K8sConsole 1.3.0

Added

• Built-in ECS Exec. Container shells connect directly through ECS ExecuteCommand and the Session Manager protocol, so the aws CLI and Session Manager plugin are no longer needed. This also works with IAM roles assumed in the app. Tested live against Fargate.

Changed

• macOS builds use the hardened runtime, and the Release workflow signs with a Developer ID and notarizes as soon as the signing secrets are configured (see docs/MACOS-SIGNING.md).
• Clearer first-launch instructions for macOS 15, where right-click → Open no longer bypasses Gatekeeper.

Downloads

Platform	File
Linux (Ubuntu 22.04+ / Debian 12+, x86-64)	k8sconsole_1.3.0_amd64.deb: sudo apt install ./k8sconsole_1.3.0_amd64.deb
macOS, Apple Silicon	K8sConsole-1.3.0-mac-arm64.dmg
macOS, Intel	K8sConsole-1.3.0-mac-x64.dmg
Windows 10/11, x64	K8sConsole-1.3.0-win-x64.exe (installer) or .zip (portable)

Checksums are in SHA256SUMS.txt. The software bill of materials is k8sconsole-1.3.0.cdx.json (CycloneDX).

Verify a download was built by this repository's release workflow (signed build provenance):
gh attestation verify <file> --repo AAnkitpatel/k8sconsole

First launch on macOS: this build is not notarized by Apple, so macOS says it "could not verify" the app. Click Done (not Move to Bin), open System Settings → Privacy & Security, scroll down and click Open Anyway. Or run xattr -dr com.apple.quarantine /Applications/K8sConsole.app once.
First launch on Windows: the installer is not code-signed yet. In the SmartScreen prompt choose More info → Run anyway.

K8sConsole 1.2.1

Fixed

• Object names . and .. are rejected when building Kubernetes API paths. Before, they could address the parent API path instead of an object. Found by fuzz testing.
• The YAML validator (editor, apply, assistant proposals) reports documents with an alias to a missing anchor as invalid YAML instead of throwing. Found by fuzz testing.

Security

• Releases include signed build provenance (SLSA, verifiable with gh attestation verify) and a CycloneDX SBOM of everything that ships.
• Property-based fuzz tests (fast-check) for API path building, the app:// protocol, the AWS read-only guard, settings and connection input, terminal suggestions and manifest validation.
• CodeQL code scanning, dependency review on pull requests, a production npm audit gate, OpenSSF Scorecard, secret-scanning push protection, and workflow hardening (SHA-pinned actions, least-privilege tokens, no persisted credentials).

Downloads

Platform	File
Linux (Ubuntu 22.04+ / Debian 12+, x86-64)	k8sconsole_1.2.1_amd64.deb: sudo apt install ./k8sconsole_1.2.1_amd64.deb
macOS, Apple Silicon	K8sConsole-1.2.1-mac-arm64.dmg
macOS, Intel	K8sConsole-1.2.1-mac-x64.dmg
Windows 10/11, x64	K8sConsole-1.2.1-win-x64.exe (installer) or .zip (portable)

Checksums are in SHA256SUMS.txt. The software bill of materials is k8sconsole-1.2.1.cdx.json (CycloneDX).

Verify a download was built by this repository's release workflow (signed build provenance):
gh attestation verify <file> --repo AAnkitpatel/k8sconsole

First launch on macOS: this build is not notarized by Apple, so macOS says it "could not verify" the app. Click Done (not Move to Bin), open System Settings → Privacy & Security, scroll down and click Open Anyway. Or run xattr -dr com.apple.quarantine /Applications/K8sConsole.app once.
First launch on Windows: the installer is not code-signed yet. In the SmartScreen prompt choose More info → Run anyway.

K8sConsole 1.2.0

Added

• macOS builds for Apple Silicon and Intel (.dmg and .zip) and Windows x64 builds (installer and portable .zip), alongside the Linux .deb.
• Windows terminal support: PowerShell 7, Windows PowerShell or cmd.exe, plus Git Bash when chosen. Tools such as kubectl, helm, aws and the Session Manager plugin are found through PATHEXT.
• macOS application and window menus.

Changed

• The terminal's native module now ships next to the app archive (resources/node-pty) on every platform.

Downloads

Platform	File
Linux (Ubuntu 22.04+ / Debian 12+, x86-64)	k8sconsole_1.2.0_amd64.deb: sudo apt install ./k8sconsole_1.2.0_amd64.deb
macOS, Apple Silicon	K8sConsole-1.2.0-mac-arm64.dmg
macOS, Intel	K8sConsole-1.2.0-mac-x64.dmg
Windows 10/11, x64	K8sConsole-1.2.0-win-x64.exe (installer) or .zip (portable)

Checksums are in SHA256SUMS.txt.

First launch on macOS: the app is not notarized by Apple yet. Open it with right-click → Open, or run xattr -dr com.apple.quarantine /Applications/K8sConsole.app.
First launch on Windows: the installer is not code-signed yet. In the SmartScreen prompt choose More info → Run anyway.

K8sConsole 1.1.0

Added

• Amazon ECS workspace.
  • Connecting: AWS profiles (access keys, SSO, role profiles, credential process) or the default credential chain (environment, EC2 instance profile, ECS task role), with optional IAM role assumption. Connections are read-only by default.
  • Screens: clusters, services, tasks with stop reasons, task definitions with JSON editing, CloudWatch logs and metrics, a service map, events, a security scan, an AWS shell terminal tab and ECS Exec.
  • Actions: scale, redeploy, roll back, run or stop tasks, register and deregister revisions, and create or delete services, each with a confirmation.
• AI assistant tools for ECS (read-only).
• Error boundaries: a failing view shows the error with Try again instead of a blank window.

Fixed

• A quick pan on the Cluster Map or Service Map could blank the window.
• Task definition revision picker could jump to the newest revision while loading.

Install: sudo apt install ./k8sconsole_1.1.0_amd64.deb (Ubuntu 22.04+ / Debian 12+, x86-64)

SHA-256: ef17b9f8fba79e75c2c1fe48f0e6aec4aaacecd495107a7e5b0f1ae1aaaabc42

Tested before release:

• unit tests 159/159
• Kubernetes UI test 17/17 on a disposable k3s cluster
• ECS UI test 13/13
• read-only checks against a live AWS account
• install, launch and uninstall of the package in a clean Ubuntu 24.04 container (21/21)

K8sConsole 1.0.0

First release of K8sConsole for Linux x86-64 (Ubuntu 22.04+, Debian 12+).

Install: sudo apt install ./k8sconsole_1.0.0_amd64.deb

SHA-256: 49c5668fc4ab4d26f267b82778f40ce4a05e758c8ab8b71777bd8a84530d5200