Sacha Al Himdani
3fcabc6a62
Fix permissions infinite failed request
...
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com >
2025-11-14 21:09:35 +01:00
Bryan Frimin
f8b33fa451
Fix ca-cert-bundle entrypoint.sh
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-14 20:15:17 +01:00
Sacha Al Himdani
b1b2fc69fd
Release v0.88.3
...
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com >
2025-11-14 16:37:29 +01:00
Sacha Al Himdani
44cf6737b5
Fix document permission
...
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com >
2025-11-14 16:32:58 +01:00
Bryan Frimin
80bbfca1f7
Fix remove postgres network
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-14 12:50:18 +01:00
Bryan Frimin
93f2136bfd
Release v0.88.2
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-14 12:48:07 +01:00
Bryan Frimin
f573e639ac
Fix missing AUTH_COOKIE_SECURE implementation
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-14 12:46:34 +01:00
Bryan Frimin
1ca5d894fa
Fix probod kill because postgres not ready
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-14 12:37:11 +01:00
Bryan Frimin
e1a244e0ca
Fix broken pipeline
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-14 11:54:31 +01:00
Sacha Al Himdani
117e83e778
Release v0.88.1
...
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com >
2025-11-14 11:14:01 +01:00
Bryan Frimin
0b2420b6b8
Fix support PostgreSQL CA bundle in Helm charts with file path option
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-14 11:12:15 +01:00
Sacha Al Himdani
475cf9cbf8
Release v0.88.0
...
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com >
2025-11-14 10:31:23 +01:00
Bryan Frimin
e41997a04d
Enable IdP-initiated SAML flows and simplify authentication
...
Simplifies SAML authentication by using RelayState to contain the SAML
config ID for both SP-initiated and IdP-initiated flows, removing the
need for the relay_states table and associated token management.
Key changes:
- Enable IdP-initiated flows with AllowIDPInitiated flag
- Use RelayState for SAML config ID instead of secure tokens
- Remove auth_saml_relay_states table and related code
- Maintain InResponseTo validation for SP-initiated flows
- Fix MetadataURL to use entity ID instead of ACS URL
This enables IdP-initiated SAML logins (e.g., from Google Workspace,
Azure Entra ID, Okta) while maintaining security through request ID
validation and assertion replay prevention.
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-14 09:32:23 +01:00
Bryan Frimin
80349a3b3b
Add support for PostgreSQL CA bundle from local file
...
Add PG_CA_BUNDLE_PATH environment variable to load PostgreSQL TLS CA
certificates from a file path. The bundle is read at startup and injected
into the generated configuration file, enabling secure connections to
PostgreSQL instances with custom CA certificates.
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-13 23:34:13 +01:00
Thomas Stocker
eb461d5c29
feat: update charts README.md and values to remove sensitive values
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-13 21:24:13 +01:00
Thomas Stocker
9adc975369
feat: update entrypoint to autogenerate SAML certificate and private key
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-13 21:24:13 +01:00
Thomas Stocker
53965631c8
fix: cert printing config issue
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-13 21:24:13 +01:00
Thomas Stocker
4638c72a11
feat: add saml config only if one env var is set
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-13 21:24:12 +01:00
Thomas Stocker
5b24292198
feat: add SAML config generation in entrypoint
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-13 21:24:12 +01:00
Bryan Frimin
653ac5addb
Fix error message
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-13 21:22:27 +01:00
Bryan Frimin
24abdb9d14
Fix import and error management
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-13 20:55:43 +01:00
MustafaAamir
60a3402b24
fix(certmanager#514): check DNS configuration before starting ACME
...
Signed-off-by: MustafaAamir <mustafa.290101@gmail.com >
2025-11-13 20:55:43 +01:00
Sacha Al Himdani
a3fcd522ca
Update CHANGELOG
...
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com >
2025-11-13 18:16:02 +01:00
Sacha Al Himdani
08c6cc8d09
Add api membership during organization creation
...
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com >
2025-11-13 18:01:00 +01:00
Sacha Al Himdani
542dfb9890
Update CHANGELOG
...
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com >
2025-11-13 17:38:52 +01:00
Sacha Al Himdani
21c4b7cd9d
Add role management
...
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com >
2025-11-13 17:11:22 +01:00
Sacha Al Himdani
696adb7d79
Release v0.87.0
...
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com >
2025-11-13 10:29:17 +01:00
Bryan Frimin
9ad72955ca
Update CHANGELOG
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-13 09:37:51 +01:00
Antoine Bouchardy
139f5984e2
Add meeting and meeting summary objects
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-12 23:55:49 +01:00
Bryan Frimin
0a9033aaaf
Update CHANGELOG
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-12 12:15:32 +01:00
Thomas Stocker
6ae6c6875b
fix: ingress issue that didn't discover the right service
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-12 12:09:38 +01:00
Thomas Stocker
566a8e6c6d
feat: always pull latest image
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-12 12:09:38 +01:00
Thomas Stocker
798c5a6baf
fix: use secret instead of simple env vars
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-12 12:09:37 +01:00
Thomas Stocker
f28095d8a0
fix: ingress port issue and cubic review
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-12 12:09:37 +01:00
Thomas Stocker
eda00d0d65
fix: replace hostname with baseUrl param and add SAML config
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-12 12:09:37 +01:00
Thomas Stocker
3f3e06d85b
fix: use env vars and secret on container, config file is now generated on container launch
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-12 12:09:37 +01:00
Thomas Stocker
c1f5b01541
chore: update NOTES.txt with current template
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-12 12:09:36 +01:00
Thomas Stocker
ec67ac3991
fix: remove testing instructions
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-12 12:09:36 +01:00
Thomas Stocker
47c4efb8c8
fix: cubic issues
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-12 12:09:36 +01:00
Thomas Stocker
fa19f3a17c
chore: remove echo sensitive data
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-12 12:09:35 +01:00
Thomas Stocker
bb2d410a6d
chore: remove test values in smtp config
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-12 12:09:35 +01:00
Thomas Stocker
d9ab8e8af7
feat: update hostnam param with base-url
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-12 12:09:35 +01:00
Thomas Stocker
4a96bd796a
feat: add helm charts
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-12 12:09:35 +01:00
Bryan Frimin
6d1760ce9b
Use enum values
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-12 12:04:35 +01:00
Bryan Frimin
944f61da15
Fix various errors
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-12 12:04:35 +01:00
Bryan Frimin
fcbfd93f26
Fix route mount for each requests
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-12 12:04:34 +01:00
Bryan Frimin
37aa5e04be
Add vendor list and create tools
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-12 12:04:34 +01:00
Bryan Frimin
87374293f7
Upgrade mcp dependencies
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-12 12:04:34 +01:00
Bryan Frimin
1436d0db08
Add simple MCP server
...
Proof of concept of working MCP server for Probo. Currently the official
MCP library does not support session that why the server is configured
in stateless mode. It seams the input jsonschema is not used to perform
any validation, so we should figuring out how to validate the input
properly.
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-12 12:04:34 +01:00
Bryan Frimin
d71800efbd
Do not log sensitive info
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-12 11:46:14 +01:00