🚀 Highlights

🔐 AuthN/AuthZ & Security
• OIDC-based authentication & authorization, configurable via Helm values.
• Support loading OIDC CA from file; docs for trusting the Kubernetes issuer.
• Always allow clients to use the internal authenticator.
• Controller/router secrets auto-generated by a one-shot job; token validity checks and regeneration when missing.

📡 Exporter & Lease Lifecycle
• Client service gains methods to list exporters and manage leases.
• Online status based on last seen; prevent race conditions so exporters stay online.
• Fixes to avoid duplicate/silent status updates; peer address added to log context.
• Lease names switched to UUID v7 (naturally sortable).

🌐 Routing & Protocols
• Router split into its own binary; HTTP gateway multiplexed with gRPC.
• gRPC: keepalive enforcement lowered, min interval reduced to 1s, gzip compression enabled, recovery interceptor added.

🛠️ Deployability & Ops
• Respect IMG on make deploy; docker-build restored.
• Ingress class configuration (and field fix), NodePort option added, default nginx-ingress gRPC timeouts bumped.
• CRDs moved into the main Helm chart; JSON schema for Helm values.
• Secrets job integrated as Argo CD Sync hook and cleaned up after 30s.
• AArch64 build support added.

🔎 Observability & Logging
• More detailed Status logging; auth errors on exporter registration logged as Info.
• General cleanup and deduplication around secret/token handling.

🧪 CI/CD & Release Engineering
• Release logic and backport support added; tests/linting for release-* branches.
• Demo exporters, e2e test fixes, and various stability tweaks.

🧱 Misc/Quality
• Updated RBAC name (manager-role → jumpstarter-manager-role).
• Small correctness and cleanup PRs across lease handling and controller references.

🙌 New Contributors
• @michalskrivanek and @hochbit made their first contributions.

👉 Full changes: https://github.com/jumpstarter-dev/jumpstarter-controller/compare/v0.6.0…v0.7.0

Full Changelog: v0.7.0...v0.7.1

🔐 Authentication & Authorization
• OIDC Integration: Full support for OIDC-based authentication and authorization, with optional CA loading and Helm configuration.
• Clients can now always fall back to internal authentication (#103).
• Improved token and secret handling:
• Automatic token regeneration
• Error checking and validity validation

🛠 Deployment & Infrastructure
• Helm improvements:
• Authentication config is now a Helm value
• Secrets are generated with a dedicated job and cleaned up automatically
• Controller ingress class, router TLS handling, and NGINX timeouts were refined
• Added support for aarch64
• Compatibility fixes for kind, Docker builds, and ArgoCD sync hooks

📡 gRPC & HTTP Enhancements
• Introduced HTTP gateway multiplexing with gRPC
• Added configurable gRPC keepalive policies, reduced minimum interval to 1s, and enabled error recovery interceptors

🔄 Lease & Exporter Management
• Lease handling improvements, including:
• Chronologically sortable UUIDv7-based lease names
• Support for lease-related methods in the client service
• Improved stability and online state retention for exporters (#120)

🧪 CI, Testing, and Misc
• Fixed and improved E2E tests
• Improved logging, token deduplication, and deployment workflows
• Demo exporters were introduced for testing (#69)

📜 Full Changelog: v0.5.0…v0.6.0

Changelog

• aac30fc Merge pull request #68 from jumpstarter-dev/demo-env-insecure-exporters
• d68e29a Merge branch 'main' into demo-env-insecure-exporters
• d1706dd Setup demo exporters with grpc insecure

Changelog

• 14e8f0c Merge pull request #67 from jumpstarter-dev/git-tags-releases
• fd76e74 Use git describe --tags without --long to avoid verbose release tags

Changelog

• d1e69f6 Merge pull request #66 from jumpstarter-dev/e2e-fixup
• 6ed986c Fxiup e2e test after cli split
• fa4fa24 Merge pull request #65 from jumpstarter-dev/error-log
• 59104f2 Make sure exporter status is updated in Status method
• dc9dc6c Print only object namespace and name in log
• 8f2b95a Reconciled object is already part of the logging context
• 159b3d4 Fix typo
• 06b4194 Ignore but requeue conflict errors
• 1525189 Fixup import
• 3e55a42 Wrap error with fmt.Errorf in lease controller
• f255bf4 Wrap error with fmt.Errorf in exporter controller
• ee2f0fb Wrap error with fmt.Errorf in client controller
• 0a32535 Merge pull request #64 from jumpstarter-dev/ko
• 41606a2 fixup! Publish container images with ko
• 0d6e1b8 Fixup KO_DOCKER_REPO
• 2ae55d9 Fix controller entrypoint
• f9aeb94 Publish container images with ko
• 475ff89 Drop unused Dockerfile
• f1f1013 Drop various references to docker
• 833a0f9 Use ko for building and publishing images
• 0a93d23 Install ko in makefile

What's Changed

This is the first jumpstarter release.

Full Changelog: v0.0.4...0.1.0

Changelog

• 392aa33 Release as bare binaries
• 08929e6 Only create releases on tags

What's Changed

• Jmpctl release by @NickCao in #31

Full Changelog: 0.0.2...0.0.3

What's Changed

• Helm deployment support
• Lease object/crd and controller
• Make exporter/client credentials fully managed by controller
• jmpctl cli to create exporters and clients
• Initial E2E to test leases

Full Changelog: 0.0.1...0.0.2