From 26d0146265d8da11d3f967150362a19c030e4ee2 Mon Sep 17 00:00:00 2001 From: "release-please[bot]" <55107282+release-please[bot]@users.noreply.github.com> Date: Mon, 11 Aug 2025 06:33:41 +0000 Subject: [PATCH] chore(main): release 0.2.0 --- .release-please-manifest.json | 2 +- CHANGELOG.md | 128 ++++++++++++++++++++++++++++++++++ version.txt | 2 +- 3 files changed, 130 insertions(+), 2 deletions(-) diff --git a/.release-please-manifest.json b/.release-please-manifest.json index 466df71..2be9c43 100644 --- a/.release-please-manifest.json +++ b/.release-please-manifest.json @@ -1,3 +1,3 @@ { - ".": "0.1.0" + ".": "0.2.0" } diff --git a/CHANGELOG.md b/CHANGELOG.md index c26de65..f239a5a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,133 @@ # Changelog +## [0.2.0](https://github.com/2martens/terraform/compare/v0.1.0...v0.2.0) (2025-08-11) + + +### Added + +* Add 2martens realm ([2a20d3d](https://github.com/2martens/terraform/commit/2a20d3d505ec24c037effc4b3e6fe9b6cdf7f9ce)) +* Add admin group ([dfb22ba](https://github.com/2martens/terraform/commit/dfb22ba7a3b806047d8314cd3d7e34839f61b389)) +* Add ArgoCDAdmins group ([d1af8fc](https://github.com/2martens/terraform/commit/d1af8fc00905c864f4e5a38bda3f40fc05f452b4)) +* Add certificate volume to each manager node ([d41d2cc](https://github.com/2martens/terraform/commit/d41d2cc825614772f0db099c677802ea97161b3d)) +* Add client for ArgoCD in monitoring cluster ([d047b7a](https://github.com/2martens/terraform/commit/d047b7add945ba571180d33ace95e2f417f8bd6a)) +* Add client for ArgoCD test cluster ([e287e89](https://github.com/2martens/terraform/commit/e287e890051ef596c1236ef363603c265a80fadc)) +* Add domain-test for testing INWX changes ([82def8f](https://github.com/2martens/terraform/commit/82def8fc67237ef9aa30bb0b579d334f1cee5236)) +* Add Gitea client ([af646cc](https://github.com/2martens/terraform/commit/af646cccba3f10bec448e0d0d5dd3b0c9ecf6d32)) +* Add group membership mapper and groups claim and scope ([884accd](https://github.com/2martens/terraform/commit/884accdb5fdf42488d7709693680203b5df08287)) +* Add Keycloak provider ([d7676a4](https://github.com/2martens/terraform/commit/d7676a41494d20ce7bd381ce809b140141b65b4b)) +* Add module for docker-network (WIP) ([fc52f66](https://github.com/2martens/terraform/commit/fc52f66a552a47b50131512eb9954625aceb292c)) +* Add nameserver resource ([729960b](https://github.com/2martens/terraform/commit/729960b98cfc2c6f0d1feecd3a572f030682fed4)) +* Add swarm cluster for test stage ([d76f375](https://github.com/2martens/terraform/commit/d76f3755646e698ef97ee8927e1978660787f96c)) +* Add tsw-timetable-frontend client and update CSP ([1a9dc2f](https://github.com/2martens/terraform/commit/1a9dc2ff81e828fc56467efd2007049c9293e0ce)) +* Add wahlrecht client ([e2217b7](https://github.com/2martens/terraform/commit/e2217b79798baa53170965cd808581e86931ec55)) +* Add wahlrecht client ([6255bc5](https://github.com/2martens/terraform/commit/6255bc58ecf166148bc8d8b36b1dc23237e7854b)) +* Create grafana client ([e3ca8ca](https://github.com/2martens/terraform/commit/e3ca8ca210b99aeb28afd730df6f831ff4abc7dc)) +* Setup GitHub as identity provider ([4e8bdbf](https://github.com/2martens/terraform/commit/4e8bdbf2e4b20323c9011baaefa9b3471d1ae1a4)) + + +### Changed + +* Add admin user to docker group ([3e31f54](https://github.com/2martens/terraform/commit/3e31f542167907dffe587c366ba1faf45dec09cd)) +* Add certbot renewal cronjob ([06bbac8](https://github.com/2martens/terraform/commit/06bbac8ee7e6636e29b97f8ce96355858b54f236)) +* Add domain zone on nameserver ([7cf1e3a](https://github.com/2martens/terraform/commit/7cf1e3a94ce416c3c55ad0098b377e9aa3f90093)) +* Add labels to load balancer ([7339228](https://github.com/2martens/terraform/commit/733922872a2d754d1a366dc8ad429f581397c02d)) +* Add output swarm_nodes ([2c54e21](https://github.com/2martens/terraform/commit/2c54e216e788e46afff4adc715a8fdf88d132c5e)) +* Add outputs for all worker nodes as well ([8a4f2c6](https://github.com/2martens/terraform/commit/8a4f2c6e1cc3dc83795689f60329c8489485bceb)) +* Add rdns for load balancer ([f9a0305](https://github.com/2martens/terraform/commit/f9a03053287dacef4a4dbfbdc789597cc6c7b045)) +* Add role mapper for view-profile to timetable frontend ([adc9dac](https://github.com/2martens/terraform/commit/adc9dac006ed83822629a357c5505b50c05fba01)) +* Add services for load balancer and move configuration into separate file ([c76e7a2](https://github.com/2martens/terraform/commit/c76e7a2c78a1f62b575d59b33c118d3bea3d4f70)) +* Add support for manager and worker nodes in Docker swarm ([eba8edf](https://github.com/2martens/terraform/commit/eba8edf610b4f1bcde70b899162cef3397bd5992)) +* Add timetable roles to token ([4fa8671](https://github.com/2martens/terraform/commit/4fa86717130c5c142e636c49afe3da72762d3889)) +* Add two roles for active/personal plan ([3d86b0b](https://github.com/2martens/terraform/commit/3d86b0be81afeb14598f5177ce91dcf623a0bc8d)) +* Create /var/www/certbot on every manager node ([1abc318](https://github.com/2martens/terraform/commit/1abc3185829091a79ef6cd0bcfbece51af05aa19)) +* Enable refresh tokens for grafana and switch to PUBLIC with pkce ([2025eb8](https://github.com/2martens/terraform/commit/2025eb86a68c1bd6d1ef4a9051bf332228f06447)) +* Extract port 80/443 to separate firewalls ([eba8edf](https://github.com/2martens/terraform/commit/eba8edf610b4f1bcde70b899162cef3397bd5992)) +* Import account and view-profile ([adc9dac](https://github.com/2martens/terraform/commit/adc9dac006ed83822629a357c5505b50c05fba01)) +* Only install certbot on main manager node ([d51e870](https://github.com/2martens/terraform/commit/d51e870e50af5b3cc8e3bea1e57f53234dfe74f4)) +* Only install certbot on manager nodes ([141c993](https://github.com/2martens/terraform/commit/141c9931c61cabd4452bcf1a29ad128a899a3572)) +* Provide output about loadbalancer ([9d2e0d1](https://github.com/2martens/terraform/commit/9d2e0d186da9b8fc105365eee26f61c66930e91e)) +* Remove 2martens.eu from domain test ([6ef68f4](https://github.com/2martens/terraform/commit/6ef68f47fa40608f431ca0541c9cc813c2711868)) +* Remove admin group ([d72f58a](https://github.com/2martens/terraform/commit/d72f58a97d2ca6a199378e6b8fe85869a32f24c7)) +* Remove authorization from wahlrecht ([240eab6](https://github.com/2martens/terraform/commit/240eab65ff65548094f6ce4ece77d27a2c7a77ac)) +* Remove devops resource ([0710876](https://github.com/2martens/terraform/commit/071087648c327ba5000cf9bb79879e8ed9654e37)) +* Remove