Skip to content

v0.8.0

Choose a tag to compare

@github-actions github-actions released this 21 Apr 14:59
· 729 commits to main since this release
6f10d5c

Kong logo kongctl Release Highlights

v0.8.0 is a feature-rich release that brings Event Gateway to general availability, introduces powerful new declarative configuration capabilities, adds two new CLI verbs, and delivers a wave of dependency and reliability improvements.


⚠️ Behavior Changes

  • --authorization is now required for listen and tail audit-logs commands (#718). If you rely on these commands in scripts, update them to supply the flag explicitly.

✨ What's New

🚀 Event Gateway — Now Generally Available

Event Gateway support has graduated from a feature-flag preview to GA. The --event-gateway flag has been removed; all Event Gateway resources are now available by default. This release completes the full policy surface:

Resource PR
Cluster policy #556
Produce policy #702
Consume policy #758
Schema registry #787
Static keys #803
TLS trust bundles #830

🔑 DCR Provider Resource Support

Dynamic Client Registration (DCR) provider resources are now manageable through kongctl declarative configuration (#795).

🌍 !env YAML Tag for Declarative Configuration

Declarative YAML files now support the !env tag to inject environment variable values at plan/apply time, keeping secrets out of source control (#690):

api_key: !env MY_API_KEY

📖 New explain and scaffold Verbs

Two new CLI top-level verbs make it easier to discover and bootstrap resources:

# Show what fields a resource type supports
kongctl explain konnect apis

# Generate a starter declarative YAML scaffold
kongctl scaffold konnect api my-api

(#588)


🐛 Fixes & Improvements

  • Fixed kongctl view hangkongctl view no longer hangs on certain terminal environments (#704).
  • Null API attribute clears — Re-applying a declarative config that explicitly clears (nulls) an API attribute now converges correctly instead of drifting (#797).
  • Child resource protection inheritance — Child resources now correctly inherit deletion-protection from their parent resources (#584).
  • Security dependency updatesgolang.org/x/net bumped to v0.51.0 and github.com/buger/jsonparser to v1.1.2 to address known CVEs.
  • SDK Konnect Go updated to v0.31.0 with latest API coverage (#766, #837).

🙏 Contributors

Thanks to everyone who contributed to this release:

  • @harshadixit12 — Event Gateway GA features (cluster/produce/consume policies, schema registry, static keys, TLS trust bundles)
  • @rspurgeon — DCR Provider, !env tag, explain/scaffold verbs, fixes, test infrastructure, and overall release coordination

🔗 Commit References

Features

Fixes

  • 268bca7 fix(deps): update module github.com/oapi-codegen/runtime to v1.2.0 (#562)
  • 2ccb481 fix(deps): update module github.com/oapi-codegen/oapi-codegen/v2 to v2.6.0 (#563)
  • a86946c fix(deps): update module github.com/daveshanley/vacuum to v0.24.0 (#569)
  • 395edac fix(deps): update module golang.org/x/net to v0.51.0 [security] (#571)
  • 88875c2 fix(deps): update module github.com/mattn/go-runewidth to v0.0.21 (#625)
  • 4daa381 fix(deps): update module github.com/buger/jsonparser to v1.1.2 [security] (#628)
  • 34e5f70 fix(deps): update module github.com/daveshanley/vacuum to v0.25.0 (#653)
  • f503a0a fix(deps): update module github.com/charmbracelet/colorprofile to v0.4.3 (#648)
  • e6b3468 fix(deps): update module golang.org/x/term to v0.41.0 (#649)
  • 0374cfa fix(deps): update module golang.org/x/text to v0.35.0 (#651)
  • 2431483 fix(deps): update module github.com/daveshanley/vacuum to v0.25.1 (#675)
  • bb67b38 fix(deps): update module github.com/daveshanley/vacuum to v0.25.2 (#691)
  • 73a9e2a fix(deps): update module github.com/oapi-codegen/runtime to v1.3.0 (#703)
  • 2e1bf5c Fix: kongctl view hang issue (#704)
  • f5a39ea Fix: inherit protection for child resources (#584)
  • b7787d4 Fix: Further tuning of e2e resets (#640)
  • 52d66f8 Test: Various fixes to networking client centered around e2e testing (#623)
  • 448ba68 fix(deps): Upgrades to sdk-konnect-go 0.30.0 (#766)
  • 46b00ba fix(deps): update module github.com/lucasb-eyer/go-colorful to v1.4.0 (#778)
  • 69245ef fix(deps): update module golang.org/x/sys to v0.43.0 (#776)
  • 16c60ca fix(deps): update module charm.land/bubbles/v2 to v2.1.0 (#761)
  • 2ea770c fix(deps): update module github.com/kong/go-apiops to v0.4.0 (#763)
  • bbf218b fix(deps): update module github.com/oapi-codegen/runtime to v1.3.1 (#762)
  • 47924f7 Fix: output fix for weekly repo status (#793)
  • 40df593 Fix: preserve null API attribute clears and converge on re-apply (#797)
  • 9c60df7 fix(deps): update module github.com/daveshanley/vacuum to v0.25.3 (#796)
  • 99c3c63 fix(deps): update module github.com/daveshanley/vacuum to v0.25.5 (#799)
  • a9aaa79 fix(deps): update module github.com/itchyny/gojq to v0.12.19 (#801)
  • d7feee7 Fix: Upgrade gh-aw to v0.68.1 and fix triage workflows (#802)
  • 980ce4f fix(deps): update module github.com/mattn/go-runewidth to v0.0.22 (#812)
  • fd3b6f4 fix(deps): update module github.com/kong/sdk-konnect-go to v0.31.0 (#837)
  • 8e433bb fix(deps): update module github.com/mattn/go-isatty to v0.0.21 (#838)
  • 23f6f76 fix(deps): update module github.com/mattn/go-runewidth to v0.0.23 (#839)
  • d697aef fix(deps): update module github.com/oapi-codegen/runtime to v1.4.0 (#841)
  • 29e5893 fix(deps): update module golang.org/x/term to v0.42.0 (#846)
  • 6f10d5c fix(deps): update module golang.org/x/text to v0.36.0 (#847)

