First tagged release. The stack is fully wired: cross-namespace
service discovery via Spring Cloud Kubernetes, inter-service REST
calls via @HttpExchange, MongoDB persistence, distributed tracing,
API gateway with Swagger UI, and a local Kind + MetalLB cluster
brought up with a single `make kind-up`.
Quality gates:
- Composite `make static-check`: format, actionlint, Checkstyle,
hadolint, gitleaks, Trivy (fs + K8s config), PlantUML diagram
drift check, Mermaid diagram lint
- Three test layers: unit (Surefire), integration (Failsafe
@DataMongoTest + WireMock + Testcontainers), e2e (Kind cluster
via gateway LoadBalancer)
- JaCoCo coverage floor at 30% BUNDLE INSTRUCTION
- Per-push Trivy CVE scan + Spring Boot boot-marker smoke test
per service image
- OWASP dependency-check on push-to-master and tag
- Tag-gated multi-arch (amd64+arm64) image publish to GHCR with
SLSA provenance + SBOM attestations + cosign keyless signing
- Renovate auto-merge for minor/patch dependency updates
Architecture diagrams: PlantUML + C4-PlantUML (modern flat theme)
under docs/diagrams/; Mermaid sequence diagram for the deep
fan-out flow in the README. Five ADRs under docs/adr/ document
the key architectural decisions.