v1.3.0

Release message

This release includes:

Security

• Replace Bitnami Redis with OT-CONTAINER-KIT Redis operator deployed open-source Redis image. Redis version v8.2.2 mitigates vulnerability CVE-2025-49844.
• Implement March and October 2025 security updates to RADAR-base services.

Features

• Implement CloudnativePG PostgreSQL and TimescaleDB database backups to S3 compatible object storage.
• Add helmfile mod values file with placeholders for Kubernetes resource requests and resource limits enabled via the new propose_resource_requests_limits option.

Documentation

• Update CONTRIBUTION.md documentation.
• Guidelines for migration from RADAR-Kubernetes 1.2.1 to 1.3.0.
• Add instructions on how to use external/managed PostgreSQL and TimescaleDB database services.
• Improved configuration and documentation for running RADAR-base cluster on k3d for local development and testing.

CI and development

• Test for compatibility with Kubernetes up to v1.34.
• Add end-to-end tests for radar-gateway and radar-fitbit-connector data ingestion and persistence.

Other

• Move radar-backend services to legacy status.
• Move default config options (helmfile values) to dedicated helm charts (ongoing).
• Numerous configuration bug fixes and refactorings.
• Implement foundation for migration to Strimzi operator deployed Kafka.

v1.2.1

This release does not include any functional changes, but merely changes that aim to fix detected software vulnerabilities as part of the March 2025 security review.

Notable Features

• Fix for NGINX vulnerability CVE-2025-1974.
• Fix for various software vulnerabilities in RADAR-base components.

What's Changed

• Release 1.2.1 by @pvannierop in #352

Full Changelog: v1.2.0...v1.2.1

v1.2.0

This release in addition to updates and bug fixes to RADAR components adds lots of changes to Helm charts, installation and maintenance of the platform:

Notable Features

• Added network policies. Every application is now only allowed to connect or connected by applications that are whitelisted.
• Added option to specify extra environment variables to all RADAR-Base Helm charts.
• Added data dashboard backend service.
• Added Kratos components in preparation to new authentication system and addition of 2FA.
• Refactored the ksql-server and jdbc-connector service configuration for reuse between grafana, realtime analysis and data dashboard backend services. See the Upgrade instructions for migrating an existing deployment.
• Added helmfile configuration that allows for deployment in localhost with minimum resource usage and not TLS.

