iam

Published automatically.

Repository: github.com/OpenG2P/iam · Container images: Container Registry

Release candidates

iam 1.4.0-rc.100 — 2026-08-28

commit f8bccfe · changes since v1.3.0

Chart: openg2p-iam-service 1.4.0-rc.100

Summary

• Major: CI migration to GitLab, dropping GitHub Actions, and implementing new CI workflows; completed GitLab migration by porting workflows and dropping unused scripts.
• Security enhancements: updated FastAPI library to version 1.2 and added Keycloak initialization configuration; refactored JWT validation using CryptoFactory.
• Session management improvements: updated Redis token TTLs and cache expiration settings for better session handling.
• Feature additions: implemented data policy management and middleware, added policy filter preview and view data policy modal components, and enhanced application management with Keycloak integration.
• UI/UX refinements: refactored application and login provider components for consistency, improved accessibility, and introduced reusable UI components; enhanced modal styling and user experience across various components.
• API updates: enabled agent portal API by default, wired iam-agent-portal-api into the IAM chart, and removed include_domains from attribute API calls.
• Testing improvements: updated data policy middleware tests for accuracy and coverage, added unit tests for IAM staff portal API components, and improved overall unit test coverage for core IAM functionality.
• Versioning and dependency updates: bumped version to 1.4.0, aligned release line with GitHub, and updated image tags in values.yaml.

Changes

• G2P-5605 Align the 1.4 release line with GitHub (f8bccfe)
• G2P-5592 Update Redis token TTLs and cache expiration for improved session management (1a1ca2b)
• G2P-5587 Refactor GeoLocationPickerModal to use new utility functions for fetching geo levels and improve state management (b69ebd6)
• G2P-5581 Update FastAPI common library reference to version 1.2 and add Keycloak initialization configuration (bd43783)
• G2P-5581 Refactor JWT validation to use CryptoFactory and update tests for component registration (9d4d3c1)
• G2P-5578 Add registration for mds, awe, partner api (22af5d6)
• G2P-5576 Refactor DataPoliciesTab layout and comment out IconBase64Field in LoginProviderForm (6495993)
• Remove include_domains from request payload in attribute API calls (dafa801)
• Fix templating for Keycloak base URL in IAM Staff and Agent APIs (ed5741a)
• G2P-5572 Bump version to 1.4.0 and update image tags in values.yaml (1eb3a25)
• G2P-5335 Add iam-staff-ui to the build/publish pipeline and pin its chart image tag (d7fdd9c)
• G2P-5552 Fix pre-commit (a2157ea)
• G2P-5552 Remove registry API URL from env and add API URL to staff portal application (69495bf)
• G2P-4929 Enable the agent portal API by default and fix show_if conditions (da9db90)
• G2P-5537 Port attribute-management API routes and hooks from upstream develop; drop wrongly-ported role-permission caching (74c5879)
• G2P-5348 Complete GitLab migration: port GitHub workflows to CI guards, drop .github, and port pending upstream commits (e04966e)
• G2P-5335 Switch CI to GitLab (.gitlab-ci.yml); drop GitHub Actions build/publish (3ed9ea0)
• G2P-4929 Wire iam-agent-portal-api into the IAM chart behind a disabled-by-default switch (9de210b)
• Remove unused SQL seed script and login providers JSON; update IAM_STAFF_UI_PERMISSIONS to include delete permissions (1c5a6a6)
• Enhance values.yaml: Add backend API URLs for iam-staff-ui and update login provider ID (6d1d4f9)
• Refactor: Remove unused use client directives and implement ApplicationsPageClient component (a694c5d)
• G2P-5485 Enhance IconBase64Field with MIME type detection (2556ffa)
• G2P-5479 Add policy filter preview and view data policy modal components (5234a36)
• Test: Update data policy middleware tests for accuracy and coverage (35f3bd9)
• Feat: Implement data policy management and middleware (8a1c8cd)
• G2P-5431 Enhance application management with Keycloak integration (d7b1c7f)
• G2P-5431 Refactor UI components for consistency: update styles, improve accessibility, and enhance user experience across error, button, input, and modal components (0c1d936)
• G2P-5431 Add reusable UI components, improve modal styling, and refactor application and login provider pages (12956d8)
• G2P-5431 Refactor application and login provider components (b582d6f)
• G2P-5431 Add Roles, Permissions, and Role-Permissions management tabs with reusable modals, enhanced tables, login provider improvements, and loading skeletons (e70231c)
• G2P-5431 Refactor authentication and RBAC contexts, introduce reusable hooks/components, and add typed application and login provider data management (7ff270c)
• G2P-5431 Refactor ApplicationAccess, Applications, and LoginProviders controllers to use strongly typed response models (ab5686d)
• G2P-5431 Implement Application Management module in IAM Staff UI (235f138)
• G2P-5335 Fix chart-image-paths to .iamStaffPortalApi.image.tag (chart shipped unpinned) (947f58f)
• G2P-5335 New CI implemented (8109437)
• 0.0.0-develop.N versioning implemented. (a1579ba)
• G2P-5313 Add unit tests for IAM staff portal API components (8670822)
• G2P-5313 Improve unit test coverage for core IAM functionality (c762c7b)

