Changes and Releases

Updates on Giant Swarm workload cluster releases, apps, UI improvements and documentation changes.

  • Changed

    • Fix ABS config to not override AppVersion in Chart.yaml

    Removed

    • Remove redundant L7 rule from the CiliumNetworkPolicy. The removed rule allowed DNS queries to any DNS domain so removing it has no effect.
  • Changed

    • Fix ABS config to not override AppVersion in Chart.yaml
  • Changed

    • Use Giant Swarm hosted app icon
  • Changed

  • Added

    • Auth: mint per-management-cluster tokens silently through the muster token broker instead of per-cluster OAuth popups. A new authenticated POST /api/auth/cluster-token/:installation backend route exchanges the user’s main Dex ID token for a short-lived cluster token (RFC 8693), cached per user and installation; the kubernetes auth connectors try this silent path before the cookie-based refresh, keeping the legacy popup as fallback for unmigrated clusters. Configured via gs.clusterTokenBroker; installations marked with gs.installations.<name>.clusterTokenAudience disappear from the provider settings page, collapsing it to the single main login.
    • AI chat / muster: forward the main Dex ID token as the MCP bearer token when an MCP server’s authProvider has no dedicated auth.providers entry, enabling single sign-on for muster. Deployments activate this by removing the mcp-muster provider from auth.providers, which also removes the separate PKCE login from the user settings page. See ./docs/releases/v0.136.0-changelog.md for more information.
  • Changed

    • Update coredns image to 1.14.4.
  • Fixed

    • Muster: fix the Workflows page failing with “tool not found” against real muster servers. The muster aggregator only exposes its meta-tools over MCP, so the workflow proxy now invokes the core workflow tools through the call_tool meta-tool and unwraps its result envelope. See ./docs/releases/v0.135.3-changelog.md for more information.
  • Fixed

    • AI chat: fix chat requests hanging forever when an MCP server is slow or its responses are dropped by the transport. MCP servers now load in parallel with a per-server timeout (15s default, configurable via aiChat.mcp[].timeoutMs); hanging servers degrade gracefully instead of blocking the chat. Also patch @ai-sdk/mcp to treat SSE events without an explicit event: field as message events per the SSE specification, fixing silently dropped responses from MCP servers behind agentgateway. See ./docs/releases/v0.135.2-changelog.md for more information.
  • Added

    • Muster: support muster MCP servers behind per-user auth (authProvider entries in aiChat.mcp). The muster frontend now forwards the user’s OAuth token to the muster backend proxy, which opens per-user MCP sessions. Previously such servers were reported as unconfigured and the Workflows page failed with a 503.

    Changed

    • The shared MCP client cache moved from the AI chat backend plugin to @giantswarm/backstage-plugin-gs-node and is reused by the muster backend plugin.

    Fixed

    • Muster: an aiChat.mcp entry without a name no longer crashes plugin registration; execution fetch errors are surfaced in the workflow detail UI instead of being silently swallowed; duplicate workflow step ids no longer drop nodes from the graph; query parameter validation rejects empty and repeated values. See ./docs/releases/v0.135.0-changelog.md for more information.
  • Added

    • Muster: add workflow visualization. A new muster page renders muster workflow definitions as flow diagrams (one node per step, dashed condition edges) with execution history and live per-step status overlay. Backed by a new muster backend plugin that proxies the muster MCP server’s core_workflow_* tools over REST, reusing the aiChat.mcp entry named muster for connection config. See ./docs/releases/v0.134.0-changelog.md for more information.