API Changes
- Session service accounts can be changed through spec.worker.podOverrides.serviceAccountName. Kelos preserves the running Pod's Session permissions while it drains and applies the change through Pod replacement. Clearing the override restores the managed service account. (#1774, @gjkim42)
Features
- Kelos Console adds an accessible namespace picker and an Admin page for managing namespace members and configuration. OIDC administrators can add members, change User/Admin roles, and remove direct membership, with external and group access identified separately. Administrators can also create, edit, and delete Workspaces, AgentConfigs, and WorkerPools. The Helm chart provides a kelos-console-admin role that must be bound to the first administrator during setup. The kelos uninstall command removes Console-managed membership bindings across namespaces. (#1792, @gjkim42)
- Kelos Console supports direct GitHub and GitHub Enterprise Server sign-in through OAuth2 Proxy. Configure auth.mode=github with an optional HTTPS enterpriseURL and CA Secret, then grant namespace access using Kubernetes RoleBindings. (#1795, @gjkim42)
- Update claude-code image from 2.1.286 to 2.1.289 (#1790, @app/kelos-bot)
- The Console includes a Jump to latest button for returning from earlier messages to the bottom of a conversation. Jumps to prompts loaded from earlier history stay aligned without needing a second jump. (#1793, @gjkim42)
- Kelos Console supports opt-in OIDC sign-in through OAuth2 Proxy and per-user Kubernetes RBAC authorization using namespace RoleBindings. Static-token authentication remains the default. OIDC setup requires HTTPS, an identity-provider client, an existing Secret, and explicit access grants. (#1787, @gjkim42)
- Update codex image from 0.159.2 to 0.159.3 (#1785, @app/kelos-bot)
- Update claude-code image from 2.1.285 to 2.1.286 (#1784, @app/kelos-bot)
- Update claude-code image from 2.1.284 to 2.1.285 (#1781, @app/kelos-bot)
- Update codex image from 0.158.0 to 0.159.2 (#1782, @app/kelos-bot)
- Update claude-code image from 2.1.283 to 2.1.284 (#1775, @app/kelos-bot)
- Update codex image from 0.157.1 to 0.158.0 (#1776, @app/kelos-bot)
Bug Fixes
- The Console and interactive terminal show the number of reported Claude Code background tasks still running, including between turns, and restore that indicator after reconnecting. (#1786, @gjkim42)
- Sessions display and retain follow-up replies initiated by Claude Code, Codex, and OpenCode after the original turn completes. Reported Claude Code background work keeps a Session active and prevents idle suspension or deletion until it finishes, excluding internal housekeeping tasks. Runtime updates can proceed once submitted and autonomous turns complete. (#1780, @gjkim42)
- The console Changes tab now shows a consistent workspace comparison for Codex, Claude Code, and OpenCode, including newly created, staged, and committed files. It refreshes terminal edits while visible, removes reverted changes, and remains independent of conversation history. (#1779, @gjkim42)