacks): allow edit of kube git stacks [BE-12671] ( #2194 )
2026-04-21 11:05:37 +03:00
andres-portainer
8f563220df
chore(code): clean-up the code BE-12818 ( #2260 )
2026-04-08 20:04:27 -03:00
andres-portainer
1298fc629e
chore(tests): allow for the tests to run in parallel BE-12801 ( #2231 )
2026-04-07 17:38:22 -03:00
andres-portainer
30ca5e298c
chore(tests): avoid initializing the DB data when not needed BE-12801 ( #2233 )
2026-04-07 15:49:57 -03:00
andres-portainer
50056bef70
fix(context): clean up context usage BE-12766 ( #2164 )
2026-04-01 18:02:48 -03:00
Chaim Lev-Ari
a2fee4fc4c
fix(stacks): pass prune option through the deploy pipeline [BE-12738] ( #2098 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-03-22 12:37:40 +02:00
Chaim Lev-Ari
5670216d7e
feat(stacks): show planned deployment info [BE-12737] ( #2097 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-03-22 09:34:45 +02:00
Oscar Zhou
3f7a3053ff
fix(stack): avoid removing running service if stack deployment fails [BE-12542] ( #1940 )
2026-02-24 08:41:42 +13:00
andres-portainer
71c000756b
chore(linters): enforce error checking in CE BE-12527 ( #1723 )
2026-01-26 14:37:55 -03:00
andres-portainer
3e2fdb1891
fix(swarm): fix environment security checks BE-12541 ( #1666 )
2026-01-14 12:25:50 -03:00
Oscar Zhou
f0266e9316
fix(stack/remote): fail to pull image in stack with relative path enabled [BE-12237] ( #1493 )
2025-12-09 08:59:19 +13:00
Oscar Zhou
b70321a0aa
fix(edgestack): unify gitops update flow [BE-12184] ( #1110 )
2025-11-01 20:20:51 +13:00
Oscar Zhou
0ff39f9a61
refactor(stack): move stack update into transaction [BE-12244] ( #1324 )
2025-10-31 17:19:56 +13:00
andres-portainer
ec0e98a64b
chore(linters): enable testifylint BE-12183 ( #1091 )
2025-08-22 15:31:10 -03:00
andres-portainer
10b129a02e
fix(crypto): replace fips140 calls with fips calls BE-11979 ( #1033 )
2025-08-14 19:36:15 -03:00
andres-portainer
9325cb2872
fix(all): avoid using pointers to zero sized structs BE-12129 ( #986 )
2025-08-07 09:47:42 -03:00
Devon Steenberg
84b4b30f21
fix(rand): Use crypto/rand instead of math/rand in FIPS mode [BE-12071] ( #961 )
...
Co-authored-by: codecov-ai[bot] <156709835+codecov-ai[bot]@users.noreply.github.com>
2025-08-06 10:19:15 +12:00
andres-portainer
d00d71ecbf
fix(linter): add linter rules to reduce the chance for invalid FIPS settings BE-11979 ( #975 )
2025-08-05 09:23:07 -03:00
andres-portainer
163aa57e5c
fix(tls): centralize the TLS configuration to ensure FIPS compliance BE-11979 ( #960 )
2025-08-01 22:23:59 -03:00
andres-portainer
d295968948
feat(libstack): update Compose to v2.31.0 BE-11416 ( #223 )
2024-12-09 16:36:57 -03:00
andres-portainer
c59872553a
fix(stacks): pass the registry credentials to Compose stacks BE-11388 ( #147 )
...
Co-authored-by: andres-portainer <andres-portainer@users.noreply.github.com >
2024-11-18 08:39:13 +13:00
andres-portainer
a7127bc74f
feat(libstack): remove the docker-compose binary BE-10801 ( #111 )
...
Co-authored-by: andres-portainer <andres-portainer@users.noreply.github.com >
Co-authored-by: oscarzhou <oscar.zhou@portainer.io >
2024-11-11 19:05:56 -03:00
andres-portainer
8aae557266
fix(stacks): run webhooks in background to avoid GitHub timeouts BE-11260
2024-10-09 17:28:19 -03:00
Ali
32e94d4e4e
feat(podman): support add podman envs in the wizard [r8s-20] ( #12056 )
2024-09-25 11:55:07 +12:00
Chaim Lev-Ari
6f84317e7a
feat(system): upgrade on swarm [EE-5848] ( #11728 )
...
Co-authored-by: Chaim Lev-Ari <chaim.levi-ari@portainer.io >
Co-authored-by: LP B <xAt0mZ@users.noreply.github.com >
2024-09-20 18:00:38 +02:00
Oscar Zhou
cc7f14951c
fix(stack/remote): pass forceRecreate setting [EE-7374] ( #12051 )
2024-08-06 09:02:21 +12:00
andres-portainer
31bdb948a8
chore(code): use int ranges in loops BE-10990 ( #12028 )
2024-07-10 19:22:47 -03:00
andres-portainer
6e7a42727a
chore(kompose): remove the code EE-4917 ( #12003 )
2024-07-08 17:19:07 -03:00
andres-portainer
90a19cec5c
chore(code): remove unnecessary type conversions EE-7191 ( #11908 )
2024-06-10 09:32:52 -03:00
Matt Hook
cf1fd17626
chore(api): bump docker and protobuf pkgs [EE-6941] ( #11566 )
2024-04-15 10:53:15 +12:00
Prabhat Khera
80cc9f18b5
chore(unpacker): use APIVersion as unpacker image tag [EE-6974] ( #11506 )
2024-04-15 10:29:24 +12:00
andres-portainer
bd3440bf3c
fix(tests): fix data races EE-6867 ( #11387 )
2024-03-18 10:56:22 -03:00
andres-portainer
85ae705833
fix(gitops): add singleflight behavior to RedeployWhenChanged calls EE-6377 ( #10734 )
2024-01-22 19:41:48 -03:00
Matt Hook
5f1f797281
remove deprecated random seed and other minor staticcheck errors ( #10851 )
2023-12-18 11:48:41 +13:00
andres-portainer
a4b17d2548
fix(gitops): change the condition that checks if the environment is online EE-6321 ( #10665 )
2023-11-23 11:54:50 -03:00
andres-portainer
0b5b8971b1
fix(gitops): handle the local environment in isEnvironmentOnline() EE-6321 ( #10631 )
2023-11-16 09:40:42 -03:00
andres-portainer
ae1726cece
feat(performance): performance optimizations EE-6042 ( #10520 )
2023-10-24 13:55:11 -03:00