v1.0.0b0

Added

• [Feature] Added Delete DomainData physical file interface (contributed by community contributors @peter5232).
• [Feature] Hive data source support (alpha version contributed by community contributors @peter5232).
• [Feature] Kuscia Task Resource and Connectivity Pre-Check (contributed by community contributors @MiKKiYang).
• [Feature] Kuscia images import support to validate image architecture matching the current Kuscia architecture (alpha version contributed by community contributors @exyb).
• [Feature] Support for analyzing Kuscia task exceptions through envoy logs.
• [Feature] Added PodAntiAffinity configuration to KusciaDeployment, with a preference to deploy across different nodes when multiple replicas are present.
• [Feature] Kuscia DomainData supports PostgreSQL proxy data source connection parameter configuration.

Changed

• [Optimization] Kuscia PostgreSQL data source write optimization.
• [Optimization] When running in runp mode, the agent sends a sigterm signal to kill the pod.
• [Optimization] Improved Kuscia documentation.

Breaking Changed

• [NA]

Fixes

• [Bugfix] Kuscia connection exception when using PostgreSQL as metadata storage

v0.15.0b1

Fixed

• [Bugfix] Fix host kd list-watch cache

v0.15.0b0

Added

• [Feature] Kuscia has built-in integration with Prometheus + Grafana
• [Feature] Support for Serving metric collection
• [Feature] PostgreSQL data source type extension support (alpha version contributed by community contributors @peter5232)
• [Documentation] Publish user-defined new data source tutorial (alpha version)
• [Documentation] Documentation is available in English

Changed

• [None]

Breaking Changed

• [None]

Fixed

• [Bugfix] Fixed that P2P mode supports BFIA protocol

v0.14.0b0

Added

[Feature] Engine and other application logs (secretflow/dataproxy, etc.) can now be automatically recycled on a regular basis.
[Feature] Refactored kuscia image command and added a new feature to delete images.
[Feature] Kuscia containerd can access remote repositories via a proxy to pull images from remote repositories.

Changed

[Optimization] Deprecated the option to specify auth_center when creating a domain. Tokens are now created using RSA by default.
[Optimization] Improved log rotation for Envoy.
[Optimization] Optimized the structure of the Makefile.
[Optimization] Enhanced the diagnose tool by removing dependencies on kusciajob and images.

Breaking Changed

[NA]

Fixes

[Bugfix] Resolved an issue where pods submitted to the backend Kubernetes in runk mode could not terminate properly under certain failure scenarios.
[Bugfix] Fixed the configuration for starting diagnose, allowing Kuscia APIs to be accessed via HTTP.

v0.13.0b1

Added

[Feature] Engine log rotation support
[Feature] RunK mode supports pod log streaming back to Kuscia node
[Feature] Kuscia supports querying task progress percentage, currently only SF operators support
[Feature] Autonomy and Lite support streaming query of task logs via KusciaAPI
[Feature] Application (e.g., SF) image updates can be done through KusciaAPI to upgrade image version, automatically pulling the image from remote image repository (e.g., Alibaba Cloud Public Repository) when starting tasks

Changed

[Feature] Optimized dp reading ODPS performance
[Feature] Added data plane connectivity between lite and master
[Documentation] Documentation update (added script for upgrading image, several RunK deployment tips, new feature related descriptions)

Breaking Changed

[NA]

Fixes

[Bugfix] Fixed authentication issue when accessing API in forwarding mode
[Bugfix] Fixed Kuscia node re-election exit issue
[Bugfix] Fixed token list accumulation issue due to handshake exception

v0.13.0b0

Added

[Feature] Engine log rotation support
[Feature] RunK mode supports pod log streaming back to Kuscia node
[Feature] Kuscia supports querying task progress percentage, currently only SF operators support
[Feature] Autonomy and Lite support streaming query of task logs via KusciaAPI
[Feature] Application (e.g., SF) image updates can be done through KusciaAPI to upgrade image version, automatically pulling the image from remote image repository (e.g., Alibaba Cloud Public Repository) when starting tasks

Changed

[Feature] Optimized dp reading ODPS performance
[Feature] Added data plane connectivity between lite and master
[Documentation] Documentation update (added script for upgrading image, several RunK deployment tips, new feature related descriptions)

Breaking Changed

[NA]

