Changelog

Multicluster gateways and unified server management: an optional private mTLS agent gateway lets one dashboard and API manage authorized game servers across independent clusters, with optional location filters and routed console, files, players, mods and captures. User theme customization: Settings → Theme & Appearance offers preset themes (Modern Pink, Legacy Orange) and custom color selection with live WCAG AA contrast validation. Network capture: admin-only, on-demand packet capture from running game pods as ephemeral sidecars, exported as PCAPNG (Wireshark-compatible). Module authoring toolkit: gp-module CLI and web dashboard for scaffolding, validating, previewing, and packaging custom game modules. PostgreSQL end-to-end support: the PostgreSQL driver now works end to end, with its own migration set, placeholder rebinding, and database tests in CI. It remains experimental: keep a single API replica. Install-time configuration: Helm-seeded OIDC role mappings and default StorageClass for game-data PVCs. Share link expiry options: no-expiry, 15/30/60/90-day presets, or custom date picker. Security audit remediation: share link isolation, permission checks on GameServer mutations, Secret/ConfigMap reference validation, and symlink/zip-slip guards hardened across mod extraction. Servers page multi-namespace support: the Servers list now shows servers from every namespace the viewer may read, not only the default games namespace. Playit tunnel improvements: NetworkPolicy egress widened to reach relay, and playit-assigned addresses now show in status. REST and CLI console protocols for games with HTTP admin APIs (FiveM) and PTY-only games (Terraria). 14 new game modules (FiveM, Farming Simulator 25, Euro Truck Simulator 2, Mount & Blade Bannerlord, tModLoader, Team Fortress 2, BeamMP, Left 4 Dead 2, The Isle, ARK: Survival Evolved, Arma Reforger, Hell Let Loose, Squad and Nuclear Option), for 30 in total (16 in v0.2.0-beta.8).

Dependency sweep: Go module updates across telemetry-receiver, sentinel, mcp-server, operator, api and agent; web dependency bumps (@tanstack/react-virtual, lucide-react, @types/node, globals, jsdom, postcss); and CI/image pins aligned to stable releases (setup-envtest release-0.19→release-0.24, envtest Kubernetes 1.31.0→1.36.2, kind v0.24.0→v0.32.0, nginx 1.30→1.31, restic 0.18→0.19). Wake-on-connect for idle auto-sleep via sentinel component holding advertised ports and waking servers on connection attempts. Load-balancer address pools: GameServers can request specific pools or explicit public IPs when exposed as LoadBalancer services, integrated with MetalLB and Cilium. Signing key rotated from Ed25519 to ECDSA P-256 with Rekor transparency logging for all images, charts, and module bundles.

Stabilization release: full audit of code, dashboard, API, and docs. Fixed WebSocket RBAC cluster bypass, Hostport now binds only advertised ports, SSE/WebSocket streams no longer force-closed at 60s, and resolved Modules page crash. Docs refreshed for all 8 CRDs and clarified SQLite as production-tested.

Major release: four new console protocols (Rust WebRcon, DayZ BattlEye, Satisfactory HTTPS, Palworld REST), per-GameServer RBAC with owners/collaborators, read-only MCP server, native S3 audit sink, OIDC provider management with group→role mapping, ntfy notifications, mod install manifests and one-click updates, Factorio mod-portal registry, version switching, and admin System Logs.

Added: this website, the published cosign verification key (cosign.pub, with post-sign verification in CI), automatic GitHub Release pages, and the last UI-audit parity items — login password visibility toggle, user emails on the Users page, port overrides in the Create Server wizard, and a redesigned “Back up now” flow.

Added: fleet metrics (gameserver/backup phase gauges with Grafana panels and alerts), server-side audit-log export, an audit webhook push sink, the audit-to-syslog bridge, and cosign-signed component images.

Added: bundled observability — Prometheus alerts and a Grafana dashboard, signed module bundles with Cosign verification.

Breaking: CRD API group renamed kestrel.gg → gameplane.local as part of the project’s rebrand to Gameplane.