yucca/CHANGELOG.md

Changelog

0.10.0 (2026-06-26)

Features

• netbird: wire this sweetie up (#209) (031974a)

Bug Fixes

• invert restore snapshot disabled check (#211) (a6146e9)

0.9.1 (2026-06-26)

Bug Fixes

• ceph: reload nftables only when the live ruleset differs (#206) (f0dd618)

0.9.0 (2026-06-26)

Features

• ansible: change (#202) (f49cf82)
• ansible: make it go brrr in ci (#200) (97b4514)
• ceph: add read-only metrics-worker RGW admin user + keys (#188) (983e061)
• k8s: wire in flux notifications-controller for commit statuses (#195) (82f8f44)
• staging: wire in metrics-worker (#181) (5d97a0f)

Bug Fixes

• ansible: add missing deps (#204) (05bb52e)
• device code flow maybe (#158) (ec75076)
• michael: remove duplicate s3 env vars (#194) (fa1683c)
• yucca-api: good secret name (#198) (deed0ba)
• yucca: correct vault for vmwauth (9f7b94b)

0.8.0 (2026-06-26)

Features

• 'bytes stored' metric (#45) (ce6b352)
• admin API (#106) (1f3ee2b)
• asymmetric jwt (#91) (70fd11f)
• backup retention (#89) (e703b08)
• cancel running tasks (& node:fs repository refactor) (#81) (415bb78)
• ceph: add LV-based SSD OSD tier for sietch (#184) (5af389f)
• ceph: add sietch staging ansible inventory (#166) (ecd28e4)
• ceph: add staging/ceph terraform stack (#165) (8d5bb53)
• ceph: authorize ops SSH keys from the identity registry (#174) (8618de8)
• ceph: import yucca-ceph ansible + terraform infrastructure (#86) (63087f6)
• ceph: optional OSD-disk wipe in provision (clean rebuild) (#177) (66740a7)
• ceph: per-role password length, shorter ops (#172) (9c33f90)
• ceph: support per-cluster baseline packages (#169) (86cbe06)
• ci: add kubeconfig / talosconfig to op (#145) (fad10fd)
• configure OpenTelemetry (#29) (c568a50)
• configure schedule repositories (#78) (6ef94e3)
• customer API: repository API (#31) (6dee484)
• customer portal: OIDC login (#30) (2e288c2)
• device code flow (#93) (aac9163)
• dns: add s3.staging.austin RGW records for sietch (#167) (9562a46)
• dns: Cloudflare-managed DNS for futo.cloud (#121) (b36f63f)
• Dockerfile for michael (#76) (9303cc1)
• fabric terraform (#170) (80d15f2)
• Immich integration (#65) (ccdcf37)
• immich integration (& assorted fixes) (#77) (e57db5e)
• immich integration UX (#87) (b0d8f2c)
• import repositories (#59) (b9aafef)
• initial commit (#27) (0b99068)
• k8s: point michael at the staging RGW endpoint (#185) (3815637)
• key flow modal (#44) (521c193)
• local k8s (#85) (070e22a)
• metrics worker (radosgw ingest) (#123) (faa2880)
• michael: make michael also do load balancing since he's not too… (#179) (065ff3d)
• more fabric things!! (#171) (a6802df)
• reconfigure primary repository backend (#118) (10c0a3b)
• replace restic-api with michael (#57) (4665f5c)
• repository backend (#49) (9b0d2e6)
• restore backups (#62) (e11a654)
• schedule database backups (#58) (48e468d)
• staging (#135) (f700b18)
• staging: normalize logs (#164) (bc8136d)
• staging: wire in oidc (#148) (7d5af45)
• sync metrics to customer API (#84) (aa0a346)
• talos: hyper-converged Talos Kubernetes on the Sietch Ceph hosts (#120) (30fdf6d)
• telemetry & start up error reporting / robustness (#132) (27d1ac1)
• use .well-known/yucca.json to discover backend (#126) (65b585a)
• yucca api: configurable JWT expiry (#80) (c64e90c)
• yucca SDK (#36) (957c3f8)
• yucca sdk: add authentication handoff (#39) (e5981e7)
• yucca sdk: sqlite database for configuration (#42) (e383fba)

