• Key features of this release include end-to-end state encryption to ensure the security of your configuration files.
• Dynamic provider-defined functions for more flexible resource management.
• Loopable import.

Fine-grained RBAC at the design level

You can now proactively control the cloud resources that are available to your users by enabling / disabling what they can see and use from the leftbar.

Main use-cases:

• →You want to restrict access to a certain types of resources, like networking and security, and make sure that users only see and use the resources they need. No more.
• →You want your teams to only use Terraform modules and none of the vanilla resources as part of your standardization plan.

Brainboard API

Private self-hosted runner

Service catalog — producer consumer

Private registry support

You have now a Terraform state management dashboard.

 

• See your tfstate and fetch the latest version from your remote backend (if you are not using the default one)
• Manipulate it to import / add or remove resources
• List the resources inside
• Move it
• Execute Terraform actions on it.

• Organization owners or admins are required to authenticate the GitHub application.
• Post-authentication, users will create git_credentials through an OAuth process via the configured GitHub app.
• We will develop documentation to guide through GitHub configuration.
• A migration plan for current GitHub-using customers will be prepared, including backend and frontend implementation of the new flow.
• User-friendly error messaging will be added to assist with migration and credential expiry issues.

• Create a project
• Create envioronment
• clone a template into a specific project or environment
• update variables
• and deploy the infrastructure

Dive into a modern and user-friendly design that simplifies your cloud connection process.

AWS

• Assume role: The most commonly used method to connect a third party to your AWS account is now available in Brainboard. This is the most secure way to allow Brainboard to perform actions on your behalf within your account.
• Access & secret keys: You can still use IAM user with access / secret keys.

Azure

• Certificate: Introducing a more secure way to authenticate with Azure using certificates. You don’t need to share your Azure AD app secret anymore.
• Client Secret: You can still use Azure AD app client secret.

• Experience a sleek and intuitive design that enhances user interaction and efficiency when giving permissions, managing roles & inviting new members to collaborate.

• Streamlined process to manage roles and their associated permissions.
• Directly link permissions to your specific environment, architectures, and workflows for a tailored experience.

• Dive deeper into permission settings with the ability to narrow down permissions at various levels: 
  • Organization Level: Control and delegate access across your entire organization.
  • Architecture Level: Define permissions specific to different architectures within your setup.
  • Project Level: Ensure the right people have the right access for individual projects.

We're excited to announce that the CI/CD Engine has been improved with new features to improve infrastructure management for our users.

One of the most exciting new features is the drift detection capability, which allows engineers to stay on top of their infrastructure by notifying responsible parties in case of drift, scheduling workflows for better optimized timing, and maintaining order while another workflow is active.

Other new features include:

• Multiple workflows: With Brainboard's CI/CD Engine redesign, you can now create multiple workflows, providing greater flexibility and customization options for designing and implementing projects.

• CI/CD workflow templates: With Brainboard's CI/CD Engine, you can create workflow templates that you and your team can reuse to streamline your workflow and optimize your infrastructure management.
• Scheduled workflows: Brainboard's CI/CD Engine allows you to schedule workflows to be launched at any desired time. This ensures that workflows are being executed at the best optimized timing for your infrastructure management needs.

• Notifying on pipeline failure: Notifying someone when drift is detected on cloud infrastructure can help prevent issues such as security vulnerabilities, compliance violations, and performance problems. By detecting drift early and addressing it promptly, IT teams can investigate and remediate any issues before they cause substantial damage, ensuring that the infrastructure remains secure, reliable, and operating as expected.

Resources on Drift Detection: 

• Disaster Recovery for cloud infrastructures with Brainboard
• Terraform Drift Detection: How to monitor and remediate cloud infrastructure drift
• How the Cloud Can Bring Hope in Times of Crisis
• Improve Terraform Code Quality and Security of Delivery of Cloud Infrastructure Keeping the Same Engineering Velocity
• Why Drift Detection is Crucial for Successful Continuous Delivery Pipelines

We've made some performance enhancements to the:

• Multi-Workflow Capability: You can now create and manage multiple workflows for your CI/CD pipeline, making it easier to organize and streamline your development process.
• Drift Detection: Our new drift detection feature helps you identify and resolve configuration differences between your development, staging, and production environments.
• Notification Sending: You can configure notifications to be sent to relevant stakeholders, keeping everyone informed about the status of builds, deployments, and releases — including when pipelines fail.
• Approval Tasks: We’ve introduced approval tasks to enable more granular control over the deployment process. This feature lets you define a set of approvers who need to sign off on each deployment before it can proceed.
• Scheduled Deployment: You can now schedule deployments for a specific time and date, allowing you to plan ahead and ensure that new releases are rolled out at a time that suits your team and your customers.

• 

*Keycloak is an open-source identity and access management solution. It is designed to provide a centralized location for managing user authentication and authorization. Keycloak provides features such as Single Sign-On (SSO), user management, and access control for applications and services.