Skip to content

Release History

Auto-generated from CHANGELOG.md.

Frozen at v1.89.0. Release notes for later versions are on GitHub Releases — the release job no longer commits to main, so the required checks can be enforced (#215).

1.89.0 (2026-09-27)

Features

  • apps-platform: redis-stack as a selectable component (#549) (ecffca4), closes #325

1.88.0 (2026-09-26)

Features

  • homerun2: profiles/sops, the whole sops stack as one profile (#543) (69eb39f)

1.87.0 (2026-09-26)

Features

1.86.1 (2026-09-25)

Bug Fixes

  • tabletennis: roll schmetterpause when its ConfigMap or Secrets change (#540) (59a837f)

1.86.0 (2026-09-25)

Features

  • tabletennis: schmetterpause v0.14.0 and zaehlwerk v0.6.0, an observer keeps score (#537) (99c257b), closes #431

1.85.0 (2026-09-25)

Features

1.84.0 (2026-09-25)

Features

  • homerun2: notification-catcher on bundle clusters, table tennis results to Teams (#532) (ae2389f), closes 43/#44 #431

1.83.0 (2026-09-25)

Features

1.82.1 (2026-09-25)

Bug Fixes

  • homerun2: the smoke test waits for the bumped version before it passes (#529) (9657b9d), closes #432 #432

1.82.0 (2026-09-25)

Features

  • tabletennis: scoreboard and handover under sops, and guards for the wrong mode (#528) (31ef3b6), closes #526

1.81.0 (2026-09-25)

Features

  • tabletennis: a sops path next to eso, profiles/sops (#525) (6f9f436), closes #483

1.80.4 (2026-09-25)

Bug Fixes

  • tabletennis: point schmetterpause's QR codes at its real hostname (#527) (ec26eb4), closes #525

1.80.3 (2026-09-25)

Bug Fixes

  • crossplane-capabilities: pass the harvester-demo variables through to the child (#520) (912fb33), closes #514

1.80.2 (2026-09-25)

Bug Fixes

  • schmetterpause: the backup alerts cannot stay firing on a flaky scrape (#519) (a5ba9e9)

1.80.1 (2026-09-24)

Bug Fixes

1.80.0 (2026-09-24)

Features

  • crossplane: catalog 0.10.0 — provider-minio gets its runtime config (#513) (7d2489c)

1.79.0 (2026-09-23)

Features

  • crossplane: catalog 0.9.0 — a provider may name a runtime config it does not own (#512) (c7d2aa3)

1.78.0 (2026-09-23)

Features

1.77.1 (2026-09-23)

Bug Fixes

1.77.0 (2026-09-22)

Features

1.76.4 (2026-09-22)

Bug Fixes

  • deps: update homerun2 wled-mock to v1.2.0 (#505) (7fb8915)

1.76.3 (2026-09-22)

Bug Fixes

  • deps: update homerun2 core-catcher to v1.0.6 (#502) (9782f7a)
  • deps: update homerun2 git-pitcher to v1.0.6 (#497) (2e079b2)
  • deps: update homerun2 k8s-pitcher to v1.0.5 (#498) (725b04c)
  • deps: update homerun2 led-catcher to v0.12.0 (#499) (9702f74)
  • deps: update homerun2 light-catcher to v1.2.0 (#500) (1ec75d0)
  • deps: update homerun2 omni-pitcher to v2.3.3 (#503) (4d50b34)
  • deps: update homerun2 scout to v0.11.6 (#504) (a7ba8a3)

1.76.2 (2026-09-21)

Bug Fixes

  • deps: update homerun2 demo-pitcher to v2.0.6 (#496) (cb63aab)

1.76.1 (2026-09-21)

Bug Fixes

  • deps: update homerun2 core-catcher to v1.0.5 (#495) (823707e)

1.76.0 (2026-09-20)

Features

1.75.1 (2026-09-20)

Bug Fixes

  • deps: update homerun2 led-catcher to v0.11.0 (#486) (895e840)

1.75.0 (2026-09-17)

Features

  • homerun2: base-demo-pitcher, completing the sops profile set (#482) (b4415a3), closes #479 #481

1.74.0 (2026-09-17)

Features

  • homerun2: base-light-catcher, the sops counterpart to platform's light-catcher (#481) (2760d50)

1.73.0 (2026-09-17)

Features

  • homerun2: base-led-catcher, the sops counterpart to platform's led-catcher (#479) (e629fbd)

1.72.0 (2026-09-16)

Features

1.71.2 (2026-09-14)

Bug Fixes

  • argo-cd: sweeper image needs a shell (#471) (48d8deb)

1.71.1 (2026-09-14)

Bug Fixes

  • argo-cd: sweeper namespace was never substituted (#470) (84be1c9)

1.71.0 (2026-09-14)

Features

1.70.0 (2026-09-14)

