Weekly RoadmapRoadmap #3541
Closed
Replies: 1 comment
-
|
This discussion was automatically closed because it expired on 2026-04-08T08:19:32.160Z.
|
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
Executive Summary
EnvironmentConfig(deprecates.machine.env), container image signature verification (ImageVerificationConfig),LifecycleServiceAPI, CDI by default, and BREAKING protobuf format changes in EtcdConfigs/KubeletConfigs. This moves the Talos env deprecation audit from "Next" to urgent Now.allowed-filesrestriction — needs infrastructure triage.KSail Current State
Version: v5.81.0 (April 1, 2026)
What KSail Does Today
KSail is a Go single-binary Kubernetes SDK for local and cloud GitOps development. It embeds kubectl, helm, kind, k3d, vcluster, flux, and argocd as Go libraries — Docker is the only required external dependency.
Key differentiators:
ksail cipher+ native Flux SOPS Age secret management; ArgoCD parity in progress (#3491)gatewayAPI.enabled=truek8s/and auto-reconciles on changes--ttlflag auto-destroys clusters after a configurable durationksail-clusteraction with GitOps CI andvalidateinput--configflag enables alternateksail.yamlper environmentRecent Development (March 31 – April 1, 2026)
Active Issues & Community Input
Open issues categorized by theme (50 most recently updated):
🔴 CI/Infrastructure Reliability
allowed-filesrestriction when trying to modifypublish-pages.yaml| 1 comment📄 Documentation Gaps
--configguide to KSail docs🔑 Feature Parity (ArgoCD)
⚙️ UX & Inner Loop
ksail cluster update— persistent across 4 roadmapsworkload watch— persistent across 4 roadmaps🧩 Feature Depth
🧪 Testing & CI Coverage
🔧 Tech Debt
Competitor Landscape
Comparison Table
--configflagworkload watchskaffold dev--ttlKey Observations
Tilt (~9,600 ⭐): Tiltfile DSL remains Tilt's primary mechanism — powerful but requires learning a new language. KSail's
workload watchcovers the core use case without a DSL. Tilt has no AI/MCP strategy. Gap with KSail's AI-first approach continues to widen.Skaffold (~15,800 ⭐): Google's build-push-deploy focus is deliberately outside KSail's scope.
skaffold render+ GitOps workflow closest overlap with KSail's OCI push. No embedded cluster lifecycle or AI tooling.DevSpace (~4,950 ⭐): Hot-reload and dev environment management.
devspace.yamlprofiles are the closest analog to KSail's--configflag. No embedded cluster lifecycle, GitOps, or AI tooling.mirrord (~5,100 ⭐): Traffic intercept bridge for microservice inner-loop debugging. Gaining visibility through
mirrord-previewGitHub Action for PR preview environments. Complementary to KSail — KSail provides cluster lifecycle and GitOps; mirrord provides live traffic interception without image rebuild.ArgoCD (v3.4.0-rc4): RC cycle actively progressing — v3.4 is the next major ArgoCD release. KSail's SOPS Age gap (#3491) is the most visible workflow inconsistency for ArgoCD-using KSail users. ArgoCD at ~23,000 ⭐ dwarfs Flux's ~8,000 ⭐.
Flux (v2.8.3): Patch release fixing helm-controller YAML separator regression. KSail embeds Flux — should verify embedded version includes this fix.
