commons

Published automatically.

Repository: github.com/OpenG2P/commons

Develop builds

commons — develop 0.0.0-develop.235 (2026-08-28)

commit 32cf1e9 · changes since 0.0.0-develop.234

Changes

• G2P-5605 pick up master-data 0.0.0-develop.68 (32cf1e9)

commons — develop 0.0.0-develop.234 (2026-08-28)

commit 2a9f6cb · changes since 0.0.0-develop.233

Changes

• G2P-5605 pick up the master-data and partner-management fixes (2a9f6cb)

commons — develop 0.0.0-develop.233 (2026-08-28)

commit 8defb45 · changes since 0.0.0-develop.232

Changes

• G2P-5605 publish the commons charts to the Rancher index too (8defb45)

commons — develop 0.0.0-develop.232 (2026-08-28)

commit 9385c3a · changes since 2.2.1

Summary

• Major: CI/CD overhaul: switched from GitHub Actions to GitLab CI, enforcing namespace guards to prevent execution in forks.
• Dependency updates: multiple services, including IAM and Master Data Service, have been upgraded to their latest versions, with specific version bumps noted for openg2p-master-data and openg2p-iam-service.
• Keycloak integration improvements: fixed IAM Keycloak base URL configuration and enhanced agent portal API overrides for Keycloak URL resolution.
• Security enhancements: moved eSignet and mock identity to PKCS12 keystores, dropping SoftHSM, and added a reset option for key management during commons-services uninstallation to prevent orphaned key references.
• Configuration updates: added MinIO configuration to values.yaml, updated IAM image references post-repo migration, and set default baseDomain for commons charts.
• Feature additions: enabled EMBEDDED_SUPERSET for Insights and shipped Inji Certify with commons-services, now enabled by default.
• Miscellaneous fixes: corrected Keycloak init job name and made SoftHSM environment references optional.

Changes

• G2P-5605 Build and publish on GitHub (9385c3a)
• Versions updated. (48411db)
• Updated several services to latest versions. (327340b)
• Bug fix on Keycloak init job name (ca12014)
• Updated versions related to recent moving of repos to platform-services group on Gitlab. (b8dc4e5)
• G2P-4929 Give the agent realm the OpenG2P theme (447ff13)
• Point the IAM staff-portal-api image at registry.gitlab.com/openg2p/platform-services/iam/ after the move of iam, awe, master-data-service, audit-manager, partner-management and consent-manager into the platform-services group; this is the only GitLab image commons pins directly, the rest are set in their own subcharts and must be updated there (fd0b779)
• Update of versions of several services. Fixes for IAM docker path. (87d2a48)
• Move image and env config to IAM Helm chart (ba9633d)
• Deleted (3ff3fee)
• G2P-4929 Own the agent realm and its confidential client alongside staff (59ec665)
• G2P-4929 Mark the SoftHSM env references optional instead of blanking them (81fa10c)
• G2P-5573 Move eSignet and mock identity to PKCS12 keystores and drop SoftHSM (ffcf083)
• Complete the commons-services uninstall: add the missing inji_certify DB/role, and make --reset-keymanager purge the softhsm key objects as well as truncating key_alias/key_store, since esignet and mock-identity keep their key references in base-owned DBs and their key material in the shared softhsm and clearing only one half leaves the other stale (orphan HSM objects accumulate duplicate CKA_LABELs and crash-loop both services) (b9e65c4)
• Add --reset-keymanager to the commons-services uninstall: esignet and mock-identity run PKCS11, so their key material sits in softhsm while their key_alias rows sit in base-owned DBs that the uninstall deliberately keeps, and resetting softhsm alone leaves the aliases pointing at HSM keys that no longer exist so both fail at keymanager init on reinstall; the flag truncates just key_alias+key_store so keys regenerate, leaving application data intact (9fad89d)
• Bump openg2p-master-data to 1.1.0-rc.55 and openg2p-iam-service to 1.4.0-rc.90 (8832184)
• G2P-4929 Ship Inji Certify with commons-services, enabled by default (1653fdb)
• Versions of MDS, Mock ID, IAM bumped up. (460d8e4)
• G2P-4929 Add agent portal API overrides so its Keycloak URL and redirect resolve (2515d20)
• Bumped up version of IAM, and changed its location to Gitlab. (fa817d9)
• Bumped up AWE version to 0.0.0-develop.70 (9850037)
• Fix IAM keycloak base URL in commons-services: set IAM_STAFF_KEYCLOAK_BASE_URL directly under iamStaffPortalApi.envVars with an explicit tpl call, since the subchart's indirection gets only one tpl pass and was emitting the unresolved 'https://keycloak.{{ tpl .Values.global.baseDomain $ }}' into the pod; drop the hardcoded qa keycloakBaseUrl which was dead anyway because a subchart-scoped global loses to the top-level one (055b4d6)
• G2P-4804 Make the country pack a free-text field with short form guidance. The two-value enum let an environment pick only ETH or XKM, so a country adding its own pack to openg2p-data could not select it; the Rancher description now says where to find the directory name and the provenance notes move to values.yaml. (2cabc9c)
• G2P-4804 Enable EMBEDDED_SUPERSET. Insights loads /embedded/<uuid> in an iframe, a route Superset only registers with this flag — without it the embedded UUID and guest token are both issued successfully and only the iframe 404s, which reads as a broken client rather than a missing feature flag. (95dd6fb)
• G2P-5348 CI: refuse to run in forks (namespace guard) (53f78f2)
• Just to trigger a build. No changes (b5b90d8)
• G2P-5335 Switch CI to GitLab (.gitlab-ci.yml); drop GitHub Actions build/publish (2c340a3)
• G2P-5451 Add MinIO configuration to values.yaml, including existing secret reference and read-only user creation (b766eea)
• Default baseDomain to {{ .Release.Namespace }}.openg2p.org in both commons charts, and make every consumer tpl it (29 values refs plus the keycloak gateway/virtualservice templates) since a single tpl pass does not evaluate a template nested inside a value and would otherwise emit the literal {{ .Release.Namespace }} into hostnames (adc388c)
• Bumped up MDS version (ae68cf6)
• Bumped up MDS version. (d39f5eb)
• G2P-4804 Declare Ethiopia as the country for the commons environment, and surface the choice in the form. This is the one place an environment names its country — registries read the geography, code lists and sample people from Master Data and name none of their own, which is what lets one registry image serve any country. Master Data is installed from here, so the country pack, the code-list and sample switches, and the domain lists are all questions on this chart rather than values only reachable by hand-editing a subchart. (e9fba97)
• Add hook-succeeded to superset init-db hook-delete-policy so the Job and its pods (including a first-attempt deadlock retry) are removed once it succeeds, instead of a stale Error pod making a healthy release look failed; restate the hook keys explicitly since jobAnnotations {} never cleared the subchart defaults. Bumped up consent manager Helm version. (e862fe0)
• Bumped up MDS version to 0.0.0-develop.38 (fcd382e)
• Bumped up MDS version to 0.0.0-develop.36 (e77c23a)
• Bumped up Master Data Service version to 0.0.0-develop.31 (ab1f277)
• Bumped up master data chart to 0.0.0-develop.30 (cf8be83)
• Bumped up Master Data Service version. (0e52ebf)

What's shown here. This catalogue lists every stable release, plus the latest 20 develop builds and the latest 10 release candidates per release line -- candidates are KEPT after their release ships, as the audit trail of the release run. Older develop builds and release candidates are pruned as they are superseded. Those versions still exist in the container and Helm registries — they are simply not listed here. This page is generated automatically from commit history; do not edit it by hand.