This file documents all notable changes made to this project.
It follows the Keep a Changelog format and uses Semantic Versioning.
| Version | Date | Related PR |
|---|---|---|
| [1.16.1] | 2026-02-11 | PR(#83) |
| [1.16.1] | 2026-02-05 | PR(#78) |
| [1.16.0] | 2026-01-23 | PR(#76) |
| [1.15.0] | 2026-01-20 | PR(#75) |
| [1.14.0] | 2026-01-12 | PR(#73) |
| [1.13.0] | 2026-01-12 | PR(#72) |
| [1.12.0] | 2025-12-10 | PR(#70) |
| [1.11.1] | 2025-10-15 | PR(#66) |
| [1.11.0] | 2025-10-10 | PR(#65) |
| [1.10.2] | 2025-10-09 | PR(#61) |
| [1.10.1] | 2025-10-07 | PR(#60) |
| [1.10.0] | 2025-10-07 | PR(#59) |
| [1.9.1] | 2025-08-26 | PR(#40) |
| [1.9.0] | 2025-07-29 | PR(#39) |
| [1.8.3] | 2025-07-18 | PR(#38) |
| [1.8.2] | 2025-07-17 | PR(#32) |
| [1.8.1] | 2025-07-16 | PR(#36) |
| [1.8.0] | 2025-07-11 | PR(#35) |
| [1.7.0] | 2025-07-10 | PR(#34) |
| [1.6.1] | 2025-07-10 | PR(#33) |
| [1.6.0] | 2025-07-08 | PR(#29) |
| [1.5.1] | 2025-07-03 | PR(#28) |
| [1.5.0] | 2025-06-30 | PR(#27) |
| [1.4.0] | 2025-06-26 | PR(#26) |
| [1.3.3] | 2025-06-26 | PR(#25) |
| [1.3.3] | 2025-06-26 | PR(#24) |
| [1.3.2] | 2025-06-24 | PR(#22) |
| [1.3.2] | 2025-06-11 | PR(#21) |
| [1.3.1] | 2025-06-10 | PR(#20) |
| [1.3.0] | 2025-05-22 | PR(#17) |
| [1.2.0] | 2025-05-19 | PR(#3) |
| [1.1.1] | 2025-05-15 | PR(#16) |
| [1.1.0] | 2025-05-13 | PR(#14) |
| [1.0.2] | 2025-05-12 | PR(#13) |
| [1.0.1] | 2025-05-06 | PR(#12) |
| [1.0.0] | 2025-04-20 | PR(#11) |
[1.16.2] - 2026-02-11 - PR(#83)
refactor:
- opneldlap data to contain avenirs-portfolio-api users. Fix :
- missing lib in Dockerfile of avenirs-portfolio-security
[1.16.1] - 2026-02-05 - PR(#78)
- Fix:
- openldap volumes init boostraping and clean scripts.
- cas service setting for login/password
[1.16.0] - 2026-01-23 - PR(#76)
- Fix: problem with bind volume and permission for openldap service.
- Add: script to load fixtures as the loading is performed only on the first boot of openldap service.
[1.15.0] - 2026-01-20 - PR(#75)
- Fix: multivalued attributes.
- Fix: bug with mail generated with the bad uid.
[1.14.0] - 2026-01-15 - PR(#73)
- Fix: missing mail in fixtures.
- Add: export form LDAP to json in order to work on the feeding process
[1.13.0] - 2026-01-12 - PR(#72)
- Refactor: service openldap uses named volumes instead of bind.
- Add: LDAP supann support.
- Fixtures: more realistic fixtures (suppan) based on real data.
[1.12.1] - 2025-12-15 - PR(#71)
- Fix Kafka bootstrap process (Use Kraft and Zookeeper removed)
[1.12.0] - 2025-12-10 - PR(#70)
- Add: Integration of the interoperability microservice as an additional backend service.
[1.11.1] - 2025-10-15 - PR(#66)
- clean existing APISIX routes before routes generation.
- Add a tag on the routes: API (avenirs-portfolio-api), BACK-OFFICE (avenirs-portfolio-back-office), SPECS for swagger end points.
- Deletion of the generated route scripts in the APISIX clean process.
[1.11.0] - 2025-10-10 - PR(#65)
- Merge openapi specifications of microservices.
[1.10.2] - 2025-10-09 - PR(#61)
- Fix seeding setting to CSV.
- Fix settings for base url of back office.
- Fix several issues in Apisix route generation.
[1.10.1] - 2025-10-07 - PR(#60)
- Fix typos in submodules urls.
[1.10.0] - 2025-10-07 - PR(#59)
- Integration of repositories avenirs-portfolio-back-office and avenirs-portfolio-common.
- Fixes named volumes for Postgres service.
[1.9.1] - 2025-08-26 - PR(#40)
- added docker containers for opensearch, opensearch-dashboards and valkey
[1.9.0] - 2025-07-29 - PR(#39)
- added docker volume for file storage
npm run api:reset-dbtriggers now thereset-storage-volume.shscript that empty itnpm run deploytriggers now theinit-storage-volume.shthat initialize the file storage docker volume and copy some placeholders files in it
[1.8.3] - 2025-07-18 - PR(#38)
- Dependency vulnerabilities
[1.8.2] - 2025-07-11 - PR(#32)
- grafana dashbords for Apisix, Avenirs Portfolio API and Postgresql primary DB.
[1.8.1] - 2025-07-16 - PR(#36)
- secrets management for services Apisix, Postgres and LDAP.
[1.8.0] - 2025-07-11 - PR(#35)
- secrets management.