Features

  • tabletennis: schmetterpause monitoring, ported from the argocd catalog (#466) (10db79a)

1.69.2 (2026-09-14)

Bug Fixes

  • deps: align omni-pitcher and schmetterpause with the argocd catalog (#465) (c7976f9)

1.69.1 (2026-09-13)

Bug Fixes

  • deps: update homerun2 config-viewer to v0.2.3 (#460) (aaceba8)

1.69.0 (2026-09-13)

Features

1.68.7 (2026-09-13)

Bug Fixes

1.68.6 (2026-09-13)

Bug Fixes

  • deps: update homerun2 config-viewer to v0.2.2 (#455) (468e10a)

1.68.5 (2026-09-13)

Bug Fixes

  • deps: update homerun2 scout to v0.11.3 (#453) (4146ddf)

1.68.4 (2026-09-13)

Bug Fixes

  • deps: update homerun2 scout to v0.11.0 (#441) (840fe26)

1.68.3 (2026-09-12)

Bug Fixes

  • deps: update homerun2 git-pitcher to v1.0.3 (#445) (0e73cf1)

1.68.2 (2026-09-12)

Bug Fixes

  • deps: update homerun2 config-viewer to v0.2.1 (#447) (a451967)

1.68.1 (2026-09-12)

Bug Fixes

  • deps: homerun2 omni-pitcher v2.2.0 and scout v0.10.0 (#452) (b04da4b)

1.68.0 (2026-09-12)

Features

  • homerun2: scout v0.9.0, whose readiness follows its RediSearch index and aggregation (#448) (196a9cb)

1.67.3 (2026-09-12)

Bug Fixes

  • homerun2: demo-pitcher v2.0.3, which fails startup on an unknown PITCH_TARGET or DEMO_MODE (#446) (c7364fb), closes argocd#360

1.67.2 (2026-09-12)

Bug Fixes

  • homerun2: git-pitcher v1.0.2, demo-pitcher v2.0.2, k8s-pitcher v1.0.2, led-catcher v0.7.1, which survive a Redis that is not up yet (#443) (5bfb0a3)

1.67.1 (2026-09-12)

Bug Fixes

  • homerun2: notification-catcher v3.0.1 and scout v0.8.3, which survive a Redis that is not up yet (#442) (ed60dbb), closes #440

1.67.0 (2026-09-12)

Features

1.66.3 (2026-09-12)

Bug Fixes

  • homerun2: omni-pitcher v2.1.3, light-catcher and wled-mock v1.1.4, which stop the Redis wait on SIGTERM (#437) (6843b5d), closes #421 #399 #433 #433 #434

1.66.2 (2026-09-11)

Bug Fixes

1.66.1 (2026-09-11)

Bug Fixes

  • homerun2: the smoke test re-runs on component version bumps; drop the stale light-catcher renovate hold (#427) (960775f)

1.66.0 (2026-09-11)

Features

1.65.2 (2026-09-11)

Bug Fixes

  • homerun2: omni-pitcher v2.1.2 and core-catcher v1.0.2, with a startupProbe covering the Redis wait (#423) (f8d5a7b)

1.65.1 (2026-09-11)

Bug Fixes

  • homerun2: omni-pitcher v2.1.1 and core-catcher v1.0.1, which wait for Redis at startup (#420) (179b194)

1.65.0 (2026-09-11)

Features

  • homerun2: redis before the apps, base-routes split, zaehlwerk reloads its config (#417) (74d1223), closes #414

1.64.1 (2026-09-10)

Bug Fixes

  • homerun2: apply HTTPRoutes only after their Services exist (#416) (39ad76c)

1.64.0 (2026-09-10)

Features

  • homerun2: selectable on bundle clusters, credentials from a store, stale pins fixed (#413) (b4737b8)

1.63.0 (2026-09-10)

Features

1.62.3 (2026-09-10)

Bug Fixes

  • deps: update helm release openbao to v0.29.4 (#329) (dc05fea)

1.62.2 (2026-09-10)

Bug Fixes

1.62.1 (2026-09-10)

Bug Fixes

1.62.0 (2026-09-10)

Features

  • velero: add velero-eso, the velero component with credentials from a store (#408) (f1b8f5b)

1.61.0 (2026-09-10)

Features

  • tabletennis: give schmetterpause its CloudNativePG database (#407) (8c2dc94)

1.60.2 (2026-09-10)

Bug Fixes

1.60.1 (2026-09-10)

Bug Fixes

  • tabletennis: stop passing a null OMNI_PITCHER_URL, and make the checker see it (#405) (ccee700)

1.60.0 (2026-09-09)

Features

1.59.0 (2026-09-09)

Features

  • velero: a schedule component, separate from the install (#400) (ac17af3)

1.58.0 (2026-09-09)

Features

1.57.1 (2026-09-09)

