December 2021 Summaries

On September 24th, 2024, a Meetup will take place at the Austin Office. Authentication with private Azure Container Registries (ACR) is now supported, allowing organizations to leverage Azure Active Directory (AAD) Pod Identity for authentication. The terms of service and banners now support Markdown formatting. Image tags can be used for version control in workspaces, and users can filter or sort the list by tag. JetBrains Projector 1.5.0 is included in Coder v1.26, improving Markdown rendering, font support, and popup mechanics. Additionally, Coder now supports JetBrains Gateway and remote development features for local JetBrains IDEs.

A Meetup is scheduled at the Austin Office for September 24th, 2024. Interested attendees or speakers are encouraged to express their interest. Recently, a severe remote code execution vulnerability (CVE-2021-44228), known as Log4Shell, was discovered by Chen Zhaojun of the Alibaba Cloud Security Team. This vulnerability affects many Java applications using the Log4j library. Coder's security model enforces authentication and restricts user access to their own workspaces, making it unlikely for Coder workspaces to be affected by this vulnerability. The company is working with its upstream vendors to investigate and patch any vulnerable applications as a preventive measure against potential security risks. JetBrains has released a statement confirming that all IntelliJ platform-based IDEs and Gateway are not affected. Coder uses Kubernetes network policies to prevent data exfiltration, requiring connections to pass through an authenticating proxy. The company's built-in security controls on DevURLs allow administrators to enforce installation-wide policies such as user authentication via the organization's identity provider.

JetBrains IDEs, such as IntelliJ IDEA, PyCharm, and GoLand, require indexing for features like code search, highlighting, refactoring, and code completion. However, this process can be time-consuming, especially for large projects or slow machines. Shared indexes can significantly reduce IDE load times by hosting pre-generated indexes for others to download. Generating shared indexes using a Docker container simplifies the process and allows for automation with cron/CI. Benchmarking results show significant improvements in loading speeds, particularly for large projects. JetBrains' remote development support also benefits from shared indexes, as they can be included in workspace images for faster onboarding and better reproducibility.