-
b7d00548c5
feat: ResolvedContainerConfig record and three-layer ConfigMerger
hsiegeln
2026-04-08 20:18:25 +02:00
-
fef0239b1d
feat: update PostgresDeploymentRepository for orchestration columns
hsiegeln
2026-04-08 20:16:57 +02:00
-
6eff271238
feat(core): add orchestration fields to Deployment record
hsiegeln
2026-04-08 20:15:11 +02:00
-
01e0062767
feat(core): expand DeploymentStatus and add DeployStage enum
hsiegeln
2026-04-08 20:15:07 +02:00
-
0fccdb636f
feat(db): add V7 deployment orchestration migration
hsiegeln
2026-04-08 20:15:01 +02:00
-
123e66e44d
docs: Docker container orchestration implementation plan
hsiegeln
2026-04-08 20:11:12 +02:00
-
b196918e70
docs: revert ICC-disabled, use shared traefik network with app-level auth
hsiegeln
2026-04-08 20:00:12 +02:00
-
dd4442329c
docs: add ICC-disabled traefik network isolation to orchestration spec
hsiegeln
2026-04-08 19:53:51 +02:00
-
da6bf694f8
docs: Docker container orchestration design spec
hsiegeln
2026-04-08 19:48:34 +02:00
-
7e47f1628d
feat: JAR retention policy with nightly cleanup job
hsiegeln
2026-04-08 19:06:28 +02:00
-
863a992cc4
feat: add default container config editor to Environments admin page
hsiegeln
2026-04-08 18:52:39 +02:00
-
0ccb8bc68d
feat: extract Variables as first config tab in create and detail views
hsiegeln
2026-04-08 18:47:58 +02:00
-
0a3733f9ba
feat: show live external URL preview instead of slug on create page
hsiegeln
2026-04-08 18:45:02 +02:00
-
056b747c3f
feat: replace create-app modal with full creation page at /apps/new
hsiegeln
2026-04-08 18:31:34 +02:00
-
0b2d231b6b
feat: split config into 4 tabs and fix JAR upload 413
hsiegeln
2026-04-08 18:22:39 +02:00
-
7503641afe
chore: remove dead LogsTab and AppConfigPage files
hsiegeln
2026-04-08 18:11:05 +02:00
-
967156d41b
feat: migrate traces/taps and route recording into Deployments config
hsiegeln
2026-04-08 18:09:12 +02:00
-
0a0733def7
refactor: consolidate tabs — remove standalone Logs and Config tabs
hsiegeln
2026-04-08 18:02:29 +02:00
-
b7f215e90c
feat: add delete confirmation dialog for apps
hsiegeln
2026-04-08 17:55:37 +02:00
-
6a32b83326
feat: single-step app creation with auto-slug, JAR upload, and deploy
hsiegeln
2026-04-08 17:48:20 +02:00
-
c4fe992179
feat: redesign Deployments tab with Overview + Configuration sub-tabs
hsiegeln
2026-04-08 17:36:09 +02:00
-
01ac47eeb4
chore: update @cameleer/design-system to stable v0.1.39
hsiegeln
2026-04-08 16:59:20 +02:00
-
1c5ecb02e3
fix: make environment list accessible to all authenticated users
hsiegeln
2026-04-08 16:50:31 +02:00
-
b1b7e142bb
fix: remove duplicate updated_at column from V5 migration
hsiegeln
2026-04-08 16:31:06 +02:00
-
de4ca10fa5
feat: move Apps from admin to main tab bar with container config
hsiegeln
2026-04-08 16:23:30 +02:00
-
875062e59a
feat: add container config to apps and default config to environments
hsiegeln
2026-04-08 16:18:08 +02:00
-
e04dca55aa
feat: add Applications admin page with version upload and deployments
hsiegeln
2026-04-08 12:24:22 +02:00
-
448a63adc9
feat: add About Me dialog showing user info, roles, and groups
hsiegeln
2026-04-08 12:12:29 +02:00
-
a8b977a2db
fix: include managed role assignments in direct roles query
hsiegeln
2026-04-08 11:52:50 +02:00
-
529e2c727c
fix: apply defaultRoles fallback when no claim mapping rules match
hsiegeln
2026-04-08 11:33:24 +02:00
-
9af0043915
feat: add Environment admin UI page
hsiegeln
2026-04-08 11:19:05 +02:00
-
2e006051bc
feat: add production/enabled flags to environments, drop status enum
hsiegeln
2026-04-08 11:16:09 +02:00
-
d9160b7d0e
fix: allow local login to coexist with OIDC
hsiegeln
2026-04-08 09:09:24 +02:00
-
36e8b2d8ff