Bug Fixes

  • velero: extraEnvVars is a list from chart 10.0.0 on (#396) (2e322d5)

1.57.0 (2026-09-09)

Features

  • tischtennis: schmetterpause + zaehlwerk as one platform component (#392) (43a1e77)

1.56.7 (2026-09-09)

Bug Fixes

1.56.6 (2026-09-08)

Bug Fixes

  • backstage: scaffolder needs --no-node-snapshot on Node 20+ (#390) (9ffd5cc)

1.56.5 (2026-09-08)

Bug Fixes

1.56.4 (2026-09-08)

Bug Fixes

1.56.3 (2026-09-07)

Bug Fixes

  • dapr: trust the cluster's own CA bundle instead of a seeded Secret (#387) (deb9718)

1.56.2 (2026-09-07)

Bug Fixes

  • backstage: point startupProbe at readiness, not liveness (#386) (1f9b8a3)

1.56.1 (2026-09-04)

Bug Fixes

  • crossplane: catalog 0.5.1 -- function-kcl back to v0.12.2 (#378) (7adafd3)

1.56.0 (2026-09-04)

Features

  • crossplane: catalog 0.5.0 -- the machinery functions move up (#377) (06ac16a)

1.55.5 (2026-09-04)

Bug Fixes

1.55.4 (2026-09-03)

Bug Fixes

  • backstage: the first upgrade of every install failed on the postgres secret key (#374) (b53b6f4)

1.55.3 (2026-09-03)

Bug Fixes

  • backstage: give the container requests, limits and a matching Node heap (#373) (351ffd8)

1.55.2 (2026-09-03)

Bug Fixes

1.55.1 (2026-09-03)

Bug Fixes

  • minio: thread MINIO_VERSION so a cluster can stay on chart 16 (#371) (0bfbeff)

1.55.0 (2026-09-03)

Features

  • backstage: add the platform-bundle component (#369) (16b00cf)

1.54.4 (2026-09-02)

Bug Fixes

1.54.3 (2026-09-02)

Bug Fixes

1.54.2 (2026-09-02)

Bug Fixes

1.54.1 (2026-09-01)

Bug Fixes

1.54.0 (2026-09-01)

Features

1.53.0 (2026-09-01)

Features

  • renovate: watch the KCL catalog pin the machinery profile is generated from (#360) (0a76c92)

1.52.0 (2026-09-01)

Features

  • sops-git: the age key, the git credential and the GitRepository (#361) (71c7c31)

1.51.0 (2026-09-01)

Features

1.50.0 (2026-09-01)

Features

1.49.2 (2026-09-01)

Bug Fixes

  • crossplane: a profile may not carry placement, so drop the two vsphere/tofu EnvironmentConfigs (#353) (88c5c73), closes #349 #349 #349

1.49.1 (2026-09-01)

Bug Fixes

  • hack: a pass-through that RENAMES the variable still wins, and was unchecked (#352) (232ae79), closes #337

1.49.0 (2026-09-01)

Features

  • crossplane: one CROSSPLANE_PROFILE selects the whole crossplane stack (#349) (67301e5), closes #342

1.48.0 (2026-08-31)

Features

  • crossplane: add machinery profile on the crossplane-configurations family (#342) (8dec027)

1.47.0 (2026-08-30)

Features

  • platform: declare the keys every substituteFrom Secret must carry (#334) (b48d3e6), closes #331

1.46.2 (2026-08-30)

Bug Fixes

  • ci: render spec.components, and stop reporting an empty render as clean (#338) (0ef6c9b), closes #336

1.46.1 (2026-08-30)

Bug Fixes

  • cicd: the dapr pass-through pinned 1.17.4 while the base moved to 1.18.3 (#336) (217458a), closes #287 #256

1.46.0 (2026-08-30)

Features

  • platform: komoplane, claim-machinery-api and clusterbook-operator in cicd; velero, sops-secrets-operator, cnpg-operator and pve-exporter in infra (#328) (5f53d9a), closes #320 #321 #322 #327

1.45.0 (2026-08-30)

Features

  • ci: two Kustomizations rendering one path must be wired the same way (#319) (02a5f30), closes #316 #317

1.44.3 (2026-08-30)

Bug Fixes

1.44.2 (2026-08-30)

Bug Fixes

  • cicd: argocd-platform and kargo were Ready but unreachable (#317) (53b7300)

1.44.1 (2026-08-30)

Bug Fixes

  • cicd: thread ISSUER_NAME through the kargo and argocd-platform components (#316) (448084b)

1.44.0 (2026-08-29)

Features

  • ci: catch the crossplane lock collision before it reaches a cluster (#309) (5d77328)

1.43.0 (2026-08-29)

Features

  • cicd: move machinery out of apps -- it is a Crossplane dashboard (#306) (797d409)

1.42.0 (2026-08-29)

