pluralsh / plural Goto Github PK

Deploy open source software on Kubernetes in record time. 🚀

License: Other

Elixir 44.45% Dockerfile 0.13% Makefile 0.12% Shell 0.02% HTML 1.73% JavaScript 0.05% CSS 1.09% Mustache 0.07% Smarty 0.08% HCL 0.31% Python 0.53% TypeScript 51.41%

kubernetes k8s multicloud cloud deployment-automation devops helm gitops graphql elixir-lang

plural's Introduction

The fastest way to build great infrastructure and deploy your software

Plural empowers you to build and maintain cloud-native and production-ready infrastructure on Kubernetes.

🚀🔨☁️

✨ Features

Plural will deploy open-source applications and proprietary services on Kubernetes in your cloud using common standards like Helm and Terraform.

The Plural platform provides the following:

Cluster API Providers to create and manage clusters at scale.
Full visibility of your fleet and all deployed services via our secure Auth Proxy.
Configuration management for deployments, allowing you to parameterize services for each deployment.
Horizontal scaling to ingest and auto-shard as many repos as necessary.
Dependency management between Terraform/Helm modules for open-source applications, with dependency-aware deployment and upgrades.
Authenticated docker registry and chartmuseum proxy per repository.

In addition, Plural also handles:

Issuing the certificates.
Configuring a DNS service to register fully-qualified domains under onplural.sh to eliminate the hassle of DNS registration for users.
Being an OIDC provider to enable zero touch login security for all Plural applications.

We think it's pretty cool! 😎 Some other nice things:

☁️ Build and manage open cloud-native architectures

The Plural platform also ingests all deployment artifacts needed to deploy open-source cloud-native applications, allowing for easy installs and no-touch upgrades post-install.

🤖 Day-2 Operational Toolkit

Monitor all your installations from one central control plane. Our Auth Proxy makes it easy to make secure Kubernetes API calls to give you full dashboarding capabilities for all your clusters, regardless of where they live without direct network access.

Spin up ephemeral environments to test out new configurations in seconds; our CAPI providers make it easy to modify your architecture as you need it.

Manage Kubernetes upgrades easily with our built-in Kubernetes API deprecation management - we surface all endpoints on all clusters that need to be addressed.

🔓 Secure by default

Plural is fully self-hosted within your own environment, meaning we don't touch your credentials or sensitive information.

Cluster setup includes deploying our Plural deployment operator, which efficiently polls the control plane for any changes that need to be applied. This ensures that our control plane doesn’t reach into these workload clusters, providing a more secure setup than push-based models.

🥳 Flexible configuration

All Plural deployments are fully customizable with our centralized secrets management. Additionally, we natively support deploying to brand new clusters or adopting existing K8s clusters.

📽 Check out a video Demo

PL.-.Announcing.Plural.CD.Subtitles.mp4

🏁 Getting Started

Go to https://app.plural.sh to create an account.
Note: This is simply to track your open-source installations and deploy your Console; if you use our CLI you will not be asked to provide any infrastructure credentials or sensitive information.
Install the Plural CLI
Create and initialize a new git repo to store your Plural installation.
Install, build and deploy Plural Console and any other applications from the Plural marketplace.

You should now have a fully functioning Plural environment with any open-source apps and the management console running. From here, you can spin up additional clusters, deploy your services, track upgrades, and more. For more details or further information check out the rest of the docs below.

📚 Documentation

The full documentation is available on our Documentation site.

💬 Community

For general help, please refer to the Plural documentation. For additional help you can use the following channels:

Discord (For live discussions with the Plural team).
GitHub (Bug reports, feature requests, contributions).
Twitter (For our latest news).

Plural is dedicated to providing a welcoming, diverse, and harassment-free experience for everyone. We expect everyone in the community to abide by our Code of Conduct. Please read it.

🚗 Roadmap

See what we're working on in these GitHub projects. Help us prioritize issues by reacting with an emoji on the issue!

Application Onboarding Roadmap: https://github.com/orgs/pluralsh/projects/2/views/2
Plural Core Issues: https://github.com/pluralsh/plural/issues
Plural CLI Issues: https://github.com/pluralsh/plural-cli/issues

🙌 Contributing to Plural

We love contributions to Plural, big or small! To learn more about the repo and the architecture, see our Contribution Guide.

If you're not sure where to start, or if you have any questions, please open a draft PR or visit our Discord server where the core team can help answer your questions.

📝 License

See LICENSE for licensing information. If there are any questions on the license please visit our Discord.

Thanks to all the contributors ❤

plural's People

Contributors

Stargazers

Watchers

Forkers

svilenkov asamoal type-checker devopstoday11 vvgk9 alt-shivam abhishek-mallick nunofilipesantos wooodhead davgit horlawhumy-dev purplesquirrelmedia colory franklinharry git-toni cris-dobbins app-creative saptarshisarkar12 linuxem cmslabs dvelopers0509 saha-7 pratik-mogal anuj-kumar-aj sinfulbaby sachinparihar maveraw layeddie ratuladhikary21 manishitmani ajs23 lingeshwaran05 kianmeng shinroo kubecrafter socialsky-io appdirectory sredevopsorg chaulaode1257 makwana-ashish smyja jhoneme terrycorley ervecpesbo specamcoifu brunoscaglione ubi-mirrors yordis mohinsandhi vikram8130 sabyh11 daotl mz0in davidpuziol keisyd wildcard loopscript snikch beeehappyandfree sorokinvld bilal-159 8charcoscontwa

plural's Issues

Stackgres PostgreSQL Operator

Use Case

Stackgres is awesome

https://stackgres.io/

Message from the maintainers:

Excited about this feature? Give it a 👍. We factor engagement into prioritization.

Bind installations to clusters instead of users

Use Case

It would be great if installations could be bound to a cluster. We have many different cluster set up. we observe that switching between service accounts and managing user to service account mappings is becoming error prone and difficult to maintain.

If installations were bound to clusters, the service accounts would be a lot easier to maintain. As this way, service accounts can have multiple clusters in multiple cloud platforms.

Ideas of Implementation

Additional Info

Message from the maintainers:

Excited about this feature? Give it a 👍. We factor engagement into prioritization.

Dependency Dashboard

This issue provides visibility into Renovate updates and their statuses. Learn more

Rate Limited

These updates are currently rate limited. Click on a checkbox below to force their creation now.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

Check this box to trigger a request for Renovate to run again on this repository

Minor string bug on the confirm email toast

Capture Job Role on Signup

Use Case

We'd like to get some visibility into the roles of people signing up for plural, so just add a field on the user and go from there.

Ideas of Implementation

migration to add role column (should be free-form text)
add input on signup form
ensure airbyte is syncing column

Message from the maintainers:

Excited about this feature? Give it a 👍. We factor engagement into prioritization.

[Issue] Unauthorized in OpenID Connect when trying to update settings

Summary

When accessing OpenID Connect / Configure OIDC Provider, whilst impersonating the correct service account, if I make updates to the settings and update them, I always get a non-authorized.

Once I refresh the site and update it, it works correctly.

Observed this behavior now multiple times.

Reproduction

See above

Additional Info about Your Environment

Chrome / MacOS

Message from the maintainers:

Impacted by this bug? Give it a 👍. We factor engagement into prioritization.

