biersoeckli/QuickStack 0.1.0

on GitHub

What's Changed

🔒 Security

• Fixed unauthenticated access to workload log streams — reported by Furkan.
  Pod and build log streams could previously be accessed without a valid authenticated session. This release adds the required authentication and authorization checks.

  Thanks to Furkan for responsibly disclosing this issue.

  We strongly recommend updating to this version as soon as possible.

✨ New Features

• Interactive project network graph — create/delete connections by dragging, right-click actions, a node details drawer, and per-project layout persisted on the server. (#126)
• Single Sign-On — manage OIDC, Google, Entra ID (Azure AD), and GitHub providers from Settings → Users & Groups → SSO Providers. (#107, #114)
• Cluster Add-ons — install, update, and remove optional cluster components from the UI: Longhorn, cert-manager, and Kubernetes Agent Sandbox (canary). (#116, #117, #118, #119)
• Deployment rollback — redeploy a Git app from a previous commit; reuses the built image when available, otherwise rebuilds it. (#125)
• Configurable parallel builds — set Max Parallel Builds (1–20) in Build Container Settings. (#124)
• Advanced S3 options — AWS Signature v4 and force path-style toggles, full endpoint protocol/port support, applied to database backup jobs too. (#112, #122)
• Container registry v3 updated to latest version of the registry. (#122)
• Parameter defaults initialized on startup. (#127)

⚠️ Breaking Changes & Upgrade Notes

• Network policies are now rule-based. The old Simple presets (ALLOW_ALL, INTERNET_ONLY, NAMESPACE_ONLY, DENY_ALL) are gone. Existing apps are migrated to equivalent explicit ingress/egress rules on startup; Kubernetes policies are reconciled on the next deployment. Review the generated rules under Domains & Networking → Network Policy. (#126, #109)
• App internal ports were removed. Ports are now defined through network policy rules; the Kubernetes Service is built from domains, ingress rules, and NodePorts.
• REST API shape changed. ingressNetworkPolicy, egressNetworkPolicy, networkPolicyMode, and appPorts are no longer accepted or returned. Apps now expose useNetworkPolicy and appNetworkPolicy { allowInternetAccess, rules[] }; appNetworkPolicy is required on write (object replaces, null deletes).
• S3 targets: the useSsl flag was removed — the scheme comes from the endpoint URL. Specify http://host:port for plain HTTP or non-TLS S3 providers. (#112, #122)

Changes

• chore: streamline agent management and runtime configuration by @biersoeckli in #108
• fix: ensure resource requests are preserved when setting CPU and memory reservations by @biersoeckli in #110
• [111] conserve protocol and port for s3 storage config by @Wissiak in #112
• Feat/add extended network policy configuration for apps by @biersoeckli in #109
• Add DeepWiki badge to README by @biersoeckli in #113
• feat: implement SSO provider for auth management with CRUD operations and UI components by @biersoeckli in #107
• feat: add deployment creation logic and update server hostname constant by @biersoeckli in #114
• Feat/implement cluster addon system by @biersoeckli in #116
• fix: Enhance network policy to allow ingress from the quickstack namespace by @biersoeckli in #117
• fix: Set image pull policy to 'Always' for agent container in sandbox template by @biersoeckli in #118
• fix: reconnect agent sandbox status stream by @biersoeckli in #119
• Feat/add agent templates by @biersoeckli in #121
• fix: Can't rename existing projects by @aperolschpritz in #123
• feat: configurable parallel builds (1-20, default 1) by @aperolschpritz in #124
• fix: advanced S3 registry options + upgrade registry to v3 by @aperolschpritz in #122
• fix: initialize parameter defaults on startup by @biersoeckli in #127
• feat: add rollback support for git deployments by @aperolschpritz in #125
• feat: migrate network policy config from Simple to Extended mode by @aperolschpritz in #126
• perf: UI & fetch performance for large instances (100 apps / 30 agents) by @aperolschpritz in #128
• fix: handle potential errors when fetching hostname parameter for deployment by @biersoeckli in #129
• Fix UI Bugfixes for new Grid View by @biersoeckli in #131

New Contributors

• @aperolschpritz made their first contribution in #123

Full Changelog: 0.0.13...0.1.0