v0.1.0

[v0.1.0] - 2026-07-15

Added

• Add devfile for DevSpaces with ODI image (#9) (076afc7)
• Add /token/exchange endpoint for headless auth from DevSpaces (#8) (42fd1e0)
• Require OpenShift group membership for SSO access (ea5e721)
• Persist auth-bridge signing keys in Secret (3967f2a)
• Add OLMv1 pipeline targets and CSV metadata (3bdce0e)
• Add example CRs for providers and policies (285f376)
• Gateway API integration with Envoy Gateway (dd54e4a)
• Dynamic Route TLS termination (edge vs passthrough) (658000c)
• Configurable OIDC token TTL via CRD (b38b422)
• OpenShift SSO login verified end-to-end on OCP 4.22 (a12d062)
• Auth-bridge — OpenShift OAuth to OIDC JWT bridge (7c92fb6)
• Polish for public release — API group, tests, docs, OLM bundle (542e7e6)
• OGO v0.1 — OpenShift OpenShell Gateway Operator (e6630a7)

Changed

• Run E2E tests on all PRs regardless of changed paths (6b9731c)
• Update GitHub Actions to Node.js 24 compatible versions (#4) (1f9957c)
• Mirror multi-arch images to ghcr.io (32889ce)
• Extract reusable build-images workflow, remove duplicated logic (2b23b36)
• Run e2e tests on pull requests (3220a6e)
• Rename test job from "Run on Ubuntu" to "Test" (75f20fe)
• Add multi-arch image build, release pipeline, and MINC e2e (2be9c1a)
• Gitignore .claude/ session state (322db5e)
• Pre-publication cleanup and review fixes (ce2a726)
• Remove .devcontainer (now gitignored) (b21358d)
• Sync bundle and catalog manifests (e533050)
• Add auth-bridge unit tests and tighten redirect validation (4b376d6)
• Gitignore build artifacts (dbb1fd7)
• Update generated bundle manifests (a5fb608)

Documentation

• Polish DevSpaces guide based on real testing (#14) (f76f4a0)
• Update Envoy Gateway installation docs (#10) (d3c7fb5)
• Rewrite quickstart with deployment paths and teardown (#7) (32fb445)
• Add badge bar to docs site header and README (#3) (00d88b6)
• Address code review findings — fonts, security, quality (74567be)
• Pin GitHub Actions to commit SHAs in pages workflow (5d57c5e)
• Add PatternFly 6 dark-themed GitHub Pages site (2cf0ff6)
• Add public repo security guidelines to AGENTS.md and CONTRIBUTING.md (6fb9909)
• Add emergency token revocation procedure (86aed8e)
• Document user group requirement and troubleshooting (d3d0556)
• Add Why OpenShift concept page (237b120)
• Call OGO an OpenShift operator, not Kubernetes (95c59db)
• Add alpha disclaimer to README and docs index (a07c2ff)
• Add Getting Started and docs link to CSV description (454965c)
• Add authentication concept page, harden dev sample (7505231)
• Add OKF-format documentation site (2d05cd6)
• Document versioning rules and image ownership in CLAUDE.md (addae12)

Fixed

• Replace reusable workflow with inline podman builds (#13) (c99d1d1)
• Use spec.route.hostname for status URL instead of Route lookup (#12) (06cf733)
• Move SCC command on top for PostgreSQL deployment (#11) (ada2527)
• Use test.yml for badge and exclude docs.toml from ci trigger (#6) (1987ef1)
• Generate client mTLS certs when using cert-manager for server TLS (#5) (42e6969)
• Artifact name collision between ogo and ogo-auth-bridge digests (3b3893c)
• Pin all GitHub Actions to commit SHAs and harden digest export (0c1df95)
• Pin MINC binary to v0.1.0 with SHA-256 verification (9619518)
• Harden release workflow and update versioning docs (35c9eb1)
• Remove unnecessary string conversion flagged by unconvert lint (2a08de0)
• Make e2e namespace creation idempotent, remove duplicate deploy (9d2847e)
• Load e2e image into MINC locally instead of pushing to registry (d2c4637)
• E2e workflow — push image to quay so MINC can pull it (89b9d98)
• Use correct namespace 'ogo' in e2e workflow (381b5db)
• CI lint pass and workflow improvements (d54dcff)
• Golangci-lint errcheck, goconst, revive, staticcheck findings (595a942)
• Address golangci-lint errcheck findings (99dfed0)
• Include username in group denial message, bypass for kube:admin (8a78d78)
• Revert auth-bridge JWT to RS256 for NVIDIA gateway compat (9774919)
• Review iteration 2 regressions (a1fac2b)
• Low priority review findings (281db93)
• Medium priority review findings (efac5b3)
• High priority review findings from ad-hoc squad (5d5c41c)
• Log shutdown error in auth-bridge (d577d04)
• Sync bundle manifests and add graceful shutdown (7ec78f5)
• Address final 3 Minor findings for 10/10 (a2c311c)
• Address all 11 Minor findings from review iteration 4 (880c61e)
• Catalog.Dockerfile cache permissions for non-root user (6ac2b3f)
• Address review iteration 3 findings (79caa7f)
• Address review iteration 2 regressions (bddda7e)
• Remaining review findings (Pass 3) (738b567)
• Architectural improvements from code review (9898f12)
• Address critical review findings (e468029)
• Switch to OLMv0 for Installed Operators console visibility (92fe4c8)
• OLMv1 deployment with FBC catalog and installer SA (f6986fe)
• Address code review findings across full codebase (cc96d4e)
• Use upstream OpenShell community image as default sandbox (9c4d0b8)
• Default sandbox image to carbonite:release (c38cfa2)
• Align OLM bundle with semver-calver versioning (4609803)
• Preserve active gateway when registering remote (2d3c214)
• Shared CA for server and client TLS, full cert chain (357fe6e)

Other

• Initial commit (707adf7)