Industry Trends
1. Talos 1.13 Beta — EnvironmentConfig Deprecation Is NOW (HIGH relevance — URGENT)
Talos 1.13.0-beta.1 (March 27, 2026) officially introduces
EnvironmentConfigas the replacement for.machine.env. The deprecation that was flagged in three previous roadmaps is now live in a beta release — stable is imminent.Implication for KSail: Any KSail-generated Talos patches referencing
.machine.envwill break when users upgrade to Talos 1.13 stable. An audit and migration of KSail's generated Talos configuration to useEnvironmentConfigis now urgent, not optional. This graduates from "Next" to "Now."2. Talos 1.13 — Container Image Signature Verification (MEDIUM relevance — new feature)
ImageVerificationConfigis a new machine config document in Talos 1.13 that enables machine-wide container image signature verification. Any pulled image can be verified against configured rules.Implication for KSail: Exposing
ImageVerificationConfigscaffolding incluster initfor Talos distributions would give security-conscious users (enterprises, regulated environments) a one-command path to supply chain hardening. Moves from "Later" to "Next" given confirmed 1.13 beta availability.3. Talos 1.13 — LifecycleService API (MEDIUM relevance — track for Next)
The legacy Talos upgrade mechanism is replaced by the new
LifecycleServiceAPI in 1.13. KSail's Talos provisioner uses the upgrade path — this will require migration before 1.13 stable.Implication for KSail: Map KSail's current Talos upgrade code path to the
LifecycleServiceAPI before Talos 1.13 stable. Failing to migrate will breakksail cluster updatefor Talos users post-upgrade.4. ArgoCD v3.4 RC Cycle (HIGH relevance — embedded version tracking)
ArgoCD v3.4.0-rc4 shipped March 27, 2026. v3.4 is a major release. KSail embeds ArgoCD — tracking the stable release and updating the embedded version keeps KSail's ArgoCD integration current.
Implication for KSail: Plan an embedded ArgoCD version bump to v3.4.0 stable when it ships. Simultaneously, #3491 (SOPS Age for ArgoCD) should ideally ship before or with this bump.
5. Copilot SDK v0.2.0 (HIGH relevance — just shipped)
PR #3510 upgraded copilot-sdk/go from v0.1.32 to v0.2.0. This is a minor version bump suggesting new capabilities in the SDK.
Implication for KSail: Audit what new capabilities v0.2.0 adds to the SDK (streaming improvements, tool calling enhancements, session management) and evaluate whether any can improve the
ksail chatTUI experience — e.g., richer streaming, improved tool results display, session context persistence.6. Selective Inner-Loop Reconcile — Persistent Friction (HIGH relevance — still open)
#3106 has been open across four roadmaps. Full-tree reconcile on any file change is the dominant inner-loop friction for multi-Kustomization repos. The
pkg/svc/detector/gitops/package already detects GitOps CRs — the remaining work is file-change → Kustomization path mapping.Implication: This is a technical scope challenge, not a prioritization gap. A scoped first step: reconcile only the Kustomization whose directory contains the changed file, without full path-graph traversal.
7. GitHub MCP Registry (MEDIUM relevance — discovery opportunity)
GitHub's MCP Registry (github.com/mcp) launched last week as a marketplace surface for MCP servers. KSail has structured JSON output, a usage guide for three AI clients, and five well-scoped tools — all prerequisites for listing.
Implication: Submitting KSail to the GitHub MCP Registry gives access to AI-native developers discovering tools through this new channel. Low implementation effort, potentially significant acquisition impact.
