v1.0.0 - Functional Cloud Deployment

Highlights

This release marks the first stable cloud deployment of the project. The original Docker Compose application has been successfully migrated to K3s and is deployed automatically through a GitHub Actions CI/CD pipeline.

Added

• Automated infrastructure provisioning with Terraform
• End-to-end CI/CD pipeline using GitHub Actions
• Container image publishing to GHCR
• Automated deployment to AWS K3s
• AWS SSM Parameter Store integration for kubeconfig distribution
• GitHub Secrets integration for runtime secret injection
• Traefik Ingress for external application access

Security

• Gitleaks secrets detection
• Semgrep SAST scanning
• Trivy container image scanning
• GitHub Actions pinned to immutable commit SHAs
• Hardened Kubernetes security contexts
• NetworkPolicy restricting database access to the API only
• Temporary K3s API exposure during deployment with automatic cleanup

Improvements

• Migrated from a t3.micro to a t3.small EC2 instance after identifying CPU credit exhaustion during testing
• Replaced Sealed Secrets with pipeline-injected Kubernetes Secrets to better support ephemeral infrastructure
• Documented security decisions, scanner findings, and engineering trade-offs throughout the project