Fixes

[Bugfix] Fixed authentication issue when accessing API in forwarding mode
[Bugfix] Fixed Kuscia node re-election exit issue
[Bugfix] Fixed token list accumulation issue due to handshake exception

v0.12.0b0

Added

[Feature] Implemented runp runtime using proot to decouple App images from Kuscia images, supporting dynamic updates of App images.
[Feature] Introduced a network diagnostic tool in kusica to help users troubleshoot network-related issues.
[Feature] Added node local configuration management to assist users in managing sensitive information more conveniently.
[Feature] ODPS now supports writing data to tables by partition.
[Feature] Data sources now support MySQL databases (only structured data tables are supported).
[Feature] KusciaJob API now supports setting task timeout and resource reservation scheduling policies.
[Documentation] Added documentation for upgrading Secretflow images and non-root user deployment operations.

Changed

[NA]

Breaking Changed

[NA]

Fixed

[Bugfix] Fixed port allocation conflicts and port leakage issues in KusciaTask.
[Bugfix] Fixed the issue where task failure status was not synchronized when KusciaTask was in the Pending stage.

v0.11.0b0

Added

[Feature] Support for odps data source read and write
[Feature] Support DataProxy-Java deployment
[Feature] Kuscia-Serving supports setting service name
[Feature] Decoupling of app image and Kuscia image support for dynamic updating of app image through Proot implementation of RunP runtime

Changed

[Dependency] Upgrade golang version to 1.22
[Documentation] Added Gateway Path Rewrite explanation
[Documentation] Updated and optimized KusciaAPI documentation description
[Documentation] Updated documentation on exposing Kuscia monitoring ports
[Documentation] Updated description for built-in domain
[Documentation] Updated documentation path for common issues
[Feature] KusciaAPI task creation supports participants not including oneself
[Feature] Pre-check of permissions
[Feature] Enhanced KusciaDeployment controller handling logic on node restart

Breaking Changed

[NA]

Fixed

[Feature] Fixed synchronization issue when job verification fails or task creation fails in P2P scenario
[Feature] Fixed issue with host data path mounting due to permission

Security

[Vulnerability] Fixed some security vulnerabilities

v0.10.0b0

Added

[Feature] domainRoute now supports setting prefix paths
[Feature] kuscia job now supports multiple parties (1 party , 2 parties , 3 parties)
[Feature] appImage's mountPath now supports relative paths
[Feature] Support for setting DomainRoute reverse tunnel mode through the Kuscia API
[Feature] Support for PKCS 8 format certificates
[Feature] Added DataSource List API to KusciaAPI. KusciaAPI Master side supports Query and List DataSource but does not display sensitive information.

Changed

[Documentation] Correct description of monitoring metrics in the Kuscia metric documentation
[scripts] During kuscia init, check that the node ID cannot be master
[Feature] Remove the trailing "/" from the RelatedURI field when creating domainData via KusciaAPI
[Feature] Added heartbeat time check to domainRoute, setting it to not ready if it exceeds the threshold
[Feature] Moved error code definitions in the code to Protobuf

Breaking Changed

[NA]

Fixed

[Bugfix] Fixed the issue of port conflicts in runp serving multi-replica
[Bugfix] Fixed the issue of state anomalies being caused by multiple executions of kusciaJob stop and restart
[Unit Test] Improved the stability and concurrency of unit tests

v0.9.0b0

Added

• [Documentation] SCQL on Kuscia Tutorial.
• [Feature] Support for ARM architecture.
• [Feature] Support for reverse tunneling multiple replicas.
• [Feature] New CGROUP restrictions under RunP and RunC for Kuscia nodes.

Changed

• [Security Hardening] Change the node registration request's MD5 hash to Sha256.
• [Security Hardening] Node certificate issuance requires the CN field to be a Domain name.
• [Script] kuscia.sh upgrade retains k3s resources, memory restrictions.
• [KusciaAPI] KusciaJob's TaskStatus new field alias.
• [Integration Testing] Improved integration testing stability.
• [Optimization] Modified the Access-Domain information that allows access to the Service.
• [Upgrade] Upgraded the dependent Envoy version to 1.29.4.

Fixed

• Fixed the issue where the kusciaTask status was incorrect when stopping a KusciaJob.
• Fixed the issue of nodes not scheduling applications upon deletion/upgrade.
• Fixed the issue of not being able to delete task sub-resources.
• Fixed the issue where Service name was too long, causing task creation to fail.