Changelog

Stabilization release: full audit of code, API, and docs. Fixed WebSocket RBAC cluster bypass, Hostport now binds only advertised ports, SSE/WebSocket streams no longer force-closed at 60s, and resolved Modules page crash. Docs refreshed for all 8 CRDs and clarified SQLite as production-tested.

Major release: four new console protocols (Rust WebRcon, DayZ BattlEye, Satisfactory HTTPS, Palworld REST), per-GameServer RBAC with owners/collaborators, read-only MCP server, native S3 audit sink, OIDC provider management with group→role mapping, ntfy notifications, mod install manifests and one-click updates, Factorio mod-portal registry, version switching, and admin System Logs.

Added: this website, the published cosign verification key (cosign.pub, with post-sign verification in CI), automatic GitHub Release pages, and the last UI-audit parity items — login password visibility toggle, user emails on the Users page, port overrides in the Create Server wizard, and a redesigned “Back up now” flow.

Added: fleet metrics (gameserver/backup phase gauges with Grafana panels and alerts), server-side audit-log export, an audit webhook push sink, the audit-to-syslog bridge, and cosign-signed component images.

Added: bundled observability — Prometheus alerts and a Grafana dashboard, signed module bundles with Cosign verification.

Breaking: CRD API group renamed kestrel.gg → gameplane.local as part of the project’s rebrand to Gameplane.