Features

  • cicd: kro, kargo, argo-rollouts and vcluster are selectable from the bundles (#303) (0176c3e)

1.41.1 (2026-08-29)

Bug Fixes

  • deps: release the dependency updates sitting untagged on main (c204e68)

1.41.0 (2026-08-29)

Features

  • ci: catch the pass-through default that silently pins the old version, and let renovate move it (#299) (4339b1b)

1.40.0 (2026-08-29)

Bug Fixes

  • cicd: the provider versions the bundle pins were second copies nobody bumped (#297) (06c87ad)

Features

  • cicd: expose the ArgoCD cluster control plane as a cicd component (#298) (d4904ed)

1.39.2 (2026-08-29)

Bug Fixes

  • cicd: put the crossplane packages back on the registries their consumers declare (#296) (d4fe3a1), closes #294 #292 #294

1.39.1 (2026-08-29)

Bug Fixes

  • cicd: the workflow pod also needs a CA nothing creates (#295) (5228e3e)

1.39.0 (2026-08-29)

Features

  • cicd: dapr-workflows brings its own Redis and reads its secrets from Vault (#293) (a8005d3)

1.38.0 (2026-08-29)

Features

  • cicd: bring the crossplane packages current, on one registry, and let renovate keep them there (#294) (76563cf), closes #292

1.37.5 (2026-08-29)

Bug Fixes

  • cicd: one duplicate package takes every Crossplane package down with it (#292) (ba9c615)

1.37.4 (2026-08-28)

Bug Fixes

  • cicd: the tekton dashboard route is dead on every fresh install (#291) (3df2c2d)

1.37.3 (2026-08-28)

Bug Fixes

  • cicd: tekton and crossplane deadlock on a resource their own install creates (#290) (4fe852f)

1.37.2 (2026-08-28)

Bug Fixes

  • cicd: postBuild.substitute values that are not strings fail the whole bundle (#289) (ce8c783)

1.37.1 (2026-08-28)

Bug Fixes

  • rancher: give the install longer than Flux's 5m default (#288) (26bbfb6)

1.37.0 (2026-08-28)

Features

  • cicd: a cicd/platform bundle -- argo-cd, tekton, dapr, crossplane (#287) (8a335f2)

1.36.0 (2026-08-27)

Features

1.35.2 (2026-08-27)

Bug Fixes

  • minio: it needs cert-manager-install too (#285) (85ba105)

1.35.1 (2026-08-26)

Bug Fixes

  • clusterbook: PDNS_ENABLED needs a component, not a consumer variable (#284) (dc39db1)

1.35.0 (2026-08-26)

Features

1.34.0 (2026-08-26)

Features

1.33.1 (2026-08-26)

Bug Fixes

  • apps/platform: minio image tag, and vault cannot wait (#281) (5dad58b)

1.33.0 (2026-08-26)

Features

  • apps: an apps/platform bundle beside infra/platform (#280) (5835c74)

1.32.3 (2026-08-26)

Bug Fixes

  • prometheus-msteams: remove the legacy Teams proxy component (#278) (810276b), closes #147

1.32.2 (2026-08-26)

Bug Fixes

1.32.1 (2026-08-26)

Bug Fixes

  • clusterscope: drop the multi-repo OCIRepository and Kustomization (#276) (8eb6b9c)

1.32.0 (2026-08-26)

Features

  • apps: OpenBao with a real transit auto-unseal (#275) (cc5e405)

1.31.1 (2026-08-26)

Bug Fixes

  • argo-cd: stop forcing INGRESS_* on Gateway consumers (#274) (1a61d43)

1.31.0 (2026-08-26)

Features

1.30.0 (2026-08-26)

Features

  • platform: add external-secrets-vault-store component (#268) (1524396)

1.29.1 (2026-08-26)

Bug Fixes

  • platform: external-secrets passed a bool into postBuild.substitute (#266) (68cb314)

1.29.0 (2026-08-26)

Features

  • platform: add external-secrets and kube-prometheus-stack components (#264) (1647498)

1.28.1 (2026-08-25)

Bug Fixes

  • platform: the vault-issuer component had no kustomization.yaml (#263) (90288d3)

1.28.0 (2026-08-25)

Features

  • cert-manager: add the vault-issuer component and its bundle wrapper (#262) (4a71528)

1.27.0 (2026-08-24)

Features

  • platform: add flux-web and headlamp components (f252b41)

1.26.0 (2026-08-23)

Features

  • select infra/platform components via spec.components, add reloader (#259) (938c0dc)

1.25.0 (2026-08-23)

Features

  • add infra/platform bundle for single-Kustomization infra deployment (#258) (6fff4f8)

1.24.1 (2026-08-22)

Bug Fixes

  • renovate: unfreeze ghcr chart updates stuck on a missing releaseTimestamp (#235) (17016f9)

1.24.0 (2026-08-20)