Bug Fixes

• add package metadata for provenance (#130) (64b5fa7)
• ceph: converge RGW S3 user to exactly the 1P key on rotation (#159) (1cf742b)
• ceph: enforce dashboard admin password on every converge (#154) (94e7b99)
• ceph: enforce Grafana admin login password from the vault (#157) (27ffe9d)
• ceph: harden deploy-ceph for from-scratch reimage (#183) (f82728c)
• ceph: open cephadm service discovery port 8765 in firewall (#156) (7eaa9e2)
• ceph: parameterize secrets vault for non-dev clusters (#163) (0794082)
• ceph: use --force-password for dashboard password on Tentacle (#178) (3d52829)
• chunked uploads fail checksum checks (#38) (c7f78f3)
• ci: adjust secret name (#142) (a6eeb8b)
• ci: fix secret not having write access (#144) (02dab5b)
• ci: op wrong secret field (#143) (a4e1512)
• demo padding (#103) (86fff0f)
• deps: update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.97.3 [security] (#69) (489d28c)
• fabic: a lot of custom stuff there (#180) (9b39abf)
• fabric stuff (#173) (6d4056d)
• include python3 in Nix flake, needed for Tilt (#122) (fcecc8d)
• mark incomplete runs as failed on bootstrap (#108) (3244657)
• missing GatewayEvent export (#162) (1d94beb)
• package imports for orchestrator api (#160) (4956b51)
• redirect to / on login & un-delete migration (#43) (6b11685)
• staging: a lot (#147) (df65da6)
• staging: correct vmauth url (#153) (03e2802)
• staging: missing quotes (#150) (b03327f)
• staging: oidc unfun (#151) (8f8be89)
• staging: set web port (#152) (1736b7c)
• staging: something (#149) (a92d39f)
• staging: typo (#146) (ff995bc)
• tf/ceph: stop writing rendered inventories via local_file (#155) (83dab28)
• use repo metrics as source of truth for immich integration card (#79) (42635f4)

0.7.0 (2026-06-26)

Features

• 'bytes stored' metric (#45) (ce6b352)
• admin API (#106) (1f3ee2b)
• asymmetric jwt (#91) (70fd11f)
• backup retention (#89) (e703b08)
• cancel running tasks (& node:fs repository refactor) (#81) (415bb78)
• ceph: add LV-based SSD OSD tier for sietch (#184) (5af389f)
• ceph: add sietch staging ansible inventory (#166) (ecd28e4)
• ceph: add staging/ceph terraform stack (#165) (8d5bb53)
• ceph: authorize ops SSH keys from the identity registry (#174) (8618de8)
• ceph: import yucca-ceph ansible + terraform infrastructure (#86) (63087f6)
• ceph: optional OSD-disk wipe in provision (clean rebuild) (#177) (66740a7)
• ceph: per-role password length, shorter ops (#172) (9c33f90)
• ceph: support per-cluster baseline packages (#169) (86cbe06)
• ci: add kubeconfig / talosconfig to op (#145) (fad10fd)
• configure OpenTelemetry (#29) (c568a50)
• configure schedule repositories (#78) (6ef94e3)
• customer API: repository API (#31) (6dee484)
• customer portal: OIDC login (#30) (2e288c2)
• device code flow (#93) (aac9163)
• dns: add s3.staging.austin RGW records for sietch (#167) (9562a46)
• dns: Cloudflare-managed DNS for futo.cloud (#121) (b36f63f)
• Dockerfile for michael (#76) (9303cc1)
• fabric terraform (#170) (80d15f2)
• Immich integration (#65) (ccdcf37)
• immich integration (& assorted fixes) (#77) (e57db5e)
• immich integration UX (#87) (b0d8f2c)
• import repositories (#59) (b9aafef)
• initial commit (#27) (0b99068)
• k8s: point michael at the staging RGW endpoint (#185) (3815637)
• key flow modal (#44) (521c193)
• local k8s (#85) (070e22a)
• metrics worker (radosgw ingest) (#123) (faa2880)
• michael: make michael also do load balancing since he's not too… (#179) (065ff3d)
• more fabric things!! (#171) (a6802df)
• reconfigure primary repository backend (#118) (10c0a3b)
• replace restic-api with michael (#57) (4665f5c)
• repository backend (#49) (9b0d2e6)
• restore backups (#62) (e11a654)
• schedule database backups (#58) (48e468d)
• staging (#135) (f700b18)
• staging: normalize logs (#164) (bc8136d)
• staging: wire in oidc (#148) (7d5af45)
• sync metrics to customer API (#84) (aa0a346)
• talos: hyper-converged Talos Kubernetes on the Sietch Ceph hosts (#120) (30fdf6d)
• telemetry & start up error reporting / robustness (#132) (27d1ac1)
• use .well-known/yucca.json to discover backend (#126) (65b585a)
• yucca api: configurable JWT expiry (#80) (c64e90c)
• yucca SDK (#36) (957c3f8)
• yucca sdk: add authentication handoff (#39) (e5981e7)
• yucca sdk: sqlite database for configuration (#42) (e383fba)

