cloud-configuration/CHANGELOG.md

Changelog

0.1.0 (2025-08-09)

Added

• Add basic setup for Payload CMS (575a6a2)
• Add deployment to Docker swarm (ba7b840)
• Add keycloak role that creates the initial setup (b052116)
• Add timetable helm chart and argo application (36686dc)
• Add workflow to update nginx-proxy once a week to accommodate new certificates (f608a2e)
• cluster_setup: Use secret in multiple namespaces (2b606fb)
• prometheus: Enable grafana sign in with Keycloak (62e3a61)
• routing: Add routing chart and deployment (bda63b4)
• setup: Add support for ecr token helper (9cf52ee)
• template: Add ability to configure volumes (da37575)
• template: Add support for leader election (7b31ab7)

Changed

• Always deploy if manually started and requested (f1930ec)
• Call create-nginx from deploy and run it standalone only for changes to nginx itself (99548d8)
• prometheus: Add ingress for grafana (e171a62)
• prometheus: Enable thanos for prometheus on monitoring as well (15661ee)
• Remove kafka, zookeeper, configserver and routing from cluster (6c00d86)
• routing: Use correct repository (60bf989)
• Set security context by default to restrictive values (d94fa69)
• Set security context by default to restrictive values for argo deployments (1cf2c14)
• template: Set security context by default to restrictive values (2bc1d19)
• thanos: Add thanos endpoint of monitoring cluster (0b48a5a)
• Use pkce and refresh tokens (725a511)
• wahlrecht: Add Kafka back (9d7a883)

Fixed

• Add arm platform (7b7de66)
• Add CMD which apparently was missing (fda1683)
• Add empty line at end (b8099bf)
• Add environment variable for wahlrecht (ac45bfa)
• Add missing if conditions (eccc937)
• Add missing permissions (9a9b1dc)
• Add missing secrets for Bahn API (669f9b8)
• Add missing step to deploy (dfcdd98)
• Add paths for documentation for timetable (47d869d)
• Add provenance (836d204)
• Add writable volume to /etc/kafka (b49c5ca)
• Allow timetable namespace (d0d80e3)
• Api-docs prefix should end without slash (124d0ee)
• argocd: Fix URL of cloud configuration (92831a5)
• Call original entrypoint (7d66daf)
• Change path to repositories (b79b661)
• cluster_setup: Always use global namespace in helpers (1dcbf2b)
• cluster_setup: Pass correct context to helpers (65c2f40)
• configserver: Mount writable volume for tmp dir (322aa6e)
• configserver: Update template chart (319ecf7)
• Create missing directory (04a25ed)
• Create timetable namespace (eb87253)
• Deploy nginx using a stack file (ee41c1c)
• Don't create timetable namespace (done by cluster setup) (aa49e6e)
• Download configs again from git.2martens.de (968f568)
• Generate ssl certificates in builder image (e45f946)
• grafana: Fix keycloak realm (d31c01b)
• grafana: Fix path for role_attribute_path (c51e2a1)
• grafana: Locate roles of Grafana in JWT (e5461fd)
• Group if condition together correctly (aaee48d)
• hcloud: Add hcloud csi driver to monitoring (d8cfc3a)
• hcloud: Fix name of application (8594617)
• Include history in checkout (2c41ec3)
• kafka: Add writable volume to /var/log/kafka (5258897)
• kafka: Increase memory limit to 1Gi (6bfb4b2)
• kafka: Reduce retention time to 2 minutes (a003c00)
• kafka: Update template chart (72ad9f7)
• kafka: Update values (341bcc2)
• kafka: Update values file (d546986)
• Make sure secret for timetable is added (9d3b0b5)
• Only deploy nginx on Swarm managers (d9e5628)
• Only trigger deploy job in main branch (29070af)
• Pass in secret via env config (ef148c6)
• Pre-create directory certificates-enabled.d (9b9e340)
• Prevent garbage connection string (f1bd0e4)
• Prevent syntax error and load self-signed certs (408a0a4)
• prometheus-adapter: Use updated name for prometheus (7e1863c)
• prometheus: Actually mention secret name (7671ffb)
• prometheus: Added missing root_url property (79e8648)
• prometheus: Allow observability for vault-secrets operator (db7ecd0)
• prometheus: Provide storage handle (b441481)
• prometheus: Refer to env variables in config (127a45c)
• prometheus: Updated chart lock files (01b68cd)
• prometheus: Use correct ingress class name (d546168)
• prometheus: Use correct IP for monitoring cluster and enable prometheus adapter (5c269c7)
• prometheus: Use different name for observability prometheus (6e600ac)
• Reference workflow from extra job (1db1676)
• Remove intermediate directory as it does not exist (b391c38)
• Remove intermediate directory at other place (792762b)
• Remove trailing slash for proxy_pass (859973d)
• routing: Add reference to secret containing the image pull credentials (b8a6232)
• routing: Allow gti path (e0c9121)
• routing: Disable vault (3891e10)
• routing: Enable vault (34fb364)
• routing: Use public registry (2fa5d63)
• routing: Use version 0.5.1 of the template (b04ac23)
• Search config on github (efbc3af)
• Setup buildx to support multi-platform (60e3a11)
• setup: Fix configuration for ecr credential helper (0d2139f)
• setup: Fix configuration for ecr credential helper (7df212a)
• setup: Use single-line command (8aa4c92)
• Skip environment if it wasn't changed (126cd0e)
• Start nginx with self-signed certs until real certs are available (a89394d)
• template: Add missing permissions for leader role (a598fbe)
• template: Don't print empty lists (7097564)
• template: Fix whitespace problem (f96ab5e)
• template: Mount emptyDir volume for tmp directory (8a3fd6f)
• template: Move leader role template to root folder (4dc3d72)
• thanos: Decrease sync block duration to every 2 hours (332612a)
• thanos: Reduce polling frequency (8accf1c)
• thanos: Remove invalid flag (2464650)
• thanos: Remove receive ingestor endpoint (2eedc90)
• thanos: Remove useless parts (d761291)
• thanos: Revert previous wrong change (1b9dd83)
• thanos: Use correct name for secret (420ba84)
• thanos: Use correct port for thanos query (3f1534e)
• thanos: Use correct thanos port (55fc673)
• thanos: Use routable endpoint (f4b86f4)
• thanos: Use shortened endpoint name (c0d8d66)
• thanos: Use updated thanos discovery endpoint (3e6c9b7)
• timetable: Add missing ingress prefix for stations (3598f75)
• timetable: Add missing permissions for leader role (98c36cd)
• timetable: Add missing role for leader election (394c583)
• timetable: Enable leader election (7efcf8e)
• timetable: Remove trailing slash for api docs (6388d5a)
• timetable: Update template chart (ba3b83a)
• timetable: Update template chart (2c45ae3)
• Use --detach=false (bcc3f12)
• Use actions from Docker for publishing image (efa3119)
• Use correct service name (ea4d287)
• Use cp instead of symlink (e55dd1e)
• Use writable volume for tmp dir (5718146)
• vault: Add vault support to monitoring cluster (4fcea19)
• wahlrecht: Don't use kafka (44b18d9)
• wahlrecht: Fix keycloak realm (cfb6098)
• wahlrecht: Prevent endless loop (018f110)
• wahlrecht: Remove memory leak (9d7a883)
• wahlrecht: Update template chart (d94a885)
• wahlrecht: Update values (ab5bb8c)
• zookeeper: Add writable volume to /var/log/kafka (2ab511e)
• zookeeper: Update template chart (22ef3b6)