monitoring and test cluster ([18fafac](https://github.com/2martens/terraform/commit/18fafac60f3fca644698aafa7df43e56bf7070d3)) +* Remove private network for load balancer ([5c70a1f](https://github.com/2martens/terraform/commit/5c70a1f9c2a17ac77a3d31074082b7633329eae6)) +* Remove resource that changes every time and isn't productive anyway ([fc8244c](https://github.com/2martens/terraform/commit/fc8244c51b9496e4b148a762bdf1a86cfeb51951)) +* Remove volume ([3a6b841](https://github.com/2martens/terraform/commit/3a6b841724a5e1123b46d84c38141e8fdd0b2876)) +* Set up certsync on renewal ([3a6b841](https://github.com/2martens/terraform/commit/3a6b841724a5e1123b46d84c38141e8fdd0b2876)) +* Use 2martens.example for domain test ([6ef68f4](https://github.com/2martens/terraform/commit/6ef68f47fa40608f431ca0541c9cc813c2711868)) +* Use plus for web origin ([e990c3e](https://github.com/2martens/terraform/commit/e990c3ed0d8a94765553e5672de594126e2e1da8)) +* Use public ip for targets ([2d43a1b](https://github.com/2martens/terraform/commit/2d43a1b169e85625cff3a8b78a42aa851af81fce)) +* Use test instance of inwx ([8b34a7f](https://github.com/2martens/terraform/commit/8b34a7f60cc1ec701170e430d1786e3670eea2fd)) + + +### Fixed + +* Add authorization support to wahlrecht backend client ([811ad23](https://github.com/2martens/terraform/commit/811ad238012b58b80d6cb86acb2d45b56f0fead1)) +* Add certbot package ([fa5832d](https://github.com/2martens/terraform/commit/fa5832dcdd01ad4b0ef1d48e748cf2e3ba1866cd)) +* Add client roles to grafana ([cb6f553](https://github.com/2martens/terraform/commit/cb6f5533ac90c236894209423cba6afa62edc5b5)) +* Add debug output of rsync ([578c0a0](https://github.com/2martens/terraform/commit/578c0a079af0dbbad14762c9566e4a042db2ba2f)) +* Add docker group ([e3710c3](https://github.com/2martens/terraform/commit/e3710c333c7dafde6950ceefa52d68593607d6ef)) +* Add github user to allowed SSH users ([0d96b77](https://github.com/2martens/terraform/commit/0d96b7741f3d89d8b2b3d90190b83ab43c1a3c84)) +* Add localhost:4200 as allowed frame ancestors ([8bdfe8b](https://github.com/2martens/terraform/commit/8bdfe8b4d0480c9bd0aec30f29f1baca559c5ff1)) +* Add missing path to template file ([1c2e906](https://github.com/2martens/terraform/commit/1c2e9066040f67fdede7260f6b26e6ff825441f5)) +* Add missing records ([e2c439d](https://github.com/2martens/terraform/commit/e2c439deef10303391452f0566dde8468bff794b)) +* Add missing redirect urls ([8a8fd21](https://github.com/2martens/terraform/commit/8a8fd21fb3bac2de784c5cd8ddfeecca9c652bb4)) +* Add missing setup for known hosts ([93e3872](https://github.com/2martens/terraform/commit/93e3872b4fbd7ab71a496b165de98b540b367d08)) +* Add missing steps to complete certificate sync ([0cf6717](https://github.com/2martens/terraform/commit/0cf6717f84853c54b8fb7d5a20d117706827e630)) +* Add missing variables ([03daaec](https://github.com/2martens/terraform/commit/03daaec50891cf7a282ce8794157406d4d44de6c)) +* Add rule to allow port 2377 to the private node ip ([f02f9d1](https://github.com/2martens/terraform/commit/f02f9d1ab97e75633b13e7f0d1bbfd7dcb53afc8)) +* Add rules to allow traffic for the overlay network ([3f80ccd](https://github.com/2martens/terraform/commit/3f80ccd2e4f2ec9dfd32cb57047ef9d8ce019596)) +* Add user for GitHub Actions ([ece3a51](https://github.com/2martens/terraform/commit/ece3a51097904815a6033525562cc3f2ea42970a)) +* Allow login redirect uri ([45953eb](https://github.com/2martens/terraform/commit/45953eb8c52fe3f88ea6763bd66842332a185ecd)) +* Avoid duplicate resources ([e00cbe1](https://github.com/2martens/terraform/commit/e00cbe1f616475b6ed8e4d3ddef71388b80afe05)) +* Change argocd-test-oauth client to CONFIDENTIAL ([b703b43](https://github.com/2martens/terraform/commit/b703b4365eb15826b75ec89c9363ffa98831626c)) +* Consider count for output ([d23e3c1](https://github.com/2martens/terraform/commit/d23e3c15755956071021b5e62c1dbd7f65540fdd)) +* Copy the entire letsencrypt directory ([8086d6e](https://github.com/2martens/terraform/commit/8086d6e712778699a5e78b8f8a63f19443010426)) +* Disable full path of group mapper ([c85371b](https://github.com/2martens/terraform/commit/c85371bc943b60637ca0ab39384e4cbf37a82d2d)) +* Disable full scope for all clients ([f8b78b6](https://github.com/2martens/terraform/commit/f8b78b6060fb99178bdd4b7c73c544d39037739b)) +* Don't change values of full scope allowed and use refresh tokens ([7052c93](https://github.com/2martens/terraform/commit/7052c933fedd07388e374a537321791241b6305f)) +* Fix duplicate name ([236085d](https://github.com/2martens/terraform/commit/236085d80559ffc71ec4467a6c22a48dfb63aa05)) +* Limit ports to appropriate protocols ([76acc6e](https://github.com/2martens/terraform/commit/76acc6e772aaceda3d7678f99bcc11307f4aa093)) +* Make sure load balancer does not terminate TLS ([8a9691d](https://github.com/2martens/terraform/commit/8a9691d7a5353eebc8f04702f240e41b8d2be35b)) +* Move whois_protection to domain ([7514828](https://github.com/2martens/terraform/commit/75148283850092fadafe87bf3aa3e33485004690)) +* Open port 2377 only on manager nodes ([18a1d1e](https://github.com/2martens/terraform/commit/18a1d1ee0beb6c7ae149341d1818e960da7d33ee)) +* Provide only location ([abfd364](https://github.com/2martens/terraform/commit/abfd364f21a33ec0b6ae6f8e4d541bfcb5b98262)) +* Reference correct file ([ebdb3ef](https://github.com/2martens/terraform/commit/ebdb3ef549721ee856bea247f732224176b7f734)) +* Remove all K8s related resources ([0a851ca](https://github.com/2martens/terraform/commit/0a851ca2aad9534c16ac38587404ebabb6810e64)) +* Remove certbot renewal ([04c9671](https://github.com/2martens/terraform/commit/04c967100e5a857e87b8f47b79d0c8f6ece5dcec)) +* Remove duplicate variable declaration ([5f5bfd3](https://github.com/2martens/terraform/commit/5f5bfd37b6866d145fc7511f015c64d58108a611)) +* Remove inwx_nameserver as that breaks the apply ([47004e4](https://github.com/2martens/terraform/commit/47004e40f9ee0114dab253b4bc8363d6440dea75)) +* Remove no longer required microk8s group ([cf87dba](https://github.com/2martens/terraform/commit/cf87dbaea7148532d1676a0d38ab8730fdd591b4)) +* Remove not required variables for domain test ([927eaad](https://github.com/2martens/terraform/commit/927eaad75b810051f5f6f4472461af5d859166b4)) +* Remove outputs from domain-test ([1b7969b](https://github.com/2martens/terraform/commit/1b7969bada6492b1321cb4483fe210e02373720f)) +* Remove SOA records and