test: add integration tests for runtime management API
hsiegeln
2026-04-07 23:52:07 +02:00
-
3d20d7a0cb
feat: add runtime management configuration properties
hsiegeln
2026-04-07 23:47:43 +02:00
-
8f2aafadc1
feat: add REST controllers for environment, app, and deployment management
hsiegeln
2026-04-07 23:47:05 +02:00
-
248b716cb9
feat: implement async DeploymentExecutor pipeline
hsiegeln
2026-04-07 23:45:38 +02:00
-
b05b7e5597
feat: implement DockerRuntimeOrchestrator with volume-mount JAR deployment
hsiegeln
2026-04-07 23:44:32 +02:00
-
585e078667
feat: implement PostgreSQL repositories for runtime management
hsiegeln
2026-04-07 23:43:35 +02:00
-
55068ff625
feat: add EnvironmentService, AppService, DeploymentService
hsiegeln
2026-04-07 23:41:48 +02:00
-
17f45645ff
feat: add runtime repository interfaces and RuntimeOrchestrator
hsiegeln
2026-04-07 23:41:05 +02:00
-
fd2e52e155
feat: add runtime management domain records
hsiegeln
2026-04-07 23:40:39 +02:00
-
85530d5ea3
feat: add runtime management database schema (environments, apps, versions, deployments)
hsiegeln
2026-04-07 23:40:18 +02:00
-
32ae642fab
chore: add docker-java dependency for runtime orchestration
hsiegeln
2026-04-07 23:39:57 +02:00
-
ec9856d8a2
fix: Ed25519SigningService falls back to ephemeral key when jwt-secret is absent
hsiegeln
2026-04-07 23:34:55 +02:00
-
847c1f792b
test: add integration tests for claim mapping admin API
hsiegeln
2026-04-07 23:20:58 +02:00
-
ac9ce4f2e7
feat: add ClaimMappingAdminController for CRUD on mapping rules
hsiegeln
2026-04-07 23:16:23 +02:00
-
7657081b78
feat: disable local auth when OIDC is configured (resource server mode)
hsiegeln
2026-04-07 23:15:47 +02:00
-
b5e85162f8
feat: replace syncOidcRoles with claim mapping evaluation on OIDC login
hsiegeln
2026-04-07 23:13:52 +02:00
-
7904a18f67
feat: add origin-aware managed/direct assignment methods to RbacService
hsiegeln
2026-04-07 23:12:07 +02:00
-
67ca1e726f
feat: add license admin API for runtime license updates
hsiegeln
2026-04-07 23:12:03 +02:00
-
b969075007
feat: add license loading at startup from env var or file
hsiegeln
2026-04-07 23:11:02 +02:00
-
d734597ec3
feat: implement PostgresClaimMappingRepository and wire beans
hsiegeln
2026-04-07 23:10:38 +02:00
-
dd5cf1b38c
feat: implement LicenseGate for feature checking
hsiegeln
2026-04-07 23:10:14 +02:00
-
e1cb17707b
feat: implement ClaimMappingService with equals/contains/regex matching
hsiegeln
2026-04-07 23:09:50 +02:00
-
b5cf35ef9a
feat: implement LicenseValidator with Ed25519 signature verification
hsiegeln
2026-04-07 23:08:04 +02:00
-
2f8fcb866e
feat: add ClaimMappingRule domain model and repository interface
hsiegeln
2026-04-07 23:07:57 +02:00
-
bd78207060
feat: add claim mapping rules table and origin tracking to RBAC assignments
hsiegeln
2026-04-07 23:07:30 +02:00
-
96ba7cd711
feat: add LicenseInfo and Feature domain model
hsiegeln
2026-04-07 23:06:17 +02:00
-
c6682c4c9c
fix: update package-lock.json for DS v0.1.38
hsiegeln
2026-04-07 11:47:54 +02:00
-
6a1d3bb129
refactor: move inline styles to CSS modules
hsiegeln
2026-04-07 11:45:02 +02:00
-
9cbf647203
chore: update DS to v0.1.38, enforce 12px font size floor
hsiegeln
2026-04-07 11:41:51 +02:00
-
07f3c2584c
fix: syncOidcRoles uses direct roles only, always overwrites
hsiegeln
2026-04-07 10:56:40 +02:00
-
ca1b549f10
docs: document OIDC access_token role extraction and audience config
hsiegeln
2026-04-07 10:55:01 +02:00
-
7d5866bca8
chore: remove debug logging from OidcTokenExchanger
hsiegeln
2026-04-07 10:50:27 +02:00
-
f601074e78
fix: include resource parameter in OIDC token exchange request
hsiegeln
2026-04-07 10:45:44 +02:00
-
725f826513
