Skip to content

Releases: Bermos/Kitchen

Release list

v0.43.0

v0.43.0 Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 30 Sep 16:45
v0.43.0
fa8dd8a

0.43.0 (2026-09-28)

Features

  • api: serve the architecture as a graph, declared and observed (64243d0)
  • auth: sign in with a passkey, or a password and a code (#631) (a8263ad)
  • cli: add kitchen topology (9ee5f70)
  • ui: draw the architecture with live traffic flowing along it (388e7c4)

Bug fixes

  • chart: run the bundled object store from a MinIO image that still pulls (b980b32)
  • deps: bump grpc to v1.83.1 for GO-2026-6348 (d8a2ce1), closes #613
  • ui: offer only connections of the right capability in pickers (#630) (1c4346c)

Install

helm install kitchen oci://ghcr.io/bermos/charts/kitchen --version 0.43.0 \
  --namespace kitchen-system --create-namespace \
  --set kitchen.baseDomain=apps.example.com \
  --set kitchen.tls.acme.email=you@example.com \
  --set kitchen.tls.acme.dns01.cloudflare.apiTokenSecretName=cloudflare-api-token

The kitchen CLI is not published as a binary; it is built
from this tag by the Go toolchain:

go install github.com/Bermos/Kitchen/cmd/kitchen@v0.43.0

Artifacts

Artifact Reference Digest
Operator image ghcr.io/bermos/kitchen:0.43.0 sha256:946acd756250720854f0212b831751a62d747aba797768a347389c0018cb5e9b
Auth image ghcr.io/bermos/kitchen-auth:0.43.0 sha256:b85fadad8e0fc1331929875421b25175ca58e818f28eaa5f28e4f27fa1558759
Chart oci://ghcr.io/bermos/charts/kitchen:0.43.0 sha256:1af1977fb480e4c8a62598279f3fdfd089c33486c5d4343efa99b8bf6dad84e8

Both images are linux/amd64 and linux/arm64 and carry a signed
build provenance attestation. The chart is attached below as well.

Assets 3
Loading

v0.42.0

v0.42.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 17 Sep 10:10
v0.42.0
319190a

0.42.0 (2026-09-15)

⚠ BREAKING CHANGES

  • auth: a personal key issued by 0.41.0 holds nothing until it is reissued. That release wrote the credential at the identity provider and nothing on the platform, because there was nothing yet to narrow; a key now holds what its entry on the Kitchen singleton says, and a key with no entry is refused rather than read as unrestricted — which is what makes removing an entry a revocation. Such a key reads as unrecognised in kitchen keys list and on the Account screen.

Features

  • api: read a variable's own value back, never what it points at (#606) (68a8318), closes #610
  • auth: narrow a personal key to named projects and a role inside them (#596) (f5f53d5)

Bug fixes

  • operator: say why a deploy failed on the deployment status and in the pull request (#605) (b1dbc2e)
  • ui: focus the shell's main landmark so a new screen can be scrolled by keyboard (25bccf2), closes #600
  • ui: make the shell a fixed-height frame so the sidebar stays put (9cd43e8), closes #600

Install

helm install kitchen oci://ghcr.io/bermos/charts/kitchen --version 0.42.0 \
  --namespace kitchen-system --create-namespace \
  --set kitchen.baseDomain=apps.example.com \
  --set kitchen.tls.acme.email=you@example.com \
  --set kitchen.tls.acme.dns01.cloudflare.apiTokenSecretName=cloudflare-api-token

The kitchen CLI is not published as a binary; it is built
from this tag by the Go toolchain:

go install github.com/Bermos/Kitchen/cmd/kitchen@v0.42.0

Artifacts

Artifact Reference Digest
Operator image ghcr.io/bermos/kitchen:0.42.0 sha256:00a22ff9a7894bd47168859f129f899b507bce69114ad41761d17a856eed1f75
Auth image ghcr.io/bermos/kitchen-auth:0.42.0 sha256:0063c8a2d688e4886b26599f2d3f714172d0917b0bd8b655da90367f7eb00e8b
Chart oci://ghcr.io/bermos/charts/kitchen:0.42.0 sha256:0e7df09042739ce02bd2ff16d60581ce8a7fe15444793ecdc7269dc7f126fb18

Both images are linux/amd64 and linux/arm64 and carry a signed
build provenance attestation. The chart is attached below as well.

