Added LDAP username/password login. Admins can now configure LDAP connection settings, user/group lookup rules, and sync LDAP groups into RBAC.
Added advanced OAuth / OIDC settings for custom username claims, custom group claims, and allowed-group login restrictions.
Improved the login page for mixed authentication setups with credential-provider switching and clearer access-denied messaging when a user is outside the allowed groups.
AI And Terminal
Expanded AI Chat so it can inspect Kubernetes resources, read related Events, query Prometheus, and execute create, update, and delete actions with in-product confirmation.
When the AI needs more information, it can now request a choice or form directly in the conversation instead of asking the user to retype everything manually.
Improved the floating AI chat and terminal experience with more stable overlays, fullscreen/minimize controls, chat history, and session restore.
Resources And UI
Added a dedicated ConfigMap detail page with Overview, Data, YAML, Related, Events, and History views.
Improved Secret details with a dedicated data viewer that supports decoded display, per-item show/hide, and copy actions for secret values.
Expanded Pod / Container details with richer runtime information, including command, args, environment variables, mounts, resource limits, probes, and container state.
Polished mobile layouts across multiple resource pages and fixed the issue where the AI Chat send button could be pushed off-screen on mobile.
Fixed cases where proxy requests could lose the current cluster context.
Fixes And Hardening
Fixed incorrect global search cache isolation. Search results are now cached separately by cluster and query limit to avoid cross-cluster or wrong-limit results.
JWT signing secrets are now auto-generated on first boot when empty or still using the insecure default value. The Helm chart also no longer ships with a fixed default JWT secret.
Production builds no longer emit permissive CORS headers by default. Cross-origin access is only enabled for explicitly allowed development origins.
Added ReadHeaderTimeout and IdleTimeout to improve resilience against slow client connections.
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [kite](https://github.com/kite-org/kite) | minor | `0.8.1` -> `0.9.0` |
---
### Release Notes
<details>
<summary>kite-org/kite (kite)</summary>
### [`v0.9.0`](https://github.com/kite-org/kite/releases/tag/v0.9.0)
[Compare Source](https://github.com/kite-org/kite/compare/v0.8.1...v0.9.0)
#### What's Changed
##### Authentication
- Added LDAP username/password login. Admins can now configure LDAP connection settings, user/group lookup rules, and sync LDAP groups into RBAC.
- Added advanced OAuth / OIDC settings for custom username claims, custom group claims, and allowed-group login restrictions.
- Improved the login page for mixed authentication setups with credential-provider switching and clearer access-denied messaging when a user is outside the allowed groups.
##### AI And Terminal
- Expanded AI Chat so it can inspect Kubernetes resources, read related Events, query Prometheus, and execute create, update, and delete actions with in-product confirmation.
- When the AI needs more information, it can now request a choice or form directly in the conversation instead of asking the user to retype everything manually.
- Improved the floating AI chat and terminal experience with more stable overlays, fullscreen/minimize controls, chat history, and session restore.
##### Resources And UI
- Added a dedicated ConfigMap detail page with Overview, Data, YAML, Related, Events, and History views.
- Improved Secret details with a dedicated data viewer that supports decoded display, per-item show/hide, and copy actions for secret values.
- Expanded Pod / Container details with richer runtime information, including command, args, environment variables, mounts, resource limits, probes, and container state.
- Polished mobile layouts across multiple resource pages and fixed the issue where the AI Chat send button could be pushed off-screen on mobile.
- Fixed cases where proxy requests could lose the current cluster context.
##### Fixes And Hardening
- Fixed incorrect global search cache isolation. Search results are now cached separately by cluster and query limit to avoid cross-cluster or wrong-limit results.
- JWT signing secrets are now auto-generated on first boot when empty or still using the insecure default value. The Helm chart also no longer ships with a fixed default JWT secret.
- Production builds no longer emit permissive CORS headers by default. Cross-origin access is only enabled for explicitly allowed development origins.
- Added `ReadHeaderTimeout` and `IdleTimeout` to improve resilience against slow client connections.
Thanks [@​DioCrafts](https://github.com/DioCrafts) [@​GyroGearl00se](https://github.com/GyroGearl00se) [@​zxh326](https://github.com/zxh326)
#### New Contributors
- [@​DioCrafts](https://github.com/DioCrafts) made their first contribution in https://github.com/kite-org/kite/pull/443
**Full Changelog**: https://github.com/kite-org/kite/compare/v0.8.1...v0.9.0
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4xNC42IiwidXBkYXRlZEluVmVyIjoiNDAuMTQuNiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
0.8.1->0.9.0Release Notes
kite-org/kite (kite)
v0.9.0Compare Source
What's Changed
Authentication
AI And Terminal
Resources And UI
Fixes And Hardening
ReadHeaderTimeoutandIdleTimeoutto improve resilience against slow client connections.Thanks @DioCrafts @GyroGearl00se @zxh326
New Contributors
Full Changelog: https://github.com/kite-org/kite/compare/v0.8.1...v0.9.0
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.