Other Changes

  • 24d63c0 chore(deps): update actions/upload-artifact action to v7 (#561)
  • 24461444 chore(deps): update actions/setup-go action to v6.3.0 (#560)
  • 88cfd525 chore(deps): update docker/login-action action to v4 (#589)
  • b0e7e9d3 chore(deps): update docker/setup-qemu-action action to v4 (#595)
  • 2e371120 simplifier: deduplicate enabled-bool formatting, toRecord helpers, and JSON unmarshalling in eventgateway policies (#596)
  • 7c1297082 Task: Decentralized all e2e scenario test data files (#599)
  • 1629972 simplifier: code simplifications in explain.go and scaffold.go (#608)
  • d008930 test(e2e): add get api implementations coverage to external/api-impl scenario (#609)
  • b8cc742 chore(deps): update docker/setup-buildx-action action to v4 (#606)
  • e51c4d8 Test: shard scenario e2e runs across Konnect orgs (#613)
  • 9ee9d5e chore(deps): update docker/build-push-action action to v7 (#615)
  • 5a3d4b8 chore(deps): update docker/metadata-action action to v6 (#614)
  • 9fb8d01 Upgrade: updates to v2 for charmbracelet libraries (#570)
  • 528493081 Test: Expand e2e workflow summary (#622)
  • c625915 Test: Expand app-auth-strategy e2e scenario to cover full declarative lifecycle (#634)
  • 2517887 Test: Improve E2E as a valid gate check for PRs (#641)
  • 0836e1a chore: disable minimumReleaseAge for github/gh-aw in Renovate config (#632)
  • d9c5eb0 chore(deps): update github/gh-aw action to v0.52.1 (#577)
  • 4550c34 chore(deps): update github/gh-aw action to v0.53.2 (#594)
  • 47edb58 chore(deps): update github/gh-aw action to v0.53.3 (#603)
  • cd83138 chore(deps): update github/gh-aw action to v0.53.4 (#607)
  • fd31b9a chore(deps): update github/gh-aw action to v0.53.6 (#619)
  • 7110e6d chore(deps): update golangci-lint to v2.11.1 (#620)
  • 4c25707 chore(deps): update golangci-lint to v2.11.2 (#630)
  • 98da3ca chore(deps): update github/gh-aw action to v0.55.0 (#624)
  • e8af16f ci: fix e2e required detection for dependency PRs (#656)
  • 7a6873c chore(deps): update golangci-lint to v2.11.3 (#652)
  • a1ea60c chore(deps): update github/gh-aw action to v0.62.3 (#638)
  • 2cc4626 chore(deps): update github/gh-aw action to v0.62.4 (#639)
  • a707ce1 chore(deps): update github/gh-aw action to v0.62.5 (#642)
  • ea79cd4 simplify: extract helpers and consolidate UnknownReferenceID constant across protection packages (#647)
  • ddef7e2 chore(deps): update github/gh-aw action to v0.63.0 (#663)
  • d57e559 chore(deps): update github/gh-aw action to v0.63.1 (#667)
  • 491e443 simplifier: remove auth strategy variable shadowing (#668)
  • 4121c3c test(e2e): add UPDATE lifecycle coverage for control-plane apply scenario (#672)
  • 5cc9d35 test(e2e): add control-plane coverage to diff/command-coverage scenario (#671)
  • a1d6e75 test(e2e): add adopt auth-strategy scenario (#682)
  • 7fc2eec chore(deps): update github/gh-aw action to v0.64.0 (#676)
  • 1343aa7 chore(deps): update github/gh-aw action to v0.64.1 (#683)
  • d0aecf5 chore(deps): update github/gh-aw action to v0.64.2 (#685)
  • aa69589 e2e: expand portal external-sync scenario with real sync, idempotency, and deletion-protection coverage (#688)
  • c0fa0be chore(deps): update github/gh-aw action to v0.65.0 (#694)
  • 6ec43d4 chore(deps): update actions/setup-go action to v6.4.0 (#696)
  • 7c06396 e2e: add auth strategy removal coverage to auth-strategy-link scenario (#701)
  • 0b3bffd chore(deps): update github/gh-aw action to v0.65.2 (#709)
  • a470e84 chore(deps): update github/gh-aw action to v0.65.4 (#715)
