[jacobecox]

New template: Logto 1.0.0 (work item 5433), the open-source auth and identity platform (Logto OSS 1.45.0, MPL-2.0).

What it deploys

• RELEASE-logto: 2 standard replicas serving sign-in pages, OIDC and the Management API (:3001). Interchangeable; all state is in PostgreSQL.
• RELEASE-logto-admin (default on): the public Admin Console on its own canonical URL (:3002). It does not serve until the admin account exists.
• Bundled postgres-highly-available 2.8.1 (default) or postgres 3.4.1 (one flag).
• Optional domain resources for customDomain.core / customDomain.adminConsole.
• Prerequisites: an admin dictionary secret (username, password) and the DB credentials dictionary secret.

Maintainer rulings built in

• HA Postgres by default, single Postgres as the dev option.
• The first admin is created automatically on first boot from the required admin.secretName secret, through the Admin Console's own registration flow, so it gets exactly what a manual Console claim gets. Sign-up is then closed. The secret is read once.
• Public Admin Console on by default (the admin always exists before it serves).
• Custom domains in v1. Domain rows are pending the test domain.

Testing (test-gvc-3, aws-us-west-2)

• Local e2e suite: 10 passed, 0 failed. The six checks in logto/tests/checks.yaml cover the public issuer, the public Admin Console, bootstrap sign-in with wrong-password and sign-up-refused controls, the headline OIDC code + PKCE flow with an app and user created through the Management API, exactly one admin, and the schema being current.
• Live round: 28 PASS, 1 FAIL fixed and re-tested, 3 PENDING-DOMAIN. Rows covered:
  • browser login and 16 Console routes
  • browser headline: app + user created in the Console, then a real sign-in with the id_token checked
  • rolling restart, replica stop and 20/20 sign-ins across replicas, 0 non-2xx
  • config propagation without Redis
  • replicas-4 lock race
  • upgrade from 1.44.0
  • admin-secret failure cases
  • claim gate
  • internalAccess, port-forward fallback
  • single-postgres mode
  • drift: Logto's resources clean; postgres-HA 2.8.1 probe drift is pre-existing in the subchart
  • uninstall
• Found and fixed live:
  • Logto reads PORT, which the platform sets to the first port, so both servers bound 3002 on the admin workload. Fix: pin PORT/ADMIN_PORT.
  • The DB gate hung on a mesh-closed socket. Fix: treat the close as not-ready.
  • A Patroni failover crashed every replica, through an unhandled pg pool error upstream. Fix: a guard swallows only lost-connection errors. Re-test: about 58 s of failed sign-ins (the failover itself) and zero restarts.

Wizard

tw lint: ok logto 1.0.0: 0 errors, 0 warnings, 116/116 leaves covered
tw check-docs: fails only on forward links to the not-yet-written docs page (#admin-account, #access, #custom-domains, #database, #prerequisites).

Before ship

• Custom-domain rows (needs the maintainer's test domain)
• Wizard browser round in the test console
• Social connectors (HANDOFF: real OAuth consent)
• Maintainer ruling on the UI features not yet browser-tested (MFA, RBAC, organizations, M2M, SMTP)

🤖 Generated with Claude Code

https://claude.ai/code/session_01FZrfgWEQM4Kb8nMRmMPHEC

[github-actions]

Template e2e tests

⚠️ logto/1.0.0 — 16/17 passed, 1 warning (7.4 min, aws-us-east-1)

Scenario	Check	Result
install 1.0.0	install + every workload ready	pass
install 1.0.0	rendered == stored (Console Drift tab)	warn — workload/e2eiwif1st10-postgres-ha spec.containers[0].livenessProbe.httpGet.scheme: stored "HTTP", chart omits it; workload/e2eiwif1st10-postgres-ha spec.containers[0].livenessProbe.initialDelaySeconds: stored 60, chart omits it; workload/e2eiwif1st10-postgres-ha spec.containers[0].livenessProbe.successThreshold: stored 1, chart omits it; workload/e2eiwif1st10-postgres-ha spec.containers[0].read
install 1.0.0	issuer-is-public-endpoint	pass
install 1.0.0	admin-console-public	pass
install 1.0.0	bootstrap-admin-sign-in	pass
install 1.0.0	oidc-code-flow	pass
install 1.0.0	rbac-and-m2m	pass
install 1.0.0	mfa-totp	pass
install 1.0.0	captcha-turnstile	pass
install 1.0.0	mfa-backup-code	pass
install 1.0.0	password-policy	pass
install 1.0.0	user-suspension	pass
install 1.0.0	custom-jwt-claims	pass
install 1.0.0	single-admin	pass
install 1.0.0	schema-current	pass
install 1.0.0	no-op upgrade ×2 (no churn)	pass
install 1.0.0	uninstall removes everything	pass

Run logs