v1.0.2
Container Images
| Component | Image |
|---|---|
| Runner | us-docker.pkg.dev/gitpod-next-production/gitpod-next/gitpod-gcp-runner:20260424.828 |
| Proxy | us-docker.pkg.dev/gitpod-next-production/gitpod-next/gitpod-proxy:20260424.828 |
| Prometheus | us-docker.pkg.dev/gitpod-next-production/gitpod-next/prometheus:v3.11.1 |
| Node Exporter | us-docker.pkg.dev/gitpod-next-production/gitpod-next/node-exporter:v1.11.1 |
Assets
| Asset | URL |
|---|---|
| CLI Binary | https://storage.googleapis.com/gitpod-runner-releases/gcp/releases/20260424.828/gitpod-linux-amd64 |
| Supervisor Binary | https://storage.googleapis.com/gitpod-runner-releases/gcp/releases/20260424.828/supervisor-amd64.xz |
| VM Image | projects/gitpod-next-production/global/images/ona-environment-20260422-1858 |
⚠️ IAM/Permission Changes
This release includes changes to IAM roles or permissions. Review the following commits and update your IAM configuration if needed:
- docs(iam): trim explanatory comments about removed permissions (11259f6)
- feat(iam)!: scope runner actAs per-SA, drop unused getAccessToken (6d56c4e)
- iam: remove unused build_cache, secret_manager, and pubsub_processor service accounts (7a49dc5)
See docs/iam.md and docs/terraform_service_account_permissions.md for the updated permission requirements.
Changelog
- Merge pull request #17 from gitpod-io/nv/scope-runner-iam (de4772a)
- docs(iam): trim explanatory comments about removed permissions (11259f6)
- Revert "fix(proxy-vm): tighten OAuth scope to cloud-platform.read-only" (a68c83b)
- fix(proxy-vm): tighten OAuth scope to cloud-platform.read-only (fed9a4b)
- feat(iam)!: scope runner actAs per-SA, drop unused getAccessToken (6d56c4e)
- Merge pull request #16 from gitpod-io/NaN/restrict-env-udp-egress (afff2fe)
- firewall: restrict environment UDP egress to DNS/NTP/QUIC (918bc6e)
- Merge pull request #14 from gitpod-io/NaN/remove-unused-service-accounts (a96cefb)
- iam: remove unused build_cache, secret_manager, and pubsub_processor service accounts (7a49dc5)
- Merge pull request #15 from gitpod-io/gpl/port-auth-enabled (8514be6)
- Enable port auth on GCP runner (b9ed854)
- Merge pull request #13 from gitpod-io/add-port-auth-mode (1ad4952)
- Forward remaining internal module variables to example wrapper (fe501e8)
- Add port 7070 to firewall rules and iptables (6a626c1)
- Merge pull request #12 from gitpod-io/n/release-notif-docs (5c50c3f)
- docs: move release notifications to Ona docs, remove local copy (e23fab6)
- Merge pull request #11 from gitpod-io/NaN/clean-up-contributing (9b240ae)
- docs: mention Ona and VS Code as dev environment options (e344d37)
- docs: add back Build with Ona badge (9e40e2c)
- docs: rewrite CONTRIBUTING.md to follow Terraform module conventions (9f604e7)
- Merge pull request #10 from gitpod-io/NaN/remove-proxy-docs (c116fff)
- docs: remove CHANGELOG.md (2a08db5)
- docs: remove proxy.md (7cbaa67)
- Merge pull request #9 from gitpod-io/NaN/remove-e2e-tests (898e697)
- e2e: remove end-to-end tests (3cd88ab)
- Merge pull request #8 from gitpod-io/NaN/clean-up-readme (1f4755c)
- docs: reword enterprise callout in README (3a765b4)
- docs: add spacing to README (f8df362)
- docs: simplify README to link to Ona docs (388b543)
- Merge pull request #7 from gitpod-io/n/local-rw-target (487b2ea)
- fix: escape shell ${} for Terraform templatefile and fix runner_id indentation (4cf2fcb)
- feat: add runner_id, stack label, and write_relabel_configs for managed metrics (4b43f9b)
- feat: add local remote_write target for managed metrics pipeline (35a09e0)