v0.8.0

Changelog

• 52fe1fc: docs(adr): ADR-0038 scoped agent credential (#157) (@incognick)
• 313471a: feat(app): autoscaling via HorizontalPodAutoscaler (v0.8) (#153) (@incognick)
• 5b2bfc7: fix(upgrade): preserve the add-on namespace when re-rendering manifests (#158) (@incognick)
• 2ccba8d: fix(upgrade): wait for the new revision to roll out before reporting ready (#159) (@incognick)
• 2661352: feat(guardrails): gate deploys with a configurable app.deploy guardrail (#160) (@incognick)
• 39e1eb4: feat(deploy): guide the agent to configure a private registry (#161) (@incognick)
• d8e4609: fix(deploy): correct the registry command path in agent and user guidance (#162) (@incognick)
• d8a3a55: fix(cli): drop Kubernetes namespace jargon from registry output (#163) (@incognick)
• d020b82: feat(cli): mark ready and success output with a green check (#166) (@incognick)
• 6051931: feat(deploy): guide durable registry credentials and versioned image tags (#167) (@incognick)
• dc0a399: feat(deploy): roll the workload on every deploy via a release annotation (#168) (@incognick)
• 5732d90: chore(release): tell users to restart their agent session after a brew upgrade (#165) (@incognick)
• ee04f47: docs(adr): ADR-0039 CLI and control-plane version skew (#164) (@incognick)
• 128a303: feat(env): make the unknown-environment error actionable (#169) (@incognick)
• 4a41e2d: docs(readme): add the v0.8 changelog row (in progress) (#170) (@incognick)
• 0401af1: feat(registry): prompt for the token instead of requiring it on the command line (#171) (@incognick)
• b8d6627: feat(deploy): stop resolving images in the control plane (ADR-0040) (#173) (@incognick)
• 3dfc26b: docs(adr): ADR-0040 burrowd never contacts the registry (#172) (@incognick)
• 0916676: fix(deploy): preserve the replica count and defer to the autoscaler (#174) (@incognick)
• b995097: feat(mcp): add an opt-in --deny-kubectl to the Claude hardening (#175) (@incognick)
• 80aa675: feat(expose): report missing TLS/DNS prerequisites as actionable guidance (#176) (@incognick)
• b42cc64: feat(install): mint a scoped burrow-agent credential (ADR-0038 phase 1) (#178) (@incognick)
• 61e8f35: test(e2e): make grep -q checks pipefail-safe (#177) (@incognick)
• 2950ea5: feat(mcp): use the scoped agent kubeconfig for the operate path (ADR-0038 phase 2) (#179) (@incognick)
• 7af1a51: feat(install): join an existing install and backfill the agent credential (ADR-0038 phase 3) (#180) (@incognick)
• 83969a3: feat(audit): record the acting principal (ADR-0038 phase 4) (#181) (@incognick)
• 834a830: feat(mcp): fail closed when the scoped agent credential is missing (#182) (@incognick)
• 59c9e79: docs(hardening): add the trust-surfaces table (#183) (@incognick)
• f9abd7f: feat(cluster): gate ingress install behind --approve and explain the SPOF tradeoff (#184) (@incognick)
• 428cae1: feat(expose): guide the agent on ingress cost and DNS provider setup (#185) (@incognick)
• c69c74b: docs(readme): add "Build it, then fix it" and de-dup the day-two answer bullet (#186) (@incognick)
• 8ebb762: feat(mcp): add server instructions so the agent gets oriented at connect (#187) (@incognick)
• bc81757: docs(adr): ADR-0041 a flatter path to a reachable app (#188) (@incognick)
• 8bf5324: fix(capabilities): require a running ingress controller, not just an IngressClass (#189) (@incognick)
• 95d00fd: docs(adr): ADR-0042 use the cluster's existing ingress controller (#190) (@incognick)
• 35550d9: feat(cluster): require --approve only for the billable ingress path (#191) (@incognick)
• d8697be: fix(cluster): install adopts an orphan IngressClass instead of skipping (#192) (@incognick)
• 4507620: test(e2e): a LoadBalancer Service gets an external IP on k3d (servicelb) (#193) (@incognick)
• a9b0412: docs(adr): ADR-0043 public reachability is a LoadBalancer, not NodePort (#195) (@incognick)
• 745c32e: feat(mcp): steer public exposure to a LoadBalancer, stop suggesting NodePort (#194) (@incognick)
• 837f1d6: ci: pre-import a smaller Postgres image and widen burrowd's db-wait to kill the exit-75 flake (#196) (@incognick)
• 367b07a: feat(mcp): run human credential steps in the user's own terminal, not via "!" (#197) (@incognick)
• b37747c: feat(cluster): cleaner sectioned output for ingress install (#198) (@incognick)
• 4720869: docs(readme): mark v0.8.0 shipped and add the live burrow-cloud.dev link (#200) (@incognick)