Fixed
- (deps) Update module github.com/giantswarm/mcp-oauth to v0.2.200 in #829 by @renovate[bot]
Full Changelog: https://github.com/giantswarm/muster/compare/v0.3.13...v0.3.14
AI Agents
Fixed
- (deps) Update module github.com/giantswarm/klaus-oci to v0.0.48 in #274 by @renovate[bot]
Full Changelog: https://github.com/giantswarm/klausctl/compare/v0.2.1...v0.2.2
Fixed
- (deps) Update module github.com/giantswarm/klaus-oci to v0.0.48 in #144 by @renovate[bot]
Full Changelog: https://github.com/giantswarm/klaus-operator/compare/v0.0.93...v0.0.94
Changed
- Align files according to platform standards in #826 by @giantswarm-align-files[bot]
Full Changelog: https://github.com/giantswarm/muster/compare/v0.3.12...v0.3.13
Changed
- Release binaries now include darwin/amd64, darwin/arm64, windows/amd64, and windows/arm64 alongside the existing linux targets. Windows binaries are named
muster-windows-<arch>.exe.
Fixed
- Update mcp-oauth to v0.2.199: JWT access tokens issued for grants without an RFC 8707
resourceparameter now carry anaudclaim defaulting to the server’s resource identifier (RFC 9068 §2.2), instead of an empty audience that JWT-validating gateways (e.g. agentgateway) reject with401 InvalidAudience. Existing grants self-heal on their next token refresh.
Added
- AllowedClaims in TrustedIssuer, drop KubernetesSATrusts, fix JWT signing key wiring (#772) (04b5bd2)
muster.oauth.server.dex.allowPrivateIPOIDC: allows Dex OIDC discovery to reach issuer URLs that resolve to private/loopback IPs (e.g. Azure internal load balancers). Requires mcp-oauth#427. Emits a CWE-918 startup warning.
Fixed
- deps: update module github.com/giantswarm/mcp-oauth to v0.2.186 (ca46984)
- deps: update module github.com/giantswarm/mcp-toolkit to v0.2.5 (#780) (bcce33a)
- CiliumNetworkPolicy egress now reaches an OIDC issuer (Dex) / HTTP MCP server fronted by a Cilium-managed ingress gateway VIP (LB-IPAM / L2, typical on-prem). New
networkPolicy.cilium.ingressGatewayrule allows egress to the gateway backend endpoints on their target ports (default:10080/10443, selector:app.kubernetes.io/name=envoyinenvoy-gateway-system).
Changed
- Release binaries now include darwin/amd64, darwin/arm64, windows/amd64, and windows/arm64 alongside the existing linux targets. Windows binaries are named
Changed
- Align files according to platform standards in #140 by @giantswarm-align-files[bot]
- Align files according to platform standards in #143 by @giantswarm-align-files[bot]
Fixed
Full Changelog: https://github.com/giantswarm/klaus-operator/compare/v0.0.92...v0.0.93
Changed
- Align files according to platform standards in #59 by @giantswarm-align-files[bot]
- Align files according to platform standards in #60 by @giantswarm-align-files[bot]
Full Changelog: https://github.com/giantswarm/klaus-oci/compare/v0.0.47...v0.0.48
Changed
- Align files according to platform standards in #319 by @giantswarm-align-files[bot]
- Add .circleci/custom.yml with repo-specific jobs for generated CI in #321 by @teemow
- Align files according to platform standards in #323 by @giantswarm-align-files[bot]
Fixed
- (build) Use CI-built binary in container image instead of rebuilding in #320 by @teemow
- (deps) Update module github.com/giantswarm/mcp-oauth to v0.2.199 in #322 by @renovate[bot]
Full Changelog: https://github.com/giantswarm/klaus/compare/v0.0.196...v0.0.197
Changed
- Align files according to platform standards in #272 by @giantswarm-align-files[bot]
- Align files according to platform standards in #273 by @giantswarm-align-files[bot]
Full Changelog: https://github.com/giantswarm/klausctl/compare/v0.2.0...v0.2.1
Fixed
- (orchestrator) Register auth-required servers from retry loop in #811 by @QuentinBisson
Full Changelog: https://github.com/giantswarm/muster/compare/v0.3.10...v0.3.11