Slack For Incident Notifications

Use Case

We currently have a generic webhook systems incidents send to, which can be picked up by n8n or zapier for further integrations, but we should add first-order support for slack (and perhaps mattermost/teams?) since it'll be so useful

Ideas of Implementation

create public slack app
add an oauth registration system to account page
add some way to register a webhook as a slack webhook
build slack formatters for most eligible events

Message from the maintainers:

Excited about this feature? Give it a 👍. We factor engagement into prioritization.

Add Rudderstack

Are you considering adding Rudderstack to the list of data applications? This application serves as an excellent Segment alternative, much like Jitsu but currently with a greater number of integrations. The architectures between the two are very similar.

Implement SSO Login on plural

Use Case

Many enterprise users will want some degree of SSO support, which will include login + directory sync. We'll defer directory sync for later and just handle login here.

Ideas of Implementation

Integrate with WorkOS to do this.

Message from the maintainers:

Excited about this feature? Give it a 👍. We factor engagement into prioritization.

Implement Better Email templates

Use Case

Our emails are currently purely text-based. We should implement branded emails

Ideas of Implementation

We already use bamboo for email templating, just need to ensure local dev is possible, and knock them out.

Message from the maintainers:

Excited about this feature? Give it a 👍. We factor engagement into prioritization.

Plural Provider Template APIs

Use Case

We should create APIs to issue provider templates to the plural cli, enabling us to update terraform providers without requiring cli updates be delivered.

Ideas of Implementation

Implement an api comparable to the scaffold apis already done, templates can live internally in core/priv

Message from the maintainers:

Excited about this feature? Give it a 👍. We factor engagement into prioritization.

Console fails to start in GCP k8s

Summary

I initialize, build, and deploy plural to GCP "successfully", but the console fails to start up as seen in GCP -> Kubernetes ->> Workloads. Visiting its url shows a standard nginx 503 error. I've wiped my local context.yaml and started the plural setup process from scratch from plural init, but I still get the same result.

Here are the errors in GCP, which mean nothing to me:

My other bundle, Jitsu, seemed to be working initially when accessing its dedicated url, but now it shows:

Reproduction

Set up gcloud cli using my personal account as application-default login

Set up GCP project

Create new project
Enable the Kubernetes Engine API
Enable the Google DNS API
Also enable a few other APIs that are not documented but that the plural cli notifies us we need to enable when deploying for the first time

Set up Plural

plural init (using the google provider)
plural bundle install console console-gcp
plural bundle install jitsu jitsu-gcp
plural build
plural deploy --commit "something"
Check GCP K8s Workloads to see what's up-and-running.

Expected: all workloads to be green
Received: the console workload is red

Plural UI/UX Issue Screenshots

N/A

Additional Info about Your Environment

context.yaml

apiVersion: plural.sh/v1alpha1
kind: Context
spec:
  bundles:
  - repository: console
    name: console-gcp
  - repository: jitsu
    name: jitsu-gcp
  buckets:
  - h3x-plural-postgres-wal
  domains:
  - console.h3x.onplural.sh
  - redis.h3x.onplural.sh
  - redis2.h3x.onplural.sh
  - jitsu.h3x.onplural.sh
  - api.jitsu.h3x.onplural.sh
  configuration:
    bootstrap:
      vpc_name: plural
    console:
      admin_name: Admin
      console_dns: console.h3x.onplural.sh
      git_email: [email protected]
      git_user: walkingbrad
      passphrase: ""
      private_key: REDACTED
      public_key: REDACTED
      repo_url: [email protected]:h3x-app/plural.git
    ingress-nginx: {}
    jitsu:
      apiHostname: api.jitsu.h3x.onplural.sh
      hostname: jitsu.h3x.onplural.sh
    monitoring: {}
    postgres:
      wal_bucket: h3x-plural-postgres-wal
    redis:
      masterHostname: redis.h3x.onplural.sh
      replicaHostname: redis2.h3x.onplural.sh

APIs on the GCP project (note that Compute Engine has 5 errors)

Compute engine errors:

Message from the maintainers:

Impacted by this bug? Give it a 👍. We factor engagement into prioritization.

Provider Scaffolds api should support versioning

Use Case

It's too difficult to develop new versions of providers using the current set up, with a versioned approach we can roll things out more iteratively for specific packages

Ideas of Implementation

store each version in a directory in priv
add arg in graphql

Message from the maintainers:

Excited about this feature? Give it a 👍. We factor engagement into prioritization.

App at app.plural.sh is not performant enough

Summary

Here are lighthouse reports for localhost (they are worst than the production app's):

Login

Marketplace

I'll take a shot at https://partytown.builder.io to improve some of this.

Allow plural artifact registration from non-plural git repositories

Use Case

It would be useful, to be able to publish plural artifacts to the catalogue from random git repositories instead of just plural repos. In that case, owners of an application could natively extend their repos to include the deployment instructions wrapped into a CICD pipeline.

Ideas of Implementation

Set up a template including Readme that lays out the process how to publish a artifact
Init new git repo and wrap code + add publishing instructions
Trigger deployment to plural via github actions e.g. - make sure that artifact is valid by running a set of validations against it (or maybe even provide a sandbox environment against which new artifacts can be validated against)

There should be a flag that can be set to publish it to the public / private catalogue

Additional Info

Message from the maintainers:

Excited about this feature? Give it a 👍. We factor engagement into prioritization.

License generation/management

[BUG]Contributer's programme banner missing hyperlink

Summary

Whenever the contributer's programme banner appears , the link leads to the blog of cluster management

Reproduction

Visit on this page
Click on the contributor's programme page

Plural UI/UX Issue Screenshots

Additional Info about Your Environment

Message from the maintainers:

Impacted by this bug? Give it a 👍. We factor engagement into prioritization.

Proper merging of helm/tf context when rebuilding workspaces

Integrate Pagerduty into support experience

Device Logins During Signup Hangs

Summary

We currently don't have support for device logins in the signup flow. This means if a user tries to plural init before signing up to plural they get a very clunky experience. We should support this properly.

Reproduction

Download plural, run plural init, use a nonexistent email, observe plural cli hangs.

Message from the maintainers:

Impacted by this bug? Give it a 👍. We factor engagement into prioritization.

Self host on chartmart toolchain

Collaborator role with minimum account access but bindable to OIDC providers

Use Case

i would like to use Plural OIDC and add users who should have access only to specific applications installed in my cluster. Their access should be limited to using these applications. They should not be able to see any other account information (other users/groups and their projects/rights or any installation details)

Ideas of Implementation

creating some sort of collaborator role that'd get absolute minimum account access, but can still be bound to OIDC providers and such.

Additional Info

Message from the maintainers:

Excited about this feature? Give it a 👍. We factor engagement into prioritization.

AWS: Autoscaler provisions Spot instances even though pending pods have no toleration

Summary

When a pending pod cannot be scheduled on existing nodes, the autoscaler always provisions a new spot instance. Even if the pending pod has no toleration for spot instances. This results in the pod remaining in state pending.

I expect the autoscaler to know it should not provision a spot instance if the pod does not have the respective toleration.

Reproduction

Via the Kubeflow Dashboard, I created 4-6 Jupyter Notebooks with high resource requests (2CPUs, 12GB RAM, no GPU). The autoscaler provisioned multiple GPU spot instances.