Roadmap: Now / Next / Later
🟢 Now — Enhance current features, align with open issues
.machine.env→EnvironmentConfigmigration.machine.envusage; migrate toEnvironmentConfigdocument before Talos 1.13 stable; update scaffolding incluster initksail cluster updatefor all Talos users post-1.13 upgrade. Moved from Next to Now.ksail cipher+ cluster bootstrapping to manage the ArgoCD SOPS Age secret natively — matching the Flux SOPS Age integration; scaffold duringcluster create --gitops-engine ArgoCDcluster initworkload watchk8s/tree;pkg/svc/detector/gitops/already detects CRsksail cluster updatepkg/svc/diff/output visually: before/after diff with impact classification (in-place / reboot-required / recreate-required) shown before applying changes--configguideksail.yamlpatterns, environment-specific CNI/CSI/GitOps engine selection, recommended directory structure--configshipped weeks ago; DevSpace/Skaffold users evaluating KSail will look for this guideallowed-filesrestriction blocking Daily Workflow Maintenance from modifyingpublish-pages.yaml; add file to allowed list or adjust CI workflow permissions🔵 Next — Natural extensions of current capabilities
--profilevalues beyondDefault:Mesh(Cilium + mTLS),Observability(Prometheus + Grafana),ArgoCD(ArgoCD engine + ApplicationSet scaffold)--profileis live but onlyDefaultworks; users discover the flag and find it empty; this closes the largest remaining scaffolding gapcluster create/update/deleteagainst real Omni endpoint; gate merge on test passLifecycleServiceAPI migrationLifecycleServiceAPI replacing the legacy upgrade mechanismksail cluster updatefor Talos users once 1.13 is stableImageVerificationConfigin Taloscluster initas an optional security hardening flag; scaffold the config document for enabling machine-wide container image signature verificationImageVerificationConfigis available; supply chain security is an emerging enterprise requirement; natural extension of Talos distribution initksail chatTUIcluster_readandworkload_readoutput schemas: add resource health, reconciliation status, TTL remaining, error detail fields missing from current structured JSONtable/table.goto tablewriter v1.x API; removepatches/loft-sh-log/once merged🟡 Later — Exploratory, worth watching
cluster init --gitops-engine ArgoCD; enables multi-cluster GitOps patterns and meaningful ArgoCD profile--profile ArgoCDstoryksail cluster infowith dependency/resource tree view — Kustomization hierarchy, HelmRelease dependencies, pod status per workloadcluster infois the right extension pointtalosctl debugintegrationtalosctl debugprivileged container inksail cluster connector a newksail cluster debugcommand for Talos distributionsHow to Control this Workflow
gh aw disable weekly-roadmap --repo devantler-tech/ksail gh aw enable weekly-roadmap --repo devantler-tech/ksail gh aw run weekly-roadmap --repo devantler-tech/ksail gh aw logs weekly-roadmap --repo devantler-tech/ksail📁 Previous Research — March 30, 2026 (Weekly Roadmap #3513)
Executive Summary (Mar 30)
Items Shipped Since Mar 30 Roadmap
workload validateFlux substitution docsPrevious Now/Next/Later (Mar 30) — Items Carried Forward
🟢 Now (unshipped)
ksail cluster update#3130] → carried--configguide to KSail docs #3427] → carried🔵 Next (unshipped)
ksail cluster init#3107] → carried🟡 Later (unshipped)
🔬 Research Methodology
GitHub API Queries
github-get_latest_release— devantler-tech/ksail (v5.81.0)github-list_issues— devantler-tech/ksail, OPEN, 50 most recently updatedgithub-list_discussions— devantler-tech/ksail, DESC by UPDATED_AT, 30 resultsgithub-get_discussion— Weekly RoadmapRoadmap #3513 (previous Weekly Roadmap, March 30, 2026)github-list_pull_requests— devantler-tech/ksail, closed, sorted by updated, 30 resultsgithub-get_latest_release— fluxcd/flux2 (v2.8.3), argoproj/argo-cd (v3.4.0-rc4)Web Research
https://github.com/tilt-dev/tilt— Tilt feature set and star counthttps://github.com/GoogleContainerTools/skaffold— Skaffold feature sethttps://github.com/loft-sh/devspace— DevSpace feature sethttps://github.com/metalbear-co/mirrord— mirrord feature set and star counthttps://github.com/fluxcd/flux2/releases— Flux v2.8.3 release noteshttps://github.com/argoproj/argo-cd/releases— ArgoCD v3.4.0-rc4 release noteshttps://github.com/siderolabs/talos/releases— Talos v1.13.0-beta.1 (March 27, 2026)https://github.com/siderolabs/talos/releases/tag/v1.13.0-beta.1— Talos 1.13 beta full release notesFile Analysis
/home/runner/work/ksail/ksail/README.md— KSail features and architecture overviewTools Used
github-*MCP tools for all GitHub readsview,bash(python3) for file parsing and content extractionweb_fetchfor competitor and ecosystem researchsafeoutputs-create_discussionfor publishing the final resultBeta Was this translation helpful? Give feedback.
All reactions