Kuboard v4.x Changelog

Kuboard v4 release notes. If you have already installed Kuboard v4.x (a version number starting with v4, e.g. kuboard v4.0.0.0 / v4.0.0.1 / v4.2.1.0), upgrading to a newer v4.x version only requires changing the image tag.

v4.3.1.1

Release date: 2026-10-12

• Bug Fixes:
  • AI Change Approval:
    • Fixed the approve / confirm / view-YAML action buttons not displaying on the plan detail page

v4.3.1.0

Release date: 2026-10-12

• New Features:
  • Monitoring:
    • Added dual-source monitoring on the Pod detail page: metrics-server real-time data alongside metrics-scraper 30-minute charts, with Prometheus-first probing and automatic fallback
    • Added the metrics.server.installed capability probe to surface monitoring capabilities per cluster version
  • Cluster Management:
    • Full sync now writes to the database in batches (multi-row REPLACE for MySQL / ON CONFLICT upsert for PostgreSQL), significantly speeding up large-cluster sync
• Improvements:
  • Cluster Management:
    • The sync status table now scrolls within the list with a fixed header, with a dedicated empty state for filtered results
    • Split the batch write lock down to each (cluster, resource) pair, easing long-tail queuing on large clusters
  • K8s Object Management:
    • Uncached resource lists now load in limit/continue chunks, eliminating lag when loading large lists
    • Optimized cache query performance for Pod lists and the cluster namespace tree
• Bug Fixes:
  • Cluster Management:
    • Fixed the full-sync pagination modeling bug: resources beyond 500 per kind were only ever syncing the first page
    • Fixed full-sync pagination aborting without recovery on transient 410/504/5xx errors
    • Fixed incremental-sync watch falling back to full sync on transient interruptions, causing sync oscillation
  • Audit:
    • Fixed audit index creation failing on database dialects that surface "already exists" with a different exception type
  • Monitoring:
    • Restored the metrics-server and metrics-scraper install entries, and fixed the broken 30-minute chart and real-time data paths on the Pod detail page

v4.3.0.0

Release date: 2026-10-07

• New Features:
  • Login & Authentication:
    • Added OIDC Single Sign-On (SSO) with multiple IdP support, Silent SSO token refresh and trusted-IdP MFA
    • Redesigned the login page with an architecture-diagram layout, animated background and improved button placement
  • Users & Permissions:
    • Added a business view to role authorization: grant view/create/edit/delete permissions by ticking the left-hand menu tree
    • Role authorization now supports a button-level operation registry and quick role templates
  • Helm:
    • Support installing and upgrading from an offline Chart package upload
    • Added a "Resources" tab on the release detail page, listing the managed K8s objects and their status
  • K8s Object Management:
    • Added a "Related Resources" tab on detail pages, reusing the resource-map capability; the context menu supports "focus on this resource"
    • Rebuilt the namespace overview page as a categorized dashboard
    • Unified list-page optimization across 10+ resource types (Deployments/StatefulSets/DaemonSets/nodes/services/ingresses, etc.): expandable rows, adaptive columns, i18n
    • Container rows now display ports; click a port to open the proxy dialog
  • Cluster Management:
    • Rebuilt the sync status table (sync mode/duration/error highlighting/filtering) and added sync task log querying
    • Support multi-instance high-availability deployment: Redis-coordinated scheduling election, cache invalidation broadcast, cross-instance ID collision avoidance
  • Visual & Branding:
    • Introduced a design-token system and brand theming; detail pages fully card-styled
    • Unified the menu/overview/resource-map icon set onto resourceMap resource icons
• Improvements:
  • Related Resource Map:
    • Canvas now uses a tree layout and bezier edges; the depth slider persists across sessions
  • K8s Object Management:
    • Detail-page experience optimization for workloads (Deployments/StatefulSets/DaemonSets)
    • Reorganized the node detail page information architecture; events fully internationalized
  • Agent Change Approval:
    • Restored list search with server-side filtering by Agent / Plan ID
• Bug Fixes:
  • Security:
    • Fixed the tightened /k8s-api proxy authorization, preventing unauthorized reads of K8s resources
    • Fixed SQL injection in the user/group/role list APIs and several missing button-level authorizations
    • Fixed container file-browser privilege escalation and a missing ownership check on the user profile API
    • Fixed stored XSS via innerHTML rendering and addon documents
    • Fixed JWT weak-key startup blocking (auto-rotating self-heal) and Webhook signature verification
    • Fixed missing rate limiting on login endpoints and SSRF on cluster access URLs
    • Upgraded dependencies to fix high-severity vulnerabilities (CVE-2024-7254, etc.)
  • Cluster Management:
    • Fixed sync task memory exhaustion and scheduler SQL full-table scans
    • Fixed Redis dirty cache data causing frequent sync scheduler errors
    • Fixed PostgreSQL failing to connect on startup
  • Terminal:
    • Fixed the log viewer not auto-reconnecting after a disconnect
  • Agent Change Approval:
    • Fixed irregular resource-name derivation errors and step time-semantics issues
  • K8s Object Management:
    • Fixed unscheduled Pods rendering empty node links and charts not refreshing after switching Pods
    • Fixed the CronJob detail task list stacking and detail-page button wrapping
  • Helm:
    • Fixed the install button 404 navigation and startup failure caused by stale keystore files
  • Build & Integration:
    • Fixed the app version not being injected and new-version check errors
    • Upgraded the runtime base image to GA JDK and improved the container startup script