v2.0.0

Overview

This release introduces significant improvements to the Vault integration, including profile-based deployment, enhanced security, KV v2 secrets engine, and automatic secret updates.

New Features

1. Security benefits:
   • Unseal Key - Vault unseal keys are not stored on disk anymore
   • AppRole authentication - No persistent root token usage
   • Tmpfs volumes - Secrets in memory only, never on disk
   • Read-only mounts - Services can't modify secrets
   • Isolated profiles - Vault runs independently
2. Profile-Based Vault deployment separation to avoid frequent sealing on services restart
3. Shared Volume Architecture
4. Interactive Secret Creation Script - prompts for AUTH_CLIENT_SECRET and PORTAL_PASSWORD
5. Vault Unseal Status Monitoring
6. Automatic Secret Rendering
7. Vault automatic unsealing script provided

Breaking Changes

`This is a complete refactor of the volumes and Docker Compose profiles. It’s recommended to remove the Docker volumes and restart the PM4ML by following the new README.

Full Changelog: v1.0.0...v2.0.0

v1.0.0

Features

• PM4ML Core Services
• Keycloak
• API Gateway
• Vault
• Other core dependencies bundled together