Roadmap
This page tracks what is planned for upcoming Topaz releases. The roadmap is derived from the BACKLOG.md file in the repository; each item there is automatically converted to a GitHub issue when committed.
info
The roadmap reflects current intentions and may change. Watch the GitHub repository or join Discord to stay up to date.
v1.1-beta
Key Vault — full secrets support
| Feature | Status | Description |
|---|---|---|
| Get Secret Versions | Stable | GET {vaultBaseUrl}/secrets/{name}/versions — paged list of all versions for a secret |
| Backup & Restore | Stable | POST .../backup and POST .../restore for opaque secret backup blobs |
| Deleted secrets operations | Stable | Soft-delete surface: list, get, recover, and purge deleted secrets |
Container Registry — data plane preview
| Feature | Status | Description |
|---|---|---|
| ACR OAuth2 token endpoint | Stable | POST /oauth2/token — completes the three-step ACR authentication flow |
| Repositories & Tags | Preview | List repositories (/v2/_catalog), list tags, delete tag via manifest reference |
| Manifest operations | Preview | GET, PUT, DELETE, HEAD for OCI manifests per registry |
| Blob operations | Preview | Full OCI blob upload/download: start session, stream chunks, complete, download, delete |
v1.2-beta
Queue Storage — preview
| Feature | Status | Description |
|---|---|---|
| Service-level operations | Preview | List queues, get/set service properties, get stats |
| Queue CRUD | Preview | Create, delete, get/set metadata and ACL per queue |
| Message operations | Preview | Enqueue, dequeue, peek, update, delete, and clear messages |
Key Vault — keys support
| Feature | Status | Description |
|---|---|---|
| Core CRUD | Stable | Create, import, get, update, delete keys; list keys and versions |
| Backup & Restore | Stable | Export and restore opaque key backup blobs |
| Cryptographic operations | Stable | Encrypt, decrypt, sign, verify, wrap key, unwrap key |
| Key rotation | Preview | Rotate key, get/update rotation policy |
Azure PowerShell integration
| Feature | Status | Description |
|---|---|---|
| Certificate trust script | Stable | configure-azure-powershell-cert.ps1 — trust the Topaz certificate in the Az module |
| Cloud environment registration | Stable | Add-AzEnvironment + Connect-AzAccount setup script and example |
| Test suite | Preview | Topaz.Tests.AzurePowerShell project with a Testcontainers fixture and smoke tests |
ARM Deployments — full support
| Feature | Status | Description |
|---|---|---|
| Cancel | Stable | Mark an in-progress deployment as cancelled |
| Export Template | Stable | Return the ARM template used for a deployment |
| What-If | Preview | Preview resource changes without applying them |
| List at all scopes | Stable | List deployments at subscription, management-group, and tenant scope |
v1.3-beta
Resource Providers — operations support
| Feature | Status | Description |
|---|---|---|
| List, Register, Unregister | Stable | Full provider lifecycle alongside the existing get-by-namespace operation |
Virtual Networks — full control plane
| Feature | Status | Description |
|---|---|---|
| Delete, List, Update Tags | Stable | Complete the VNet control plane beyond create and get |
| Check IP Address Availability | Stable | Validate whether an IP is available within a VNet's address space |
| Subnets — full CRUD | Stable | Create, get, delete, and list subnets within a VNet |
| Network Security Groups | Preview | Full NSG control plane: create, get, delete, list, update tags |
Azure Virtual Machines — initial control plane
| Feature | Status | Description |
|---|---|---|
| New service scaffold | Stable | Topaz.Service.VirtualMachine project with models, resource provider, and service registration |
| Core control plane | Preview | Create/update, get, delete, list VMs — emulated only (no actual boot) |
v1.4-beta
Topaz Portal — tag editing
| Feature | Status | Description |
|---|---|---|
| Inline tag value editing in portal | Preview | Edit button per tag row in the Tags panel turns the value cell into an input field; supports all tag-capable resources |
Key Vault — automated soft-delete purging
| Feature | Status | Description |
|---|---|---|
| Auto-purge soft-deleted vaults | Preview | Background scheduler permanently removes soft-deleted vaults once their scheduledPurgeDate has elapsed |
| Auto-purge soft-deleted secrets | Preview | Background scheduler permanently removes soft-deleted secrets once their scheduledPurgeDate has elapsed |