Version 1.0.0-rc.78

Stratum v1.0.0-rc.78

Release candidate. Continues the Stratum 1.0 preview. It is recommended for evaluation and staging. Hold production rollouts for the stable v1.0.0 release.

This release adds a web console for operators and a customer portal for their tenants. Both are served by each node itself, over the same secure API port.

Highlights

• Web console. Open /console on a node's API address and sign in with an operator API key.

- Overview: node status and licence state at a glance. - Networks: manage them, including the host gateway. - Virtual machines: create, start, stop, restart, resize and add network cards. - Images, volumes and backups, tenants and quotas. - In the browser: open a machine's screen or its serial console.

The console uses exactly the same permissions and licence checks as the API. A frozen licence shows it read-only.

• Customer portal. Create a tenant-scoped key for a customer, and they can sign in to the same console. There they see only their own machines. They can start, stop and restart them, open their consoles and reset a guest password, and they can see their networks, addresses, quota and billing state. Nothing else is open to them: no other tenant's resources, and no creating or deleting machines, which stays with the provider.
• Machine features in the console and the portal need a licence that includes Compute (early access). On a Fabric-only node, the console shows networking and tenants.

Security

• Consoles close with their access. An open console now closes as soon as the key that opened it is revoked, its sign-in ends or expires, or the customer's account is suspended.
• Plain messages for customers. Customers only ever see plain messages; details about the host stay in the provider's logs.
• Guest output stays inert. A link a machine prints in its serial console is never opened by the console.
• Unreadable requests are refused. A request whose body cannot be read in full is refused, instead of being partly acted on.
• Separate sign-ins. Customer sign-ins can never end an operator's session.

Improvements

• Stopping machines under load:

- A stop is never undone by a late start notice from the machine. - A suspended customer's machine that is started from outside is asked to shut down again at once. - The record of a forced stop keeps its reason.

Documentation

• New page: the web console. It covers signing in, what each page shows and how to give a customer the portal. The console and machine pages now say when consoles close.

Feedback on this release candidate is welcome. Report issues through your account before the stable v1.0.0 cut.