chore: release master

[github-actions]

🤖 I have created a release beep boop

root: 0.2.0

0.2.0 (2026-08-11)

⚠ BREAKING CHANGES

• flame-hub: migrate harbor from bitnami to goharbor chart
• flame-node: working node seaweedfs and updated values_min
• flame-node: working node seaweedfs and updated values_min

Features

• add database configuration for messenger (cb0037a)
• authup: pass TRUSTED_ORIGINS to server-core, defaulting to t… (#143) (c95e160)
• authup: provision permissions, roles and registry client via authup provisioning (#152) (d7fd514)
• flame-hub: migrate harbor from bitnami to goharbor chart (2cfc29f)
• flame-hub: prepare postgres service and secret config for the upcoming migration to goharbor (660b4bf)
• flame-hub: replace bitnami postgresql subchart with self-hosted postgres (7ecdbb7)
• flame-node: v1 of seaweedfs (1feaa67)
• flame-node: v1 of seaweedfs (ded1f20)
• flame-node: working node seaweedfs and updated values_min (3fb3cad)
• flame-node: working node seaweedfs and updated values_min (386d5c8)
• hub: separate harbor secret from main chart secret, generate random harbor "secretKey" in addition to password (751a1c7)
• hub: tune startup and readiness probes of flame hub services (#144) (42e565a)
• mb: add node message broker service port for health checks (30db93a)
• node: add conditional httproute for seaweedfs (e6adcd9)
• node: add conditional httproute for seaweedfs (e165f97)
• node: make nuxt auth secret persist between upgrades (23d550d)
• openebs: tune mayastor settings and disable unused openebs hostpath storage class (580dc1d)
• use postres user from secret for consistency (454174b)

Bug Fixes

• flame-node: allow keycloak to start when expose type is none (e5af584)
• flame-node: disable seaweedfs CR (1de5f2f)
• flame-node: disable seaweedfs CR (720a7c7)
• flame-node: enable manually setting KC service secrets (ea79496)
• flame-node: harden security contexts with numerical non-root users for third party images (72456d7)
• flame-node: helper functions apply https when tls provided (fedb6c5)
• flame-node: move secret separators within if blocks (d0b4f24)
• flame-node: set seaweed admin credentials in values (9505cae)
• flame-node: set seaweed admin credentials in values (e7df924)
• hub: implement the rabbit's suggestions: helper improvement, README clarity (#168) (ac082b3)
• hub: increase seaweedFS maxVolumes number and volumeSizeLimitMB to 2G (#155) (e79895e)
• hub: reduce write events on new seaweed buckets (dbe113b)
• hub: remove orphan line of code in harbor secret (884c3da)
• node: avoid conflicting seaweed SAs (c774be8)
• node: avoid conflicting seaweed SAs (98d14d4)
• node: use standard value naming schema (f745ba8)
• postgres statefulset use username from BYO secret (f77daf2)
• remove upgrade transition mechanism in PG secret. The secret must be pre-created anyway in all instances that have harbor (because of habor pre-upgrade hooks) (7f28a98)

Performance Improvements

• flame-node: simplify seaweed inetgration (717652c)
• flame-node: simplify seaweed inetgration (ede43da)

flame-hub: 0.2.0

0.2.0 (2026-08-11)

⚠ BREAKING CHANGES

• flame-hub: migrate harbor from bitnami to goharbor chart

Features

• add database configuration for messenger (cb0037a)
• authup: pass TRUSTED_ORIGINS to server-core, defaulting to t… (#143) (c95e160)
• authup: provision permissions, roles and registry client via authup provisioning (#152) (d7fd514)
• flame-hub: migrate harbor from bitnami to goharbor chart (2cfc29f)
• flame-hub: prepare postgres service and secret config for the upcoming migration to goharbor (660b4bf)
• flame-hub: replace bitnami postgresql subchart with self-hosted postgres (7ecdbb7)
• hub: separate harbor secret from main chart secret, generate random harbor "secretKey" in addition to password (751a1c7)
• hub: tune startup and readiness probes of flame hub services (#144) (42e565a)
• use postres user from secret for consistency (454174b)

Bug Fixes

• hub: implement the rabbit's suggestions: helper improvement, README clarity (#168) (ac082b3)
• hub: increase seaweedFS maxVolumes number and volumeSizeLimitMB to 2G (#155) (e79895e)
• hub: reduce write events on new seaweed buckets (dbe113b)
• hub: remove orphan line of code in harbor secret (884c3da)
• postgres statefulset use username from BYO secret (f77daf2)
• remove upgrade transition mechanism in PG secret. The secret must be pre-created anyway in all instances that have harbor (because of habor pre-upgrade hooks) (7f28a98)

flame-node: 0.2.0

0.2.0 (2026-08-11)