Features

  • renovate: group homerun2 updates per component instead of one bulk PR (#212) (f8017ad), closes #206 #208

1.23.2 (2026-08-20)

Bug Fixes

1.23.1 (2026-08-20)

Bug Fixes

1.23.0 (2026-08-20)

Features

  • taskfile: add renovate check/lint/preview tasks, fix numeric substitution vars (#206) (8116d2a)

1.22.2 (2026-08-20)

Bug Fixes

  • renovate: make HelmRelease chart versions visible to Renovate (#203) (f1d7d54)

1.22.1 (2026-08-17)

Bug Fixes

  • tekton: default enable-api-fields to beta (#202) (95b56f2)

1.22.0 (2026-08-17)

Features

  • machinery: watch the VM kinds and AnsibleRun (#201) (db4d7a7)

1.21.0 (2026-08-17)

Features

  • sops-secrets-operator: a Flux app for the operator (#199) (e86e66d)

1.20.1 (2026-08-17)

Bug Fixes

  • openebs: make openebs-hostpath the default StorageClass (#198) (ab723c1)
  • tekton: disable Results by default, and stop feeding Triggers a value it rejects (#197) (b21eed8)

1.20.0 (2026-08-17)

Features

  • release: publish cicd/* as OCI artifacts too (#196) (0a63c80)

1.19.3 (2026-08-17)

Bug Fixes

  • machinery: grant the app permission to read the kinds it watches (#195) (a773411), closes #193

1.19.2 (2026-08-15)

Bug Fixes

1.19.1 (2026-08-12)

Bug Fixes

  • openebs: disarm the observability stack before it can arrive (#192) (41dcbb3)

1.19.0 (2026-07-25)

Features

  • cert-manager: make the base controller-only, AppRole issuer opt-in (e383921)

1.18.3 (2026-07-22)

Bug Fixes

  • openebs hook image must ship a shell, not just kubectl (#189) (0f59096), closes #188

1.18.2 (2026-07-22)

Bug Fixes

  • unbreak openebs upgrades, hook image is gone from docker.io (#188) (7a63477)

1.18.1 (2026-07-15)

Bug Fixes

  • ci: run OCI push despite skipped release on manual dispatch (d237ad0)

1.18.0 (2026-07-15)

Features

  • ci: add workflow_dispatch backfill to push all OCI artifacts (254bed2)

1.17.0 (2026-07-15)

Bug Fixes

  • ci: use static job name for OCI push matrix job (2cf49d1)

Features

  • ci: publish apps/infra as Flux OCI artifacts on merge to main (6022f43)

1.15.0 (2026-06-08)

Features

  • add argocd-platform overlays (network-only + sthings-lab) (97a3215)
  • claim-machinery-api: opt into Stakater Reloader for ConfigMap/Secret changes (#171) (d06790e)

1.14.1 (2026-06-07)

Bug Fixes

  • backstage: generous startupProbe for first-boot DB migration (42cf6dd)

1.14.0 (2026-06-07)

Bug Fixes

  • argocd-platform: don't thread boolean through nested substitute (ba3e853)
  • argocd-platform: quote substitute values in ks-argo-cd (21a6ec5)
  • backstage: drop duplicate POSTGRES_* env vars (#168) (267a2c7)
  • backstage: use bundled PostgreSQL instead of better-sqlite3 (c4f65c5)
  • stop semantic-release asset-name collision in .releaserc (#160) (ae840d7)

Features

  • add stakater reloader (infra) + auto-reload backstage on config change (685dfa2)
  • argocd-platform: bundle the ClusterbookProviderConfig (substitutable) (aaed369)
  • claim-machinery-api: composable profile path via variable substitution (52c5b73)
  • clusterbook-operator: add parameterized providerconfig base (5bb91d5)

1.13.0 (2026-06-05)

Bug Fixes

  • create pgvector extension in the application database (adb8519)
  • stop autounseal from co-owning the vault namespace (#155) (d3f4689)

Features

  • add argocd-platform bundle (argo-cd + clusterbook-operator + config) (83516b8)
  • add DD-WRT support to clusterbook and bump to v1.25.7 (#154) (11bd465)
  • add pgvector Postgres (CNPG) for Backstage RAG-AI plugin (f3a313d)
  • make argocd-platform platforms opt-in via kustomize components (#158) (ffb5c9f)

1.12.0 (2026-06-01)

Bug Fixes

Features

  • apps/rancher: add Rancher app with HTTPRoute and private CA support (a779c31)
  • rancher,trust-manager: source rancher privateCA tls-ca from trust-manager (8a2dbaa)

1.11.0 (2026-05-26)

Bug Fixes

  • notification-catcher: pin REDIS_STREAM=messages (#145) (6a4a1f7)

Features

Reverts

  • backstage: disable OIDC env wiring — Backstage v1.4.0 image broken (#144) (ac9cc97), closes #141

