v0.8.0
kongctl Release Highlights
v0.8.0 is a feature-rich release that brings Event Gateway to general availability, introduces powerful new declarative configuration capabilities, adds two new CLI verbs, and delivers a wave of dependency and reliability improvements.
⚠️ Behavior Changes
--authorizationis now required forlistenandtail audit-logscommands (#718). If you rely on these commands in scripts, update them to supply the flag explicitly.
✨ What's New
🚀 Event Gateway — Now Generally Available
Event Gateway support has graduated from a feature-flag preview to GA. The --event-gateway flag has been removed; all Event Gateway resources are now available by default. This release completes the full policy surface:
| Resource | PR |
|---|---|
| Cluster policy | #556 |
| Produce policy | #702 |
| Consume policy | #758 |
| Schema registry | #787 |
| Static keys | #803 |
| TLS trust bundles | #830 |
🔑 DCR Provider Resource Support
Dynamic Client Registration (DCR) provider resources are now manageable through kongctl declarative configuration (#795).
🌍 !env YAML Tag for Declarative Configuration
Declarative YAML files now support the !env tag to inject environment variable values at plan/apply time, keeping secrets out of source control (#690):
api_key: !env MY_API_KEY📖 New explain and scaffold Verbs
Two new CLI top-level verbs make it easier to discover and bootstrap resources:
# Show what fields a resource type supports
kongctl explain konnect apis
# Generate a starter declarative YAML scaffold
kongctl scaffold konnect api my-api(#588)
🐛 Fixes & Improvements
- Fixed
kongctl viewhang —kongctl viewno longer hangs on certain terminal environments (#704). - Null API attribute clears — Re-applying a declarative config that explicitly clears (nulls) an API attribute now converges correctly instead of drifting (#797).
- Child resource protection inheritance — Child resources now correctly inherit deletion-protection from their parent resources (#584).
- Security dependency updates —
golang.org/x/netbumped to v0.51.0 andgithub.com/buger/jsonparserto v1.1.2 to address known CVEs. - SDK Konnect Go updated to v0.31.0 with latest API coverage (#766, #837).
🙏 Contributors
Thanks to everyone who contributed to this release:
@harshadixit12— Event Gateway GA features (cluster/produce/consume policies, schema registry, static keys, TLS trust bundles)@rspurgeon— DCR Provider,!envtag,explain/scaffoldverbs, fixes, test infrastructure, and overall release coordination
🔗 Commit References
Features
ef11593Feat/event gateway cluster policy (#556)d4f2577Feat: addedexplainandscaffoldverbs (#588)c4f0523Feat: add!envyaml tag support (#690)9a95e35Feat: Event Gateway produce policy (#702)71cafcaFeat: event gateway consume policy (#758)b28be54Feat: Event gateway schema registry (#787)973245fFeat: Adds DCR Provider resource support (#795)70644ddfeat: event gateway static keys (#803)b524561feat: event gateway tls trust bundles (#830)2c632bcfeat: remove event gateway flag (#831)
Fixes
268bca7fix(deps): update module github.com/oapi-codegen/runtime to v1.2.0 (#562)2ccb481fix(deps): update module github.com/oapi-codegen/oapi-codegen/v2 to v2.6.0 (#563)a86946cfix(deps): update module github.com/daveshanley/vacuum to v0.24.0 (#569)395edacfix(deps): update module golang.org/x/net to v0.51.0 [security] (#571)88875c2fix(deps): update module github.com/mattn/go-runewidth to v0.0.21 (#625)4daa381fix(deps): update module github.com/buger/jsonparser to v1.1.2 [security] (#628)34e5f70fix(deps): update module github.com/daveshanley/vacuum to v0.25.0 (#653)f503a0afix(deps): update module github.com/charmbracelet/colorprofile to v0.4.3 (#648)e6b3468fix(deps): update module golang.org/x/term to v0.41.0 (#649)0374cfafix(deps): update module golang.org/x/text to v0.35.0 (#651)2431483fix(deps): update module github.com/daveshanley/vacuum to v0.25.1 (#675)bb67b38fix(deps): update module github.com/daveshanley/vacuum to v0.25.2 (#691)73a9e2afix(deps): update module github.com/oapi-codegen/runtime to v1.3.0 (#703)2e1bf5cFix:kongctl viewhang