Feature Requests

When a project is configured to use OIDC, it should be possible to use these credentials to pull a privates image(s) from GCR when starting the executor. Users currently have to pass in a long-lived service account key (image attached). OIDC can be setup for GCP (1), but private image pulls are not yet supported. (1) https://circleci.com/docs/openid-connect-tokens/#google-cloud-platform

Provide automation for blue/green releases. Validation of a release would be based on a set of one or more user specified SLOs The failure to meet any one of the defined SLOs would cause the release to be immediately rolled back Rollbacks could trigger a CCI pipeline and/or call a user specified webhook or webhooks

CF has an out of the box ArgoCD integration that makes things like Canary deploys to k8s very simple. https://codefresh.io/docs/docs/integrations/argo-cd/