Changes and Releases

Updates on Giant Swarm workload cluster releases, apps, UI improvements and documentation changes.

• Mar 5, 2026 Observability tempo-app v0.13.0

  Changed

  • Upgrade Tempo chart from to 1.61.3 to 2.4.2
    • Upgrades Tempo from 2.9.0 to 2.10.1
  • Upgrade Tempo Vulture chart from 0.12.5 to 0.12.6
• Mar 5, 2026 AI Agents muster v0.1.12

  What’s Changed

  • Update module github.com/giantswarm/mcp-oauth to v0.2.71 by @renovate[bot] in https://github.com/giantswarm/muster/pull/394

  Full Changelog: https://github.com/giantswarm/muster/compare/v0.1.11...v0.1.12

• Mar 5, 2026 AI Agents klaus v0.0.42

  What’s Changed

  • chore(deps): update cimg/base docker tag to v2026 by @renovate[bot] in https://github.com/giantswarm/klaus/pull/98

  Full Changelog: https://github.com/giantswarm/klaus/compare/v0.0.41...v0.0.42

• Mar 4, 2026 Fleet Management kubectl-gs v4.12.0

  Added

  • Add locks to cache writing when doing kubectl-gs login to prevent race-condition between multiple kubectl calls.
• Mar 4, 2026 AI Agents klaus v0.0.41

  What’s Changed

  • feat: move downstream dispatch from GitHub Actions to CircleCI by @teemow in https://github.com/giantswarm/klaus/pull/96

  Full Changelog: https://github.com/giantswarm/klaus/compare/v0.0.40...v0.0.41

• Mar 4, 2026 AI Agents klaus-toolchains go/v0.1.3

  What’s Changed

  • feat: automerge klaus image updates and receive release dispatch by @teemow in https://github.com/giantswarm/klaus-toolchains/pull/5
  • feat: notify personality repos on toolchain release via repository_dispatch by @teemow in https://github.com/giantswarm/klaus-toolchains/pull/6
  • feat: enable automerge on dispatch-created PRs by @teemow in https://github.com/giantswarm/klaus-toolchains/pull/10
  • chore: bump klaus base image from 0.0.38 to 0.0.40 by @teemow in https://github.com/giantswarm/klaus-toolchains/pull/11

  Full Changelog: https://github.com/giantswarm/klaus-toolchains/compare/go/v0.1.2...go/v0.1.3

• Mar 4, 2026 AI Agents klaus v0.0.40

  What’s Changed

  • feat: add per-tool call breakdown to status and result endpoints by @teemow in https://github.com/giantswarm/klaus/pull/94

  Full Changelog: https://github.com/giantswarm/klaus/compare/v0.0.39...v0.0.40

• Mar 4, 2026 Connectivity kong-app v5.2.1

  Changed

  • Remove restriction when deploying VPA and HPA together.
• Mar 4, 2026 Observability observability-bundle v2.8.0

  Changed

  • Update kube-prometheus-stack to 20.1.0
• Mar 4, 2026 Observability observability-platform-api v0.2.0

  Added

  • Add Gateway API HTTPRoute resources for Loki, Mimir, and Tempo (read and write), replacing the previous NGINX ingress setup.
  • Add native JWT authentication via Envoy Gateway SecurityPolicy.jwt, supporting multiple OIDC providers (e.g. Dex, Azure AD). Configurable via auth.jwt.providers.
  • Add /loki/api/v1/rules to the Loki read routes.
  • Add GRPCRoute for Tempo gRPC traffic (port 9095), routing all tempopb.* services to tempo-query-frontend with JWT enforcement via SecurityPolicy.

  Changed

  • Replace NGINX ingress-based auth (nginx.ingress.kubernetes.io/auth-url) with Envoy Gateway SecurityPolicy JWT validation — no external auth service (oauth2-proxy or Dex extAuth) required.
  • Change missing X-Scope-OrgID response code from 400 to 401 across all routes.
  • When auth.jwt.providers is empty and a service is enabled, routes are silently not rendered (no chart error). Previously the chart would fail with an error.
  • Fix Tempo gRPC route service regex from tempopb to tempopb\.[^/]+ to correctly match package-qualified service names (e.g. tempopb.StreamingQuerier).

  Removed

  • Remove dependency on oauth2-proxy for write route authentication.
  • Remove Envoy Gateway Backend CRD and extAuth configuration in favour of inline JWT validation.

• Newer entries
• Older entries