chore(main): release 0.3.0

[github-actions]

🤖 I have created a release beep boop

0.3.0 (2026-08-02)

⚠ BREAKING CHANGES

• packages now publish to quay.io/okdp/platform-packages (no -v0.3 suffix)

Features

• add End-to-End OAouth2 support for services (be4f8a4)
• add Jupyter/PySpark integration (a07d44d)
• add support for service accounts (b3b6e4d)
• added conventional commit guard rails (ad85467)
• airflow: add OIDC auth support and harden package configuration (aa5bb7b)
• airflow: point gitSync to okdp-examples repository (294e0a5)
• context: allow global proxy settings configuration (HTTP_PROXY, HTTPS_PROXY and NO_PROXY) (9ce6932)
• data-catalog: add hive-metastore package (07b81fa)
• database: add CNPG PostgreSQL operator as system service for sandbox database provisioning (c353cd5)
• database: add package to provision predefined local sandbox postgress databases for the services (de5c47b)
• deploy Apache Polaris as Iceberg REST catalog (3c8f245)
• examples: add okdp examples package (ced44c2)
• extend spark history with spark web proxy (137248d)
• increase timeout to 10 minutes for all package deployments (994ae96)
• integrate Airflow (6a16e8a)
• jupyterhub: use provisioned secrets, stable ingress endpoints, and OKDP examples welcome page (86e8ad3)
• keycloak: add the Trusted Hosts policy for anonymous client registration to use the DCR API (451597a)
• packages: add seaweedfs (2412846)
• publish from a values file and drop the OCI shelf version (cef9d73)
• seaweedfs: add licence (e7f4893)
• seaweedfs: improve ocp-oauth-htpasswd and incorporate labels (0742477)
• seaweedfs: set version for htpasswd and kubectl containers in ocp-oauth-htpasswd (f953c8c)
• secrets: add local secrets provider package to bootstrap sandbox services (compatible with future external-secrets) (1985c36)
• secrets: add secret for seaweedfs database (9533596)
• spark-history-server: use provisioned secrets, stable ingress endpoints (bfdccab)
• storage: pre-provision service credentials, stable ingress endpoints, and HMS warehouse bucket (3b6efd7)
• superset: upgrade to 5.0.0 version (49dd6e3)
• superset: use provisioned DB/secrets, stable ingress endpoints, and configurable load_examples (9f32b7a)
• trino: add hive-metastore catalog, use pre-provisioned secrets, and fixed ingress endpoints (96ae1af)
• trino: add opa and opal for trino authorization (128fb64)
• trino: add proxy variables for opal-server (7f1963d)
• trino: bump opa-server to version 0.1.1 and policyRepoMainBranch (91d6e45)
• trinodb: modify argument options for OPAL (f24e127)
• trinodb: set as parameter opaPolicyPath for opa.policy.uri (9d9d45e)
• trino: enable oidc-dcr (908c7fe)
• trino: expose worker CPU and memory sizing parameters in UI (68cee4c)

Bug Fixes

• airflow: drop parasitic ACME annotation on web ingress (ae8f226)
• airflow: gitSync indentation (223db9b), closes #7
• airflow: pass context proxy env to dags gitSync container (cf26dee)
• airflow: remove hardcoded credentials from usage message (9b3f1ac)
• airflow: use metadataSecretName to fix migration job DB connection (38cff01)
• allow DNS domain (e.g. okdp.sandbox) to be overridden from context (e675b3e)
• cert-manager: extend webhook configuration for certificate validity duration (2d600d0)
• coredns: update CoreDNS job and fix RBAC permissions (266f6c7)
• dnsmasq permision denied (2544706)
• externalize the configuration to the KuboCD default context (88b0ab6)
• fix display name for python (99d5050)
• fix seaweedfs S3 configmap name (47a9d92)
• ingress-nginx: disable allowSnippetAnnotations to mitigate CVE-2026-42945 (80eea82)
• jupyterhub: increase singleuser.startTimeout to 600 (300) (466d98b)
• jupyterhub: increase singleuser.startTimeout to 600 (300) (1514010)
• jupyterhub: use cluster DNS for internal Hub API calls (b8fb14b)
• jupyterhub: use multi-arch image (7f808b2)
• jupyterhub: use multi-arch image (b6c4a30), closes #10
• keycloak: connect Keycloak to provisioned local Postgres DB instead of the embedded helm chart DB (31aab26)
• keycloak: increase ram (ba33657)
• keycloak: increase ram (6a5ee22)
• okdp-ui: add trino logo and description (8c1b53f)
• optimize keycloak deployment resources for sandbox (d34f62c)
• pin auth-config ConfigMap name via fullnameOverride (82027f3)
• seaweedfs: correct job.yaml file in ocp-oauth-htpasswd (7d6d9dd)
• seaweedfs: mount auth-config configmap under its real Helm fullname (ca3bf8e)
• seaweedfs: set auto configuration for volume limits (6fe134e)
• Set PySpark notebook as default (3365f09)
• spark-rbac: bind spark-role to namespace ServiceAccount group (cfc5b77)
• superset: switch to okdp docker images (superset, dockerize and websocket) #11 (94ade5b)
• trino: correctly add opal secret variables for secure mode (f8f671b)
• trino: rename the trinodb package to trino (8220cd2)
• trino: rename the trinodb package to trino (808e598)
• trino: set enableDCR to false by default (4bb457f)
• update okdp-ui (drop IPv6) (258000a)
• update repository path for spark-history-server helm chart (4cbd8b9)
• update sandbox repository name (4f8b5b8)
• versioning: make package versions SemVer-compliant for okdp-ui (c5547f5)

---

This PR was generated with Release Please. See documentation.