kgateway-dev/kgateway v2.4.8

on GitHub

🎉 Welcome to the v2.4.8 release of the kgateway project!

Release Notes

Changes since v2.4.7

New Features

• GatewayExtension ext-auth filters now set emit_filter_state_stats, exposing per-request ext-auth latency (latency_us) via FILTER_STATE access logging. (#14824)
• GatewayExtension ext-auth filters now set emit_filter_state_stats, exposing per-request ext-auth latency (latency_us) via FILTER_STATE access logging. (#14946)

Bug Fixes

• Fixed BackendConfigPolicy tls.files client certificates, which were always rejected, and strict validation rejecting TLS files that exist only on the proxy. (#14905)
• Fixed BackendConfigPolicy tls.files client certificates, which were always rejected, and strict validation rejecting TLS files that exist only on the proxy. (#14935)

Dependency Updates

• Bump Go to 1.26.11 to address CVE-2026-97054, and bump rustix to 1.1.6 to address RUSTSEC-2026-0486. (#15032)

Contributors

Thanks to all the contributors who made this release possible:

Installation

The kgateway project is available as a Helm chart and docker images.

Helm Charts

The Helm charts are available at:

• oci://cr.kgateway.dev/kgateway-dev/charts/kgateway
• oci://cr.kgateway.dev/kgateway-dev/charts/kgateway-crds

Docker Images

The docker images are available at:

• cr.kgateway.dev/kgateway-dev/kgateway:v2.4.8
• cr.kgateway.dev/kgateway-dev/sds:v2.4.8
• cr.kgateway.dev/kgateway-dev/envoy-wrapper:v2.4.8

Quickstart

Try installing this release:

helm install kgateway-crds oci://cr.kgateway.dev/kgateway-dev/charts/kgateway-crds --version v2.4.8 --namespace kgateway-system --create-namespace
helm install kgateway oci://cr.kgateway.dev/kgateway-dev/charts/kgateway --version v2.4.8 --namespace kgateway-system --create-namespace

For detailed installation instructions and next steps, please visit our quickstart guide.