miniblue

New: Microsoft.Resources/deployments Phase 1 (#118)

az deployment group create --template-file main.bicep now works end to end against miniblue.

What's in Phase 1

• PUT/GET/DELETE/List on Microsoft.Resources/deployments
• Walks template.resources in declaration order
• Resolves [parameters('x')] and [variables('x')] (with defaultValue fallback)
• Dispatches each resource through the embedded chi router so existing service handlers apply it
• Per-resource error surfaced as a Failed deployment with details

Not yet supported (deferred)

• Other template functions: [concat()], [resourceId()], [reference()], [copyIndex()], etc.
• copy loops
• condition on resources
• Nested templates and module references
• dependsOn ordering (resources are applied in declaration order)
• outputs evaluation
• Subscription, management-group, or tenant-scope deployments
• What-If and Validate operations

See examples/bicep/ for a working sample plus the deferred list.

Helm / Kubernetes deployment guide (#117, closes #86)

New page at https://miniblue.io/guides/helm covering helm install, persistence, PostgreSQL backend via secret, exposing the service, and the in-cluster real-backend limitations.

SHA256SUMS for release binaries (#115, closes #94)

The release workflow now publishes a single SHA256SUMS asset alongside the binaries:

sha256sum -c SHA256SUMS --ignore-missing

Other

• New AKS CI job that exercises the :full Docker image with a mounted docker socket (#114)
• CHANGELOG backfilled for v0.4.2 through v0.6.0 from each release's notes (#116)
• README comparison table service count corrected 26 → 27

Upgrading

docker pull moabukar/miniblue:0.7.0
brew upgrade miniblue

Try Bicep:

azlocal group create --name bicep-rg --location eastus
az deployment group create --resource-group bicep-rg \
  --template-file examples/bicep/main.bicep \
  --parameters saName=mystorage clusterName=mycluster

New: Azure Kubernetes Service (AKS) emulation (#111, closes #50)

Microsoft.ContainerService/managedClusters ARM management plane with two backends:

Mirrors the ACI Docker pattern, so users do not need to install k3d / kind / minikube.

CLI

azlocal aks create --resource-group RG --name N [--node-count 1] [--kubernetes-version 1.30.0]
azlocal aks list   --resource-group RG
azlocal aks show   --resource-group RG --name N
azlocal aks delete --resource-group RG --name N
azlocal aks get-credentials --resource-group RG --name N [--file PATH|-] [--overwrite-existing]

get-credentials defaults to merging into ~/.kube/config like real az aks does.

Lifecycle coverage

New full Docker image variant

Default moabukar/miniblue:latest stays scratch (~9MB). Real-backend users (ACI, AKS) can build the full target which adds the docker CLI:

docker build --target=full -t miniblue:full .
docker run -v /var/run/docker.sock:/var/run/docker.sock \
  -p 4566:4566 -p 4567:4567 -e AKS_BACKEND=k3s miniblue:full

Other changes

• New dedicated CI pipeline .github/workflows/aks-e2e.yml that runs Terraform apply against the AKS example and a real-backend k3s smoke (DinD on the runner) on AKS-touching PRs and push to main
• Resource group cascade delete now cleans up child AKS resources properly
• cmd/miniblue graceful shutdown propagates to AKS so k3s containers do not leak past miniblue's lifetime
• 27 services total (was 26); see azlocal health

Upgrading

docker pull moabukar/miniblue:0.6.0
brew upgrade miniblue

Try it:

azlocal group create --name myRG --location eastus
azlocal aks create --resource-group myRG --name dev --node-count 1
azlocal aks list --resource-group myRG

Known limitation

The real backend always runs k3s v1.30.14. If you PUT a cluster with a different kubernetesVersion the ARM response will echo it back but kubectl version will report the actual k3s version (a WARNING log fires when this happens). Per-version k3s images is on the roadmap for v0.7.

Bug fixes

• Fix container startup crash on fresh Docker runs. The scratch-based image runs as USER 65534 but had no writable home directory, so miniblue tried to mkdir /.miniblue and failed with permission denied. The image now ships with /home/nonroot owned by 65534 and HOME set so the cert dir can be created cleanly. (#110)
• Fix cert load when existing certs are unusable. When the cert directory existed but cert.pem/key.pem were missing, corrupted, or expired, miniblue would log.Fatal instead of regenerating. All those branches now fall through to generate a new cert. Thanks @KarasAlison. (#109)
• Bump github.com/go-sql-driver/mysql to v1.10.0. (#108)

CI

• E2E now builds the image from the PR's Dockerfile instead of pulling :latest from Docker Hub, so regressions are actually caught on the PR that introduces them. Failed startups also dump docker logs miniblue for diagnostics. (#110)
• Bump mislav/bump-homebrew-formula-action to v4. (#107)

Upgrading

docker pull moabukar/miniblue:0.5.1
# or
brew upgrade miniblue

New Azure Services

App Service & Web Apps (#103)

Full emulation of Azure App Service resources, contributed by @abusarah-tech:

• Web Apps (Microsoft.Web/sites) — CRUD, slots, publishing credentials, config sub-resources (app settings, auth settings v1/v2, connection strings, backup, logs, metadata, push settings, slot config names, storage accounts)
• App Service Plans (Microsoft.Web/serverFarms) — CRUD with SKU tier detection
• Container Apps (Microsoft.App/containerApps) — CRUD, start/stop, revisions, secrets, auth tokens, custom domain analysis, subscription-level listing
• Managed Environments (Microsoft.App/managedEnvironments) — CRUD with app logs configuration
• Container App Jobs (Microsoft.App/jobs) — CRUD, start/stop, executions, detectors, secrets
• Name Availability — CheckNameAvailability endpoint for sites
• azlocal CLI — New containerapp and containerapp env commands
• Terraform examples — New containerapps and webapps scenarios

The existing Azure Functions emulation has been refactored into the broader sites package.

Bug Fixes

Cert/key loading error handling (#105)

Improved error handling when loading existing TLS certificates and keys, giving clearer error messages when files are corrupted or unreadable. Fixes #104.

Full Changelog: https://github.com/moabukar/miniblue/compare/v0.4.4...v0.5.0