Should return release raw_version where possible if returning commit

[myarmolinsky]

i.e.

balena-supervisor/src/device-api/v2.ts

Line 157 in e36060a

'/v2/applications/state',

(if possible)

Forums thread: https://jel.ly.fish/support-thread-discourse-367420
Zulip thread: https://balena.zulipchat.com/#narrow/stream/346010-channel.2Fsupport/topic/curl.20supervisor.20endpoint.20with.20params

[jellyfish-bot]

[myarmolinsky] This has attached https://jel.ly.fish/f7466cce-927a-42dd-a31c-e4957ddd6a86

[pipex]

This requires an API change first, as the supervisor does not receive the version information via the target state

[rosswesleyporter]

Another customer requested this, specifically getting release semvar from Supervisor API. See https://balena.zulipchat.com/#narrow/stream/345882-_help/topic/get.20release.20semvar.20from.20Supervisor.20API.3F

[bbugh]

Also requesting this.

The thread on the forum suggests using the web API, but we need this during a runtime startup process. If we can get the information from the device itself rather than potentially derailing our startup process because a web API isn't responding, it would be a lot better for us.

[bbugh]

It looks like calling the web API also requires including the API token on the devices, but our devices are on-site for the customers. Including a web API token opens us up to security issues we'd rather not deal with.

[pipex]

@bbugh regarding security. Using the io.balena.features.balena-api feature label will give a service access to the device API key, which is what the supervisor uses to communicate to the API and has read-only permissions to the release entity.