v2.8.0

2.8.0 (2026-05-19)

🚀 New Features

• add custom theme support via initContainer git clone (e35e811)
• add custom theme support via initContainer git clone (9c93373)
• add gateway_name and gateway_namespace variables (4d02904)
• config somethings (45918c5)
• configure theme modern-gitops (70e8a6a)
• migrate from Traefik Ingress to Istio HTTPRoute (Gateway API) (2dbf0d9)
• redirect HTTP to HTTPS via separate HTTPRoutes with sectionName (22ed427)

🔥 Bug Fixes

• add audience protocol mapper to Keycloak client (fffad0b)
• ensure secret is created after namespace by operator (21f3f76)
• escape %{http_code} in Terraform heredoc template (a14f544)
• quote curl in wait_for_keycloak for POSIX sh compatibility (960a495)
• use http protocol in wait_for_keycloak since gateway only has http listener for kind (397d588)
• use http scheme for non-prod issuers in OIDC URLs and Keycloak ssl_required (4f45380)
• use https scheme for all cluster issuers except selfsigned-issuer (eb037d6)
• wait for keycloak using https endpoint in local-exec readiness check (0402aef)

⌨️ Code Refactoring

• simplify HTTPRoute to use sectionName https only (74cc5cd)