issue (#704)f5a39eaFix: inherit protection for child resources (#584)b7787d4Fix: Further tuning of e2e resets (#640)52d66f8Test: Various fixes to networking client centered around e2e testing (#623)448ba68fix(deps): Upgrades to sdk-konnect-go 0.30.0 (#766)46b00bafix(deps): update module github.com/lucasb-eyer/go-colorful to v1.4.0 (#778)69245effix(deps): update module golang.org/x/sys to v0.43.0 (#776)16c60cafix(deps): update module charm.land/bubbles/v2 to v2.1.0 (#761)2ea770cfix(deps): update module github.com/kong/go-apiops to v0.4.0 (#763)bbf218bfix(deps): update module github.com/oapi-codegen/runtime to v1.3.1 (#762)47924f7Fix: output fix for weekly repo status (#793)40df593Fix: preserve null API attribute clears and converge on re-apply (#797)9c60df7fix(deps): update module github.com/daveshanley/vacuum to v0.25.3 (#796)99c3c63fix(deps): update module github.com/daveshanley/vacuum to v0.25.5 (#799)a9aaa79fix(deps): update module github.com/itchyny/gojq to v0.12.19 (#801)d7feee7Fix: Upgrade gh-aw to v0.68.1 and fix triage workflows (#802)980ce4ffix(deps): update module github.com/mattn/go-runewidth to v0.0.22 (#812)fd3b6f4fix(deps): update module github.com/kong/sdk-konnect-go to v0.31.0 (#837)8e433bbfix(deps): update module github.com/mattn/go-isatty to v0.0.21 (#838)23f6f76fix(deps): update module github.com/mattn/go-runewidth to v0.0.23 (#839)d697aeffix(deps): update module github.com/oapi-codegen/runtime to v1.4.0 (#841)29e5893fix(deps): update module golang.org/x/term to v0.42.0 (#846)6f10d5cfix(deps): update module golang.org/x/text to v0.36.0 (#847)
Other Changes
24d63c0chore(deps): update actions/upload-artifact action to v7 (#561)24461444chore(deps): update actions/setup-go action to v6.3.0 (#560)88cfd525chore(deps): update docker/login-action action to v4 (#589)b0e7e9d3chore(deps): update docker/setup-qemu-action action to v4 (#595)2e371120simplifier: deduplicate enabled-bool formatting, toRecord helpers, and JSON unmarshalling in eventgateway policies (#596)7c1297082Task: Decentralized all e2e scenario test data files (#599)1629972simplifier: code simplifications in explain.go and scaffold.go (#608)d008930test(e2e): add get api implementations coverage to external/api-impl scenario (#609)b8cc742chore(deps): update docker/setup-buildx-action action to v4 (#606)e51c4d8Test: shard scenario e2e runs across Konnect orgs (#613)9ee9d5echore(deps): update docker/build-push-action action to v7 (#615)5a3d4b8chore(deps): update docker/metadata-action action to v6 (#614)9fb8d01Upgrade: updates to v2 for charmbracelet libraries (#570)528493081Test: Expand e2e workflow summary (#622)c625915Test: Expand app-auth-strategy e2e scenario to cover full declarative lifecycle (#634)2517887Test: Improve E2E as a valid gate check for PRs (#641)0836e1achore: disable minimumReleaseAge for github/gh-aw in Renovate config (#632)d9c5eb0chore(deps): update github/gh-aw action to v0.52.1 (#577)4550c34chore(deps): update github/gh-aw action to v0.53.2 (#594)47edb58chore(deps): update github/gh-aw action to v0.53.3 (#603)cd83138chore(deps): update github/gh-aw action to v0.53.4 (#607)fd31b9achore(deps): update github/gh-aw action to v0.53.6 (#619)7110e6dchore(deps): update golangci-lint to v2.11.1 (#620)4c25707chore(deps): update golangci-lint to v2.11.2 (#630)98da3cachore(deps): update github/gh-aw action to v0.55.0 (#624)e8af16fci: fix e2e required detection for dependency PRs (#656)7a6873cchore(deps): update golangci-lint to v2.11.3 (#652)a1ea60cchore(deps): update github/gh-aw action to v0.62.3 (#638)2cc4626chore(deps): update github/gh-aw action to v0.62.4 (#639)a707ce1chore(deps): update github/gh-aw action to v0.62.5 (#642)ea79cd4simplify: extract helpers and consolidateUnknownReferenceIDconstant across protection packages (#647)ddef7e2chore(deps): update github/gh-aw action to v0.63.0 (#663)d57e559chore(deps): update github/gh-aw action to v0.63.1 (#667)491e443simplifier: remove auth strategy variable shadowing (#668)4121c3ctest(e2e): add UPDATE lifecycle coverage for control-plane apply scenario (#672)5cc9d35test(e2e): add control-plane coverage to diff/command-coverage scenario (#671)a1d6e75test(e2e): add adopt auth-strategy scenario (#682)7fc2eecchore(deps): update github/gh-aw action to v0.64.0 (#676)1343aa7chore(deps): update github/gh-aw action to v0.64.1 (#683)d0aecf5chore(deps): update github/gh-aw action to v0.64.2 (#685)aa69589e2e: expand portal external-sync scenario with real sync, idempotency, and deletion-protection coverage (#688)c0fa0bechore(deps): update github/gh-aw action to v0.65.0 (#694)6ec43d4chore(deps): update actions/setup-go action to v6.4.0 (#696)7c06396e2e: add auth strategy removal coverage to auth-strategy-link scenario (#701)0b3bffdchore(deps): update github/gh-aw action to v0.65.2 (#709)a470e84chore(deps): update github/gh-aw action to v0.65.4 (#715)a17c48bRefactor: simplify dark background detection code (#716)72a82b1Fix: cmd/auditlogs remove deadcreate audit-logscommand code (#717)99a7bb3cmd: make --authorization required for listen/tail audit-logs commands (#718)e5fa4e0chore(deps): update github/gh-aw action to v0.65.6 (#724)248ada0Task: tighten E2E Coverage Scanner prompt stop conditions (#720)88594f8test(e2e): add scenario forget apis <name|id>single-item API lookup (#726)0a43e4dtest(e2e): add !env extract-path error coverage (steps 008–010) (#736)7f66c50chore(deps): update golangci-lint to v2.11.4 (#749)308cdefchore(deps): update github/gh-aw-actions digest to 536ea1b (#723)000cf62simplifier: consolidate duplicate reflect helpers and eliminate per-call allocations in declarative env pipeline (#753)c29d04bsimplify: code quality improvements to !env tag support (#755)ef69ff1gh-aw: Updates agentic workflows and extends expiration for simplifier (#756)98be4d6Fix: Batch gh-aw updates weekly after aging period (#734)5060f27chore(deps): update github/gh-aw-actions digest to 182c893 (#764)6ed9f0csimplifier: modernize for loop to range-over-integer in utils.go (#680)8c2bbf8simplify: inline execCtx fields in MapUpdateFields to match MapCreateFields pattern (#660)83b9c0bsimplifier: apply Go 1.26 range-over-int idiom and maps.Clone in declarative env pipeline (#773)3e85231simplify: apply Go 1.26 modernizations to env declarative files (#770)0bcc4f2test(e2e): add authentication assertion and idempotency check to virtual-cluster update scenario (#788)60950c3e2e: strengthen control-plane sync-with-delete assertions (#789)8678f26test(e2e): add update and sync-delete overlay steps for api_document lifecycle (#790)bf078c7simplify: apply Go 1.26 idioms to theme.go and tableview.go (#574)9a71bbbtest(e2e): add scenario forget konnect gateway control-planeread paths (#633)2a83aa2test(e2e): add openid_connect auth strategy lifecycle scenario (#635)0c7c32aTest: Added an agentic workflow to incrementally improve e2e test scenario coverage (#583)55f94d8simplifier: apply code simplifications to auth strategy adapter and state client (#655)7ec6249simplifier: remove inline duplication in normalize.go and redundant guard in api_planner.go (#807)0085634simplifier: clean up api_publication_adapter.go comments and variable names (#816)faca0f1test(e2e): expand default_application_auth_strategy scenario with update and clear lifecycle steps (#821)6111a81Test: root-level api_publication visibility ownership (#824)b6216803chore(deps): update github/gh-aw-actions digest to ea222e3 (#810)482c174chore(deps): update docker/login-action action to v4.1.0 (#811)5bdc49bchore(deps): update alpine:3 docker digest to 5b10f43 (#817)c62dff7[codex] harden agentic workflow prompt guidance (#813)7a17b73[codex] prefix User-Agent versions with v (#829)f3d3258agentic-workflows(code-simplifier): emit explicit noop on no-change path (#784)2def26ftest(e2e): add auth_strategy field assertions to dump/portal-owned scenario (#835)df0871etest(e2e): add diff scenario coverage for dcr_provider and application_auth_strategy (#834)722add0Upgrade all agentic workflows (#722)c70c467test(e2e): add control-plane plan/apply-workflow scenario (#845)
Full Changelog: v0.7.0...v0.8.0
Generated by Release · ● 942.9K