Here is a documentation of what I observed:

2022-02-09 10:20 start
2022-02-09 10:20 starting cpu notebooks with high resource requests (4 new notebooks. each 2 cpus and 12 gb of memory)

Logs from the bootstrap application in the plural console

2022-02-09T10:27:20+01:00
I0209 09:27:20.609195       1 filter_out_schedulable.go:170] 0 pods were kept as unschedulable based on caching
2022-02-09T10:27:20+01:00
I0209 09:27:20.609185       1 filter_out_schedulable.go:157] Pod nico-becker.cpu-2-mem-12-04-0 marked as unschedulable can be scheduled on node template-node-for-eks-at-onplural-sh-gpu-medium-spot-c4bf3c1b-8046-7c75-639d-f6d403ffb159-4971494515820000129-0. Ignoring in scale up.
2022-02-09T10:27:20+01:00
I0209 09:27:20.609175       1 scheduler_binder.go:892] Provisioning for 1 claims of pod "nico-becker/cpu-2-mem-12-04-0" that has no matching volumes on node "template-node-for-eks-at-onplural-sh-gpu-medium-spot-c4bf3c1b-8046-7c75-639d-f6d403ffb159-4971494515820000129-0" ...
2022-02-09T10:27:20+01:00
I0209 09:27:20.609160       1 scheduler_binder.go:828] No matching volumes for Pod "nico-becker/cpu-2-mem-12-04-0", PVC "nico-becker/workspace-cpu-2-mem-12-04" on node "template-node-for-eks-at-onplural-sh-gpu-medium-spot-c4bf3c1b-8046-7c75-639d-f6d403ffb159-4971494515820000129-0"
2022-02-09T10:27:20+01:00
I0209 09:27:20.609058       1 filter_out_schedulable.go:157] Pod nico-becker.cpu-2-mem-12-03-0 marked as unschedulable can be scheduled on node template-node-for-eks-at-onplural-sh-gpu-medium-spot-c4bf3c1b-8046-7c75-639d-f6d403ffb159-4971494515820000129-0. Ignoring in scale up.
2022-02-09T10:27:20+01:00
I0209 09:27:20.608984       1 scheduler_binder.go:892] Provisioning for 1 claims of pod "nico-becker/cpu-2-mem-12-03-0" that has no matching volumes on node "template-node-for-eks-at-onplural-sh-gpu-medium-spot-c4bf3c1b-8046-7c75-639d-f6d403ffb159-4971494515820000129-0" ...
2022-02-09T10:27:20+01:00
I0209 09:27:20.608938       1 scheduler_binder.go:828] No matching volumes for Pod "nico-becker/cpu-2-mem-12-03-0", PVC "nico-becker/workspace-cpu-2-mem-12-03" on node "template-node-for-eks-at-onplural-sh-gpu-medium-spot-c4bf3c1b-8046-7c75-639d-f6d403ffb159-4971494515820000129-0"
2022-02-09T10:27:20+01:00
I0209 09:27:20.608764       1 filter_out_schedulable.go:157] Pod nico-becker.cpu-2-mem-12-02-0 marked as unschedulable can be scheduled on node template-node-for-eks-at-onplural-sh-gpu-medium-spot-c4bf3c1b-8046-7c75-639d-f6d403ffb159-4971494515820000129-0. Ignoring in scale up.
2022-02-09T10:27:20+01:00
I0209 09:27:20.608709       1 scheduler_binder.go:892] Provisioning for 1 claims of pod "nico-becker/cpu-2-mem-12-02-0" that has no matching volumes on node "template-node-for-eks-at-onplural-sh-gpu-medium-spot-c4bf3c1b-8046-7c75-639d-f6d403ffb159-

2022-02-09 10:44 new nodes present
2022-02-09 12:10 5 spot instance, but pods can't be scheduled
2022-02-09 12:10 start deletion of pending notebooks
2022-02-09 12:30 nodes scaled down again

For a later attempt, I also extracted the scheduler logs from the control plane:

Additional Info about Your Environment

Plural managed EKS clusert with Kubeflow installed.

Message from the maintainers:

Impacted by this bug? Give it a 👍. We factor engagement into prioritization.

Fully Deprecate internal chartmuseum deployment

Use Case

The plural api currently proxies and partially implements the chartmuseum protocol to handle chart storage, with some operations like storage and retrieval done with an internal instance of chartmuseum. It's not clear this is even necessary and we could simplify+save a bit of space by eliminating this chartmuseum layer and just uploading/retrieving from s3 directly.

Ideas of Implementation

Use ExAws' s3 uploader in the upload chart endpoint (instead of proxying to chartmuseum get) and proxy against a signed url for the chart GET endpoint

Additional Info

We should probably test this during a weekend and be prepared to rollback (version the server appropriately when deploying)

Message from the maintainers:

Excited about this feature? Give it a 👍. We factor engagement into prioritization.

Repo linked and authenticated docker registry

Need to implement docker's jwt specification
Need to add a registry deployment to bootstrap helm chart
Add existing images to the registry

