CHANGELOG.md

0.18.0 (2026-03-18)

Bug Fixes

• common-server: race-condition and security improvements (#272) (9d08e02)
• gateway: add deny-all sentinel to ACL plugin when no consumers exist (#277) (0dd6017)

Features

• common-libs: improve error handling, add feature flags, and fix logger type (#260) (03165a0)
• common-server: unify latency format in logs (#267) (5fbb19e)
• gateway: add buffering config, dynamic upstream, access control fix, and secret-manager integration (#259) (719c58f)
• introduce event-driven communication to the control plane (#265) (f1ed1f5)
• rover-ctl: add EventSpec handler, env placeholder substitution, and HTTP client improvements (#264) (f15e0f7)
• rover-ctl: support for get-info-many cmd (#246) (1d9f194)
• secret-manager: add write strategy support and improve caching (#263) (3f311bf)

0.17.0 (2025-11-28)

Features

• notification: improve notifications and minor features like housekeeping, custom funcs etc (ad58f6c)

0.16.0 (2025-11-27)

Bug Fixes

• install: add missing notification in local install (#226) (3f5cc2d)
• k8s-authz-mdw checks aud-claim correctly; updated default aud-claim; added unit-tests (9b43a9c)
• k8s-authz: updated file-manager audience; added option to set audience (09fa2db)
• rover-ctl: correctly append the expected base-path if not provided in the server-url (#231) (2b30a29)
• rover: improve error-handling for application-secret deletion (#237) (a2fa10e)
• secret-manager: improved api error-handling for get and set (#228) (430c9d2)

Features

• rover: added stricter validation for naming of objects (#236) (9010ad4)

0.15.0 (2025-11-18)

Bug Fixes

• ci: correctly escape semantic-release notes (066fb80)
• ci: correctly escape semantic-release notes using heredoc (87ff030)
• correctly set api-spec-name in swagger; api-spec-name must be all-lower-case (#196) (32eca4c)
• identity remove SetStatusProcessing(...); common-server: enhance client-metric if no response from server (#218) (4d72987)
• install: correctly add labels to label-selector in servicemonitor (#189) (ca41088)
• organization: support setting of team-secret value (#200) (8b1db7e)
• secret-manager: fix race condition when using backend-cache (#201) (93aaa09)

Features

• add notification for organization and approval (#194) (785def5)
• errors: implement specialized error types and handling for controllers (#204) (179feae)
• file-manager: Add DELETE operation for files (#182) (de1afe6)
• improved approval-builder; improved conditions; refactored validation in all api-handlers (#223) (8162b88)
• major improvements in regards to migration; added e2e-tester tool; improved snapshotter-tool (#205) (461a0a6)
• rover-server: integrate delete API from file-manager (#191) (2fd9c63)

0.14.0 (2025-10-01)

Bug Fixes

• changes from debs (#187) (618bc6d)
• ci: build image in PRs (#179) (2491c0f)
• improve memory-usage for inmemory-store (#180) (919c549)
• resolve reconciler loops in organization + identity (#178) (0504b8e)

Features

• circuit-breaker: add the circuit breaker feature (826bcaf)
• moved entire controlplane into single namespace (#183) (d646615)

0.13.0 (2025-09-24)

Bug Fixes

• admin: added missing link to team-api-issuer to zone-status (#163) (33f61ac)
• route-tester: Fix accesstoken import because it was moved from secret-manager to common-server (#161) (ea4c310)

Features

• added api-category crd to enforce conventions for different api types (#167) (a5e68d6)
• organization: add prefix to token, add token_url + server_url to token (#168) (60cf199)
• rover-ctl: improved debug-info about user to printed banner (#169) (20e0d02)
• secret-manager: added support for setting onboarding secret-values for team and environment (#164) (7e14901)

0.12.1 (2025-09-08)

Bug Fixes

• rover-ctl: correctly map security object for oauth2 and basicauth (#158) (68b4dee)

0.12.0 (2025-09-05)

Features

• add new component rover-ctl (#119) (5dd6c1f)
• file-manager: switched to sha256 checksum alg; added example for minio standalone server; updated credentials for buckets-backend; (#140) (f9f7e97)
• rover: File Client Integration (#143) (74e42d9)

0.11.0 (2025-08-25)

Features

• client-metrics: added metrics to gateway kong-client; updated common-client for options-pattern; updated secret-manager client metrics (#137) (2a3250f)

