Skip to content

v1.0.2

Choose a tag to compare

@github-actions github-actions released this 24 Apr 14:12
· 557 commits to main since this release

Container Images

Component Image
Runner us-docker.pkg.dev/gitpod-next-production/gitpod-next/gitpod-gcp-runner:20260424.828
Proxy us-docker.pkg.dev/gitpod-next-production/gitpod-next/gitpod-proxy:20260424.828
Prometheus us-docker.pkg.dev/gitpod-next-production/gitpod-next/prometheus:v3.11.1
Node Exporter us-docker.pkg.dev/gitpod-next-production/gitpod-next/node-exporter:v1.11.1

Assets

Asset URL
CLI Binary https://storage.googleapis.com/gitpod-runner-releases/gcp/releases/20260424.828/gitpod-linux-amd64
Supervisor Binary https://storage.googleapis.com/gitpod-runner-releases/gcp/releases/20260424.828/supervisor-amd64.xz
VM Image projects/gitpod-next-production/global/images/ona-environment-20260422-1858

⚠️ IAM/Permission Changes

This release includes changes to IAM roles or permissions. Review the following commits and update your IAM configuration if needed:

  • docs(iam): trim explanatory comments about removed permissions (11259f6)
  • feat(iam)!: scope runner actAs per-SA, drop unused getAccessToken (6d56c4e)
  • iam: remove unused build_cache, secret_manager, and pubsub_processor service accounts (7a49dc5)

See docs/iam.md and docs/terraform_service_account_permissions.md for the updated permission requirements.

Changelog

  • Merge pull request #17 from gitpod-io/nv/scope-runner-iam (de4772a)
  • docs(iam): trim explanatory comments about removed permissions (11259f6)
  • Revert "fix(proxy-vm): tighten OAuth scope to cloud-platform.read-only" (a68c83b)
  • fix(proxy-vm): tighten OAuth scope to cloud-platform.read-only (fed9a4b)
  • feat(iam)!: scope runner actAs per-SA, drop unused getAccessToken (6d56c4e)
  • Merge pull request #16 from gitpod-io/NaN/restrict-env-udp-egress (afff2fe)
  • firewall: restrict environment UDP egress to DNS/NTP/QUIC (918bc6e)
  • Merge pull request #14 from gitpod-io/NaN/remove-unused-service-accounts (a96cefb)
  • iam: remove unused build_cache, secret_manager, and pubsub_processor service accounts (7a49dc5)
  • Merge pull request #15 from gitpod-io/gpl/port-auth-enabled (8514be6)
  • Enable port auth on GCP runner (b9ed854)
  • Merge pull request #13 from gitpod-io/add-port-auth-mode (1ad4952)
  • Forward remaining internal module variables to example wrapper (fe501e8)
  • Add port 7070 to firewall rules and iptables (6a626c1)
  • Merge pull request #12 from gitpod-io/n/release-notif-docs (5c50c3f)
  • docs: move release notifications to Ona docs, remove local copy (e23fab6)
  • Merge pull request #11 from gitpod-io/NaN/clean-up-contributing (9b240ae)
  • docs: mention Ona and VS Code as dev environment options (e344d37)
  • docs: add back Build with Ona badge (9e40e2c)
  • docs: rewrite CONTRIBUTING.md to follow Terraform module conventions (9f604e7)
  • Merge pull request #10 from gitpod-io/NaN/remove-proxy-docs (c116fff)
  • docs: remove CHANGELOG.md (2a08db5)
  • docs: remove proxy.md (7cbaa67)
  • Merge pull request #9 from gitpod-io/NaN/remove-e2e-tests (898e697)
  • e2e: remove end-to-end tests (3cd88ab)
  • Merge pull request #8 from gitpod-io/NaN/clean-up-readme (1f4755c)
  • docs: reword enterprise callout in README (3a765b4)
  • docs: add spacing to README (f8df362)
  • docs: simplify README to link to Ona docs (388b543)
  • Merge pull request #7 from gitpod-io/n/local-rw-target (487b2ea)
  • fix: escape shell ${} for Terraform templatefile and fix runner_id indentation (4cf2fcb)
  • feat: add runner_id, stack label, and write_relabel_configs for managed metrics (4b43f9b)
  • feat: add local remote_write target for managed metrics pipeline (35a09e0)