⚠ BREAKING CHANGES

• flame-node: working node seaweedfs and updated values_min
• flame-node: working node seaweedfs and updated values_min
• harden flame-node chart security
• allow passing proxy info as secret in flame-node

Features

• add HUB_LOGGING environment variable (95d8309)
• allow passing proxy info as secret in flame-node (cb9629a)
• external gateway option (#129) (c6ae564)
• flame-node: v1 of seaweedfs (1feaa67)
• flame-node: v1 of seaweedfs (ded1f20)
• flame-node: working node seaweedfs and updated values_min (3fb3cad)
• flame-node: working node seaweedfs and updated values_min (386d5c8)
• harden flame-node chart security (e4fa99f)
• integrate Harbor (#86) (dd1ac29)
• kong: add custom minio-gateway plugin configuration (206fd2f)
• mb: add node message broker service port for health checks (30db93a)
• node: add conditional httproute for seaweedfs (e6adcd9)
• node: add conditional httproute for seaweedfs (e165f97)
• node: add default roles to keycloak and update HA (ce24387)
• node: add env vars for PO deploy for net stats (793e119)
• node: add gateway api support to victorialogs (7548a2e)
• node: add keycloak secret sync job with rbac (38778fa)
• node: add postgres env vars to hub adapter deployment (cdadf58)
• node: add statusLoopInterval to podOrc values (66fc9a1)
• node: add victoria logs to Chart.yaml and values.yaml (0d18328)
• node: allow user to set custom nuxt auth secret for node ui (22a4b9c)
• node: log level parsing in victorialogs (1473dd7)
• node: make nuxt auth secret persist between upgrades (23d550d)
• node: working gateway templates (2c36c34)

Bug Fixes

• annoying punkt (fa44f34)
• annoying punkt (e38c441)
• correct typo in enableHubLogging description for clarity (4f931d3)
• flame-node: allow keycloak to start when expose type is none (e5af584)
• flame-node: disable seaweedfs CR (1de5f2f)
• flame-node: disable seaweedfs CR (720a7c7)
• flame-node: enable manually setting KC service secrets (ea79496)
• flame-node: harden security contexts with numerical non-root users for third party images (72456d7)
• flame-node: helper functions apply https when tls provided (fedb6c5)
• flame-node: move secret separators within if blocks (d0b4f24)
• flame-node: set seaweed admin credentials in values (9505cae)
• flame-node: set seaweed admin credentials in values (e7df924)
• node: add default empty string to robotSecret so b64enc works (cd51b71)
• node: add hostname for local keycloak (371aeca)
• node: add support for gateway TLS termination (11105ed)
• node: avoid conflicting seaweed SAs (c774be8)
• node: avoid conflicting seaweed SAs (98d14d4)
• node: improve hostname parsing in edge cases (6240a92)
• node: increase buffer size for JWT in UI (1040aa2)
• node: make use of keycloak http relativePath in URL generation (8ba9abd)
• node: modify kc settings for upstream TLS termination (22d77f8)
• node: remove "offline" value and fix sign in when ingress disabled (64feebd)
• node: update victorialogs alias names (8beca80)
• node: use standard value naming schema (f745ba8)
• typos and add labels to po resources (4d6ee9d)
• update hub authentication variables to use client ID and secret (c7da749)
• update HUB_LOGGING and STATUS_LOOP_INTERVAL values to ensure correct type handling (f2d1737)
• update mongodb pvc size (ad354a4)
• update mongodb pvc size (cdf93bc)
• values: add robot user and secret fields for hub authentication (4612449)
• values: update hub authentication to use client ID and secret (989c326)
• values: update image tag to new-hub for testing (de18eb6)

Performance Improvements

• flame-node: simplify seaweed inetgration (717652c)
• flame-node: simplify seaweed inetgration (ede43da)
• node: change podorc image pullPolicy to IfNotPresent (f8203ed)
• node: have hub adapter wait for keycloak init (f35f109)
• node: optimize ui and HA probes (c8ef560)
• node: remove mogodb logs from victorialogs (2916202)
• node: set internal KC to prod (eb9df33)
• node: set wait-for-keycloak initcontainer to use kc health ep (219ee42)

Reverts

• mb: add proxy whitelist back (12937cd)
• node: add offline back to values (04b4c1b)
• node: revert helpers (fa8a5ee)
• node: revert node UI env vars (0e282b4)

authup: 0.2.0

0.2.0 (2026-08-11)

Features

• authup: pass TRUSTED_ORIGINS to server-core, defaulting to t… (#143) (c95e160)
• authup: provision permissions, roles and registry client via authup provisioning (#152) (d7fd514)
• flame-hub: prepare postgres service and secret config for the upcoming migration to goharbor (660b4bf)
• hub: tune startup and readiness probes of flame hub services (#144) (42e565a)
• use postres user from secret for consistency (454174b)

---

This PR was generated with Release Please. See documentation.