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

Detected dependencies

asdf

.tool-versions

docker-compose

docker-compose.yml

rabbitmq 3-management

influxdb 1.8

dockerfile

Dockerfile

bitwalker/alpine-elixir 1.11.4

alpine 3.16.2

erlang 23.3.4.16-alpine

dockerfiles/Dockerfile.dump

www/Dockerfile

node 16.15-slim

gcr.io/pluralsh/nginx 1.19.8-alpine

www/e2e/cypress.Dockerfile

cypress/included 10.4.0

github-actions

.github/workflows/daily.yml

actions/checkout v3

actions/setup-node v3

EndBug/add-and-commit v9

.github/workflows/firebase-hosting-pull-request.yml

actions/checkout v2

FirebaseExtended/action-hosting-deploy v0

.github/workflows/pr-labels.yaml

mheap/github-action-required-labels v2

.github/workflows/publish.yaml

actions/checkout v2

erlef/setup-beam v1

azure/setup-helm v3

actions/cache v2

actions/cache v2

8398a7/action-slack v3

actions/checkout v3

docker/metadata-action v4

docker/setup-qemu-action v2

docker/setup-buildx-action v2

google-github-actions/auth v0

google-github-actions/setup-gcloud v0.6.2

docker/login-action v2

docker/login-action v2

docker/build-push-action v3

8398a7/action-slack v3

actions/checkout v3

docker/metadata-action v4

docker/setup-qemu-action v2

docker/setup-buildx-action v2

google-github-actions/auth v0

google-github-actions/setup-gcloud v0.6.2

docker/login-action v2

docker/login-action v2

docker/build-push-action v3

8398a7/action-slack v3

actions/checkout v3

softprops/action-gh-release v1

.github/workflows/push-to-plural.yaml

actions/checkout v3

hashicorp/setup-terraform v2

azure/setup-helm v3

pluralsh/setup-plural v0.1.5

8398a7/action-slack v3

.github/workflows/test.yaml

actions/checkout v3

docker/metadata-action v4

docker/setup-qemu-action v2

docker/setup-buildx-action v2

docker/build-push-action v3

actions/checkout v2

erlef/setup-beam v1

azure/setup-helm v3

actions/cache v2

actions/cache v2

8398a7/action-slack v3

.github/workflows/www.yaml

actions/checkout v3

docker/setup-qemu-action v2

docker/setup-buildx-action v2

docker/build-push-action v3

actions/checkout v3

actions/setup-node v3

actions/checkout v3

actions/setup-node v3

actions/checkout v3

actions/setup-node v3

8398a7/action-slack v3

trymbill/cypress-slack-video-upload-action v1.3.0

gitlabci

.gitlab-ci.yml

gcr.io/pluralsh/docker 19.03.13-dind

gcr.io/pluralsh/circleci/elixir 1.9.4

gcr.io/pluralsh/plrl-base 0.1.8

helm-values

plural/helm/plural/values.yaml

gcr.io/pluralsh/oryd/hydra v1.8.5

gcr.io/pluralsh/registry 2.7.2

gcr.io/pluralsh/postgres 11.7.0-debian-10-r9

gcr.io/pluralsh/postgres-exporter 0.8.0

helmv3

plural/helm/plural/Chart.yaml

hydra 0.16.0

test-base 0.1.3

mix

apps/api/mix.exs

sentry 8.0.6

phoenix ~> 1.5.7

phoenix_pubsub ~> 2.0

phoenix_ecto ~> 4.0

ecto_sql ~> 3.1

postgrex >= 0.0.0

phoenix_html ~> 2.13

basic_auth ~> 2.2.2

phoenix_live_reload ~> 1.2

gettext ~> 0.11

jason ~> 1.0

guardian ~> 1.2.1

cors_plug ~> 2.0

plug_cowboy ~> 2.5

reverse_proxy_plug ~> 1.2.1

libcluster ~> 3.1.1

prometheus_ex ~> 3.0

prometheus_plugs ~> 1.1.1

remote_ip ~> 0.2.0

apps/core/mix.exs

sentry 8.0.6

ecto_sql ~> 3.3.4

ecto ~> 3.3.2

postgrex >= 0.0.0

ex_machina ~> 2.3

comeonin ~> 5.1.2

argon2_elixir ~> 2.0

piazza_core ~> 0.3.8

inet_cidr ~> 1.0.0

dns ~> 2.4.0

bamboo ~> 2.0

parallax ~> 1.0

bourne ~> 1.1

flow ~> 0.15.0

joken ~> 2.1.0

guardian ~> 1.2.1

arc ~> 0.11.0

arc_gcs ~> 0.1.0

porcelain ~> 2.0

ex_aws ~> 2.1

ex_aws_s3 ~> 2.0

ex_aws_sts ~> 2.0

configparser_ex ~> 4.0

sweet_xml ~> 0.6

arc_ecto ~> 0.11.1

dictionary ~> 0.1.0

mojito ~> 0.3.0

nebulex 2.0.0-rc.1

kazan ~> 0.11

workos ~> 0.1.2

decorator ~> 1.3

botanist ~> 0.1.0

x509 ~> 0.7.0

yaml_elixir ~> 2.4

timex ~> 3.6

oauth2 ~> 2.0

websockex ~> 0.4

hackney ~> 1.18.0

tzdata ~> 0.1.8

prometheus_ex ~> 3.0

stripity_stripe ~> 2.7

conduit ~> 0.12

conduit_amqp ~> 0.6.3

mime ~> 1.2

ex_image_info ~> 0.2.4

instream ~> 1.0

swarm ~> 3.4.0

poison ~> 3.0

cloudflare ~> 0.2

mint ~> 1.0

mimic ~> 1.1

google_api_iam ~> 0.40

google_api_cloud_resource_manager ~> 0.41

google_api_cloud_billing ~> 0.23

google_api_service_usage ~> 0.18

apps/cron/mix.exs

apps/email/mix.exs

phoenix ~> 1.5.7

phoenix_html ~> 2.11

phoenix_live_reload ~> 1.2

phoenix_live_dashboard ~> 0.4

telemetry_metrics ~> 0.4

telemetry_poller ~> 0.4

bamboo_phoenix ~> 1.0

gettext ~> 0.11

jason ~> 1.0

plug_cowboy ~> 2.0

apps/graphql/mix.exs

absinthe ~> 1.5.0

absinthe_relay ~> 1.5.0

absinthe_plug ~> 1.5.0

dataloader == 1.0.6

apq ~> 1.2.1

hammer ~> 6.1

apps/rtc/mix.exs

sentry 8.0.6

phoenix ~> 1.5.7

phoenix_html ~> 2.11

phoenix_live_reload ~> 1.2

telemetry_metrics ~> 0.4

telemetry_poller ~> 0.4

gettext ~> 0.11

jason ~> 1.0

plug_cowboy ~> 2.5

absinthe_phoenix ~> 2.0

libcluster ~> 3.1.1

prometheus_ex ~> 3.0

prometheus_plugs ~> 1.1.1

websockex ~> 0.4

apps/worker/mix.exs

mix.exs

distillery ~> 2.1

x509 ~> 0.7.0

shards ~> 1.0

ecto ~> 3.3.2

hackney ~> 1.18.0

absinthe_plug ~> 1.5.0

npm

www/e2e/package.json

@cypress/webpack-preprocessor 5.12.2

@pluralsh/eslint-config-typescript 2.3.0

@typescript-eslint/eslint-plugin 5.33.1

cypress 10.4.0

ts-loader 8.4.0

typescript 4.7.4

webpack 5.74.0

node >=16.14.0

yarn 3.2.1

www/package.json

@absinthe/socket 0.2.1

@apollo/client 3.7.1

@emotion/react 11.10.5

@emotion/styled 11.10.5

@gitbeaker/browser 35.7.0

@growthbook/growthbook 0.19.0

@growthbook/growthbook-react 0.10.0

@jest/types 29.2.1

@nivo/core 0.80.0

@nivo/geo 0.80.0

@nivo/line 0.80.0

@octokit/core 3.6.0

@testing-library/jest-dom 5.16.5

@testing-library/react 13.4.0

@types/styled-components 5.1.26

apollo-absinthe-upload-link 1.7.0

buffer 6.0.3

country-code-lookup 0.0.20

cra-template 1.2.0

d3-hierarchy 3.1.2

d3-selection 3.0.0

emoji-mart 3.0.1

filesize 8.0.7

fireworks-js 1.4.1

forge-core 1.4.6

fuse.js 6.6.2

grommet 2.27.0

history 5.3.0

honorable 0.144.0

honorable-recipe-mp 0.3.0

honorable-theme-default 0.65.0

js-yaml 4.1.0

lodash 4.17.21

memoize-one 6.0.0

moment 2.29.4

phoenix 1.6.15

pluralsh-absinthe-socket-apollo-link 0.2.0

pluralsh-design-system 1.241.0

prop-types 15.8.1

query-string 7.1.1

randomcolor 0.6.2

react 18.2.0

react-animations 1.0.0

react-collapsible 2.10.0

react-copy-to-clipboard 5.1.0

react-countdown 2.3.3

react-credit-cards 0.8.3

react-diff-viewer 3.1.1

react-dnd 16.0.1

react-dnd-html5-backend 16.0.1

react-dom 18.2.0

react-file-icon 1.2.0

react-file-picker 0.0.6

react-icons 4.6.0

react-json-view 1.21.3

react-multiline-clamp 2.0.0

react-portal 4.2.2

react-resize-detector 7.1.2

react-router-dom 6.4.2

react-sage 0.3.16

react-script-hook 1.7.2

react-scripts 5.0.1

react-spinners 0.13.6

react-stripe-elements 6.1.2

react-sweet-progress 1.1.2

