v0.15.0

Changelog

✨ Features

• a829e6e feat: Add cert-manager support for creating TLS certificate (#279)

🔧 Chores

• d7d7e12 chore(deps): bump github.com/fsnotify/fsnotify from 1.9.0 to 1.10.0 (#280)
• 5d0d644 chore(deps): bump go.uber.org/zap from 1.27.1 to 1.28.0 (#277)

v0.14.0

Changelog

✨ Features

• 0844361 feat: Add validation that allows only one in-cluster K8s upstream (#259)

✅ Tests

• 8062720 test(integration): Add SSH integration test with Vault (#227)

🔧 Chores

• a5447a9 chore(deps): bump actions/setup-node from 6.3.0 to 6.4.0 (#268)
• 6e7c7a5 chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#263)
• b1752d7 chore(deps): bump dependabot/fetch-metadata from 3.0.0 to 3.1.0 (#269)
• f5c96c1 chore(deps): bump docker/login-action from 4.0.0 to 4.1.0 (#258)
• 844f70c chore(deps): bump docker/setup-docker-action from 5.0.0 to 5.1.0 (#275)
• a1853d4 chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (#257)
• c09af98 chore(deps): bump go.opentelemetry.io/otel from 1.40.0 to 1.41.0 (#274)
• 475c239 chore(deps): bump golang.org/x/crypto from 0.49.0 to 0.50.0 (#261)
• 3e800c2 chore(deps): bump golang.org/x/net from 0.52.0 to 0.53.0 (#260)
• 1e1b52f chore(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.1.0 (#267)
• 43f7add chore(deps): bump goreleaser/goreleaser-action from 7.1.0 to 7.2.1 (#276)
• fc37b9c chore(deps): bump k8s.io/client-go from 0.35.3 to 0.35.4 (#265)
• 316d5b4 chore(deps): bump k8s.io/client-go from 0.35.4 to 0.36.0 (#272)
• b539216 chore: Update README (#262)
• b46dad9 chore: bump Go toolchain to 1.26.2 (#270)

v0.13.0

Changelog

✨ Features

• 556b789 feat: Better structured audit logs for SSH (#246)
• b817326 feat: Rename "Kubernetes Access Gateway" references to "Gateway" (#256)
• 266f4ce feat: Rename OCI respositories to "gateway" (#254)
• 0b5dce3 feat: Update the Helm chart name to "gateway" (#255)

🔧 Chores

• 5853339 chore(deps): bump azure/setup-helm from 4 to 5 (#236)
• ccec0a1 chore(deps): bump codecov/codecov-action from 5 to 6 (#243)
• 25d28d9 chore(deps): bump github.com/hashicorp/vault/api from 1.22.0 to 1.23.0 (#237)
• 6359925 chore(deps): bump github.com/hashicorp/vault/api/auth/approle from 0.11.0 to 0.12.0 (#239)
• cd19131 chore(deps): bump github.com/hashicorp/vault/api/auth/aws from 0.11.0 to 0.12.0 (#238)
• bb34bb1 chore(deps): bump github.com/hashicorp/vault/api/auth/gcp from 0.11.0 to 0.12.0 (#240)
• 90255f5 chore: Add X-Connection-Id to fake client (#245)
• 41af54c chore: Ignore net.ErrClosed when closing SSH connections (#252)
• 6bb05ed chore: Improve local dev setup output with actionable commands (#247)
• 166a5a1 chore: Pin Github action versions using commit SHAs (#251)
• 1b44f9f chore: Rename k8sgateway module to gateway (#242)

Others

• 2e3929c fix: Close downstream/upstream SSH connection when the other side is closed (#248)

v0.12.1

Changelog

🔧 Chores

• 344f9ef chore(deps): bump k8s.io/api from 0.35.2 to 0.35.3 (#233)
• a8cbbc3 chore(deps): bump k8s.io/apimachinery from 0.35.2 to 0.35.3 (#234)
• bd75405 chore(deps): bump k8s.io/client-go from 0.35.2 to 0.35.3 (#235)

