ClusterGate v1.12.6

ClusterGate v1.12.6

Kubernetes Routing Gateway Platform — expose internal Kubernetes services over public domains.

Security

• Dependency updates for the open Dependabot alerts (#42).
  • Backend: proxy-addr 2.0.8 (critical: IPv4-mapped IPv6 addresses could spoof trusted proxies), follow-redirects 1.16.1 via axios 1.20.0, compression 1.8.2, morgan 1.12.1, @grpc/grpc-js 1.14.6 and several transitive fixes. npm audit reports 0 vulnerabilities.
  • Frontend: next 16.4.2 (critical RCE in next/og, SSRF in image optimization, cache poisoning, information disclosure), sharp 0.35.5, postcss-selector-parser 7.1.6.
  • Known remaining: braces (GHSA without a patched release) via Tailwind CSS 3. It is only used at build time on our own content globs and is not reachable at runtime.

Upgrade notes

• No configuration changes and no database migration. Pull the new images and redeploy.

What's Changed

• chore(release): v1.12.6 (@claude)
• fix(deps): resolve open Dependabot security alerts (@claude)

Docker Images

# Backend
docker pull ghcr.io/No749ah/clustergate-backend:v1.12.6

# Frontend
docker pull ghcr.io/No749ah/clustergate-frontend:v1.12.6

Quick Start

git clone https://github.com/No749ah/ClusterGate.git
cd ClusterGate
cp .env.example .env
# Edit .env — set JWT_SECRET and POSTGRES_PASSWORD
docker compose up -d
docker compose exec backend npm run db:migrate

Frontend: http://localhost:3000
Backend API: http://localhost:3001

On first visit, the Setup Wizard will guide you through creating your admin account.

Kubernetes Deploy

helm upgrade --install clustergate ./helm/clustergate \
  --namespace clustergate \
  --create-namespace \
  --set ingress.host=clustergate.example.com \
  --set backend.secrets.jwtSecret=$(openssl rand -base64 64) \
  --set postgres.credentials.password=$(openssl rand -base64 32) \
  --wait