v0.7.2

What's Changed

• fix: escape Kubernetes variable expansion in the DB bootstrap Job by @alexconrey in #23

Full Changelog: v0.7.1...v0.7.2

v0.7.1

What's Changed

• feat: create the IAM-auth Postgres user when provisioning RDS by @alexconrey in #21
• chore: set version to 0.7.1 by @alexconrey in #22

Full Changelog: v0.7.0...v0.7.1

v0.7.0

What's Changed

• fix: stamp rds.deckwatch.io/enabled annotation on provision by @alexconrey in #20
• fix: IRSA role/SA only on success; align provision() with apply(); merge main by @alexconrey in #17

Full Changelog: v0.6.0...v0.7.0

v0.6.0

What's Changed

• feat: declare MCP tuning fields in metadata() by @alexconrey in #18
• feat: per-app IRSA SA with idempotent annotation upsert — v0.6.0 by @alexconrey in #19

Full Changelog: v0.5.0...v0.6.0

v0.5.0

What's Changed

New AWS services

• SQS: sqs.deckwatch.io/* annotations — provision queues with FIFO support, inject SQS_QUEUE_URL and SQS_QUEUE_ARN
• ECR: ecr.deckwatch.io/* annotations — provision private container registries, inject ECR_REGISTRY and ECR_REPOSITORY
• Secrets Manager: secretsmanager.deckwatch.io/* annotations — manage secrets, inject SECRET_ARN and optionally the secret value

Bug fixes

• IRSA trust policy: replaced invalid EKS-service trust with correct OIDC Federated trust scoped to workload ServiceAccount; OIDC_PROVIDER_ARN config key
• Backup idempotency: ListBackupPlans check before CreateBackupPlan prevents duplicate plans on each reconcile
• Signing: x-amz-content-sha256 in canonical request and all HTTP requests (GovCloud requirement)

Carries all v0.4.0 improvements

• GovCloud IAM/S3 endpoint fixes, CURRENT_TIMESTAMP clock, deployment_annotations, deprovision() with final snapshot

v0.4.0

What's Changed

• feat: deployment_annotations — S3 and RDS provision now stamps deckwatch.io/aws-s3-bucket, aws-s3-region, aws-rds-endpoint, aws-rds-engine, aws-rds-db-name on all application deployments via reconciler
• feat: deprovision() WASM export — RDS takes a final snapshot then deletes; S3 retains bucket with operator guidance; configurable via RDS_SKIP_FINAL_SNAPSHOT
• fix: X-Amz-Content-Sha256 added to all signed requests (required by GovCloud)
• fix: DBInstanceNotFound (404) handled gracefully so describe_db_instance returns None instead of error
• fix: MasterUsername changed to dbadmin (admin is reserved by PostgreSQL engine)
• fix: 409 BucketAlreadyOwnedByYou caught correctly via XML Code tag
• chore: SDK bumped to v0.8.1

What's Changed

• feat: deployment_annotations for S3/RDS + all GovCloud S3 fixes (v0.4.0) by @alexconrey in #15

Full Changelog: v0.3.4...v0.4.0

v0.3.4

fix: replace STS HTTP clock with now() host function — resolves S3/IAM 400/403 in GovCloud; add civil_from_days tests

What's Changed

• fix: replace STS HTTP clock with now() host function by @alexconrey in #12

Full Changelog: v0.3.3...v0.3.4

v0.3.3

What's Changed

• fix: remove #[cfg(target_arch = "wasm32")] gate from rds_resource()/s3_resource() — root cause of resources: [] in /api/plugins response
• fix: restore 7 config_schema fields lost during PR #9 rebase
• fix: make resource helpers pub to satisfy clippy on host target
• test: add regression tests for both resource declarations (15 host-target unit tests now)

What's Changed

• fix: remove wasm32 gate from resource helpers, restore config_schema, add regression tests by @alexconrey in #11

Full Changelog: v0.3.2...v0.3.3

v0.3.2

What's Changed

• feat: provision() WASM export — deckwatch Application pages now show '+ Add RDS Database' and '+ Add S3 Bucket' when the AWS plugin is installed
• feat: resources in metadata() declares RDS and S3 resource types with form fields and output env var keys
• chore: update SDK to v0.6.0

What's Changed

• feat: add provision() export, rds/s3 resource declarations, SDK v0.6.0 by @alexconrey in #9

Full Changelog: v0.3.1...v0.3.2

v0.3.1

What's Changed

• chore: bump Cargo.toml version to 0.3.0 so metadata().version correctly reports the plugin version in the deckwatch Settings UI

What's Changed

• chore: bump Cargo.toml version to 0.3.0 by @alexconrey in #10

Full Changelog: v0.3.0...v0.3.1