This release includes 1 security fix for security teams reviewing exposed deployments.
Topics
+3 more
Affected surfaces
Summary
AI summaryUpdates Resource Management, RBAC And Multi-Cluster, and Fixes And Hardening across a mixed release.
Full changelog
What's Changed
Highlights
Added CRD API group entries to the sidebar.
Added resource cloning from resource detail pages.
Resource Management
- Added bulk restart actions for Deployments and StatefulSets.
- Added bulk cordon, uncordon, and drain actions for Nodes.
- Improved sorting behavior across resource tables.
- ConfigMap lists now display their contained keys directly.
- Improved Node list, detail, monitoring, and action localization.
- Fixed navigation to related native Kubernetes resources.
RBAC And Multi-Cluster
- Enforced RBAC authorization for Node actions, including pod update and delete permissions required during drain operations.
- Improved user lifecycle security by removing stale role assignments when users are deleted and avoiding full user-record updates during login.
- Isolated resource queries, log streams, terminals, and navigation state when switching clusters.
Observability And Reliability
- Updated VMSingle discovery to use its new default port,
8428. - Expanded end-to-end coverage for backend APIs, RBAC, and Kubernetes proxy path handling.
Fixes And Hardening
- Hardened Kubernetes proxy URL construction against path traversal, including encoded traversal segments in proxy paths and resource names.
- Added Windows amd64 builds to cross-compiled release artifacts.
- Updated Go dependencies, including Anthropic SDK 1.58.1, Prometheus Client 1.24.0, Gateway API 1.6.1, and
golang.org/x/net0.57.0.
Full Changelog: v0.14.0...v0.14.1
Security Fixes
- Hardened Kubernetes proxy URL construction against path traversal including encoded segments
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About kite
🪁 A lightweight, modern Kubernetes dashboard that unifies multi-cluster and resource management, enterprise-grade user governance (OAuth, RBAC, and audit logs), and AI agents in one workspace. Not just a tool, but more like a platform.
Beta — feedback welcome: [email protected]