wasmCloud 1.1 brings secrets support and more enhancements for enterprises
We're proud to announce the release of wasmCloud 1.1, including the feature most commonly requested by users: secrets support. In addition to secrets, the new release brings along a bevy of enhancements for enterprises, exciting new capabilities like Postgres, and first-class support for Go-based custom capability providers. Let's take a look at some of the highlights.
Secrets in wasmCloud
Secrets are a must-have feature for application platforms, so it's no surprise that secret support has been our most-requested feature since the launch of 1.0. Now we're thrilled to provide full and flexible support for secrets with a secrets backend system that enables you to use the secret store of your choice while maintaining robust encryption across the lifecycle of a secret.
Here you can see a high-level diagram of how a secret request travels from a component to two different secret stores: HashiCorp Vault and a NATS key-value store. (Not coincidentally, secrets backends are already implemented for these two stores.)
wasmCloud also integrates fully with Kubernetes secrets, so you can make use of any existing Kubernetes secrets infrastructure right out of the box, if you're running wasmCloud on Kubernetes.
For a full overview of how secrets work in wasmCloud, check out the documentation, which includes a hands-on example of using secrets with a NATS key-value store. You can also learn how to implement your own secrets backend.
Postgres and Couchbase
wasmCloud maintainers and the wider community have released several major capabilities in the process of landing wasmCloud 1.1. There are two capabilities we'd particularly like to highlight—each of which can leverage our new secrets functionality for secure authentication:
- Postgres: The first-party PostgreSQL interface and capability provider combine to bring Postgres functionality to wasmCloud applications as a simple, reusable building block.
- Couchbase: The third-party Couchbase interface and provider bring Couchbase KV connectivity to Wasm applications via
wasi-keyvalue
.
Go Capability Providers
During the development of wasmCloud 1.1 the provider-sdk-go library got many enhancements and improvements, including the addition of secrets support. In the cloud-native ecosystem there are a wealth of open source libraries written in Go that you can now use to build custom capability providers for wasmCloud. Just like in Rust, bindings for Go providers are generated via wRPC. You can see a examples of Go capability providers either in the Couchbase provider above, or the custom template provider for Go.
wash new provider --template-name custom-template-go go-provider
Enhancements for enterprises
We've iterated on a number of enhancements alongside enterprise users:
-
Configure trace levels independently from logs: In some cases, you may want to surface important traces without needlessly dialing up the verbosity of your logs. For these situations, we've added a
--trace-level
option to wasmCloud that allows users to configure traces and logging separately. As of 1.1 the default trace level is set toDEBUG
, while the log level default remainsINFO
. -
Supply additional CA certificates to OCI and OpenTelemetry clients: wasmCloud 1.1 adds support for providing Certificate Authority certificates to be loaded when the host is initialized. (This option is in addition to including custom CA in the wasmCloud host OS trust store.) These certificates are then configured in the OCI and OpenTelemetry clients. This can be helpful, for example, if you're using or mirroring the upstream wasmCloud container images and don't want to modify them to include your local CA.
-
Export OTEL signals over gRPC: We've expanded our OTEL support to include signals exported over gRPC, as an alternative to the default HTTP-based protocol. Enable gRPC signals with the
--observability-protocol=grpc
CLI argument orWASMCLOUD_OBSERVABILITY_PROTOCOL=grpc
environment variable. -
Configure proxy credentials for HTTP(S) proxy: You can now specify basic proxy authentication credentials with the
WASH_PROXY_USERNAME
andWASH_PROXY_PASSWORD
environment variables, in conjunction with theHTTP(S)_PROXY
(orhttp(s)_proxy
) environment variables. -
Generate tracing flame graphs: Easily configure wasmCloud to generate a flame graph at a specified path with the
--flame-graph
command line argument orWASMCLOUD_FLAME_GRAPH=
environment variable.
For more information on the full suite of enhancements in wasmCloud 1.1, check out the release notes.
Get involved
Whether you've been following wasmCloud for a while or you're just getting started, we'd love for you to join us! Bring your questions, comments, feedback, or ideas to the wasmCloud Slack, or join us live for the next wasmCloud community meeting.