v0.13.0

What's Changed

Important

Starting with the next minor release:

• The legacy container image ghcr.io/zxh326/kite will no longer receive updates. Please switch to ghcr.io/kite-org/kite.

• The legacy Helm chart repository https://zxh326.github.io/kite/ will also no longer receive updates. Please switch to https://kite-org.github.io/kite/.

Highlights

• MFA and passkey login: Password users can now secure accounts with authenticator-app MFA and sign in with passkeys.
• Account settings: Users can manage their profile, password, MFA, and passkeys from the UI.
• Independent cluster selection per tab: Different browser tabs can stay on different clusters without affecting each other.
• Login hardening: Repeated invalid credential attempts are temporarily blocked by client IP, with trusted proxy support for ingress and load balancer deployments.

Authentication And Access Control

• Added admin controls for available login methods and login prompt settings.
• Added documentation for login attempt blocking and trusted proxy configuration.

Cluster And Streaming

• Improved WebSocket reliability for terminal and log streaming.

Fixes And Hardening

• Updated frontend and Go dependencies, including React Router 7.18.0, Tailwind CSS 4.3.1, Helm 4.2.1, and Kubernetes 0.36.2.

Full Changelog: v0.12.3...v0.13.0