Bug Fixes

• add package metadata for provenance (#130) (64b5fa7)
• ceph: converge RGW S3 user to exactly the 1P key on rotation (#159) (1cf742b)
• ceph: enforce dashboard admin password on every converge (#154) (94e7b99)
• ceph: enforce Grafana admin login password from the vault (#157) (27ffe9d)
• ceph: harden deploy-ceph for from-scratch reimage (#183) (f82728c)
• ceph: open cephadm service discovery port 8765 in firewall (#156) (7eaa9e2)
• ceph: parameterize secrets vault for non-dev clusters (#163) (0794082)
• ceph: use --force-password for dashboard password on Tentacle (#178) (3d52829)
• chunked uploads fail checksum checks (#38) (c7f78f3)
• ci: adjust secret name (#142) (a6eeb8b)
• ci: fix secret not having write access (#144) (02dab5b)
• ci: op wrong secret field (#143) (a4e1512)
• demo padding (#103) (86fff0f)
• fabic: a lot of custom stuff there (#180) (9b39abf)
• fabric stuff (#173) (6d4056d)
• include python3 in Nix flake, needed for Tilt (#122) (fcecc8d)
• mark incomplete runs as failed on bootstrap (#108) (3244657)
• missing GatewayEvent export (#162) (1d94beb)
• package imports for orchestrator api (#160) (4956b51)
• redirect to / on login & un-delete migration (#43) (6b11685)
• staging: a lot (#147) (df65da6)
• staging: correct vmauth url (#153) (03e2802)
• staging: missing quotes (#150) (b03327f)
• staging: oidc unfun (#151) (8f8be89)
• staging: set web port (#152) (1736b7c)
• staging: something (#149) (a92d39f)
• staging: typo (#146) (ff995bc)
• tf/ceph: stop writing rendered inventories via local_file (#155) (83dab28)
• use repo metrics as source of truth for immich integration card (#79) (42635f4)

0.6.0 (2026-06-25)

Features

• 'bytes stored' metric (#45) (ce6b352)
• admin API (#106) (1f3ee2b)
• asymmetric jwt (#91) (70fd11f)
• backup retention (#89) (e703b08)
• cancel running tasks (& node:fs repository refactor) (#81) (415bb78)
• ceph: import yucca-ceph ansible + terraform infrastructure (#86) (63087f6)
• ci: add kubeconfig / talosconfig to op (#145) (fad10fd)
• configure OpenTelemetry (#29) (c568a50)
• configure schedule repositories (#78) (6ef94e3)
• customer API: repository API (#31) (6dee484)
• customer portal: OIDC login (#30) (2e288c2)
• device code flow (#93) (aac9163)
• dns: Cloudflare-managed DNS for futo.cloud (#121) (b36f63f)
• Dockerfile for michael (#76) (9303cc1)
• Immich integration (#65) (ccdcf37)
• immich integration (& assorted fixes) (#77) (e57db5e)
• immich integration UX (#87) (b0d8f2c)
• import repositories (#59) (b9aafef)
• initial commit (#27) (0b99068)
• key flow modal (#44) (521c193)
• local k8s (#85) (070e22a)
• metrics worker (radosgw ingest) (#123) (faa2880)
• reconfigure primary repository backend (#118) (10c0a3b)
• replace restic-api with michael (#57) (4665f5c)
• repository backend (#49) (9b0d2e6)
• restore backups (#62) (e11a654)
• schedule database backups (#58) (48e468d)
• staging (#135) (f700b18)
• staging: wire in oidc (#148) (7d5af45)
• sync metrics to customer API (#84) (aa0a346)
• talos: hyper-converged Talos Kubernetes on the Sietch Ceph hosts (#120) (30fdf6d)
• telemetry & start up error reporting / robustness (#132) (27d1ac1)
• use .well-known/yucca.json to discover backend (#126) (65b585a)
• yucca api: configurable JWT expiry (#80) (c64e90c)
• yucca SDK (#36) (957c3f8)
• yucca sdk: add authentication handoff (#39) (e5981e7)
• yucca sdk: sqlite database for configuration (#42) (e383fba)

