v1.14.0

kongctl Release Highlights

✨ What's New

AI Gateway resources are now GA — All AI Gateway commands, declarative resources, auth strategies, config store secrets, and documentation have been promoted from beta to general availability, reflecting the GA status of AI Gateway 2.0. (#1742)

Expanded external resource lookups — Declarative configs can now resolve external parents across more resource types, including APIs and authentication strategies. Managed API children and role assignments can reference external API parents without placing those parents in apply or sync scope. (#2012)

Sync children of external parents — You can now declaratively manage children beneath AI Gateway, Event Gateway, Portal, organization team, and API resources that live outside your manifest scope. Explicitly scoped children are reconciled while external parents remain protected. (#2010)

Control plane API implementations — Full declarative support for the control_plane API implementation variant across loading, validation, planning, execution, state matching, dump, and scaffold. The kongctl get command now supports listing and filtering control plane implementations. (#1992, #2018)

🐛 Fixes & Improvements

• AI Gateway perpetual drift eliminated — Write-only values omitted from API responses are now treated as unknown during comparison, and config-store references are normalized to resolved Konnect IDs before diffing. Reapplying the same config no longer produces false diffs. (#1991)

• Portal sipr_enabled field now carried through — Previously this field was silently dropped during planning and execution, causing portals to retain the API default of false. It is now correctly mapped through declarative create/update payloads and included in dumps. (#2014)

• Konnect SDK updated to patched 0.64 — Adapts declarative resources to mode-specific SDK schemas and validation rules. (#2003)

• Dependency updates — go-apiops v0.4.6, oapi-codegen/runtime v1.7.0, go-runewidth v0.0.28, and other stable dependency upgrades. (#2023, #2022, #2021, #2007)

📚 Docs & DX

• AI Gateway runtime image updated to 2.0.3 in data-plane Docker commands and Learn site content. (#2028)

• Significant internal simplification of planner, validator, and display boilerplate, including Go 1.26 modernizations. (#2027, #2017, #1983)

• Extensive new E2E coverage: control plane implementation sync-delete, AI Gateway config store dump round-trips, full adopt flows, Event Gateway secret fields, stale deletes after renames, port mapping listener policies, and dependency-ordered deletion. (#2016, #1984, #1985, #1990, #1999, #2000, #2001)

🔗 Commit References

Features

• d9a05f4 feat(declarative): expand external resource lookups (#2012)

Fixes

• c90c787 fix(deps): update module github.com/kong/go-apiops to v0.4.6 (#2023)
• 6812696 fix(deps): update all non-major dependencies with stable versions (#2022)
• df22ac7 fix(cmd): support control plane API implementation get (#2018)
• 209d5ed fix(declarative): sync children of external parents (#2010)
• 842d546 fix(deps): update module github.com/mattn/go-runewidth to v0.0.28 (#2021)
• 58f0c70 fix(declarative): support portal sipr_enabled (#2014)
• dfcf3af fix(deps): update module github.com/oapi-codegen/runtime to v1.7.0 (#2007)

Other Changes

• b380886 task(aigateway): promote AI Gateway resources to GA (#1742)
• 24d399f task(docs): update AI Gateway runtime image to 2.0.3 (#2028)
• e34f881 refactor(simplify): reduce planner and display boilerplate (#2027)
• 4e343d7 chore(deps): update docker/setup-buildx-action action to v4.3.0 (#2026)
• b64cde1 test(e2e): cover control plane implementation sync-delete (#2016)
• 406e461 refactor(simplify): reduce planner and validation boilerplate (#2017)
• f189d02 chore(deps): update github/gh-aw-actions action to v0.87.9 (#2015)

---

Full Changelog: v1.13.0...v1.14.0> Generated by Release · opus46 · 98.6 AIC · ⌖ 29.2 AIC · ⊞ 4.4K