react-toggle 4.1.3

react-transition-group 4.4.5

react-use-intercom 1.5.2

react-virtualized-auto-sizer 1.0.7

react-window 1.8.8

react-window-reversed 1.4.1

rehype-raw 6.1.1

slate 0.84.0

slate-history 0.81.3

slate-react 0.83.2

styled-components 5.3.6

uuid 9.0.0

workbox-core 6.5.4

workbox-expiration 6.5.4

workbox-precaching 6.5.4

workbox-routing 6.5.4

workbox-strategies 6.5.4

xterm-addon-fit 0.6.0

xterm-for-react 1.0.4

xterm-theme 1.1.0

@babel/core 7.19.6

@babel/eslint-parser 7.19.1

@babel/preset-env 7.19.4

@babel/preset-react 7.18.6

@graphql-codegen/add 3.2.1

@graphql-codegen/cli 2.13.11

@graphql-codegen/introspection 2.2.1

@graphql-codegen/typescript 2.8.1

@graphql-codegen/typescript-operations 2.5.6

@graphql-codegen/typescript-react-apollo 3.3.6

@pluralsh/eslint-config-typescript 2.4.0

@pluralsh/stylelint-config 1.0.0

@types/randomcolor 0.5.6

@typescript-eslint/eslint-plugin 5.42.0

@typescript-eslint/parser 5.42.0

concurrently 7.5.0

eslint 8.26.0

eslint-config-pluralsh 3.1.0

eslint-plugin-import 2.26.0

postcss-import 8.2.0

serve 14.0.1

source-map-explorer 2.5.3

stylelint 14.14.1

typescript 4.8.4

wait-on 6.0.1

node >=16.15.0

yarn 3.2.3

pip_requirements

bin/requirements.txt

terraform

plural/terraform/aws/main.tf

terraform-aws-modules/iam/aws 3.14.0

plural/terraform/aws/node-groups.tf

plural/terraform/aws/shell.tf

plural/terraform/gcp/main.tf

Automate installation in cm command

Git encryption for cm workspaces

Provide an overview of dependencies between bundles

Some bundles have other bundles as dependencies. Usually, all of the dependencies are installed automatically, when calling plural bundle install <bundle>. This behavior works well and is desired. But it is not clear, which components will end up on the cluster.

Therefore I propose, to show all components, that will be installed. This could be done for example:

Using a picture of DAG in the plural console UI
A simple output like in apt-get, where a preview is given of all newly installed packages

Console login with OIDC fails b/c of bad redirect_uri

Summary

After deploying Plural Console to my own k8s engine on GCP, clicking "Login with Plural" fails with an OAuth error presumably b/c it doesn't like the redirect_uri.

I enabled OIDC during the plural bundle install console console-gcp step, however I can't seem to notice that decision affecting any of the local files in the repo. If I run through the whole setup process again and choose against OIDC, my local files still look the same as when I chose to use OIDC, so idk where that setting is stored.

It seems that my domain may not be pre-registered in Plural's own OAuth config?

Clicking the login button goes to this url:
https://oidc.plural.sh/oauth2/auth?client_id=bbe5c802-f60d-4612-b4d4-32ad286a1bcd&redirect_uri=https%3A%2F%2Fconsole.h3x.onplural.sh%2Foauth%2Fcallback&response_type=code&scope=openid&state=ASC4AfQt_wH3JTNx4ygFvWgQrc8l-hL-Q3Jsd-p6wts%3D

Which then redirects to this url:
https://oidc.plural.sh/oauth2/fallbacks/error?error=invalid_request&error_description=The+request+is+missing+a+required+parameter%2C+includes+an+invalid+parameter+value%2C+includes+a+parameter+more+than+once%2C+or+is+otherwise+malformed&error_hint=The+%22redirect_uri%22+parameter+does+not+match+any+of+the+OAuth+2.0+Client%27s+pre-registered+redirect+urls.

Reproduction

plural init (using the google provider)
plural bundle install console console-gcp
plural bundle install jitsu jitsu-gcp (probably unrelated)
plural build
plural deploy --commit "something"
Open https://console.h3x.onplural.sh
Click "Login with Plural"

Expected: some kind of login screen
Received: oauth error

Plural UI/UX Issue Screenshots

Additional Info about Your Environment

context.yaml

apiVersion: plural.sh/v1alpha1
kind: Context
spec:
  bundles:
  - repository: console
    name: console-gcp
  - repository: jitsu
    name: jitsu-gcp
  buckets:
  - h3x-plural-postgres-wal
  domains:
  - console.h3x.onplural.sh
  - redis.h3x.onplural.sh
  - redis2.h3x.onplural.sh
  - jitsu.h3x.onplural.sh
  - api.jitsu.h3x.onplural.sh
  configuration:
    bootstrap:
      vpc_name: plural
    console:
      admin_name: Admin
      console_dns: console.h3x.onplural.sh
      git_email: [email protected]
      git_user: walkingbrad
      passphrase: REDACTED
      private_key: REDACTED
      public_key: REDACTED
      repo_url: [email protected]:h3x-app/plural.git
    ingress-nginx: {}
    jitsu:
      apiHostname: api.jitsu.h3x.onplural.sh
      hostname: jitsu.h3x.onplural.sh
    monitoring: {}
    postgres:
      wal_bucket: h3x-plural-postgres-wal
    redis:
      masterHostname: redis.h3x.onplural.sh
      replicaHostname: redis2.h3x.onplural.sh

Message from the maintainers:

Impacted by this bug? Give it a 👍. We factor engagement into prioritization.

Bring your own oauth/sso for installed applications

Use Case

As a provider of an application, I want to use my own OIDC provider for controlling user access to my application. I do not want to onboard all application users to my plural account.

Ideas of Implementation

Additional Info

Message from the maintainers:

Excited about this feature? Give it a 👍. We factor engagement into prioritization.

Telemetry for better UX

1/ use of the cloud shell
2/ apps + bundles that have been clicked through
3/ added a user

Add versioning to the CLI

There are no versions of the CLI. This makes it hard to track changes, compare error messages with colleagues or ensure that an update worked.

I propose, to add a version number for example following semver. This would already help in all these cases.

Flush OIDC login metrics to influxdb

Use Case

This will help us get visibility into app usage. Should have an opt-out mechanism at the oidc provider level.

Ideas of Implementation

Send a deferred event to handle the write in the consent request (if it passes)

Message from the maintainers:

Excited about this feature? Give it a 👍. We factor engagement into prioritization.

Unable to signup with Google - Failed to log in, avatar is invalid

Summary

Got an error on signup Failed to log in avatar is invalid after doing plural init and signing up with my work email (Google workspace based)

My Google avatar is nothing special, simply of picture of my face.

Uncaught (in promise) Error: GraphQL error: avatar is invalid
    at new t (ApolloError.ts:57:5)
    at Object.next (QueryManager.ts:225:21)
    at v (Observable.js:135:18)
    at y (Observable.js:179:3)
    at e.value (Observable.js:235:7)
    at observables.ts:12:50
    at Set.forEach (<anonymous>)
    at Object.next (observables.ts:12:19)
    at v (Observable.js:135:18)
    at y (Observable.js:179:3)

Reproduction

Signup with Google with surely a picture as avatar.