debug: log access_token format to diagnose opaque vs JWT
hsiegeln
2026-04-07 10:39:53 +02:00
-
52f5a0414e
debug: temporarily log access_token decode failures at WARN level
hsiegeln
2026-04-07 10:34:15 +02:00
-
11fc85e2b9
fix: log access_token claims and audience mismatch during OIDC exchange
hsiegeln
2026-04-07 10:32:34 +02:00
-
d4b530ff8a
refactor: remove PKCE from OIDC flow (confidential client)
hsiegeln
2026-04-07 10:22:13 +02:00
-
03ff9a3813
feat: generic OIDC role extraction from access token
hsiegeln
2026-04-07 10:16:52 +02:00
-
95eb388283
fix: handle space-delimited scope string in OIDC role extraction
hsiegeln
2026-04-07 09:20:37 +02:00
-
8852ec1483
feat: add diagnostic logging for OIDC scope and role extraction
hsiegeln
2026-04-07 09:16:42 +02:00
-
23e90d6afb
fix: postinstall creates public/ dir before copying favicon
hsiegeln
2026-04-06 23:38:43 +02:00
-
d19551f8aa
chore: auto-sync favicon from DS via postinstall script
hsiegeln
2026-04-06 23:25:44 +02:00
-
b2e4b91d94
chore: update design system to v0.1.37 (improved SVG logo)
hsiegeln
2026-04-06 23:24:12 +02:00
-
95b35f6203
fix: make OIDC logout resilient to end-session endpoint failures
hsiegeln
2026-04-06 23:06:56 +02:00
-
a443abe6ae
refactor: unify all brand icons to single SVG from DS v0.1.36
hsiegeln
2026-04-06 23:03:30 +02:00
-
a5340059d7
refactor: import brand assets directly from DS v0.1.34
hsiegeln
2026-04-06 22:47:31 +02:00
-
45cccdbd8a
fix: revert to public/ brand assets — DS exports field blocks imports
hsiegeln
2026-04-06 22:41:20 +02:00
-
281e168790
fix: pass commit short hash as version to UI sidebar
hsiegeln
2026-04-06 22:37:46 +02:00
-
1386e80670
refactor: import brand icons directly from design system
hsiegeln
2026-04-06 22:20:07 +02:00
-
f372d0d63c
chore: update design system to v0.1.33 (transparent brand icons)
hsiegeln
2026-04-06 22:18:26 +02:00
-
6ef66a14ec
fix: use full-color brand PNGs for login dialog and sidebar
hsiegeln
2026-04-06 22:10:48 +02:00
-
0761d0dbee
feat: use design system brand icons for favicon, login, sidebar
hsiegeln
2026-04-06 22:08:58 +02:00
-
0de392ff6e
fix: remove securityContext from UI pod — nginx needs root for setup
hsiegeln
2026-04-06 22:06:07 +02:00
-
c502a42f17
refactor: architecture cleanup — OIDC dedup, PKCE, K8s hardening
hsiegeln
2026-04-06 21:57:29 +02:00
-
07ff576eb6
fix: prevent SSO re-login loop on OIDC logout
hsiegeln
2026-04-06 17:37:35 +02:00
-
c249c6f3e0
docs: update Config tab navigation behavior and role gating
hsiegeln
2026-04-06 16:29:20 +02:00
-
bb6a9c9269
fix: Config tab sidebar navigation stays on config for app and route clicks
hsiegeln
2026-04-06 16:13:39 +02:00
-
c6a8a4471f
fix: always show Config tab and fix 404 on sidebar navigation
hsiegeln
2026-04-06 16:10:02 +02:00
-
640a48114d
docs: document UI role gating for VIEWER/OPERATOR/ADMIN
hsiegeln
2026-04-06 15:52:25 +02:00
-
b1655b366e
feat: role-based UI access control
hsiegeln
2026-04-06 15:51:15 +02:00
-
e54f308607
docs: add role-based UI access control design spec
hsiegeln
2026-04-06 15:33:10 +02:00
-
e69b44f566
docs: document configurable userIdClaim for OIDC
hsiegeln
2026-04-06 10:20:50 +02:00
-
0c77f8d594
feat: add User ID Claim field to OIDC admin config UI
hsiegeln
2026-04-06 10:19:38 +02:00
-
a96cf2afed
feat: add configurable userIdClaim for OIDC user identification
hsiegeln
2026-04-06 10:18:03 +02:00
-
549dbaa322
docs: document OIDC role sync on every login
hsiegeln
2026-04-06 10:11:49 +02:00
-
f4eafd9a0f
feat: sync OIDC roles on every login, not just first
hsiegeln
2026-04-06 10:11:06 +02:00
-
4e12fcbe7a
docs: document server:-prefixed scopes and case-insensitive role mapping
hsiegeln
2026-04-06 10:06:11 +02:00