- All the secrets are stored in .secret.env
- new function in srv-dev-commons.sh substitute_secrets_and_dynamics which handles secrets and dynamic variables substitution in template files. Affected services:
- CAS
- APISIX
- API
- UI
- Grafana
- OpenLDAP
- PostgreSQL (only root password)
[1.7.0] - 2025-07-10 - PR(#34)
- dynamic apisix route creation.
[1.6.1] - 2025-07-10 - PR(#33)
- several deployment pb: docker compose instead of docker-compose, heredoc in Docker file for avenirs-cofolio-client, backend url and cas clean process for commits created by installation process.
[1.6.0] - 2025-07-08 - PR(#29)
- cofolio client integration.
[1.5.1] - 2025-07-03 - PR(#28)
- submodules in detached HEAD state.
[1.5.0] - 2025-06-30 - PR(#27)
[1.5.1] - 2025-07-03 - PR(#28)
- submodules in detached HEAD state.
[1.5.0] - 2025-06-30 - PR(#27)
- configuration for preflight queries (OPTIONS).
- cors configuration.
[1.4.0] - 2025-06-26 - PR(#26)
- auth mock handles all user ids generated by seeding in avenirs-portfolio-api.
[1.3.4] - 2025-06-26 - PR(#24)
- Invalid path segments in apisix routes generation from OpenAPI specification.
[1.3.3] - 2025-06-26 - PR(#24)
- Broken docker file for avenirs-portfolio-* because of missing environment variable. The docker file have been updated to not be dependent on environment variable.
[1.3.2] - 2025-06-24 - PR(#22)
- apisix-generate-routes-from-open-api.sh can be used to generate the routes from Open API specification.
[1.3.2] - 2025-06-11 - PR(#21)
- OIDC plugin definition
- auth mock adapted in order to work with avenirs-portfolio-api.
- oidc-client/secret for apisix in secret_env (see vaultwarden).
- route initialization scripts refactored to avoid reverse proxy.
[1.3.1] - 2025-06-10 - PR(#20)
- Prerequisites script that can stop the process if on prerequisite is not met.
- Use a template fir apisix config file.
- invalid environment variables substitution in apisix config file.
[1.3.0] - 2025-05-22 - [API] PR(#17)
- Apisix routes for avenirs-portfolio-api's endpoints.
- avenirs-portfolio-api : spring env file generation to inject fixtures in database.
- avenirs-apache:
- reverse proxy configuration for avenirs-portfolio-api.
- end points information removed from index page.
- The file for Apisix api keys: services/apisix/secret_env must be downloaded from vaultwarden.
Profile overview on localhost
curl -k --header "Authorization: Bearer AT-1..." \
-X GET "https://localhost/apim/me/user/student/overview"\
-H "Accept: application/json"Profile overview on srv-dev-avenir
curl -k --header "Authorization: Bearer AT-1..." \
-X GET "https://srv-dev-avenir.srv-avenir.brgm.recia.net/apim/me/user/student/overview"\
-H "Accept: application/json"Profile update on localhost
curl -k --header "Authorization: Bearer AT-1-..." -X PUT "https://localhost/apim/me/user/student/update" -H "Content-Type: application/json" -H "Accept: application/json" -d '{
"firstname": "Camille2",
"lastname": "Laurent2",
"email": "camille2.laurent2@univ.fr",
"bio": "New bio"
}' Profile update on srv-dev-avenir
curl -k --header "Authorization: Bearer AT-1-a29sDr2iCnLiog-RRDVpuBII5cd4WD8r" -X PUT "https://srv-dev-avenir.srv-avenir.brgm.recia.net/apim/me/user/student/update" -H "Content-Type: application/json" -H "Accept: application/json" -d '{ "firstname": "Camille2", "lastname": "Laurent2", "email": "camille2.laurent2@univ.fr", "bio": "New bio" }'
[1.2.0] - 2025-05-19 - [API] PR(#3)
- avenirs-portfolio-api : added database auto generation.
Note: If the PostgreSQL cluster is already created, the database will not be automatically created during deployment. You need to:
- Run a deployment with
npm run deploy.- Go to the PostgreSQL submodule >
avenirs-postgresql-overlay>initand manually execute the script11_avenirs-api_init-db.generated.sqlon thetemplate1data source.- Afterward, restart the API using
docker restart avenirs-portfolio-api.
[1.1.1] - 2025-05-15 - PR(#16)
- Authentication mock
- Initialisation process for APISIX routes and plugins
- Missing claims in cas config file.
- Missing include in jasypt script.
- Missing .sdkmanrc.
[1.1.0] - 2025-05-12 - PR(#14)
- Authentication mock
- Initialisation process for APISIX routes and plugins
[1.0.2] - 2025-05-12 - PR(#13)
- avenirs-portfolio-api integrated as submodule.
- Missing chmod +x in Docker file for the services under avenirs-portfolio.
[1.0.1] - 2025-05-06 - PR(#12)
- remove_file function to handle verbose and warning messages.
- scripts/jasypt which contains a wrapper for jasyp jasypt-util.sh and jasypt jar.
- purge npm script: removes the volumes.
- docker compose file in avenirs-portfolio service to disable avenirs-portfolio-storage.
- avenirs-portfolio-security service is enabled. As it uses jasypt, the environment variable JASYPT_ENCRYPTOR_PASSWORD must be set.
- avenirs-portfolio-security service database initialisation see issue #7
[1.0.0] - 2025-04-30 - PR(#11)
🏁 Initial version — this marks the beginning of the changelog tracking for the project.
- Changelog file