What's Changed

• minor config update in realtime dashboard by @Hsankesara in #233
• Support for Kubernetes 1.27 by @keyvaann in #237
• Update charts by @blootsvoets in #238
• Updated chart versions by @keyvaann in #246
• Add Oura Kafka connector to helm files by @mpgxvii in #247
• Update radar-oura-connector by @mpgxvii in #249
• Fixed radar-push-endpoint servicemonitor by @keyvaann in #255
• Upgrade catalog server to chart 0.5.2 by @pvannierop in #254
• Update chart versions for egress config fixes by @mpgxvii in #260
• Improve docs by @keyvaann in #263
• [kratos] Add Ory Kratos service by @pvannierop in #266
• [Github Action] Check all secrets are replaced by bin/generate-secrets by @pvannierop in #275
• [radar-s3-connector] Pass kafka_num_brokers global variable to helm chart by @pvannierop in #277
• [data dashboard backend] Add Data Dashboard Backend service by @pvannierop in #267
• Update Kubernetes version in CI by @keyvaann in #278
• Up chart versions of radar-s3-connector (v0.3.4) and catalog-server (v0.6.0) by @pvannierop in #283
• Create version.md with helm chart and docker image version overview by @pvannierop in #250
• [jdbc-connector-data-dashboard-backend] Fix database credentials by @pvannierop in #285
• [GitHub Action] Make sure CI tests cover all components by @pvannierop in #284
• Bump helm chart versions by @Bdegraaf1234 in #289
• [ksql-server] Fix transformation logic for questionnaire_app_event topic by @pvannierop in #291
• [data-dashboard-backend] Up chart version to 0.2.3 by @pvannierop in #292
• [docs] Correct OBSERVATION_TIME field in ksql_observations readme by @pvannierop in #295
• [nginx-ingress] Allow snippet annotations for nginx by @pvannierop in #297
• [RADAR-Appserver] Enable notifications via email by @pvannierop in #286
• Upgrade helm charts to most recent versions by @pvannierop in #293
• Export and import docker images from the cache by @keyvaann in #298
• [catalog-server] Up chart version to 0.6.2 by @pvannierop in #304
• [radar-jdbc-connector] Up chart version to 0.5.3 by @pvannierop in #302
• [nginx-ingress] Impl. option to disable TLS termination by @pvannierop in #308
• Fix failing CI tests by @pvannierop in #312
• Only test on main by @keyvaann in #303
• [radar-appserver] Up chart version to 0.5.0 by @pvannierop in #313
• [kratos, kratos-ui] Allow config of HTTP URLs by @pvannierop in #301
• Rework helmfile dependencies during deployment by @pvannierop in #306
• Up chart version of data-dashboard-backend to 0.3.0 by @pvannierop in #315
• Kafka-dependent services need catalog-server readiness by @pvannierop in #317
• bugfix/fix-e2e-tests by @pvannierop in #318
• bugfix/generate-random-minio-credentials by @pvannierop in #316
• Kafka-dependent services need catalog-server readiness by @pvannierop in #320
• Use latest version of helm charts by @keyvaann in #307
• Impl. helmfile modifications for local development and testing by @pvannierop in #311
• [radar-fitbit-connector] Up chart version to 0.3.3 by @pvannierop in #321
• [management-portal] Up chart version to 1.2.2 by @pvannierop in #322
• Up chart version of radar-ooutput-restructure to 1.0.0 by @pvannierop in #323
• Bumped graylog version by @keyvaann in #324
• Removed kafka-manager by @keyvaann in #325
• Remove deprecated ingress annotations by @keyvaann in #326
• bugfix/rest-source-backend-urls by @pvannierop in #329
• Fix missing serverName value for app-config by @pvannierop in #330
• Updated charts by @keyvaann in #332
• Security related chart updates by @pvannierop in #334
• Up chart version of s3-proxy to 0.4.2 by @pvannierop in #335
• Release 1.2 by @keyvaann in #333

New Contributors

• @pvannierop made their first contribution in #254

Full Changelog: v1.1.3...v1.2.0

v1.1.3

Fixed critical vulnerability in Minio
https://cve.report/CVE-2023-28432

What's Changed

• Updated Minio version by @K1Hyve in #240

Full Changelog: v1.1.2...v1.1.3

v1.1.2

What's Changed

• Added upgrade instructions to 1.1.x by @K1Hyve in #236

Full Changelog: v1.1.1...v1.1.2

v1.1.1

What's Changed

• Fixed helmfile hook error & updated applications versions in CI by @K1Hyve in #234

Full Changelog: v1.1.0...v1.1.1

v1.1.0

Changes since version 1.0.0:

• Added home page app
• Added realtime analytics component
• Generate secrets from a separate secrets file
• Added Github action to test RADAR-Kubernetes deployment
• Added initialisation scripts

What's Changed

• Test RADAR-K8S deployment with CI by @K1Hyve in #220
• Update MP client secret and radar-grafana values by @mpgxvii in #229
• Minor updates on realtime dashboards by @Hsankesara in #230
• Release 1.1.0 by @blootsvoets in #227

Full Changelog: v1.0.0...v1.1.0

RADAR-Kubernetes 1.0.0

RADAR-Kubernetes 1.0.0 is the first release to use proper semantic versioning.

Compared to earlier versions, all helm charts being used are now hosted on either [RADAR-base/radar-helm-charts] and [RADAR-base/cp-helm-charts] using proper release management.

The values files in etc have been minimised to only contain values that deviate from the default value or that are likely to change.

