Support release

Main

Docs

• docs: add ci/cd schema
• knative: improve docs for functions
• ADR
  • ADR: improve security
  • adr: add observability common
  • adr: add decision about authentication
  • adr: add scheme authentification
  • ADR: improve observability
  • ADR: add lifecycle deploy

DevOps

• Argo
  • argocd: fix config for GitHub SSO
  • argoccd: set resources limit
  • argocd: add mongodb-operator
  • argocd: add nats
  • argocd: add minio-operator
    • minio-operator: add JWT cred
  • argocd: add kubecost
  • argocd: add kubescape
  • argocd: enable statusbadge
  • argocd: rook -> local-path-provisioner
  • argocd: separated grafana and grafana-loki
• GitHub
  • Delete proof-html.yml
  • Delete codacy.yml
  • Delete label.yml
• Grafana
  • grafana: add github SSO
  • grafana: Map roles using teams
  • kubescape: add grafana dashboard
  • grafana: enabled loki
  • tempo: upgrade to v2
• Security
  • docker: use SLSA Provenance
  • docker: use SBOM
  • k8s: fix automountServiceAccountToken
  • kubescape: readOnlyRootFilesystem - true
  • Improper Authentication in Kubernetes #169
• shortlink-common
  • shortlink-common: Egress Network Policies #351
• draft
  • argocd: add testkube
  • keda: improve chart
  • draft: add keycloak
  • argocd: teleport to draft
  • argocd: add rook-ceph
  • argocd: add caretta
• other
  • kustomization: use hash commit for security
  • helm: drop .Capabilities.APIVersions.Has "monitoring.coreos.com/v1"
  • keycloak: add docker-compose

Back-End

• Backstage
  • backstage: add todo-plugin
  • backstage: add prometheus
  • add techradar
  • backstage: add opencost
  • backstage: add dockerfile, helm, argocd
  • backstage: add plugin lighthouse
• other
  • improve tracing for golang and fix di

Front-End