To counter this issue, we have instituted a policy to publish newer versions of the latest release in this scenario to ensure the real latest release is always returned. If SpiceDB publishes a point release of an older version (say to backfill a bug fix), the older version will be reported as the latest released version! However, there was one issue with this endpoint: the latest release endpoint returns the last published non-prerelease release. GetLatestRelease(ctx, "authzed", "spicedb")
Getting the latest released version of SpiceDB, therefore, became a simple GetLatestRelease function call: The first step in this process was to allow SpiceDB or zed to determine the latest version available.įortunately for us, the GitHub API provides a releases endpoint which lists all available releases for a project, as well as providing an endpoint returning just the latest release.Įven more fortunate was the discovery of a golang GitHub API client, which allowed for extremely easy interaction with the GitHub API. Thus we embarked on a project to make both SpiceDB and zed display to the end user if the currently running version of SpiceDB can be updated. While we did discover that GitHub provides an atom feed of available versions, the technology is no longer widely used, and as far as we knew, there was no way to easily indicate (outside of notifications in the SpiceDB Discord) to users of SpiceDB that new versions were available.Īs new versions of SpiceDB can result in major performance improvements, new features, and even fix security issues, we felt it was important to make the availability of new versions as transparent to end users as possible. The Authzed team quickly realized, however, that it left one major item to be desired: notification. Using GitHub to publish releases has made the process for SpiceDB nearly seamless. Releases of SpiceDB are found on GitHub, with built images automatically pushed to various container registries. SpiceDB is Authzed’s open source, Zanzibar inspired database for fine-grained permissions.
ZED HEADER CODE
The code used here is generally useful to any Go program that needs similar functionality. This blog post briefly discusses how SpiceDB and zed check for new versions and display that state to the end-user.
ZED HEADER SOFTWARE
Given the importance and benefits of keeping the software supply chain up to date, the Authzed team embarked on a small project recently to make it absolutely clear when updates for SpiceDB are available. Want to see the code behind this blog post? Take a look at the releases package in SpiceDB and the version module in cobrautil
0 kommentar(er)