What's Changed

• Add dashboard components charts by @mpgxvii in #39
• Update grafana values by @mpgxvii in #40
• Update upload connector by @blootsvoets in #41
• Enable ssl-redirect by @K1Hyve in #42
• Appconfig helm chart by @K1Hyve in #44
• Add Postgresql config to chart values by @mpgxvii in #43
• New changes by @K1Hyve in #47
• Added memory requests to charts by @K1Hyve in #45
• Update upload connector by @blootsvoets in #48
• Update radar-output (delete tmp dirs) by @blootsvoets in #49
• Moved pure config (defaults) to a separate directory by @blootsvoets in #52
• Update postgres by @blootsvoets in #51
• Publish helmcharts by @blootsvoets in #50
• fix rest-sources-permissions by @nivemaham in #54
• Update appconfig service by @blootsvoets in #55
• make path-factory configurable by @nivemaham in #56
• Remove unused charts by @K1Hyve in #53
• Added app-config-frontend by @blootsvoets in #60
• Migrated to kube-prometheus-stack by @K1Hyve in #62
• Update upload connector version by @mpgxvii in #63
• Make gateway more configurable by @blootsvoets in #59
• enable oauth clients on demand by @nivemaham in #57
• Update JDBC connector sink properties by @mpgxvii in #66
• Update JDBC connector by @mpgxvii in #67
• Update Grafana chart by @mpgxvii in #69
• Upload connector fixes by @blootsvoets in #72
• Moved health check to a separate file by @K1Hyve in #73
• Misc fixes by @blootsvoets in #76
• Update radar-gateway resource versions by @blootsvoets in #75
• Merge dev to master by @K1Hyve in #61
• Update radar upload connector by @blootsvoets in #80
• Update app config by @blootsvoets in #83
• Update Fitbit connector config by @mpgxvii in #85
• Bumped radar-gateway to 0.5.5 and improved health check by @blootsvoets in #84
• Changes needed to deploy on a single host from scratch by @blootsvoets in #77
• Updated dependencies by @blootsvoets in #89
• Bump radar-rest-sources-* versions by @blootsvoets in #88
• Bump radar-schemas and allow excluding specifications by @blootsvoets in #87
• Modifiable grafana by @blootsvoets in #91
• CI & Github integration by @K1Hyve in #106
• Add documentation for Fitbit connector and rest-sources-authorizer by @nivemaham in #111
• Chart docs by @K1Hyve in #105
• Add readme for s3 and output pipeline by @nivemaham in #115
• Add readme for radar-gateway by @nivemaham in #119
• Add readme to cc-schema-registry-proxy by @nivemaham in #116
• Document upload connector by @nivemaham in #121
• Added chart documentation for cert-manager by @K1Hyve in #123
• Document velero by @K1Hyve in #122
• Add readme to dashboard pipeline by @mpgxvii in #118
• Improve chart template by @K1Hyve in #126
• Added chart documentation for kube-prometheus-stack by @K1Hyve in #124
• Automatic s3 topics by @blootsvoets in #131
• Updated MP readme by @blootsvoets in #130
• Remove outdated SMTP chart by @blootsvoets in #129
• Update README.md by @K1Hyve in #103
• Merge dev into main by @K1Hyve in #108
• Fix badge by @nivemaham in #132
• Update dependencies by @blootsvoets in #134
• minor typos and links by @afolarin in #136
• Fix spacing issue in redcap helmfile by @K1Hyve in #140
• Fix upload connector postges by @blootsvoets in #144
• Fixes to basic deployment by @afolarin in #145
• Explicitly explain DNS requirements by @blootsvoets in #152
• Use radar-helm-charts and cp-helm-charts instead of inlining by @blootsvoets in #141
• Fix production location in readme by @blootsvoets in #157
• Fitbit example config fixes by @blootsvoets in #158
• Add Kubernetes cluster minimum requirements by @blootsvoets in #163
• Update 20-fitbit.yaml by @blootsvoets in #166
• Update 20-upload.yaml by @blootsvoets in #162
• Bring kubernetes up to date with radar-helm-charts by @blootsvoets in #172
• Updated applications to fix log4shell by @K1Hyve in #173
• fix: make fitbit-client-api/secret conditional by @afolarin in #175
• Push endpoint by @yatharthranjan in #176
• Add appserver by @mpgxvii in #177
• Added dependency update check by @blootsvoets in #186
• Updated radar charts to latest version by @K1Hyve in #185
• Chart versions are now configurable via variables by @K1Hyve in #187
• Updated radar charts to latest version by @K1Hyve in #189
• Fixed ingress for app-config-frontend by @K1Hyve in #188
• Updated rest-sources-backend and app-config-frontend by @K1Hyve in #193
• Simplify S3 Credentials by @K1Hyve in #203
• Upgrade 1.0.0 instructions by @yatharthranjan in #205
• Update to bitnami minio by @blootsvoets in #204

Full Changelog: v0.1.0...v1.0.0

First production release

Merge pull request #36 from RADAR-base/dev

Sync working and updated versions of charts for various components.