v0.3.1

Highlights

• WebSocket subprotocol auth (#262) — /ws now accepts a JWT via the Sec-WebSocket-Protocol header (bearer, <jwt>), so headless CLI clients can authenticate the realtime channel without an Authorization header. The previous ?token= query-param path is still supported but the token is now redacted from access logs.
• OIDC loopback flow for CLI (#249) — Implements RFC 8252's loopback-redirect-URI pattern so stackctl login --sso can complete the OIDC dance without a browser-hosted callback endpoint.
• Inline charts array on POST /api/v1/templates (#264) — Create a template and its full chart set in one transactional request. Previously the charts field was silently dropped by gin's bind.
• Headless deployment:
  • Helm frontend.enabled toggle (#247) — disable the frontend Deployment/Service/IngressRoute for API-only installs.
  • Compose api-only profile (#248) — frontend service moved behind a Compose profile so docker compose up runs backend + mysql only by default; full stack via COMPOSE_PROFILES=full.
  • Headless deployment guide (#261).
• First release with semver docker tags — ghcr.io/omattsson/k8s-stack-manager/{backend,frontend} now carry 0.3.1, 0.3, and latest tags in lockstep with this chart. Earlier chart versions defaulted image.tag to appVersion, which referenced ghcr tags that were never pushed — helm install of 0.3.0 required --set image.tag=latest to work. Chart 0.3.1 installs cleanly with default values.

Required for upgrade

None — fully backward-compatible. All API surface changes are additive.

Notes for downstream

• stackctl v0.3.0+ requires this backend version. stack watch uses the new WS subprotocol auth; template create --from-file uses inline charts.
• Docker images published in lockstep: ghcr.io/omattsson/k8s-stack-manager/backend:0.3.1, ghcr.io/omattsson/k8s-stack-manager/frontend:0.3.1.

Install

helm repo add omattsson https://omattsson.github.io/k8s-stack-manager
helm repo update
helm install my-release omattsson/k8s-stack-manager --version 0.3.1

For API-only (no frontend, paired with stackctl):

helm install my-release omattsson/k8s-stack-manager --version 0.3.1 \
    --set frontend.enabled=false

Full changelog

• feat(ws): accept JWT via Sec-WebSocket-Protocol + redact ?token from logs (#262)
• feat(oidc): RFC 8252 loopback flow for CLI auth (#249)
• fix(templates): honor inline charts array on POST /api/v1/templates (#264)
• feat(helm): add frontend.enabled toggle for headless deployments (#247)
• feat(compose): api-only profile (no frontend container) (#248)
• docs: headless / API-only deployment guide (#261)
• test(frontend): query MUI Switch via role="switch" not "checkbox" (#263)
• deps(actions): bump securego/gosec from 2.26.1 to 2.27.1 (#265)
• chore(release): k8s-stack-manager 0.3.1 (#296)

Plus a routine sweep of dependabot updates (npm, Go modules, alpine, Docker base images) since k8s-stack-manager-0.3.0.

Full diff: k8s-stack-manager-0.3.0...v0.3.1