add zone for 2martens.eu ([2383874](https://github.com/2martens/terraform/commit/2383874cf6f62ec301662de956862004db67b6c5)) +* Remove useless redirect uri ([3a0fa35](https://github.com/2martens/terraform/commit/3a0fa35c258ebd74cac931fbf71b70054e3b30f2)) +* Remove WHOIS protection ([2e0fa2e](https://github.com/2martens/terraform/commit/2e0fa2e095f185dd6d9052afe1e86384f5138d41)) +* Removed invalid fields ([a36372d](https://github.com/2martens/terraform/commit/a36372d24ab5d04a76700e57fefce270c4946243)) +* Removed resources for SOA and NS ([87b5436](https://github.com/2martens/terraform/commit/87b54361b4eb9d2255a1ba12e9b012f426c13a7d)) +* Switch back to live system for terraform folder ([056e709](https://github.com/2martens/terraform/commit/056e709c8d85faa5fd40b992ce53b43b818d1264)) +* Ternary expression does not allow linebreak ([b3c0d68](https://github.com/2martens/terraform/commit/b3c0d68496209fce320d21d42b6a6185cf943fe6)) +* Update CSP and add valid redirect uris ([b006cc4](https://github.com/2martens/terraform/commit/b006cc492c68656a89edeba01057f3eb7692d9a8)) +* Use 2martens.cloud ([6f45439](https://github.com/2martens/terraform/commit/6f454397a7d41cf05946e4df14b437de65291cda)) +* Use allowed realm name ([8a799fe](https://github.com/2martens/terraform/commit/8a799fe55feef97559df2f1aa9ae27c509244145)) +* Use correct domain for nameserver records ([9d40e26](https://github.com/2martens/terraform/commit/9d40e2699ab1d788fba5dd7d695e396fe368f146)) +* Use correct ip for load balancer ([0d6ffcc](https://github.com/2martens/terraform/commit/0d6ffcc3e1e73674971da24f3653eb475ae6d18c)) +* Use correct NS for test ([6ef68f4](https://github.com/2martens/terraform/commit/6ef68f47fa40608f431ca0541c9cc813c2711868)) +* Use correct syntax ([a96bdd9](https://github.com/2martens/terraform/commit/a96bdd979afe22618b6de567a0ad07e2281b760f)) +* Use element function for its index overshoot capability ([90de644](https://github.com/2martens/terraform/commit/90de6441d6fb5b3152dbc4d5c0fe9a4b57df9396)) +* Use existing options ([cdfbc13](https://github.com/2martens/terraform/commit/cdfbc1393dbdab08b43e86c692d1ec08ff1ae820)) +* Use localhost:4200 as allowed redirect url ([801ae0c](https://github.com/2martens/terraform/commit/801ae0ce11f64884e820838ad98a3e63ca112fcf)) +* Use twomartens as realm ([31bf728](https://github.com/2martens/terraform/commit/31bf7280542ebcbaff7bbbd68dacfa6eaa4ed554)) +* Use unique name for nameserver entry ([b9ee24b](https://github.com/2martens/terraform/commit/b9ee24b516d23d6b27075833d233b60241d18dd4)) + + +### Security + +* Enable PKCE for timetable frontend ([c6595c2](https://github.com/2martens/terraform/commit/c6595c281e8fa9b8ffa7038a81d4ea31cada5318)) +* Enable PKCE for wahlrecht frontend ([0c1fade](https://github.com/2martens/terraform/commit/0c1fade445f164d185d82bbfb0237adda19a33a3)) +* Revoke refresh tokens on first use and prevent duplicate authenticator registrations ([5569c38](https://github.com/2martens/terraform/commit/5569c38d44b8f76e944b5f9fab108c22e08d9fb2)) + ## [0.1.0](https://github.com/2martens/terraform/compare/v0.0.1...v0.1.0) (2024-02-05) diff --git a/version.txt b/version.txt index 6e8bf73..0ea3a94 100644 --- a/version.txt +++ b/version.txt @@ -1 +1 @@ -0.1.0 +0.2.0