v1.0.3-rc.1

What's Changed

Other changes

• fix: restore truncated workspace config files and script permissions by @Foshati in #1
• chore(release): prepare v1.0.0 by @Foshati in #7
• chore(repo): issue forms, PR template, conduct and roadmap by @Foshati in #2
• fix(store): create the SQLite directory on first run; release 1.0.1 by @Foshati in #8
• build: run every task through Turborepo; Bun replaces pnpm and Node (ADR-024) by @Foshati in #9
• ci(security): zizmor, daily cargo-deny, Trivy and cargo-auditable by @Foshati in #12
• refactor(console): rename apps/web to apps/console (@kuben/console) by @Foshati in #11
• chore: configure CodeRabbit reviews by @Foshati in #13
• build(deps): base64 0.23, rand 0.10, sha2 0.11, tower-http 0.7; release 1.0.3-rc.1 by @Foshati in #14

New Contributors

• @Foshati made their first contribution in #1

Full Changelog: v1.0.0-rc.1...v1.0.3-rc.1

v1.0.2: Turborepo Native Cargo Workspace & Bun Engine (ADR-024)

What's Changed

Other changes

• build: run every task through Turborepo; Bun replaces pnpm and Node (ADR-024) by @Foshati in #9

Full Changelog: v1.0.1...v1.0.2

v1.0.1: SQLite First-Run Auto-Directory Initialization

What's Changed

Other changes

• fix(store): create the SQLite directory on first run; release 1.0.1 by @Foshati in #8

Full Changelog: v1.0.0...v1.0.1

v1.0.0: Official General Availability (GA) & Production Stable Release

Kuben v1.0.0 — Official General Availability (GA) & Production Stable Release

We are immensely proud to announce the General Availability (v1.0.0) of Kuben, a modern, single-binary Kubernetes-native Platform-as-a-Service (PaaS) built for teams seeking cloud developer simplicity without sacrificing the power of raw Kubernetes.

---

Highlights of the v1.0.0 Stable Release

• High-Availability Controller Leader Election (ADR-023):
  • Multi-replica control plane support using Kubernetes coordination.k8s.io/Lease resources.
  • Active-passive controller failover: standby replicas serve API and UI traffic while awaiting automatic leadership promotion if the active controller fails.
• Informer Readiness Gates:
  • Pods accept traffic only after all Kubernetes cache informers have completed full list-and-watch synchronization, eliminating cold-start 404s.
• Concurrent Multi-Replica Bootstrap:
  • Safe, synchronized initialization guarantees that multiple pods booting simultaneously against a fresh database will never race or duplicate seed records.
• Production Hardened & Audited:
  • 100% green CI test matrix across Linux (amd64, arm64), macOS (Apple Silicon), and Windows.
  • Full supply chain audit passing via cargo-deny with zero security advisories.
  • Complete master architectural blueprint, operator troubleshooting runbooks, and 10 everyday scenarios documented in docs/.

---

Quick Start Guide

1. Quick Install via Shell

curl -fsSL https://raw.githubusercontent.com/Teamtem-dev/kuben/main/install.sh | sh
kuben doctor

2. Deploy via Helm to Kubernetes

helm install kuben oci://ghcr.io/teamtem-dev/charts/kuben \
  --namespace kuben-system \
  --create-namespace \
  --set replicaCount=3 \
  --set database.url="postgres://user:pass@postgres:5432/kuben"

3. Run Locally with Docker

docker run -d --name kuben \
  -p 8080:8080 \
  -v ~/.kube/config:/root/.kube/config:ro \
  ghcr.io/teamtem-dev/kuben:v1.0.0

---

Full Commit History

See the complete evolution of the project across all 965 commits at Teamtem-dev/kuben/commits.

v1.0.0-rc.1: Production Hardening, Readiness Gates & E2E Validation

Kuben v1.0.0-rc.1 — Production Hardening, Readiness Gates & E2E Validation

This Release Candidate solidifies Kuben for enterprise production environments with cold-boot synchronization, informer readiness gating, and rigorous multi-platform test validation.

---

Key Improvements

• Informer Readiness Gates:
  • Pod readiness probe reports ready only after all Kubernetes cache informers have completed their initial list-and-watch sync, preventing transient routing blips during pod restarts.
• Concurrent Multi-Replica Bootstrap:
  • Database-level advisory locks prevent race conditions when multiple replicas spin up simultaneously against an uninitialized database.
• Enhanced Verification & Testing:
  • Total test suite expanded to 115 passing tests (from 107) covering multi-document backup roundtrips, session sliding windows, and controller edge cases.
  • End-to-end (E2E) integration test suite verified against live Kubernetes clusters running under kind.
  • Zero compiler or Clippy warnings across all workspace targets.

v1.0.0-beta.1: High-Availability Controller Leader Election (ADR-023)

Kuben v1.0.0-beta.1 — High-Availability Controller Leader Election (ADR-023)

Kuben v1.0.0-beta.1 advances high availability with the integration of ADR-023, establishing Kubernetes Lease-based Leader Election for multi-replica control plane deployments.

