**True Infrastructure as Code** https://www.windmill.dev/changelog/infrastructure-as-code https://www.windmill.dev/docs/core_concepts/infrastructure_as_code#kubernetes-operator-recommended It's one of the longest requested feature, being able to set all instance settings from static config/helm chart. It was always difficult because you actually need to set them in the db for true propagation but it's now done (in beta) using a dedicated operator that constantly checks and monitor for drift and sync. We also took the opportunity to make everything consistent and you can configure and review worker groups and instance configs in yaml in the UI directly using the same format. It's available for both CE and EE

rubenf · 22h ago

As we're preparing for a new Windmill sandbox SDK, we took the opportunity **to open-source NSJAIL sandboxing** and make it available in CE and easier to set. In 1.634.0, just set nsjail to benefit from the tightest security and isolation per job. It's constraining so no need to use it unless you need but now you won't be restricted in security for CE if you need to.

rubenf · 6d ago

Weekly kenote to tell you about our latest updates https://discord.com/channels/930051556043276338/1278977038430240813 https://youtube.com/live/2dGd9TdT8xs?feature=share

henri-c · 2w ago