This release includes 2 breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+3 more
Affected surfaces
ReleasePort's take
Moderate signalLegacy container image ghcr.io/zxh326/kite and Helm chart repository https://zxh326.github.io/kite/ will no longer receive updates.
Why it matters: Users relying on these legacy sources must migrate to alternative images or charts immediately; continued use risks missing security patches and feature enhancements.
Summary
AI summaryUpdates Highlights, RBAC And Multi-Cluster, and Observability And Reliability across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Breaking | High |
Legacy container image ghcr.io/zxh326/kite no longer receives updates. Legacy container image ghcr.io/zxh326/kite no longer receives updates. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Breaking | High |
Legacy Helm chart repository https://zxh326.github.io/kite/ no longer receives updates. Legacy Helm chart repository https://zxh326.github.io/kite/ no longer receives updates. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Medium |
Added custom resource history for create, update, delete, and apply operations. Added custom resource history for create, update, delete, and apply operations. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Medium |
Added richer StorageClass management with provisioner filtering, default selection, and PVC navigation. Added richer StorageClass management with provisioner filtering, default selection, and PVC navigation. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Medium |
Added customizable resource detail tabs with reordering and hiding support. Added customizable resource detail tabs with reordering and hiding support. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Medium |
Added label selector filtering from resource search boxes (e.g., app=nginx, env=prod,team=backend). Added label selector filtering from resource search boxes (e.g., app=nginx, env=prod,team=backend). Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Low |
Resource YAML now opens in read-only mode and requires explicit action before editing. Resource YAML now opens in read-only mode and requires explicit action before editing. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
| Feature | Low |
Added support for Kubernetes-style [] JSONPath wildcards in CRD printer columns with safe failure on invalid expressions. Added support for Kubernetes-style [] JSONPath wildcards in CRD printer columns with safe failure on invalid expressions. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
| Feature | Low |
Added broader support for group‑qualified custom resource permissions. Added broader support for group‑qualified custom resource permissions. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
| Dependency | Low |
Updated frontend and Go dependencies: Helm 4.2.3, Gateway API 1.6.0, Recharts 3.9.2, Vite 8.1.4, Anthropic SDK 1.57.0. Updated frontend and Go dependencies: Helm 4.2.3, Gateway API 1.6.0, Recharts 3.9.2, Vite 8.1.4, Anthropic SDK 1.57.0. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Performance | Medium |
Increased default Kubernetes cache sync timeout and client QPS/Burst settings; configurable via KITE_CACHE_SYNC_TIMEOUT. Increased default Kubernetes cache sync timeout and client QPS/Burst settings; configurable via KITE_CACHE_SYNC_TIMEOUT. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Performance | Low |
Improved namespace-aware filtering across resource lists, search, events, metrics, related resources, Helm releases, apply operations, and AI tools. Improved namespace-aware filtering across resource lists, search, events, metrics, related resources, Helm releases, apply operations, and AI tools. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
| Performance | Low |
Pod log streams now preserve historical tail buffer when connecting or reconnecting. Pod log streams now preserve historical tail buffer when connecting or reconnecting. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
| Performance | Low |
Memory usage now uses the working set metric for more representative container memory reporting. Memory usage now uses the working set metric for more representative container memory reporting. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
| Bugfix | Medium |
Fixed RBAC evaluation for users with roles across multiple namespaces. Fixed RBAC evaluation for users with roles across multiple namespaces. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Bugfix | Medium |
Fixed PostgreSQL login failures when avatar URLs exceed 500 characters. Fixed PostgreSQL login failures when avatar URLs exceed 500 characters. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Bugfix | Medium |
Improved cluster‑aware API routing, fixing pod file exports and related operations on non‑default clusters. Improved cluster‑aware API routing, fixing pod file exports and related operations on non‑default clusters. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
| Bugfix | Low |
Metrics endpoints now return empty arrays when no samples are available. Metrics endpoints now return empty arrays when no samples are available. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
Full changelog
What's Changed
[!IMPORTANT]
Starting with this release:
- The legacy container image
ghcr.io/zxh326/kiteno longer receives updates. Please switch toghcr.io/kite-org/kite.- The legacy Helm chart repository
https://zxh326.github.io/kite/no longer receives updates. Please switch tohttps://kite-org.github.io/kite/.
Highlights
- Added custom resource history for create, update, delete, and apply operations.
- Added richer StorageClass management, including provisioner filtering, default selection, and related PVC navigation.
- Added customizable resource detail tabs with support for reordering and hiding tabs.
- Added label selector filtering from resource search boxes, such as
app=nginxandenv=prod,team=backend. Thanks @l0kki42!
Resource Management
- Resource YAML now opens in read-only mode and requires an explicit action before editing.
- Added support for Kubernetes-style
[]JSONPath wildcards in CRD printer columns and made invalid expressions fail safely. Thanks @MasterTos!
RBAC And Multi-Cluster
- Fixed RBAC evaluation for users whose roles grant access across multiple namespaces.
- Improved namespace-aware filtering across resource lists, search, events, metrics, related resources, Helm releases, apply operations, and AI tools.
- Improved cluster-aware API routing, fixing pod file exports and related operations on non-default clusters.
- Added broader support for group-qualified custom resource permissions.
Observability And Reliability
- Pod log streams now preserve the historical tail buffer when connecting or reconnecting. Thanks @ferdiina!
- Memory usage now uses the working set metric for more representative container memory reporting.
- Metrics endpoints now return empty arrays when no samples are available.
- Increased the default Kubernetes cache synchronization timeout and client QPS/Burst settings for large or remote clusters, with
KITE_CACHE_SYNC_TIMEOUTavailable for configuration. Thanks @ferdiina!
Fixes And Hardening
- Fixed PostgreSQL login failures when identity providers return avatar URLs longer than 500 characters. Thanks @tedkulp!
- Updated MFA, passkey, authentication, and user-management documentation.
- Updated frontend and Go dependencies, including Helm 4.2.3, Gateway API 1.6.0, Recharts 3.9.2, Vite 8.1.4, and Anthropic SDK 1.57.0.
Full Changelog: v0.13.0...v0.14.0
Breaking Changes
- Legacy container image ghcr.io/zxh326/kite no longer receives updates; switch to ghcr.io/kite-org/kite
- Legacy Helm chart repository https://zxh326.github.io/kite/ no longer receives updates; switch to https://kite-org.github.io/kite/
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About kite
🪁 A lightweight, modern Kubernetes dashboard that unifies multi-cluster and resource management, enterprise-grade user governance (OAuth, RBAC, and audit logs), and AI agents in one workspace. Not just a tool, but more like a platform.
Related context
Related tools
Beta — feedback welcome: [email protected]