Changed
- (deps) Update klaus-gateway docker tag to v0.2.2 in #95 by @renovate[bot]
Full Changelog: https://github.com/giantswarm/agentic-platform/compare/v1.1.34...v1.1.35
Full Changelog: https://github.com/giantswarm/agentic-platform/compare/v1.1.34...v1.1.35
Full Changelog: https://github.com/giantswarm/agentic-platform/compare/v1.1.33...v1.1.34
agentic-platform-mcps sub-chart 0.3.0 -> 0.4.0, which adds
identityProviders.<name>.expectedIssuer (rendered into the muster MCPServer
tokenExchange.expectedIssuer). Required to repoint tunneled MCP servers at
tunnelport :8443 in-cluster Services, where the exchanged token’s iss stays
the public Dex issuer and must be pinned (giantswarm#36883).Full Changelog: https://github.com/giantswarm/klaus-operator/compare/v0.0.97...v0.0.98
kagent-muster-token-init): no longer depends on a shell in the kubectl image, which is distroless (registry.k8s.io/kubectl) and crash-looped BackoffLimitExceeded on /bin/sh: no such file or directory, failing post-upgrade. The token is now minted via a projected serviceAccountToken volume, the Bearer <token> Secret manifest is rendered by a busybox init container, and kubectl is invoked with args only to apply it. The Job runs as kagent-muster-client (the identity muster trusts); the serviceaccounts/token create RBAC is dropped.agents.muster: replaced tokenDuration (Go duration) with tokenExpirationSeconds (integer, fed to the projected token volume); added busyboxImage.Full Changelog: https://github.com/giantswarm/klaus-operator/compare/v0.0.96...v0.0.97
Full Changelog: https://github.com/giantswarm/klaus-operator/compare/v0.0.95...v0.0.96
Full Changelog: https://github.com/giantswarm/klausctl/compare/v0.2.3...v0.2.4
networkPolicy.musterInClusterMcpPorts: add 8443 to the default so muster’s supplementary
egress CNP permits reaching tunnelport RemoteApp tunnels (ghostunnel terminates TLS on 8443).
Without it, muster’s connection to in-cluster tunnel backends
(e.g. mcp-kubernetes-garm.agentic-platform.svc:8443) was silently dropped by Cilium and timed
out (context deadline exceeded).klaus-gateway subchart to 0.1.5.