1.10.0 (2026-05-22)

Features

  • prometheus-msteams: add Teams proxy, route Alertmanager via it (#139) (098a129)

1.9.0 (2026-05-22)

Features

  • kube-prometheus-stack: route warning|critical alerts to MS Teams (#138) (389c876)

1.8.1 (2026-05-22)

Bug Fixes

  • kube-prometheus-stack: raise Grafana memory limit to stop OOMKill (#137) (a199cfb)

1.8.0 (2026-05-22)

Features

  • kube-prometheus-stack: add observability stack component (#136) (d1c2347)

1.7.0 (2026-05-17)

Features

  • velero: bake trust-bundle mount into base, gate via SSL_CERT_DIR (#127) (8a8a3ff)

1.6.0 (2026-05-17)

Bug Fixes

  • argo-cd: add --insecure flag for TLS-terminating gateway support (41bc991)
  • argo-cd: escape shell ${} in CMP generate scripts (7787f3c)
  • argo-cd: fix AVP discover command for CMP auto-discovery (af4b0e2)
  • argo-cd: use BusyBox-compatible find|xargs grep for AVP discover (343f408)
  • argo-cd: use grep -rl for AVP discover command (f9ff614)
  • bind daprd sidecar HTTP API to 0.0.0.0 on template-execution (e0ac661)
  • cert-manager: quote substitution placeholders in extra-certificate (#102) (6b9eba9)
  • cert-manager: split wildcard prefix out of EXTRA_CERT_COMMON_NAME (#103) (22147bc)
  • clusterbook-operator: mount cluster-trust-bundle for TLS verify (f81625c)
  • flux-web,nfs-csi: add missing Namespace to requirements.yaml (6439960), closes #40
  • harbor: route API paths to core, UI to portal in HTTPRoute (c3547c4)
  • harbor: use OCI HelmRepository for bitnami charts (facf44d)
  • minio: re-add allowInsecureImages for custom ghcr.io images (49dac17)
  • minio: remove MINIO_SERVER_URL and BROWSER_REDIRECT_URL env vars (8e93e88)
  • minio: update default image tag to available ghcr.io tag (8e76414)
  • mount backstage-ca Secret into template-execution workflow (f99b4a3)
  • mount MACHINERY_CONFIG as volume instead of env value (d54cf1d)
  • rename DAPR_SERVICE_TOKEN to EXTERNAL_ACCESS_TOKEN (#85) (e2e9cee)
  • split backstage-ca patch into delete+add for source swap (f858071)
  • strip backstage-ca volume/mount/env until a real CA is provided (d88d907)
  • tekton: remove default-image-pull-policy — not valid in TektonConfig v0.79.0 (3a5c68f)
  • tekton: remove pruner.keep — mutually exclusive with keep-since (de154e7)
  • use dedicated variable for OpenTofu provider version (a234050)
  • velero: override CRD-install hook kubectl image to bitnamilegacy (#123) (5ad47d9)
  • velero: use literal cloud-credentials Secret name (#124) (a95f779)
  • velero: use plain Secret manifest instead of sthings-cluster helper (#122) (45a0c87)