Develop builds

iam — develop 0.0.0-develop.97 (2026-08-28)

commit 8682df5 · changes since the start (showing the latest 20 commits)

Chart: openg2p-iam-service 0.0.0-develop.97

Summary

• Major: CI transition: switched from GitHub Actions to GitLab CI, completing migration by porting workflows and dropping unused scripts.
• Security enhancements: separated agent and staff auth cookies, enforced 401 responses on unverifiable tokens, and seeded the agent realm's login provider for token validation.
• API updates: matched the staff portal's auth surface in the agent portal API and enabled the agent portal API by default with fixed conditions.
• Build improvements: added iam-staff-ui to the build pipeline, updated image tags, and applied black formatting across the repository.
• Dependency management: bumped version to 1.4.0 and enhanced values.yaml with backend API URLs and updated login provider IDs.
• Code cleanup: removed unused SQL seed scripts and login providers JSON, and refactored components to eliminate unused directives.

Changes

• G2P-5605 Build and publish on GitHub (8682df5)
• G2P-5575 applied the platform-service group change on iam service (0d0ba76)
• G2P-5348 Run pre-commit as a single looping job without a runner-local cache (4c9d599)
• G2P-4929 Match the staff portal's auth surface in the agent portal API (31250d7)
• G2P-4929 Keep agent and staff auth cookies apart and 401 on unverifiable tokens (2c74a91)
• G2P-4929 Apply black formatting at the repo's 110-column line length (29983b7)
• G2P-4929 Seed the agent realm's login provider so agent tokens validate (d6ecd80)
• G2P-5572 Bump version to 1.4.0 and update image tags in values.yaml (1eb3a25)
• G2P-5335 Add iam-staff-ui to the build/publish pipeline and pin its chart image tag (d7fdd9c)
• G2P-5552 Fix pre-commit (a2157ea)
• G2P-5552 Remove registry API URL from env and add API URL to staff portal application (69495bf)
• G2P-4929 Enable the agent portal API by default and fix show_if conditions (da9db90)
• G2P-5537 Port attribute-management API routes and hooks from upstream develop; drop wrongly-ported role-permission caching (74c5879)
• G2P-5348 Complete GitLab migration: port GitHub workflows to CI guards, drop .github, and port pending upstream commits (e04966e)
• G2P-5335 Switch CI to GitLab (.gitlab-ci.yml); drop GitHub Actions build/publish (3ed9ea0)
• G2P-4929 Wire iam-agent-portal-api into the IAM chart behind a disabled-by-default switch (9de210b)
• Remove unused SQL seed script and login providers JSON; update IAM_STAFF_UI_PERMISSIONS to include delete permissions (1c5a6a6)
• Enhance values.yaml: Add backend API URLs for iam-staff-ui and update login provider ID (6d1d4f9)
• Refactor: Remove unused use client directives and implement ApplicationsPageClient component (a694c5d)
• G2P-5485 Enhance IconBase64Field with MIME type detection (2556ffa)

What's shown here. This catalogue lists every stable release, plus the latest 20 develop builds and the latest 10 release candidates per release line -- candidates are KEPT after their release ships, as the audit trail of the release run. Older develop builds and release candidates are pruned as they are superseded. Those versions still exist in the container and Helm registries — they are simply not listed here. This page is generated automatically from commit history; do not edit it by hand.