Plural UI/UX Issue Screenshots

Breaking Change System

The general flow for this should be:

deps file marks this version as breaking. Optionally additional commands can be specified to manage the update
upgrade queue is blocked for each user that would have gotten that version
email is delivered to the user with commands to execute, including a command that unblocks their queue at the end

Encryption Key Backups

Create an API endpoint that allows users to back up their local encryption keys to the Plural Vault instance.

Error while installing Ghost

Summary

Additional Info about Your Environment

macOS Monterey 12.2.1
plural:

Plural CLI:
  Version: 0.1.1
  Git Commit: c5c67e9
  Compiled At: 2022-03-16 19:45:06.178177 +0200 EET m=+0.019897540
  OS: darwin
  Arch: amd64

Message from the maintainers:

Impacted by this bug? Give it a 👍. We factor engagement into prioritization.

www.plural.sh 502

Summary

Reproduction

Plural UI/UX Issue Screenshots

Additional Info about Your Environment

Message from the maintainers:

Impacted by this bug? Give it a 👍. We factor engagement into prioritization.

Return to Previous User after assuming a service account identity

Use Case

Currently once you've assumed a service account, the only way to return to your primary user is by logging out and logging back in. We should keep track of your base user and have a way to always easily return as needed.

Ideas of Implementation

Probably store base user jwt somewhere else in local storage, along with a copy of the user record for things like remembering name/email/avatar.

Message from the maintainers:

Excited about this feature? Give it a 👍. We factor engagement into prioritization.

Implement Helm/Terraform module explorer in the UI

Should be able to see all files in the module.
Should support appropriate syntax highlighting
Bonus points for hover docs a-la artifacthub

Add In-App Notifications for breaking changes

Use Case

Currently we send emails to notify people, which is good but likely ignored. We should add callouts in a few other places, first obvious place is to leverage our in-app notifications.

Ideas of Implementation

Add an event handler to create the notification, we might also need to modify the notification schema to support

Additional Info

This might still not be thorough enough. It's possible we should add callouts in the cli and console as well (somehow).

Message from the maintainers:

Excited about this feature? Give it a 👍. We factor engagement into prioritization.

blog.plural.sh about page link broken

Summary

Ended up on blog.plural.sh linked from the primary.vc article. About page link is broken. Was looking for the repo for blog.plural.sh to open this issue/fix it, but looks like it might not be OSS.