0.10.0 (2025-08-20)

Features

• add rate-limiting (#114) (d3eec5b)

0.9.0 (2025-08-19)

Bug Fixes

• admin: correct creation of team-routes (#118) (1807f4b)
• file-manager-api: correct token-path for client-jwt (86cf202)
• gateway: fixed bug where acl was not created; only consumers that are not being deleted are considered; removed obsolete code (#126) (a722062)
• organization: register Prometheus metrics for secret manager communication (#96) (ef65e15)
• secret-manager: exit application on fatal error when init secret-manager; changed localhost default url; skip-tls-verify=true for localhost (#125) (1f878ba)
• security: bump fiber to v2.52.9 (#121) (6cd38cb)

Features

• add trusted teams (#98) (79e08f0)
• Added Private Key JWT feature (#95) (89a5698)
• added rover-server; improved rover-wehooks; improved secret-manager; fixed minor issues in other domains (d27b183)
• file-manager: Add a file-manager client and server based on the OAS (#108) (b9279fd)
• install-local: Add installation and quickstart guide for the controlplane in a local environment (#83) (4d01f17)

0.8.0 (2025-07-22)

Bug Fixes

• api: correct handling of failover edge cases; correct handling of api-exposure default scopes (#87) (859bffb)

Features

• add unified configuration options for reconciler with spf13/viper as ENVs (#90) (0d2091a)
• added basic-auth feature (#88) (5cf41c0)
• added ip-restriction feature; refactored feature-builder to support consumer-features (#89) (5a6aa2f)
• remove-headers: Added remove-headers feature (#91) (4ab4b60)
• secret-manager: add cache metrics for cache hits and misses (#81) (902666f)

0.7.0 (2025-07-14)

Bug Fixes

• added disable-access-control; refactored custom-scopes (4873006)

Features

• added failover feature (#77) (75981ef)
• default-scopes: Added provider default-scopes (58026c6)
• externalIDP: add external idp feature to api, gateway, rover (#78) (6c185c4)
• loadbalancing: Add loadbalancing feature in the gateway domain using Upstreams in the RouteSpec (eb3c625)
• loadbalancing: Add validation for load-balancing in rover webhook (#82) (d22d198)

0.6.0 (2025-07-14)

Bug Fixes

• add update_install.sh (#70) (989c9fb)

Features

• visibility: add Zone visibility feature (e24a881)

0.5.0 (2025-07-03)

Bug Fixes

• secret-manager: k8s jwks; bouncer for deletion; system certpool (#58) (55f313b)

Features

• codeql: Use go build ./... for codeql to make sure all sources are compiled for analysis (#63) (2fa5b15)
• tool: added snapshot tool (#49) (019a771)

0.4.0 (2025-06-11)

Features

• installation: added installation script and instructions; smaller code-adjustments to support installation (6b54c63)

0.3.0 (2025-05-28)

Bug Fixes

• deps: bump github.com/gofiber/fiber/v2 from 2.52.6 to 2.52.7 (#27) (2a0696e)
• include the approval api in the operators go mod file (1a0a13a)
• kubebuilder: correct group-names; correct paths and repos; rover-deps (d9a19ef)
• run go mod tidy (c6f865e)
• temporary fix for tests until common testutils are fixed (9edf075)

Features

• add admin domain (api and config pkg) (61fb9b9)
• add api submodule in organization (afab5d1)
• add approval domain (9d089cd)
• add go.sum.license for go.mod in admin domain (ef30ffc)
• add identity domain (#23) (3bd1207)
• add organization domain (0f78bfe)
• add organization domain in goreleaser for kos (63f7273)
• added gateway module (#30) (5c1a643)
• adjust go.mod and paths after rebase (cc325b6)
• admin: WIP add admin operator (3ff51d7)
• api: WIP add api operator (421c5d3)
• application: WIP add application operator (5e0cb32)
• rover: add integration with the secret manager (c3b4c20)
• rover: fix import path for secret manager (mistake) (3337b83)
• rover: WIP add rover operator (30debe3)

0.2.1 (2025-05-20)

Bug Fixes

• goreleaser: correct base-image; added opencontainers labels (#14) (80fdae9)

0.2.0 (2025-05-19)

Bug Fixes

• reuse: added license headers to common-server/pkg (4a3d611)

Features

• added shared modules for common, common-server and secret-manager (#7) (6af3eae)