Loading

v0.41.0

v0.41.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 14 Sep 11:30
v0.41.0
1e68449

0.41.0 (2026-09-14)

Features

  • read a claim's process list from the repository, and issue personal keys (#594) (3207994)

Install

helm install kitchen oci://ghcr.io/bermos/charts/kitchen --version 0.41.0 \
  --namespace kitchen-system --create-namespace \
  --set kitchen.baseDomain=apps.example.com \
  --set kitchen.tls.acme.email=you@example.com \
  --set kitchen.tls.acme.dns01.cloudflare.apiTokenSecretName=cloudflare-api-token

The kitchen CLI is not published as a binary; it is built
from this tag by the Go toolchain:

go install github.com/Bermos/Kitchen/cmd/kitchen@v0.41.0

Artifacts

Artifact Reference Digest
Operator image ghcr.io/bermos/kitchen:0.41.0 sha256:de95da10ff2466d8b1699e7fb736124b0b24fabb9d02bec1ec507df28750a750
Auth image ghcr.io/bermos/kitchen-auth:0.41.0 sha256:2c23e490de54d390c10dadbadd68b19229b067eae19545be564c5ca8b64f2c47
Chart oci://ghcr.io/bermos/charts/kitchen:0.41.0 sha256:c869fcb0bab8911d10cd704c281941307d8c6995dc2c1e80d49e07dea52761fe

Both images are linux/amd64 and linux/arm64 and carry a signed
build provenance attestation. The chart is attached below as well.

Loading

v0.40.5

v0.40.5

Choose a tag to compare

View all tags
@github-actions github-actions released this 10 Sep 01:59
v0.40.5
0e19a41

0.40.5 (2026-09-09)

Bug fixes

  • chart: admit the shared Gateway to cert-manager's HTTP-01 solvers so custom domains issue (#591) (ab2973e)

Install

helm install kitchen oci://ghcr.io/bermos/charts/kitchen --version 0.40.5 \
  --namespace kitchen-system --create-namespace \
  --set kitchen.baseDomain=apps.example.com \
  --set kitchen.tls.acme.email=you@example.com \
  --set kitchen.tls.acme.dns01.cloudflare.apiTokenSecretName=cloudflare-api-token

The kitchen CLI is not published as a binary; it is built
from this tag by the Go toolchain:

go install github.com/Bermos/Kitchen/cmd/kitchen@v0.40.5

Artifacts

Artifact Reference Digest
Operator image ghcr.io/bermos/kitchen:0.40.5 sha256:f53c785d3efa20a4598c444905c7e75e0cb13406f236c88ff4aab32a18130926
Auth image ghcr.io/bermos/kitchen-auth:0.40.5 sha256:680353729b3a20841589cf3049a26910809a697c7debce8e3f4867d1a2aabb04
Chart oci://ghcr.io/bermos/charts/kitchen:0.40.5 sha256:dfeb2df09a4011e273b055ae4ca6199b108d00fed253001205a76f7c04f97d30

Both images are linux/amd64 and linux/arm64 and carry a signed
build provenance attestation. The chart is attached below as well.

Loading

v0.40.4

v0.40.4

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Sep 20:39
v0.40.4
693d9a1

0.40.4 (2026-09-09)

Bug fixes

  • operator: publish a verified domain on port 80 while its certificate issues (#589) (a474221), refs #573

Documentation

  • agents: tell the orchestrator to close the fossil every cut leaves (#587) (ac6b70a)

This PR was generated with Release Please. See documentation.

Install

helm install kitchen oci://ghcr.io/bermos/charts/kitchen --version 0.40.4 \
  --namespace kitchen-system --create-namespace \
  --set kitchen.baseDomain=apps.example.com \
  --set kitchen.tls.acme.email=you@example.com \
  --set kitchen.tls.acme.dns01.cloudflare.apiTokenSecretName=cloudflare-api-token

The kitchen CLI is not published as a binary; it is built
from this tag by the Go toolchain:

go install github.com/Bermos/Kitchen/cmd/kitchen@v0.40.4

Artifacts

Artifact Reference Digest
Operator image ghcr.io/bermos/kitchen:0.40.4 sha256:85b89cf85b8f4844e5073772fa088c19b0ca181f4cf900d1929b67cf5e750b60
Auth image ghcr.io/bermos/kitchen-auth:0.40.4 sha256:ff189149e5bededf4763f09b509133fd911f32f7961dd05b3795750dc56f4e5b
Chart oci://ghcr.io/bermos/charts/kitchen:0.40.4 sha256:8c41d5eae5b0ebacba023d18f00ccfffa11ea0d1ff3c2f207ac9cbbb0ac06b86

Both images are linux/amd64 and linux/arm64 and carry a signed
build provenance attestation. The chart is attached below as well.