Reproduction

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

chore(deps): update bitwalker/alpine-elixir docker tag to v1.15.0

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

Detected dependencies

asdf

.tool-versions

elixir 1.12.3

docker-compose

docker-compose.yml

postgres 14

rabbitmq 3-management

influxdb 1.8

dockerfile

Dockerfile

bitwalker/alpine-elixir 1.12.3

alpine 3.17.0

erlang 24.3.4.6-alpine

ai/Dockerfile

python 3.9-slim

dockerfiles/Dockerfile.dump

www/Dockerfile

node 18.12.1-slim

nginxinc/nginx-unprivileged 1.23.3-alpine

www/e2e/cypress.Dockerfile

cypress/included 11.2.0

github-actions

.github/workflows/ai.yaml

actions/checkout v3

docker/metadata-action v4

docker/setup-qemu-action v2

docker/setup-buildx-action v2

docker/login-action v2

docker/build-push-action v3

github/codeql-action v2

ubuntu 20.04

.github/workflows/codeql.yml

actions/checkout v3

github/codeql-action v2

github/codeql-action v2

github/codeql-action v2

ubuntu 20.04

.github/workflows/daily.yml

actions/checkout v3

actions/setup-node v3

EndBug/add-and-commit v9

ubuntu 20.04

.github/workflows/firebase-hosting-pull-request.yml

actions/checkout v3

FirebaseExtended/action-hosting-deploy v0

ubuntu 20.04

.github/workflows/pr-labels.yaml

mheap/github-action-required-labels v3

ubuntu 20.04

.github/workflows/publish.yaml

actions/checkout v3

erlef/setup-beam v1

azure/setup-helm v3

actions/cache v3

actions/cache v3

8398a7/action-slack v3

actions/checkout v3

docker/metadata-action v4

docker/setup-qemu-action v2

docker/setup-buildx-action v2

google-github-actions/auth v1

google-github-actions/setup-gcloud v1.0.1

pluralsh/setup-plural v0.1.9

docker/login-action v2

docker/login-action v2

docker/build-push-action v3

8398a7/action-slack v3

actions/checkout v3

docker/metadata-action v4

docker/setup-qemu-action v2

docker/setup-buildx-action v2

google-github-actions/auth v1

google-github-actions/setup-gcloud v1.0.1

pluralsh/setup-plural v0.1.9

docker/login-action v2

docker/login-action v2

docker/build-push-action v3

8398a7/action-slack v3

actions/checkout v3

docker/metadata-action v4

docker/setup-qemu-action v2

docker/setup-buildx-action v2

google-github-actions/auth v1

google-github-actions/setup-gcloud v1.0.1

pluralsh/setup-plural v0.1.8

docker/login-action v2

docker/login-action v2

docker/build-push-action v3

8398a7/action-slack v3

actions/checkout v3

softprops/action-gh-release v1

actions/checkout v3

pluralsh/chart-releaser v0.1.3

peter-evans/create-pull-request v5

ubuntu 20.04

ubuntu 20.04

ubuntu 20.04

ubuntu 20.04

ubuntu 20.04

ubuntu 20.04

.github/workflows/push-to-plural.yaml

actions/checkout v3

hashicorp/setup-terraform v2

azure/setup-helm v3

pluralsh/setup-plural v0.1.9

8398a7/action-slack v3

ubuntu 20.04

.github/workflows/test.yaml

actions/checkout v3

docker/metadata-action v4

docker/setup-qemu-action v2

docker/setup-buildx-action v2

docker/login-action v2

docker/build-push-action v3

github/codeql-action v2

actions/checkout v3

github/codeql-action v2

actions/checkout v3

pluralsh/chart-releaser v0.1.1

actions/checkout v3

erlef/setup-beam v1

azure/setup-helm v3

actions/cache v3

actions/cache v3

stoat-dev/stoat-action v0

8398a7/action-slack v3

actions/checkout v3

erlef/setup-beam v1

actions/cache v3

actions/cache v3

tj-actions/verify-changed-files v17

ubuntu 20.04

ubuntu 20.04

ubuntu 20.04

ubuntu 20.04

ubuntu 20.04

.github/workflows/trivy-artifact-scan.yaml

actions/checkout v3

github/codeql-action v2

ubuntu 20.04

.github/workflows/www.yaml

actions/checkout v3

docker/metadata-action v4

docker/setup-qemu-action v2

docker/setup-buildx-action v2

docker/login-action v2

docker/build-push-action v3

github/codeql-action v2

actions/checkout v3

github/codeql-action v2

actions/checkout v3

actions/setup-node v3

actions/checkout v3

actions/setup-node v3

actions/checkout v3

actions/setup-node v3

8398a7/action-slack v3

trymbill/cypress-slack-video-upload-action v1.3.0

ubuntu 20.04

ubuntu 20.04

ubuntu 20.04

ubuntu 20.04

ubuntu 20.04

gitlabci

.gitlab-ci.yml

gcr.io/pluralsh/docker 19.03.13-dind

gcr.io/pluralsh/circleci/elixir 1.9.4

gcr.io/pluralsh/plrl-base 0.1.9

helm-values

plural/helm/plural/values.yaml

gcr.io/pluralsh/oryd/hydra v2.0.3

gcr.io/pluralsh/registry 2.7.2

gcr.io/pluralsh/postgres 11.7.0-debian-10-r9

gcr.io/pluralsh/postgres-exporter 0.8.0

helmv3

plural/helm/plural/Chart.yaml

hydra 0.26.5

test-base 0.1.10

mix

apps/api/mix.exs

sentry 8.0.6

phoenix ~> 1.6.0

phoenix_pubsub ~> 2.0

phoenix_ecto ~> 4.4.0

ecto_sql ~> 3.9.0

postgrex >= 0.0.0

phoenix_html ~> 3.2.0

basic_auth ~> 2.2.2

phoenix_live_reload ~> 1.2

gettext ~> 0.20

jason ~> 1.0

guardian ~> 1.2.1

cors_plug ~> 2.0

plug_cowboy ~> 2.6.0

reverse_proxy_plug ~> 2.1.1

libcluster ~> 3.3.1

prometheus_ex ~> 3.0

prometheus_plugs ~> 1.1.1

remote_ip ~> 0.2.0

apps/core/mix.exs

sentry 8.0.6

ecto_sql ~> 3.9.0

libvault ~> 0.2.0

ecto ~> 3.9.0

postgrex >= 0.0.0

ex_machina ~> 2.7.0

comeonin ~> 5.3.0

argon2_elixir ~> 2.0

inet_cidr ~> 1.0.0

dns ~> 2.4.0

bamboo ~> 2.0

parallax ~> 1.0

bourne ~> 1.1

flow ~> 0.15.0

joken ~> 2.5.0

guardian ~> 1.2.1

arc ~> 0.11.0

arc_gcs ~> 0.2.0

porcelain ~> 2.0

ex_aws ~> 2.4.0

ex_aws_s3 ~> 2.3.3

ex_aws_sts ~> 2.3.0

configparser_ex ~> 4.0

sweet_xml ~> 0.7.3

arc_ecto ~> 0.11.3

dictionary ~> 0.1.0

mojito ~> 0.7.0

nebulex == 2.4.2

workos ~> 0.1.2

decorator ~> 1.3

x509 ~> 0.8.5

yaml_elixir ~> 2.4

timex ~> 3.6

oauth2 ~> 2.0

websockex ~> 0.4

hackney ~> 1.18.0

tzdata ~> 1.1.0

prometheus_ex ~> 3.0

stripity_stripe ~> 2.17.1

conduit ~> 0.12

conduit_amqp ~> 0.6.3

rabbit_common ~> 3.9

amqp ~> 3.2

mime ~> 1.2

ex_image_info ~> 0.2.4

instream ~> 1.0

swarm ~> 3.4.0

poison ~> 3.0

cloudflare ~> 0.2

mint ~> 1.0

mimic ~> 1.1

google_api_iam ~> 0.40

google_api_cloud_resource_manager ~> 0.41

google_api_cloud_billing ~> 0.23

google_api_service_usage ~> 0.18

apps/cron/mix.exs

apps/email/mix.exs

phoenix ~> 1.6.0

phoenix_html ~> 3.2.0

phoenix_live_reload ~> 1.2

phoenix_live_dashboard ~> 0.5.3

telemetry_metrics ~> 0.6.1

telemetry_poller ~> 1.0.0

bamboo_phoenix ~> 1.0

gettext ~> 0.20

jason ~> 1.0

plug_cowboy ~> 2.6.0

apps/graphql/mix.exs

absinthe ~> 1.7.0

absinthe_relay ~> 1.5.2

absinthe_plug ~> 1.5.8

dataloader == 1.0.10

apq ~> 1.2.1

hammer ~> 6.1

apps/rtc/mix.exs

sentry 8.0.6

phoenix ~> 1.6.0

phoenix_html ~> 3.2.0

phoenix_live_reload ~> 1.4.0

telemetry_metrics ~> 0.6.1

telemetry_poller ~> 1.0.0

gettext ~> 0.20

jason ~> 1.0

plug_cowboy ~> 2.6.0

absinthe_phoenix ~> 2.0.2

libcluster ~> 3.3.1

prometheus_ex ~> 3.0

prometheus_plugs ~> 1.1.1

websockex ~> 0.4

briefly b0fd495bf0c5ef2c44de2791a8cc7a20813c7d36

apps/worker/mix.exs

mix.exs

distillery ~> 2.1

x509 ~> 0.8.5

shards ~> 1.0

ecto ~> 3.9.0

hackney ~> 1.18.1

absinthe_plug ~> 1.5.8

credo ~> 1.6

sobelow ~> 0.8

excoveralls ~> 0.10

junit_formatter ~> 3.3

npm

www/e2e/package.json

@cypress/webpack-preprocessor 5.17.1

@pluralsh/eslint-config-typescript 2.5.41

@typescript-eslint/eslint-plugin 5.59.9

cypress 11.2.0

ts-loader 9.4.3

typescript 4.9.5

webpack 5.86.0

node 18.12.1

loader-utils 2.0.4

yarn 3.6.0

www/package.json

@absinthe/socket 0.2.1

@apollo/client 3.7.15

@emotion/react 11.11.1

@emotion/styled 11.11.0

@fireworks-js/react 2.10.5

@gitbeaker/browser 35.8.1

@growthbook/growthbook 0.27.0

@growthbook/growthbook-react 0.17.0

@nivo/core 0.83.0

@nivo/geo 0.83.0

@nivo/line 0.83.0