Features

  • add argo-rollouts cicd app (#88) (3c9a4bf)
  • add cicd profile, scout to core, cleanup helmfiles and argo-cd (b5193a3)
  • add clusterbook-operator flux app (c0614d2)
  • add dapr infra kustomization (#83) (06f3e46)
  • add dapr redis-stack component for statestore backend (3f6e15e)
  • add dapr-backstage-template-execution flux app (#86) (bc893e0)
  • add dapr-workflow-service external access token for backstage (#84) (8ffff84)
  • add image tag and digest substitution vars to backstage release (7ce4354)
  • add kargo helm app (#87) (1b0fe68)
  • add kro infra component for ResourceGraphDefinition support (ad0438b)
  • add MACHINERY_CONFIG env var patch for custom resource config (b6b2915)
  • add run-things flux app (1cd874c)
  • add tekton ci-namespace component to skip pruner (efee999)
  • argo-cd: add AVP demo manifests for testing Vault secret injection (1e00060)
  • argo-cd: bump to 9.4.15, update AVP sidecar, add HTTPRoute component (52904ec)
  • argo-cd: mount trust-manager CA bundle in AVP sidecars (6528cf7)
  • argocd: add cilium app-of-apps + ApplicationSet under tests/argocd/cilium (#91) (29f521c)
  • argocd: add SOPS CMP sidecar as second secret-handling option (#97) (53b6602)
  • argocd: bump AVP image to include kustomize (#94) (ec818ae)
  • argocd: mirror cert-manager, openebs, nfs-csi under tests/argocd (#92) (24041dd)
  • argocd: mirror kro and tekton under tests/argocd (#93) (1213a21)
  • cert-manager: bump default version to v1.19.2 (b101edf)
  • clusterscope: add multi-repo OCIRepository + Kustomization (suspended) (d1ea127)
  • clusterscope: add optional HTTPS auth env vars for git-sync (f8cc955)
  • clusterscope: bump to v0.20.2, enable git-sync auth, add live mode hint (0fc5c3b)
  • consolidate dapr flux manifests under apps/dapr collection (7812034)
  • crossplane: fix configs component kind and add READMEs with Flux Kustomization examples (73bdf26)
  • harbor,cert-manager: https externalURL + extra-certificate component (#101) (ce6d4c4)
  • harbor: add flux app with ingress and project-proxy component (fede33d)
  • harbor: add HTTPRoute support and configurable exposure type (34f8651)
  • homerun2: add core profile with redis-stack, omni-pitcher, core-catcher (f79fde2)
  • minio: add Gateway API HTTPRoute component, fix minor issues (ae79cba)
  • parameterize dapr statestore redis host via DAPR_BACKSTAGE_TPL_REDIS_HOST (2b207b7)
  • split homerun2 profiles - cicd only git-pitcher, rename core to base (51edcf2)
  • tekton: add dashboard-httproute component for Gateway API access (5c5d163)
  • tekton: add imagePullPolicy and disableInlineSpec to TektonConfig (0dd9703)
  • tekton: replace Helm chart with vendored Tekton Operator v0.79.0 manifests (e4caa19)
  • update claim-machinery-api default version to v0.21.1 (f0bc7a1)
  • velero: add infra/velero base with S3/MinIO + optional ESO (#119) (1552f00), closes #115
  • velero: add trust-bundle component for self-signed S3 endpoints (#121) (19abae3)
  • wire argo-rollouts ui extension into argocd (#89) (3753566)

1.4.0 (2026-03-16)

Bug Fixes

  • add AUTH_TOKEN env var to demo-pitcher from omni-pitcher secret (#63) (3a26ee6)
  • add connection retry logic to uptime-kuma setup job (178bd96)
  • add HTTP port patches for machinery service and deployment (1b69baf)
  • add kubernetes.yaml config to enable cluster widgets (4662458)
  • add missing kustomization.yaml to apps/vcluster (ee6c9b8), closes #35
  • add NetworkPolicy to allow gateway ingress to flux-web (8430ce1)
  • add profile ConfigMap delete patch to light-catcher component (c2745bc)
  • add REDIS_PASSWORD env patch to omni-pitcher and core-catcher (3bccaf0)
  • add server command arg to claim-machinery-api deployment patch (89369a5)
  • correct dagger sops encrypt command in homerun2 and redis-stack docs (883fb8f)
  • correct Flux variable substitution syntax across all components (2f3e4e7), closes #36
  • correct omni-pitcher HTTPRoute port and add homerun2 docs (760add9)
  • correct service name in backstage httproute (8a6f004)
  • default machinery version to v1.0.0 (726925c)
  • escape shell variables in redis-stack start scripts for Flux envsubst (72d6f5e)
  • fix vault httproute backend service name and remove unsupported dev mode values (871c1d3)
  • force string type for backstage image tag (9759374)
  • hardcode wildcard prefix to avoid envsubst star substitution issue (ddf4550)
  • main (b6a6dd8)
  • main (c7cb04d)
  • make OCIRepository API version configurable via FLUX_SOURCE_API_VERSION (8832f7a)
  • patch Redis secrets instead of env vars for password injection (26e5499)
  • quote wildcard DNS name to prevent YAML alias parse error (d192faf)
  • remove accepted_statuscodes from monitors config (a1582c9)
  • remove image tag from pre-release ConfigMap (46a2cc5)
  • remove trailing slash from OMNI_PITCHER_URL (#61) (0a5eb45)
  • set explicit ghcr.io image for vault to avoid docker.io pull failure (f4decc5)
  • set OMNI_PITCHER_API_PATH=pitch for demo-pitcher (#59) (78a9f62)
  • set OMNI_PITCHER_URL and PITCH_TARGET for demo-pitcher (#60) (142fd57)
  • set vault-autounseal helm repo URL default (85b8091)
  • skip TLS verification for claim-machinery proxy endpoints (93f8b48)
  • update cert-manager component to Flux v2.8 API versions (1546936)
  • use chart-native HTTPRoute for flux-web and disable networkPolicy (f274844)
  • use chart-native HTTPRoute for headlamp instead of custom one (413a46e)
  • use CILIUM_GATEWAY_DOMAIN to avoid wildcard envsubst issue (bc9ca35)
  • use CLAIM_MACHINERY_PROFILE_PATH instead of inline TEMPLATE_PROFILES (9f388a9)
  • use port 80 for core-catcher HTTPRoute and delete KCL HTTPRoute (79c6cb4)
  • use public claim-machinery-api repo URL for profile (0ff6a82)
  • use secret source type instead of inNamespace in trust-manager Bundle (b0461a4)
  • use shared omni-pitcher auth token for k8s-pitcher (03b306e)
  • use SSL_CERT_FILE instead of SSL_CERT_DIR for demo-pitcher (#62) (7fed2a2)
  • use valuesFrom targetPath for image tag string type (5bf078e)