  • a17c48b Refactor: simplify dark background detection code (#716)
  • 72a82b1 Fix: cmd/auditlogs remove dead create audit-logs command code (#717)
  • 99a7bb3 cmd: make --authorization required for listen/tail audit-logs commands (#718)
  • e5fa4e0 chore(deps): update github/gh-aw action to v0.65.6 (#724)
  • 248ada0 Task: tighten E2E Coverage Scanner prompt stop conditions (#720)
  • 88594f8 test(e2e): add scenario for get apis <name|id> single-item API lookup (#726)
  • 0a43e4d test(e2e): add !env extract-path error coverage (steps 008–010) (#736)
  • 7f66c50 chore(deps): update golangci-lint to v2.11.4 (#749)
  • 308cdef chore(deps): update github/gh-aw-actions digest to 536ea1b (#723)
  • 000cf62 simplifier: consolidate duplicate reflect helpers and eliminate per-call allocations in declarative env pipeline (#753)
  • c29d04b simplify: code quality improvements to !env tag support (#755)
  • ef69ff1 gh-aw: Updates agentic workflows and extends expiration for simplifier (#756)
  • 98be4d6 Fix: Batch gh-aw updates weekly after aging period (#734)
  • 5060f27 chore(deps): update github/gh-aw-actions digest to 182c893 (#764)
  • 6ed9f0c simplifier: modernize for loop to range-over-integer in utils.go (#680)
  • 8c2bbf8 simplify: inline execCtx fields in MapUpdateFields to match MapCreateFields pattern (#660)
  • 83b9c0b simplifier: apply Go 1.26 range-over-int idiom and maps.Clone in declarative env pipeline (#773)
  • 3e85231 simplify: apply Go 1.26 modernizations to env declarative files (#770)
  • 0bcc4f2 test(e2e): add authentication assertion and idempotency check to virtual-cluster update scenario (#788)
  • 60950c3 e2e: strengthen control-plane sync-with-delete assertions (#789)
  • 8678f26 test(e2e): add update and sync-delete overlay steps for api_document lifecycle (#790)
  • bf078c7 simplify: apply Go 1.26 idioms to theme.go and tableview.go (#574)
  • 9a71bbb test(e2e): add scenario for get konnect gateway control-plane read paths (#633)
  • 2a83aa2 test(e2e): add openid_connect auth strategy lifecycle scenario (#635)
  • 0c7c32a Test: Added an agentic workflow to incrementally improve e2e test scenario coverage (#583)
  • 55f94d8 simplifier: apply code simplifications to auth strategy adapter and state client (#655)
  • 7ec6249 simplifier: remove inline duplication in normalize.go and redundant guard in api_planner.go (#807)
  • 0085634 simplifier: clean up api_publication_adapter.go comments and variable names (#816)
  • faca0f1 test(e2e): expand default_application_auth_strategy scenario with update and clear lifecycle steps (#821)
  • 6111a81 Test: root-level api_publication visibility ownership (#824)
  • b6216803 chore(deps): update github/gh-aw-actions digest to ea222e3 (#810)
  • 482c174 chore(deps): update docker/login-action action to v4.1.0 (#811)
  • 5bdc49b chore(deps): update alpine:3 docker digest to 5b10f43 (#817)
  • c62dff7 [codex] harden agentic workflow prompt guidance (#813)
  • 7a17b73 [codex] prefix User-Agent versions with v (#829)
  • f3d3258 agentic-workflows(code-simplifier): emit explicit noop on no-change path (#784)
  • 2def26f test(e2e): add auth_strategy field assertions to dump/portal-owned scenario (#835)
  • df0871e test(e2e): add diff scenario coverage for dcr_provider and application_auth_strategy (#834)
  • 722add0 Upgrade all agentic workflows (#722)
  • c70c467 test(e2e): add control-plane plan/apply-workflow scenario (#845)

Full Changelog: v0.7.0...v0.8.0

Generated by Release · ● 942.9K