@octokit/core 4.2.1

@pluralsh/design-system 3.16.0

@react-spring/web 9.7.3

@stripe/react-stripe-js 2.1.0

@stripe/stripe-js 1.54.0

@testing-library/react 14.0.0

apollo-absinthe-upload-link 1.7.0

babel-plugin-styled-components 2.1.4

browserify-zlib 0.2.0

buffer 6.0.3

country-code-lookup 0.0.23

d3-hierarchy 3.1.2

d3-selection 3.0.0

events 3.3.0

filesize 10.0.7

forge-core 1.4.6

fuse.js 6.6.2

git-url-parse 13.1.0

grommet 2.34.2

history 5.3.0

honorable 1.0.0-beta.17

honorable-recipe-mp 0.4.0

honorable-theme-default 1.0.0-beta.5

js-yaml 4.1.0

lodash 4.17.21

memoize-one 6.0.0

moment 2.29.4

phoenix 1.7.3

pluralsh-absinthe-socket-apollo-link 0.2.0

process 0.11.10

prop-types 15.8.1

query-string 8.1.0

react 18.2.0

react-animations 1.0.0

react-calendly 4.1.1

react-collapsible 2.10.0

react-copy-to-clipboard 5.1.0

react-countdown 2.3.5

react-credit-cards 0.8.3

react-diff-viewer 3.1.1

react-dnd 16.0.1

react-dnd-html5-backend 16.0.1

react-dom 18.2.0

react-file-icon 1.3.0

react-file-picker 0.0.6

react-icons 4.9.0

react-json-view 1.21.3

react-multiline-clamp 2.0.0

react-piano-keys 1.2.1

react-player 2.12.0

react-portal 4.2.2

react-resize-detector 9.1.0

react-router-dom 6.12.0

react-sage 0.3.16

react-script-hook 1.7.2

react-spinners 0.13.8

react-stripe-elements 6.1.2

react-sweet-progress 1.1.2

react-toggle 4.1.3

react-transition-group 4.4.5

react-use-intercom 5.1.4

react-virtualized-auto-sizer 1.0.20

react-window 1.8.9

react-window-reversed 1.4.1

rehype-raw 7.0.0

slate-history 0.93.0

slate-react 0.95.0

stream-browserify 3.0.0

styled-components 5.3.11

util 0.12.5

uuid 9.0.0

workbox-core 7.0.0

workbox-expiration 7.0.0

workbox-precaching 7.0.0

workbox-routing 7.0.0

workbox-strategies 7.0.0

xterm 5.1.0

xterm-addon-fit 0.7.0

xterm-theme 1.1.0

@esbuild-plugins/node-globals-polyfill 0.2.3

@esbuild-plugins/node-modules-polyfill 0.2.2

@graphql-codegen/add 5.0.0

@graphql-codegen/cli 4.0.1

@graphql-codegen/introspection 4.0.0

@graphql-codegen/named-operations-object ^2.3.1

@graphql-codegen/typescript 4.0.1

@graphql-codegen/typescript-operations 4.0.1

@graphql-codegen/typescript-react-apollo 4.1.0

@pluralsh/eslint-config-typescript 2.5.154

@pluralsh/stylelint-config 2.0.10

@types/events 3.0.0

@types/jsdom 21.1.5

@types/react 18.2.8

@types/react-credit-cards 0.8.1

@types/react-dom 18.2.4

@types/react-stripe-elements 6.0.6

@types/styled-components 5.1.30

@types/uuid 9.0.1

@typescript-eslint/eslint-plugin 6.17.0

@typescript-eslint/parser 6.17.0

@vitejs/plugin-basic-ssl 1.0.2

@vitejs/plugin-react 4.2.1

@vitest/ui 1.0.4

concurrently 8.1.0

eslint 8.56.0

eslint-config-pluralsh 3.1.0

eslint-config-prettier 8.10.0

eslint-plugin-import 2.29.1

eslint-plugin-import-newlines 1.3.4

eslint-plugin-jsx-a11y 6.8.0

eslint-plugin-react 7.33.2

eslint-plugin-react-hooks 4.6.0

husky 8.0.3

jsdom 23.0.1

lint-staged 15.2.0

npm-run-all 4.1.5

prettier 2.8.8

rollup-plugin-polyfill-node 0.12.0

serve 14.2.0

source-map-explorer 2.5.3

stylelint 15.11.0

stylelint-config-prettier 9.0.5

typescript 5.3.3

vite 4.5.0

vite-plugin-pwa 0.17.4

vite-plugin-rewrite-all 1.0.1

vite-tsconfig-paths 4.2.2

vitest 1.1.0

wait-on 7.0.1

node 18.16.0

yarn 3.6.0

pip_requirements

ai/requirements.txt

aiohttp ==3.9.0

aiosignal ==1.3.1

anyio ==3.7.1

async-timeout ==4.0.2

attrs ==23.1.0

beautifulsoup4 ==4.12.2

certifi ==2023.7.22

charset-normalizer ==3.2.0

click ==8.1.4

dataclasses-json ==0.5.9

exceptiongroup ==1.1.2

fastapi ==0.100.0

frozenlist ==1.3.3

fsspec ==2023.6.0

h11 ==0.14.0

httptools ==0.6.0

idna ==3.4

langchain ==0.0.329

langchainplus-sdk ==0.0.20

llama-index ==0.7.4

marshmallow ==3.19.0

marshmallow-enum ==1.5.1

multidict ==6.0.4

mypy-extensions ==1.0.0

nest-asyncio ==1.5.6

numexpr ==2.8.4

numpy ==1.24.4

openai ==0.27.8

openapi-schema-pydantic ==1.2.4

packaging ==23.1

pandas ==2.0.3

pydantic ==1.10.11

python-dateutil ==2.8.2

python-dotenv ==1.0.0

pytz ==2023.3

PyYAML ==6.0

regex ==2023.6.3

requests ==2.31.0

six ==1.16.0

sniffio ==1.3.0

soupsieve ==2.4.1

SQLAlchemy ==2.0.18

starlette ==0.27.0

tenacity ==8.2.2

tiktoken ==0.4.0

tqdm ==4.65.0

typing-inspect ==0.8.0

typing_extensions ==4.5.0

tzdata ==2023.3

urllib3 ==1.26.18

uvicorn ==0.22.0

uvloop ==0.17.0

watchfiles ==0.19.0

websockets ==11.0.3

yarl ==1.9.2

bin/requirements.txt

terraform

plural/terraform/aws/main.tf

terraform-aws-modules/iam/aws 3.16.0

plural/terraform/aws/node-groups.tf

github.com/pluralsh/module-library 20e64863ffc5e361045db8e6b81b9d244a55809e

plural/terraform/aws/shell.tf

github.com/pluralsh/module-library 20e64863ffc5e361045db8e6b81b9d244a55809e

regex

Dockerfile

helm/helm v3.11.0

alco/goon v1.1.1

pluralsh/plural-cli v0.7.8

accurics/terrascan v1.17.1

aquasecurity/trivy v0.36.1

Check this box to trigger a request for Renovate to run again on this repository

Global Group Support

Use Case

We should have a boolean global field for groups that automate adding new users where possible.

Ideas of Implementation

add migration
add event bus logic
add event logic on group transition to ensure all current users are in the group

Message from the maintainers:

Excited about this feature? Give it a 👍. We factor engagement into prioritization.

Add SFTPGo

Use Case

We want to use SFTPGo as a way to bootstrap easily sftp servers that sync with GCS in real-time.
It could be a nice asset for Plural.

Ideas of Implementation

An unofficial helm chart is available here
An official docker image is available, more info here

Typo in README.md CLI screenshot

Hey all!
Just stumbled across plural and it looks super interesting! While I was reading the README.md I saw that the CLI screenshot contains a typo. It says "sueprset" where it should go "superset".

Wanted to make you aware of this 😄

Have a great day!

The timeout for OIDC application is too short

The applications using OIDC require a login after a relativly short time. The issue is the session cookie running out, if the session is not actively used.

I would like to see an option to extend this time or have a longer default timeout.

Support for other cloud providers

We currently support AWS, GCP and Azure as cloud providers and are working on more cloud providers soon.

Please comment which cloud providers you would like support for.

Message from the maintainers:

Excited about this feature? Give it a 👍. We factor engagement into prioritization.

OIDC consent uses harcoded scopes and doesn't allow remembering consent

Summary

After #273 and #277 is should be possible to request the offline and offline_access scopes from an OIDC application. While the changes in those PRs make is possible for an OIDC app to request the offline and offline_access scopes, the refresh token is never returned. While logging the output of the returned token I discovered the response contains scope:profile openid, even though offline and offline_access were requested as well.

I believe the issue is caused be this line.

Simply adding the offline and offline_access scopes there might break existing OIDC apps, since those were created before #273 and #277 were merged and thus don't have access to those scopes.

I believe the scopes requested by the application should be forwarded to consent form, rather than having those be hardcoded.

Reproduction

Have an OIDC application request scopes other than openid and profile. While the OIDC login will complete successfully, scopes such as offline and offline_access are never returned.