Loading

v0.40.3

v0.40.3

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Sep 18:57
v0.40.3
faf50e2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

0.40.3 (2026-09-09)

Bug fixes

  • deps: move the whole Kubernetes stack to 1.35 (#584) (7aef2e4), closes #377

Documentation

  • say each claim type once, and stop calling a closed gap open (#582) (1d63483), closes #413

Install

helm install kitchen oci://ghcr.io/bermos/charts/kitchen --version 0.40.3 \
  --namespace kitchen-system --create-namespace \
  --set kitchen.baseDomain=apps.example.com \
  --set kitchen.tls.acme.email=you@example.com \
  --set kitchen.tls.acme.dns01.cloudflare.apiTokenSecretName=cloudflare-api-token

The kitchen CLI is not published as a binary; it is built
from this tag by the Go toolchain:

go install github.com/Bermos/Kitchen/cmd/kitchen@v0.40.3

Artifacts

Artifact Reference Digest
Operator image ghcr.io/bermos/kitchen:0.40.3 sha256:48d3335ed9278aa80f7cf9ac1b61a503c6aeb02a2a155047ec17d16bb609d37e
Auth image ghcr.io/bermos/kitchen-auth:0.40.3 sha256:718bb4229e0e366a447af8f4eeac667b989c128d86e4eaa1d562a20450680cb5
Chart oci://ghcr.io/bermos/charts/kitchen:0.40.3 sha256:a527dae39f153a4431845d94f674ccacf6f0b9c664f3e914c09e8fccd1e031ca

Both images are linux/amd64 and linux/arm64 and carry a signed
build provenance attestation. The chart is attached below as well.

Loading

v0.40.2

v0.40.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Sep 17:10
v0.40.2
e0bba91
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

0.40.2 (2026-09-09)

Bug fixes

  • api: stop counting edge-answered requests as an environment's own traffic (#578) (af2090e), closes #574

Install

helm install kitchen oci://ghcr.io/bermos/charts/kitchen --version 0.40.2 \
  --namespace kitchen-system --create-namespace \
  --set kitchen.baseDomain=apps.example.com \
  --set kitchen.tls.acme.email=you@example.com \
  --set kitchen.tls.acme.dns01.cloudflare.apiTokenSecretName=cloudflare-api-token

The kitchen CLI is not published as a binary; it is built
from this tag by the Go toolchain:

go install github.com/Bermos/Kitchen/cmd/kitchen@v0.40.2

Artifacts

Artifact Reference Digest
Operator image ghcr.io/bermos/kitchen:0.40.2 sha256:0e34b420cb54c34d5ee3c5c84aa1192fa4f782a3e41990810f3131ed3a9d7310
Auth image ghcr.io/bermos/kitchen-auth:0.40.2 sha256:e257583e105a0bb303bef64398b68c2eecd20752fd79867846db23219283f217
Chart oci://ghcr.io/bermos/charts/kitchen:0.40.2 sha256:b843007169c1eff7c7851d3fe2619ec093a7cb28ed44ac5a2d6077f36ce83930

Both images are linux/amd64 and linux/arm64 and carry a signed
build provenance attestation. The chart is attached below as well.

Loading

v0.40.1

v0.40.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Sep 07:33
v0.40.1
5127a6e

0.40.1 (2026-09-08)

Bug fixes

  • operator: build a pnpm repository on a builder that has a pnpm buildpack (#569) (07f8bf0), closes #568

Install

helm install kitchen oci://ghcr.io/bermos/charts/kitchen --version 0.40.1 \
  --namespace kitchen-system --create-namespace \
  --set kitchen.baseDomain=apps.example.com \
  --set kitchen.tls.acme.email=you@example.com \
  --set kitchen.tls.acme.dns01.cloudflare.apiTokenSecretName=cloudflare-api-token

The kitchen CLI is not published as a binary; it is built
from this tag by the Go toolchain:

go install github.com/Bermos/Kitchen/cmd/kitchen@v0.40.1

Artifacts

Artifact Reference Digest
Operator image ghcr.io/bermos/kitchen:0.40.1 sha256:c12ee31d406e91a989bb794172193dc7b0a2e1b4b9f295171ad539bf4c7bcecf
Auth image ghcr.io/bermos/kitchen-auth:0.40.1 sha256:acab068e5f1c780c097da8780be72f1061af820ea9dd2f68681f4fb82315d114
Chart oci://ghcr.io/bermos/charts/kitchen:0.40.1 sha256:fc503ce51b409e0eab4e95c54e54b9c473e9cb656a79a1771e20908e41a30a9e

Both images are linux/amd64 and linux/arm64 and carry a signed
build provenance attestation. The chart is attached below as well.