---

High-Availability Architecture (ADR-023)

• Kubernetes Lease-Based Leader Election:
  • Coordinates controller execution across multiple replicas using standard coordination.k8s.io/Lease objects.
  • Active-passive controller failover: only the replica holding the Lease runs state reconciliation loops, eliminating split-brain race conditions.
• Continuous API & UI Availability:
  • Standby replicas continue serving API endpoints, web dashboards, and SSE telemetry without interruption.
  • Automatic Lease renewal and sub-second failover when a leader replica terminates gracefully or encounters a network partition.
• Observability & Diagnostics:
  • Health check endpoint (/healthz/details) surfaces subsystem operational status (leader, standby, or degraded).
  • Graceful release of the Lease during pod shutdown signals instant handover to waiting standby replicas.

v1.0.0-alpha.1: Master Engineering Blueprint & Architecture Specification

Kuben v1.0.0-alpha.1 — Master Engineering Blueprint & Architecture Specification

Kuben officially initiates its v1.0.0 stabilization cycle with the release of the Master Engineering Blueprint, establishing the rigorous architecture principles, invariants, and operational boundaries of the platform.

---

Key Highlights

• Master Engineering Blueprint (docs/KUBEN-MASTER-BLUEPRINT.md):
  • Comprehensive architectural reference mapping all subsystem interactions, data flows, and concurrency models.
  • Formal specification of the 16 Core System Invariants (I-1 through I-16) governing authorization, state mutability, informers, and database locks.
• Architectural Critique & Trade-off Analysis:
  • Detailed evaluation of design decisions including SQLite vs PostgreSQL, Gateway API vs Ingress, and embedded UI vs micro-frontends.
  • Strict boundary definitions preventing architectural drift as Kuben scales toward v1.0.0 GA.
• Production Day-2 Scenarios:
  • Standardized operator runbooks covering disaster recovery, atomic backup restoration, token rotation, and zero-downtime database migrations.

v0.9.0: Cloud-Native Packaging, Helm Chart & Distroless Image

Kuben v0.9.0 — Cloud-Native Packaging, Helm Chart & Distroless Image

Kuben v0.9.0 introduces production-ready deployment artifacts, automated multi-arch builds, an enterprise Helm chart, and comprehensive CI/CD pipelines.

---

Cloud-Native Packaging & Delivery

• Enterprise Helm v3 Chart (charts/kuben):
  • Production-ready Helm chart supporting high-availability deployments, PodDisruptionBudgets, and configurable resource quotas.
  • Packaged and pushed directly to oci://ghcr.io/teamtem-dev/charts.
  • Built-in SQLite-to-PostgreSQL topology migration guards.
• Ultra-Lean Containers & Static Binaries:
  • Multi-architecture container images (linux/amd64, linux/arm64) based on distroless base images (total image size <30 MiB).
  • Pure static Linux binary linking against musl libc (<26 MiB) with no runtime dependencies.
• One-Line Installer (install.sh):
  • Universal install script with automatic platform architecture detection, checksum verification, and privilege escalation handling.
• End-to-End CI Pipeline:
  • Automated CI test matrix executing unit tests, Clippy, rustfmt, cargo-deny, and live end-to-end scenarios inside temporary kind clusters.

v0.8.0: Modern Web Management Console

Kuben v0.8.0 — Modern Web Management Console

Kuben v0.8.0 delivers the full-featured developer dashboard, providing engineering teams with an intuitive, real-time web console for managing cloud-native applications.

---

Dashboard Features (apps/web)

• Modern Web Technology Stack:
  • Built with React, Vite, and Tailwind CSS v4 for instant UI reactivity and minimal bundle size.
  • Dark-mode first design aesthetic crafted specifically for developer ergonomics.
• Real-Time Operational Views:
  • Live Pod Telemetry: Instantaneous CPU/memory consumption and pod health status indicators.
  • Streaming Logs Viewer: Real-time log tailing directly from Kubernetes pods via WebSocket/SSE connections.
  • Rollout History & Rollback: Graphical deployment timeline allowing instant 1-click rollbacks to previous immutable releases.
  • Audit Activity Feed: Filterable stream of team changes, login events, and environment modifications.
• Single-Binary Zero-Dependency Deployment:
  • The compiled web distribution can be baked directly into the Rust executable using the embed-ui cargo feature (rust-embed), enabling a single standalone binary to serve both API and Web UI.

v0.7.0: Identity, RBAC & Enterprise Security Engine

Kuben v0.7.0 — Identity, RBAC & Enterprise Security Engine

Kuben v0.7.0 brings comprehensive security hardening, modern cryptographic authentication, fine-grained access tokens, and administrative diagnostic tooling.

---

Security & Operational Enhancements

• Modern Cryptographic Authentication:
  • Password hashing utilizing the memory-hard Argon2id algorithm with per-user cryptographic salts.
  • HttpOnly, SameSite, and Secure session cookies preventing session hijacking and credential leakage.
  • Scoped Personal Access Tokens (kbn_pat_...) designed for CI/CD pipelines and deployment automation.
• Distributed Brute-Force Protection:
  • Database-backed login throttling enforcing rate limits per IP address and target account across all running replicas.
  • Constant-time comparison on credentials prevents timing attacks.
• Auditing & Traceability:
  • Immutable audit trail capturing every mutation, user action, and deployment lifecycle event.
• Operator CLI Diagnostics:
  • kuben doctor: Validates cluster connectivity, RBAC permissions, and database latency.
  • kuben admin: Bootstraps initial administrative credentials and resets forgotten tokens securely.