Announcing Epinio 1.14.3!

This release includes the usual bug fixes, dependency updates, and maintenance, along with OCI registry support for app charts.

We encourage you to review the documentation for upgrading Epinio.

New Features and Improvements

• App charts can now be sourced from OCI registries, alongside the existing support for remote sources. You can also push a packaged chart to Epinio's registry with epinio app chart push.
• Improved UI loading performance by caching Epinio resources.
• A stateful app chart now ships with Epinio by default, so you can deploy stateful applications without providing your own chart.
• Dex connectors can now be configured through Helm chart values, allowing for more flexible authentication setups.

Fixes

• Fixed a bug where certain service instance configurations were not correctly applied during deployment.
• Fixed an issue where the Rancher extension did not allow external calls to Git providers.
• Fixed an issue where certain Docker Hub or Harbor registries were not correctly recognized due to missing CA certificates.
• Fixed an issue in the Helm chart where the ingress.tls.enabled value was not correctly applied, leading to misconfigured ingress resources.
• Fixed registry storage permission issues: fsGroup and fsGroupChangePolicy for the container registry can now be set through Helm chart values. See File ownership.

MCP

• MCP authentication is now per user, giving more granular access control and improved security.

Documentation

• Added Using a chart from another OCI registry and Pushing the chart to Epinio's registry.
• Added Running the registry and SeaweedFS on persistent storage.
• Rewrote OIDC authentication around the new Dex Helm values, including keeping client secrets out of values.
• Updated Installing the Epinio MCP Server and the MCP reference for per-user authentication.

Dependency updates

Updated server, UI, and Helm chart dependencies.

---

For the complete technical changelog, see the 1.14.3 release on GitHub.