Telepresence 2.31.0 has been released.

[thallgren]

Telepresence 2.31.0 is now available 🎉

🔒 This is a security release. The traffic-manager now authenticates every caller against the cluster's own Kubernetes identities: sessions are bound to the identity that created them, and creating an intercept requires pods/portforward RBAC in the target namespace. It closes GHSA-j8j4-rw65-56r6 (High) and GHSA-6j3h-rp73-6rvf (High) — we recommend upgrading. Enforcement is opt-in via the new security.authentication.mode Helm value, so upgrading the traffic-manager never breaks an existing installation.

🚀 Also in this release: an opt-in QUIC transport for the tunnel that removes head-of-line blocking across flows, and the new telepresence apply/delete commands that bring the workstation to a state described by a YAML manifest.

🗞 Read all about it in the blog entry.