Howdy everyone,
Just providing a brief update since there have been some changes to the roadmap that I need to announce.
In this Beta 3 launch post, I stated primitives outside instances starting with storage pools will be introduced in Beta 4. TLDR: There’s been a roadblock, and that will no longer be possible. Anticipate them starting in Beta 5.
Today, a community member started testing fine-grained permissions (including what was suggested here: Granular permissions on the Incus API ), and found several issues (to be clear, not security issues, just Ararat totally breaking when authorization setups are used) and brought them to my attention. Upon further inspection, I discovered that there are a several decisions deep in Ararat’s architecture that prevent easy implementation of authorization (including OpenFGA).
As a result, I’m going to have to re-write some large components over the next week, so initial outside-instance primitive support is likely to be pushed back from Beta 4 to Beta 5 (could still appear in Beta 4 if things go faster than expected!). I want to make sure we are building on a strong foundation before exploring other primitives. It’s great this was caught early! Doing such major changes across multiple primitives would have caused a much more substantial delay.
Thank y’all for the continued testing & understanding. I would have never caught this early without your feedback!