Kong/kongctl v0.10.0

on GitHub

kongctl Release Highlights

v0.10.0 brings a significant batch of new declarative resource support,
important bug fixes for auth and output handling, and a new extensions system.

✨ What's New

kongctl Extensions (#840)
A new extensions system lets you add custom behaviors and integrations to
kongctl workflows.

Control Plane Data Plane Certificate Resources
(#938)
Manage data plane certificates for control planes declaratively.

Developer Portal Integrations
(#966)
Full declarative lifecycle support for portal integration resources.

Portal IP Allow List
(#993)
Declaratively manage IP allow lists for your developer portals.

Audit Log Destinations _external Resource
(#969)
Root-level audit-logs.destinations _external resource type is now
supported in declarative configuration.

🐛 Fixes & Improvements

• Token refresh: Konnect access tokens are now refreshed per-request,
  preventing auth failures on long-running workflows
  (#989)
• Masked deck env vars: Fixed handling of masked environment variable JSON
  output from deck (#991)
• Env tags in dynamic maps: $env tags are now properly resolved inside
  dynamic declarative maps (#986)
• Portal app auth strategy refs: Reference resolution for portal
  application auth strategies is now correct
  (#960)
• api sub-command output: Default JSON output and text config handling
  fixed for api sub-commands (#955)
• Gateway core entity commands: get and list commands for gateway core
  entities are now correctly nested under the control plane parent command
  (#939)
• Virtual cluster destination refs: Fixed ref resolution for virtual
  cluster destinations (#970)
• Security: Added URL validation for login and auth flows
  (#908); CI workflow hardening
  (#916)

📚 Docs & DX

• Added security notice document
  (#927)
• Improved kongctl declarative skill guidance for AI coding assistants
  (#994)
• Expanded E2E test coverage: all resources scenario, portal integrations,
  serverless control planes, gateway routes/consumers, and more

🔗 Commit References

Features

• 966488d Feat: add portal IP allow list resource support (#993)
• 4301b10 Feat: kongctl extensions (#840)
• 3d5202d Feat: add root level audit-logs.destinations _external resource support (#969)
• b5a074a Feat: add developer portal integrations resource support (#966)
• e69b64c Feat: add control plane data plane certificate resource support (#938)

Fixes

• 55f9586 fix(deps): update module github.com/kong/sdk-konnect-go to v0.33.0 (#976)
• ea95569 Fix: handle masked deck env JSON output (#991)
• f83c6a0 Fix: refresh Konnect access tokens per request (#989)
• 5962032 fix: virtual cluster destination ref resolution (#970)
• 5881388 Fix: Allow env tags in dynamic declarative maps (#986)
• a187a13 Fix: publish kongctl Pulse without pushing to main (#982)
• 3498e90 Fix: allow approved external issue triage (#978)
• 42754f6 fix(deps): update module github.com/kong/sdk-konnect-go to v0.32.1 (#957)
• de3ef38 Fix: properly resolve portal app auth strategy refs (#960)
• 593232b Fix: api sub-command default json output and ignore text config (#955)
• 400c079 Fix: move gateway core entities get & list commands under control plane parent command (#939)
• 65b0d0c fix(deps): update module github.com/daveshanley/vacuum to v0.26.1 (#931)
• ed0b90d fix(deps): update module github.com/kong/sdk-konnect-go to v0.32.0 (#928)
• 848ee3d fix(deps): update module github.com/daveshanley/vacuum to v0.26.0 (#929)
• 8feb8a9 fix(deps): update module charm.land/bubbletea/v2 to v2.0.6 (#921)
• c8c0422 fix(deps): update module github.com/kong/sdk-konnect-go to v0.31.1 (#917)

Other Changes

• afd94d0 Task: Improve kongctl declarative skill guidance (#994)
• 2b5ae16 test: Add E2E coverage for get portal email-domains list command (#992)
• a6acce6 docs: add security notice document (#927)
• 2f743cd test: Add dedicated E2E lifecycle scenario for portal_integration resources (#979)
• 9ab80ee Task: allow maintainer-triggered triage of public issues (#987)
• aa5069f Task: allow repo metadata in issue triage workflow (#985)
• 3a85800 Task: Trigger issue triage from approval label (#984)
• 21a4f35 chore(deps): update actions/configure-pages action to v6 (#981)
• 2bdb00f Task: Add kongctl Pulse reporting (#980)
• dbe35c2 Simplify: audit-log destination validation and portal webhook ID resolution paths (#977)
• 09622c4 Task: add benchmark regression analyzer and improve reporting (#968)
• a02a07e simplify: deduplicate resolved-ref synchronization and unresolved-ref errors (#964)
• 9382bb3 Test: Add all resources e2e scenario (#961)
• 9a0a6fd chore(deps): update step-security/harden-runner action to v2.19.0 (#958)
• bb6f4c0 Test: add serverless control v1 plane e2e coverage (#959)
• f04e95a Test: cover portal custom domain replanning (#956)
• cafc1c6 test(e2e): add e2e scenario steps for get gateway control-plane routes and consumers (#953)
• 5cc99fd Simplify: deduplicate gateway flag helpers across verb packages (#950)
• d610c45 test: add e2e scenario for control-plane protected-resource lifecycle (#946)
• aec36c3 simplify: remove duplicate helper, dead code, and redundant comments in data plane certificate planners (#943)
• 24e5f5e Task: updates gh-aw and agentic workflows (#932)
• 54e9b8e e2e: cover single API document lookup (#930)
• aba18ac test(e2e): add single-version lookup coverage for get api versions (#924)
• 0d863a7 test: add e2e lifecycle coverage for consume-policy skip_record and schema_validation variants (#920)
• f4d6c23 chore(deps): update github/gh-aw-actions action to v0.68.5 (#915)
• ffccd7d test(e2e): add schema_validation produce policy lifecycle scenario (#919)
• cdd15ea simplify: replace magic index access with strings.Join in validateProducePolicyTypeField (#918)
• bfa9c19 Security: enhancements in ci workflows (#916)
• 955e0ae Security: added url validation for login and auth flows (#908)

Full Changelog: v0.9.0...v0.10.0

Generated by Release · ● 230.8K