Others

• ef32061 fix: Populate the k8s in-cluster upstream when twingate.resource is enabled in Helm values file (#232)

v0.12.0

Changelog

✨ Features

• 6bf74c4 feat!: Support SSH protocol (#173)
• 81b7a3d feat: Add graceful shutdown (#221)
• 7103c31 feat: Add public key fallback for SSH host key negotiation (#224)
• 1b062c1 feat: Support Vault AWS AuthN method (#214)
• 60c6b11 feat: Support Vault AppRole Auth method via Helm config deployment (#202)
• e869546 feat: Support Vault AppRole authentication method (#190)
• bf0646c feat: Support Vault GCP authentication method (#204)
• b1e3d26 feat: Support Vault client token renewal (#201)
• 164bb99 feat: Support port forwarding (#226)
• d98eabf feat: Support priorityClassName in Helm chart (#205)
• 5ae05a1 feat: Validate GAT ver claim supported version (#228)

🔧 Chores

• 26f6e4f chore(deps): bump actions/download-artifact from 7 to 8 (#207)
• f663ae6 chore(deps): bump actions/upload-artifact from 6 to 7 (#208)
• 38686a4 chore(deps): bump crazy-max/ghaction-github-runtime from 3 to 4 (#209)
• f3ef246 chore(deps): bump docker/login-action from 3 to 4 (#219)
• 8f49f16 chore(deps): bump docker/setup-buildx-action from 3 to 4 (#222)
• 7a94fdd chore(deps): bump docker/setup-docker-action from 4 to 5 (#213)
• 75a7835 chore(deps): bump docker/setup-qemu-action from 3 to 4 (#220)
• 4409783 chore(deps): bump github.com/MicahParks/keyfunc/v3 from 3.7.0 to 3.8.0 (#196)
• e97fad9 chore(deps): bump github.com/golang-jwt/jwt/v5 from 5.3.0 to 5.3.1 (#185)
• 0cbcbf9 chore(deps): bump go.yaml.in/yaml/v4 from 4.0.0-rc.2 to 4.0.0-rc.3 (#174)
• c83bdd0 chore(deps): bump go.yaml.in/yaml/v4 from 4.0.0-rc.3 to 4.0.0-rc.4 (#183)
• 514d2bd chore(deps): bump golang.org/x/crypto from 0.46.0 to 0.47.0 (#180)
• 26c5b94 chore(deps): bump golang.org/x/crypto from 0.47.0 to 0.48.0 (#191)
• ac4251a chore(deps): bump golang.org/x/crypto from 0.48.0 to 0.49.0 (#229)
• ca27a29 chore(deps): bump golang.org/x/net from 0.48.0 to 0.49.0 (#179)
• ff6a5dd chore(deps): bump golang.org/x/net from 0.49.0 to 0.50.0 (#192)
• e183aba chore(deps): bump golang.org/x/net from 0.50.0 to 0.51.0 (#206)
• d217364 chore(deps): bump golang.org/x/net from 0.51.0 to 0.52.0 (#230)
• 305b7db chore(deps): bump golang.org/x/sync from 0.19.0 to 0.20.0 (#225)
• dbc21b4 chore(deps): bump google.golang.org/grpc from 1.73.0 to 1.79.3 (#231)
• e7bd5f5 chore(deps): bump goreleaser/goreleaser-action from 6 to 7 (#203)
• 93a0e7e chore(deps): bump k8s.io/api from 0.35.0 to 0.35.1 (#194)
• 6e460ec chore(deps): bump k8s.io/api from 0.35.1 to 0.35.2 (#210)
• dc8f367 chore(deps): bump k8s.io/client-go from 0.35.0 to 0.35.1 (#193)
• 083e1f1 chore(deps): bump k8s.io/client-go from 0.35.1 to 0.35.2 (#212)
• aac20d3 chore: Add unit suffix to ptyReq and windowChangeReq terminal size variable fields (#175)
• 5bd3b41 chore: Fix pre-release Helm chart version (#181)
• 0675132 chore: Ignore claude local settings
• d829b8a chore: Remove SSH docker container when stopped (#187)
• 49d06a7 chore: Update codecov config (#218)
• e3dec2a chore: Upgrade Go to 1.25.6 (#184)
• b61a9ec chore: Upgrade golangci-lint to 2.11 (#223)
• 1b03cec chore: Upgrade golangci-lint to v2.8 (#188)
• b61df3c chore: Upgrade to Go 1.26.0 (#198)
• d2aaa15 chore: migrate code coverage from Coveralls to CodeCov (#216)
• 75d43fa chore: update Makefile (#176)

