2.2.2 (2026-10-15)

GitOps with access to some namespaces. When your role may only read Argo CD or Flux objects in certain namespaces, as team roles often do, GitOps failed with "forbidden … at the cluster scope". It now asks the cluster where you have access and lists those namespaces, with a note saying so. (#125)
Team roles stay put. A cluster reachable through both an account's own role and a team role assumed into that account could switch between them, or show as deleted, from one scan to the next.

Team roles for AWS profiles and access keys. Like IAM Identity Center sign-ins, profiles and access keys can now assume team roles, often in other accounts, and find those accounts' clusters too.

New in 2.2: GitOps, usage history, access review, custom actions and operator support. See the 2.2.0 release notes or the changelog.

macOS: brew install --cask unxsist/tap/jet-pilot, or download the .dmg for Apple Silicon (aarch64) or Intel (x64).
[!IMPORTANT]
JET Pilot isn't notarized by Apple. The Homebrew tap removes the quarantine flag for you. If you install the .dmg yourself and macOS says the app "is damaged" or "can't be verified", run this once:
```
xattr -dr com.apple.quarantine "/Applications/JET Pilot.app"
```
Windows: the .exe or .msi installer (SmartScreen: More info → Run anyway).
Linux: .deb, .rpm or .AppImage for x64 and ARM64.

Existing installs update themselves.

unxsist/jet-pilot v2.2.2 on GitHub