Skip to content

kite

v0.14.1 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

ai-agent cloud-native web helm-manager kubernetes kubernetes-addons
+3 more
monitoring multi-cluster prometheus

Affected surfaces

rce_ssrf deps

Summary

AI summary

Updates Resource Management, RBAC And Multi-Cluster, and Fixes And Hardening across a mixed release.

Full changelog

What's Changed

Highlights

Added CRD API group entries to the sidebar.

Added resource cloning from resource detail pages.

Resource Management

  • Added bulk restart actions for Deployments and StatefulSets.
  • Added bulk cordon, uncordon, and drain actions for Nodes.
  • Improved sorting behavior across resource tables.
  • ConfigMap lists now display their contained keys directly.
  • Improved Node list, detail, monitoring, and action localization.
  • Fixed navigation to related native Kubernetes resources.

RBAC And Multi-Cluster

  • Enforced RBAC authorization for Node actions, including pod update and delete permissions required during drain operations.
  • Improved user lifecycle security by removing stale role assignments when users are deleted and avoiding full user-record updates during login.
  • Isolated resource queries, log streams, terminals, and navigation state when switching clusters.

Observability And Reliability

  • Updated VMSingle discovery to use its new default port, 8428.
  • Expanded end-to-end coverage for backend APIs, RBAC, and Kubernetes proxy path handling.

Fixes And Hardening

  • Hardened Kubernetes proxy URL construction against path traversal, including encoded traversal segments in proxy paths and resource names.
  • Added Windows amd64 builds to cross-compiled release artifacts.
  • Updated Go dependencies, including Anthropic SDK 1.58.1, Prometheus Client 1.24.0, Gateway API 1.6.1, and golang.org/x/net 0.57.0.

Full Changelog: v0.14.0...v0.14.1

Security Fixes

  • Hardened Kubernetes proxy URL construction against path traversal including encoded segments

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track kite

Get notified when new releases ship.

Sign up free

About kite

🪁 A lightweight, modern Kubernetes dashboard that unifies multi-cluster and resource management, enterprise-grade user governance (OAuth, RBAC, and audit logs), and AI agents in one workspace. Not just a tool, but more like a platform.

All releases →

Related context

Earlier breaking changes

  • v0.14.0 Legacy Helm chart repository https://zxh326.github.io/kite/ no longer receives updates.
  • v0.14.0 Legacy container image ghcr.io/zxh326/kite no longer receives updates.

Beta — feedback welcome: [email protected]