///Changelog

Release notes. Plain English. Dated. Immutable.

Versions follow semver. Every release lists what changed and who'll feel it: operators, dashboard users, helm installers, CLI consumers. Breaking changes get their own heading and a migration note.

v0.1.0

Pending — first tagged release
  • ·Initial public release. Six container images on ghcr.io/kubehero (control-plane, operator, collector, pricing-engine, cli, dashboard) — multi-arch (amd64 + arm64), Cosign-signed, Syft SBOM attested, Trivy CVE-gated.
  • ·Helm chart published to oci://ghcr.io/kubehero/charts. Eight optional subcharts (postgresql, clickhouse, valkey, dex, trivy-operator, tetragon, external-secrets, kube-prometheus-stack); cert-manager Certificate template; PriorityClass; production overlay.
  • ·Eleven Connect-RPC methods between dashboard and control-plane; live-wired UI for fleet, clusters, waste, budgets, ceilings, chargeback, posture, and per-workload drill-in.
  • ·Operator with three-condition reconciler (Ready / Armed / Tripped); ClickHouse-backed burn-rate provider; Trivy VulnerabilityReport ingest; real K8s actuator (HPA cap, pod evict, node cordon) with envtest coverage.
  • ·API-key + OIDC-with-JWKS auth interceptor; member/admin RBAC on mutating RPCs.
  • ·CLI: cluster add (one-time enrollment token), cluster list, scan, rightsize, apply, cap --arm, undo, quote, auth login.

Subscribe via the GitHub Releases feed to get notified on every new version: releases.atom.