# Panfactum Changelog — edge.25-02-28

> Adds SSO modules for MongoDB Atlas and GitHub, enhances PostgreSQL WAL retention and S3 access configuration, enables node-local image caching by default, and fixes Argo event source service account issues.

## Highlights

- New [`authentik_atlas_mongodb_sso`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/authentik/authentik_mongodb_atlas_sso) and [`authentik_github_sso`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/authentik/authentik_github_sso) SSO modules
- Node-local image caching now enabled by default in Panfactum submodules
- New `pg_wal_keep_size_gb` and `s3_bucket_access_policy` inputs for `kube_pg_cluster`

## Additions

- Adds [`authentik_atlas_mongodb_sso`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/authentik/authentik_mongodb_atlas_sso) and [`mongodb_atlas_identity_provider`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/authentik/mongodb_atlas_identity_provider) modules for setting up Authentik SSO with MongoDB Atlas.
  - Impacts: iac-module `authentik_mongodb_atlas_sso` — New module for Authentik SSO integration with MongoDB Atlas
  - Impacts: iac-module `mongodb_atlas_identity_provider` — New module for MongoDB Atlas identity provider configuration
- Adds [`authentik_github_sso`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/authentik/authentik_github_sso) module for setting up Authentik SSO with GitHub.
  - Impacts: iac-module `authentik_github_sso` — New module for Authentik SSO integration with GitHub
- Adds new inputs to [`kube_pg_cluster`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/kubernetes/kube_pg_cluster) for configuring [`pg_wal_keep_size_gb`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/kubernetes/kube_pg_cluster#pg_wal_keep_size_gb) settings and additional [`s3_bucket_access_policy`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/kubernetes/kube_pg_cluster#s3_bucket_access_policy) for the S3 bucket.
  - Impacts: iac-module `kube_pg_cluster` — New pg_wal_keep_size_gb and s3_bucket_access_policy inputs

## Improvements

- Node-local image caching is now enabled by default in Panfactum submodules.

## Fixes

- Fixes the service account name not being set for event source pods in [`kube_argo_event_source`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/kubernetes/kube_argo_event_source).
  - Impacts: iac-module `kube_argo_event_source` — Fix service account name not being set for event source pods

## Related Resources

- [JSON Data](https://panfactum.com/docs/changelog/edge.25-02-28.json): Machine-readable data
- [Channel Release List](https://panfactum.com/docs/changelog/edge.json): All releases in this channel