v0.4.1

Superseded: Use v0.4.3. v0.4.1 has an incompatible NATS bootstrap readiness probe.

Platform Orchestrator Helm chart 0.4.1

This patch completes the configurable Casbin RBAC release by shipping the
matching role-management console. Organization administrators can now create,
edit, and delete custom roles from Settings → Roles, as well as through the
IAM API released in v2.1.0.

Included versions

Component	Version
Control plane	v2.0.0
Data plane	v3.0.0
IAM	v2.1.0
Runner	v3.0.0
Console	v1.1.0
Kubernetes runner chart	0.3.0
NATS Helm dependency	2.14.0

What changed

• The console lists built-in and configurable roles and their permissions.
• Administrators can create roles, edit their names and permissions, and
  delete roles after removing their assignments.
• Built-in Admin, Deployer, and Viewer roles remain visibly immutable.
• Existing member and service-user assignment screens resolve and assign
  configurable roles at organization, project, and environment scope.
• The chart now deploys console v1.1.0; IAM remains at v2.1.0 because the
  complete role CRUD API was already released there.

Upgrade

Upgrading from chart 0.4.0 requires no database migration and performs a
normal console rollout. Installations upgrading directly from a supported
SpiceDB-based release still receive the automatic, fail-closed Casbin migration
described in the
SpiceDB-to-Casbin upgrade procedure.

Qualification

• The console passed TypeScript validation, ESLint, duplicate detection, all
  325 unit tests with coverage, a production build, and the Chromium E2E suite.
• The role-management test covers creation, editing, deletion, and built-in
  role immutability.
• The chart passes dependency resolution, linting, release-contract tests, and
  full rendering with the console v1.1.0 image.