Features

  • add backstage flux app (299963f)
  • add Backstage-compatible TechDocs and GitHub Pages workflow (afc0d5d)
  • add cert-manager install + selfsigned components (209d815)
  • add cilium infra app with component-based booleans (b1f8520)
  • add claim-machinery-api flux app with OCI kustomize + Gateway API (64c97e9)
  • add cluster-admin ClusterRoleBinding for headlamp (46c7833)
  • add configurable template profile patches for claim-machinery-api (45bd001)
  • add core-catcher component to homerun2 flux app (f90c80a)
  • add custom Renovate managers for Flux variable substitution defaults (92e19e0)
  • add demo-pitcher flux component for homerun2 (1c1bff6)
  • add flux-web standalone app and bump nfs-csi to v4.13.1 (eb4c331)
  • add headlamp app and READMEs for homepage and uptime-kuma (90f5b00)
  • add homepage flux app with Gateway API HTTPRoute (6f0f34b)
  • add homepage services, settings, bookmarks, and widgets config (a43c6be)
  • add homerun2 flux app with kustomize components pattern (7e51c18)
  • add homerun2 notification variables to claim-machinery-api (4b4356c)
  • add homerun2-k8s-pitcher Flux component (e26a03f)
  • add HTTPRoute for prometheus UI (2933a83)
  • add komoplane crossplane UI to cicd apps (#48) (c974640)
  • add light-catcher and wled-mock flux components for homerun2 (a01b865)
  • add machinery Flux app (ff633e8)
  • add optional autounseal and httproute components for vault (fde825b)
  • add pitcher auth token patch and CA cert trust for claim-machinery-api (7de69d1)
  • add PowerDNS integration and HTTPRoute to clusterbook Flux app (da718f5)
  • add prometheus app and enable headlamp prometheus plugin (17e5244)
  • add README for headlamp app (92214b7)
  • add README for prometheus with PromQL examples (510f046)
  • add scout component to homerun2 Flux app (cd464a0)
  • add separate kustomize version variable for core-catcher (67bc495)
  • add standalone redis-stack flux app and update skill with README requirement (c2d0d94)
  • add TLS trust bundle patch for demo-pitcher component (#57) (8ed0846)
  • add TLS trust bundle patch for scout component (#58) (2473ebf)
  • add trust bundle, profile CM override, and docs for k8s-pitcher (1893388)
  • add trust-manager infra component with Bundle for CA distribution (01b8448)
  • add uptime-kuma flux app with HTTPRoute (b330eb3)
  • add uptime-kuma setup job for monitors as code (291fa44)
  • add vault infra app with gateway HTTPRoute (18210cf)
  • add Vault PKI CA as additional source to trust-manager Bundle (cc46f75)
  • add webhook containerPort patch to k8s-pitcher component (6869b8c)
  • auto-generate uptime-kuma admin password and ignore TLS (c659862)
  • feat/update-crossplane-app (fe13d3b)
  • main (bc8fb7e)
  • main (b9e813d)
  • main (42d6874)
  • main (9600baf)
  • main (8c888a0)
  • main (3015222)
  • main (127b2f6)
  • main (11a2260)
  • main (93a3ad0)
  • main (530aaa4)
  • main (089d051)
  • main (a3ef3fd)
  • main (7fae236)
  • main (1259657)
  • main (464dbff)
  • main (e3389f6)
  • main (5898667)
  • main (c485d2b)
  • main (6f92faa)
  • main (fa8bed2)
  • main (055cb3e)
  • main (776271a)
  • main (4764c8f)
  • main (2f23d67)
  • main (b8025a9)
  • main (731c5c8)
  • main (a80c3ea)
  • main (f5458ff)
  • main (a61bb20)
  • main (5445eab)
  • main (383173d)
  • main (42450ac)
  • make wildcard cert issuer configurable via CERT_MANAGER_SELFSIGNED_ISSUER (fb63cb7)
  • move homerun auth token from ConfigMap to Secret (877a5f2)
  • restructure crossplane to use kustomize components pattern (aea6919)
  • switch claim-machinery-api TLS trust from direct secret to trust-manager bundle (c6b983b)

1.3.0 (2025-10-07)

Bug Fixes

Features

1.2.1 (2025-02-12)

Bug Fixes

1.2.0 (2025-02-12)

Bug Fixes

Features

1.1.0 (2025-02-03)

Features

1.0.0 (2025-01-07)

Features

  • added release config; initial release (7d4483d)