Others

• cbc2282 refactor: Encapsulate the frontend proxy logic in connect package (#189)

v0.11.1

Changelog

🔧 Chores

• 14d4469 chore(deps): bump actions/download-artifact from 6 to 7 (#167)
• fd6e4ef chore(deps): bump actions/upload-artifact from 5 to 6 (#168)
• b50bf27 chore(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 (#160)
• 50f4d72 chore(deps): bump golang.org/x/net from 0.47.0 to 0.48.0 (#163)
• 50c2a97 chore(deps): bump k8s.io/api from 0.34.2 to 0.34.3 (#164)
• 3699252 chore(deps): bump k8s.io/apimachinery from 0.34.3 to 0.35.0 (#170)
• 7efb03e chore(deps): bump k8s.io/client-go from 0.34.2 to 0.34.3 (#166)
• 49b951d chore(deps): bump k8s.io/client-go from 0.34.3 to 0.35.0 (#172)
• 354a72f chore(deps): bump sigs.k8s.io/kind from 0.30.0 to 0.31.0 (#169)
• b1ce9a5 chore: Add in video link to readme (#159)
• 953fd1c chore: Pin Helm version to latest v3 (#161)
• dbb2034 chore: Upgrade to Go 1.25.5 (#162)

v0.11.0

Changelog

✨ Features

• 61282e8 feat: Add PodDisruptionBudget kubernetes access gateway (#147)

🔧 Chores

• 95b6aa1 chore(deps): bump actions/checkout from 5 to 6 (#157)
• 3974d27 chore(deps): bump actions/download-artifact from 5 to 6 (#148)
• c3cc8ac chore(deps): bump actions/upload-artifact from 4 to 5 (#149)
• 35f1e48 chore(deps): bump danger/danger-js from 13.0.4 to 13.0.5 (#150)
• b7c817a chore(deps): bump go.uber.org/zap from 1.27.0 to 1.27.1 (#156)
• 75a9691 chore(deps): bump golang.org/x/net from 0.46.0 to 0.47.0 (#152)
• 7fb2ae1 chore(deps): bump golangci/golangci-lint-action from 8 to 9 (#151)
• e297970 chore(deps): bump k8s.io/api from 0.34.1 to 0.34.2 (#155)
• eff527d chore(deps): bump k8s.io/apimachinery from 0.34.1 to 0.34.2 (#153)
• 01f8bd4 chore(deps): bump k8s.io/client-go from 0.34.1 to 0.34.2 (#154)