Bug Fixes

• add package metadata for provenance (#130) (64b5fa7)
• ceph: converge RGW S3 user to exactly the 1P key on rotation (#159) (1cf742b)
• ceph: enforce dashboard admin password on every converge (#154) (94e7b99)
• ceph: enforce Grafana admin login password from the vault (#157) (27ffe9d)
• ceph: open cephadm service discovery port 8765 in firewall (#156) (7eaa9e2)
• chunked uploads fail checksum checks (#38) (c7f78f3)
• ci: adjust secret name (#142) (a6eeb8b)
• ci: fix secret not having write access (#144) (02dab5b)
• ci: op wrong secret field (#143) (a4e1512)
• demo padding (#103) (86fff0f)
• include python3 in Nix flake, needed for Tilt (#122) (fcecc8d)
• mark incomplete runs as failed on bootstrap (#108) (3244657)
• missing GatewayEvent export (#162) (1d94beb)
• package imports for orchestrator api (#160) (4956b51)
• redirect to / on login & un-delete migration (#43) (6b11685)
• staging: a lot (#147) (df65da6)
• staging: correct vmauth url (#153) (03e2802)
• staging: missing quotes (#150) (b03327f)
• staging: oidc unfun (#151) (8f8be89)
• staging: set web port (#152) (1736b7c)
• staging: something (#149) (a92d39f)
• staging: typo (#146) (ff995bc)
• tf/ceph: stop writing rendered inventories via local_file (#155) (83dab28)
• use repo metrics as source of truth for immich integration card (#79) (42635f4)

0.5.0 (2026-06-25)

Features

• ci: add kubeconfig / talosconfig to op (#145) (fad10fd)
• staging (#135) (f700b18)
• staging: wire in oidc (#148) (7d5af45)

Bug Fixes

• package imports for orchestrator api (#160) (4956b51)
• ceph: converge RGW S3 user to exactly the 1P key on rotation (#159) (1cf742b)
• ceph: enforce dashboard admin password on every converge (#154) (94e7b99)
• ceph: enforce Grafana admin login password from the vault (#157) (27ffe9d)
• ceph: open cephadm service discovery port 8765 in firewall (#156) (7eaa9e2)
• ci: adjust secret name (#142) (a6eeb8b)
• ci: fix secret not having write access (#144) (02dab5b)
• ci: op wrong secret field (#143) (a4e1512)
• staging: a lot (#147) (df65da6)
• staging: correct vmauth url (#153) (03e2802)
• staging: missing quotes (#150) (b03327f)
• staging: oidc unfun (#151) (8f8be89)
• staging: set web port (#152) (1736b7c)
• staging: something (#149) (a92d39f)
• staging: typo (#146) (ff995bc)
• tf/ceph: stop writing rendered inventories via local_file (#155) (83dab28)

0.4.0 (2026-06-19)

Features

• telemetry & start up error reporting / robustness (#132) (27d1ac1)
• use .well-known/yucca.json to discover backend (#126) (65b585a)

0.3.0 (2026-06-17)

Features

• 'bytes stored' metric (#45) (ce6b352)
• admin API (#106) (1f3ee2b)
• asymmetric jwt (#91) (70fd11f)
• backup retention (#89) (e703b08)
• cancel running tasks (& node:fs repository refactor) (#81) (415bb78)
• ceph: import yucca-ceph ansible + terraform infrastructure (#86) (63087f6)
• configure OpenTelemetry (#29) (c568a50)
• configure schedule repositories (#78) (6ef94e3)
• customer API: repository API (#31) (6dee484)
• customer portal: OIDC login (#30) (2e288c2)
• device code flow (#93) (aac9163)
• dns: Cloudflare-managed DNS for futo.cloud (#121) (b36f63f)
• Dockerfile for michael (#76) (9303cc1)
• Immich integration (#65) (ccdcf37)
• immich integration (& assorted fixes) (#77) (e57db5e)
• immich integration UX (#87) (b0d8f2c)
• import repositories (#59) (b9aafef)
• initial commit (#27) (0b99068)
• key flow modal (#44) (521c193)
• local k8s (#85) (070e22a)
• metrics worker (radosgw ingest) (#123) (faa2880)
• reconfigure primary repository backend (#118) (10c0a3b)
• replace restic-api with michael (#57) (4665f5c)
• repository backend (#49) (9b0d2e6)
• restore backups (#62) (e11a654)
• schedule database backups (#58) (48e468d)
• sync metrics to customer API (#84) (aa0a346)
• talos: hyper-converged Talos Kubernetes on the Sietch Ceph hosts (#120) (30fdf6d)
• yucca api: configurable JWT expiry (#80) (c64e90c)
• yucca SDK (#36) (957c3f8)
• yucca sdk: add authentication handoff (#39) (e5981e7)
• yucca sdk: sqlite database for configuration (#42) (e383fba)

Bug Fixes

• chunked uploads fail checksum checks (#38) (c7f78f3)
• demo padding (#103) (86fff0f)
• include python3 in Nix flake, needed for Tilt (#122) (fcecc8d)
• mark incomplete runs as failed on bootstrap (#108) (3244657)
• redirect to / on login & un-delete migration (#43) (6b11685)
• use repo metrics as source of truth for immich integration card (#79) (42635f4)