Loading

v0.40.0

v0.40.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 08 Sep 15:53
v0.40.0
ae3b46f
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

0.40.0 (2026-09-08)

Features

  • auth: a platform credential that holds scopes rather than the operator role (#542) (10f812c)
  • operator: grow the platform's own volumes on a running install (#552) (bd6aa1e), closes #533

Bug fixes

  • api: an open alert carries the current round's reading, and says when it was taken (#546) (7c28722), closes #532
  • chart,operator: bound ClickHouse's own system.* log tables and collect what they orphan (#549) (277d783), closes #530
  • chart: mount clickhouse.extraConfig by subPath, never over config.d (#539) (5e90870), closes #529
  • operator: record the system-log reclaim the moment it happens (#563) (461a0ee), closes #562 #530
  • restore the platform credential (#542) that the checkpoint commit undid (#550) (64b48ce)
  • signals: judge the store's disk by its volume, not by the database on it (#538) (1cb910b), closes #531
  • ui: give a restarting pod grace before the upgrade calls it a fault (#560) (b045851)
  • ui: raise the overlay layer above the shell's chrome (#561) (5829e37)

Install

helm install kitchen oci://ghcr.io/bermos/charts/kitchen --version 0.40.0 \
  --namespace kitchen-system --create-namespace \
  --set kitchen.baseDomain=apps.example.com \
  --set kitchen.tls.acme.email=you@example.com \
  --set kitchen.tls.acme.dns01.cloudflare.apiTokenSecretName=cloudflare-api-token

The kitchen CLI is not published as a binary; it is built
from this tag by the Go toolchain:

go install github.com/Bermos/Kitchen/cmd/kitchen@v0.40.0

Artifacts

Artifact Reference Digest
Operator image ghcr.io/bermos/kitchen:0.40.0 sha256:5e42e50fda6403fed284bbc87018e72025dbd5d72583f61f2b4b5c5ca57dfe7f
Auth image ghcr.io/bermos/kitchen-auth:0.40.0 sha256:bfc0ec0eca80eaeb96d3af0069d41d5b2a05453422777d1b1fe092b0d3900e37
Chart oci://ghcr.io/bermos/charts/kitchen:0.40.0 sha256:8ad587cab9f4054654163e187720bdc827d2afebde2e1d676441f12fae8e6283

Both images are linux/amd64 and linux/arm64 and carry a signed
build provenance attestation. The chart is attached below as well.

Loading

v0.39.0

v0.39.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 07 Sep 23:01
v0.39.0
1be7da4
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

0.39.0 (2026-09-07)

Features

  • claims: a binding to another project's offering is requested, and approved (#524) (42f583a)
  • cli: warn when the CLI is older than the installation (#535) (12d39ea)
  • ui: a project switcher, and a shell that remembers which project you were in (#536) (47e5213)
  • ui: make creating a project a screen, and ask for its compliance declarations (#528) (e8280c7)

Bug fixes

  • build: give the buildpacks analyze phase the credential that can push (#537) (038bbcd), closes #534

Install

helm install kitchen oci://ghcr.io/bermos/charts/kitchen --version 0.39.0 \
  --namespace kitchen-system --create-namespace \
  --set kitchen.baseDomain=apps.example.com \
  --set kitchen.tls.acme.email=you@example.com \
  --set kitchen.tls.acme.dns01.cloudflare.apiTokenSecretName=cloudflare-api-token

The kitchen CLI is not published as a binary; it is built
from this tag by the Go toolchain:

go install github.com/Bermos/Kitchen/cmd/kitchen@v0.39.0

Artifacts

Artifact Reference Digest
Operator image ghcr.io/bermos/kitchen:0.39.0 sha256:a9114768be4b403824777d499b7265675f5a922dd3ae9361bd734751c1013f27
Auth image ghcr.io/bermos/kitchen-auth:0.39.0 sha256:032136d0777116e2d1f1fff9df0b601886cc5a987b2495e6135e0a028c25d7b6
Chart oci://ghcr.io/bermos/charts/kitchen:0.39.0 sha256:341b5902d1d3f1916470abe291e7f6d35f7fe1e920c9cbee0f5ed8fd1a56b02d

Both images are linux/amd64 and linux/arm64 and carry a signed
build provenance attestation. The chart is attached below as well.

Loading