AI Agents

• Jun 12, 2026 AI Agents muster v0.5.0

  Added

  • (oauth) Per-issuer acceptedTypHeaders for trustedIssuers in #837 by @QuentinBisson

  Full Changelog: https://github.com/giantswarm/muster/compare/v0.4.4...v0.5.0

• Jun 12, 2026 AI Agents muster v0.4.4

  Fixed

  • (testing) Wait for stable MCPServer state before starting scenarios in #821 by @QuentinBisson

  Full Changelog: https://github.com/giantswarm/muster/compare/v0.4.3...v0.4.4

• Jun 12, 2026 AI Agents muster v0.4.3

  Changed

  • Bump version to 0.3.13-dev in #828 by @taylorbot

  Full Changelog: https://github.com/giantswarm/muster/compare/v0.4.2...v0.4.3

• Jun 12, 2026 AI Agents muster v0.4.2

  Changed

  • Align files according to platform standards in #835 by @giantswarm-align-files[bot]

  Full Changelog: https://github.com/giantswarm/muster/compare/v0.4.1...v0.4.2

• Jun 12, 2026 AI Agents klaus v0.0.203

  Changed

  • (deps) Update dependency @anthropic-ai/claude-code to v2.1.174 in #331 by @renovate[bot]

  Full Changelog: https://github.com/giantswarm/klaus/compare/v0.0.202...v0.0.203

• Jun 12, 2026 AI Agents klaus v0.0.202

  Fixed

  • (deps) Update module github.com/giantswarm/mcp-oauth to v0.3.2 in #332 by @renovate[bot]

  Full Changelog: https://github.com/giantswarm/klaus/compare/v0.0.201...v0.0.202

• Jun 12, 2026 AI Agents agent-platform v1.1.26

  Fixed

  • Update muster to 0.4.1 (mcp-oauth v0.3.1): forwarded ID tokens (trustedAudiences) are no longer hard-rejected when the same issuer is also configured in trustedIssuers for the token-exchange broker — fixes Backstage AI-chat SSO forwarding returning 401 behind the agentgateway.
• Jun 12, 2026 AI Agents muster v0.4.1

  Changed

  • Update mcp-oauth to v0.3.1: forwarded ID tokens (trustedAudiences) are no longer hard-rejected by the trusted-issuer Bearer branch when the same issuer is also configured in trustedIssuers — fixes Backstage AI-chat SSO token forwarding returning 401 (typ header is "", expected "at+jwt") on deployments with the token-exchange broker enabled. (#838)
• Jun 11, 2026 AI Agents agent-platform v1.1.25

  Fixed

  • gateway.jwksEgress now also opens egress on the agentgateway controller network policy (Cilium and kubernetes flavors). The controller fetches remote JWKS centrally and distributes keys to the data plane via xDS, so the data-plane-only rule left JWKS fetches timing out (e.g. Dex on giantswarm/dex:5556 for extra JWT providers).
• Jun 11, 2026 AI Agents agent-platform v1.1.24

  Changed

  • Update agentic-platform-mcps to v0.3.0: new agentgateway.jwt.extraProviders value lets the inbound agentgateway JWT policy accept tokens from additional issuers (e.g. Dex-issued ID tokens forwarded by Backstage AI chat alongside muster-issued JWTs, giantswarm#36840). Also fixes the identityProviders values schema that rejected every populated provider map.

  Fixed

  • templates/kagent/declarative-agent-pod-security.yaml: retarget the Kyverno mutate from Deployment (controller output) to Agent CR (controller input). The previous policy patched the Deployment after the kagent controller had already stamped privileged: true on the git-skills path, causing the API server to reject the Deployment as self-contradictory (privileged: true + allowPrivilegeEscalation: false). Mutating the Agent CR instead sets allowPrivilegeEscalation: false on the controller input, which trips the controller’s own guard and prevents privileged: true from being set in the first place. A (type): "Declarative" condition anchor scopes the mutation to Declarative agents only.

• Newer entries
• Older entries