Others

• 8057605 fix: Add resourceAlias to the DNS list in TLS cert only when it is not an empty string (#158)

v0.10.1

Changelog

🔧 Chores

• 1c667d9 chore(deps): bump actions/setup-go from 5 to 6 (#125)
• c59ca4f chore(deps): bump actions/stale from 9 to 10 (#126)
• 5f53983 chore(deps): bump github.com/MicahParks/jwkset from 0.9.6 to 0.10.0 (#136)
• e7239d8 chore(deps): bump github.com/MicahParks/keyfunc/v3 from 3.6.1 to 3.6.2 (#138)
• ce273e4 chore(deps): bump github.com/MicahParks/keyfunc/v3 from 3.6.2 to 3.7.0 (#143)
• 1a5183c chore(deps): bump github.com/prometheus/client_golang from 1.23.0 to 1.23.1 (#128)
• 1fee0f0 chore(deps): bump github.com/prometheus/client_golang from 1.23.1 to 1.23.2 (#129)
• 73328dd chore(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 (#124)
• 0733442 chore(deps): bump github.com/spf13/viper from 1.20.1 to 1.21.0 (#130)
• 7d8877f chore(deps): bump golang.org/x/net from 0.43.0 to 0.44.0 (#131)
• aa96f09 chore(deps): bump golang.org/x/net from 0.44.0 to 0.46.0 (#144)
• 04001c4 chore(deps): bump hadolint/hadolint-action from 3.1.0 to 3.2.0 (#127)
• 91ac927 chore(deps): bump hadolint/hadolint-action from 3.2.0 to 3.3.0 (#140)
• c56e8be chore(deps): bump k8s.io/api from 0.34.0 to 0.34.1 (#133)
• 8aa48de chore(deps): bump k8s.io/apimachinery from 0.34.0 to 0.34.1 (#132)
• 2eae70a chore(deps): bump k8s.io/client-go from 0.34.0 to 0.34.1 (#134)
• 2d29b7b chore: Update README.md (#141)
• e89c79c chore: Update README.md (#137)
• 95a4606 chore: Upgrade to latest golang 1.25.2 (#145)

Others

• a45570d fix: Fix failing helm unittest (#135)

v0.10.0

Changelog

✨ Features

• f1cc74a feat: Hot reload TLS certificate when TLS cert or key files changes (#111)

🔧 Chores

• 68200ca chore(deps): bump actions/checkout from 4 to 5 (#105)
• 1c6f221 chore(deps): bump amannn/action-semantic-pull-request from 5 to 6 (#109)
• 340ba1c chore(deps): bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0 (#116)
• 338677b chore(deps): bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 (#112)
• e5dd456 chore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.0 (#115)
• b3ac9d0 chore(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1 (#121)
• 83038b2 chore(deps): bump k8s.io/client-go from 0.33.3 to 0.33.4 (#106)
• 12f62db chore(deps): bump k8s.io/client-go from 0.33.4 to 0.34.0 (#117)
• ab1963b chore(deps): bump sigs.k8s.io/kind from 0.29.0 to 0.30.0 (#118)
• f9f7545 chore: Add local Client for local development (#98)
• 0a0428b chore: Remove checksum/tlsAlternativeNames from deployment template (#122)
• fbb79e2 chore: Update Grafana dashboard latency wording to duration (#110)
• 0747fc2 chore: Update helm unit test (#123)
• 311f4fe chore: Upgrade to Go 1.25.0 and golangci-lint to 2.4 (#114)
• 71f168e chore: Use embed directive in all tests (#113)

v0.9.0

Changelog

✨ Features

• 204d9c2 feat: Remove Prometheus metric about build info (#104)

✅ Tests

• 110ae82 test: Add integration test for kubectl attach (#96)

🔧 Chores

• 1338b99 chore(deps): bump actions/download-artifact from 4 to 5 (#97)
• 1dc8146 chore(deps): bump github.com/MicahParks/keyfunc/v3 from 3.4.0 to 3.5.0 (#94)
• c3afe26 chore(deps): bump github.com/MicahParks/keyfunc/v3 from 3.5.0 to 3.6.1 (#95)
• 6b98863 chore(deps): bump golang.org/x/net from 0.42.0 to 0.43.0 (#101)
• b4a34b1 chore: Remove redundant TLS cert (#100)
• b5b0999 chore: Upgrade Go 1.24.6 and GolangCI 2.3.1 (#103)

Others

• 762675a fix: Update broken alert (#99)