Kuma
Backend & Infra🐻 The multi-zone service mesh for containers, Kubernetes and VMs. Built with Envoy. CNCF Sandbox Project.
Release History
v2.13.0This is an LTS release focused primarily on updating numerous internal and external dependencies to their latest stable versions.
v2.12.5This release primarily consists of dependency updates, including bumping the release tool and security updates for golang.org/x/crypto.
v2.7.20Breaking1 fixThis release aligns Kuma with Go module versioning conventions by updating the module path to include /v2 and prefixing release tags with 'v'. It also includes dependency bumps and a fix for XDS keepalive configuration.
v2.10.9Breaking3 fixesThis release aligns Kuma with Go module versioning by updating the module path to include /v2 and prefixing release tags with 'v', alongside several bug fixes and dependency bumps.
v2.11.8Breaking3 fixesThis patch release updates Go dependencies and introduces breaking changes to align Kuma's module path and release tags with Go versioning conventions, requiring updates for direct Go module consumers.
v2.12.4Breaking3 fixes2 featuresThis release introduces breaking changes to align Kuma's module path and release tags with Go module versioning conventions, alongside several bug fixes and performance improvements.
2.7.19This release primarily consists of dependency updates, including bumping ci-tools/release-tool and Envoy, along with a security update for the 2.7 release branch.
2.10.81 fixThis release primarily focuses on dependency updates, including bumping Envoy and updating the base image for kuma-init to address a high-severity CVE.
2.11.71 fixThis release primarily focuses on dependency updates, including bumping Envoy and internal tools, and addresses a high-severity CVE in the base image used by kuma-init.
2.12.31 fixThis release primarily focuses on dependency updates, including bumping the release tool version and patching a high-severity CVE in the kuma-init base image.
2.12.2This release primarily focuses on dependency updates, bumping the Envoy version and addressing vulnerable dependencies within the release branch.
2.12.12 fixes1 featureThis release updates dependencies for coredns and Envoy, introduces a feature switch for kube-state-metrics, and fixes DNS and Envoy IPv6 configuration issues.
2.11.62 fixes1 featureThis release updates core dependencies like coredns and Envoy, introduces a change to the kube-state-metrics image source, and fixes DNS and IPv6 configuration issues within the control plane.
2.10.71 fix1 featureThis release updates core dependencies like coredns and Envoy, switches the kumactl image registry, and fixes an Envoy configuration issue related to IPv6 support.
2.9.102 fixes1 featureThis release updates several core dependencies, including Envoy and Go tooling, and switches the kumactl image registry source. A key fix addresses Envoy internal address configuration based on IPv6 support.
2.7.182 fixes1 featureThis release updates several core dependencies, including coredns and envoy, and fixes an issue related to Envoy address configuration based on IPv6 support.
2.12.06 featuresThis release introduces significant new capabilities including an experimental Inspect API, unified resource naming for better observability, and experimental support for Spire identity provider integration.
2.9.93 fixes2 featuresThis release includes dependency bumps, notably updating Envoy, and introduces new features like internal address configuration for HttpConnectionManager, alongside several bug fixes related to metrics parsing and initialization.
2.10.64 fixes1 featureThis release includes dependency updates, a feature switch for the kubectl image source in Helm charts, and several bug fixes related to metrics handling and control plane initialization.
2.7.172 fixes2 featuresThis release updates the Envoy dependency to v1.32.9 and introduces a feature to configure internal addresses on HttpConnectionManager, alongside several fixes related to metric handling.
2.11.53 fixes1 featureThis release includes dependency updates, a switch in the Helm kubectl image source, and several bug fixes related to metric handling and control plane initialization.
2.11.41 fixThis release includes a minor dependency bump for Envoy and a bug fix related to address setting in Helm charts.
2.10.51 fixThis release includes a minor dependency bump for Envoy and a bug fix related to address setting in Helm charts.
2.9.81 fixThis release primarily contains a backported fix for the Helm chart configuration regarding address setting.
2.7.162 fixesThis release includes bug fixes related to mesh load balancing configuration and Helm chart address handling.
2.7.151 featureThis release includes dependency bumps for CoreDNS and Envoy, and introduces a feature to define loadBalancerSourceRanges for the ZoneIngress Kubernetes service.
2.9.71 featureThis release includes dependency bumps for CoreDNS and Envoy, and introduces the ability to define loadBalancerSourceRanges for the ZoneIngress Kubernetes service.
2.10.4This release primarily consists of dependency updates, bumping CoreDNS to v1.12.2 and Envoy to v1.32.8.
2.11.3This release primarily focuses on dependency updates, bumping CoreDNS and Envoy versions.
2.10.3This release primarily contains a security update to dependencies.
2.11.21 fixThis release includes a security update, a dependency bump for Go to 1.24.5, and a fix for dynamically changing the direct response body size.
2.9.61 fixThis release primarily focuses on dependency updates, bumping Envoy and Golang versions, and includes a fix related to dataplane object cleanup during proxy disconnection.
2.10.22 fixesThis release focuses on dependency updates, security patches, and bug fixes related to autoreachableservices and XDS dataplane cleanup.
2.11.12 fixesThis release includes security dependency updates and fixes related to the generation of OpenAPI schemas, specifically addressing issues with code generation and file type filtering.
2.7.141 fixThis release primarily focuses on dependency updates for Envoy and Golang, along with a critical bug fix related to dataplane object cleanup during proxy disconnection.
2.11.05 featuresThis release introduces significant features like namespace-scoped resource access and an embedded DNS server, alongside numerous dependency updates and OpenAPI specification enhancements.
2.8.81 featureThis release includes dependency updates for Envoy and Golang, security patches, and a performance improvement for policy rule flows.
2.7.132 featuresThis release updates dependencies, including Envoy and Golang, and introduces Kubernetes 1.31 verification along with a performance improvement for policy rule negation.
2.10.11 featureThis release includes dependency updates for Envoy and Golang, along with a performance improvement adding the `withNegation` flag to policy rules.
2.9.51 featureThis release primarily focuses on dependency updates, including Envoy and Golang, and introduces a performance improvement in the rules engine by adding a `withNegation` flag.
2.10.04 featuresThis release focuses on significant improvements to OpenAPI specifications and introduces powerful new features for inbound policy application via targetRef, including 'rules' API and the 'Dataplane' kind.
2.7.123 fixesThis release focuses on stability and security, fixing bugs related to KDS synchronization, kuma-dp watchers, and xDS stream authentication.
2.8.73 fixesThis release focuses on security updates and several bug fixes across KDS, kuma-dp, and kuma-cp components, including improved resource handling and watcher stability.
2.9.45 fixesThis release focuses on stability and correctness, addressing several bugs related to KDS synchronization, concurrent operations, watcher management, and XDS authentication.
2.8.65 fixesThis release focuses on dependency updates, security patches, and several bug fixes across CNI, Kubernetes integration, KDS, and policy handling.
2.7.115 fixesThis release focuses on dependency updates, including core components like coredns, envoy, and golang, alongside several backported bug fixes across CNI, Kubernetes integration, KDS, and policy handling.
2.6.154 fixesThis is a patch release containing dependency bumps, security updates, and several bug fixes related to Kubernetes authentication, policy rules, and KDS stream handling.
2.9.33 fixesThis release focuses on dependency updates, including coreDNS, Golang, and Envoy, alongside several backported bug fixes for CNI, KDS, and policy components.