v0.12.0b0

Added

[Feature] Implemented runp runtime using proot to decouple App images from Kuscia images, supporting dynamic updates of App images.
[Feature] Introduced a network diagnostic tool in kusica to help users troubleshoot network-related issues.
[Feature] Added node local configuration management to assist users in managing sensitive information more conveniently.
[Feature] ODPS now supports writing data to tables by partition.
[Feature] Data sources now support MySQL databases (only structured data tables are supported).
[Feature] KusciaJob API now supports setting task timeout and resource reservation scheduling policies.
[Documentation] Added documentation for upgrading Secretflow images and non-root user deployment operations.

Changed

[NA]

Breaking Changed

[NA]

Fixed

[Bugfix] Fixed port allocation conflicts and port leakage issues in KusciaTask.
[Bugfix] Fixed the issue where task failure status was not synchronized when KusciaTask was in the Pending stage.

v0.11.0b0

Added

[Feature] Support for odps data source read and write
[Feature] Support DataProxy-Java deployment
[Feature] Kuscia-Serving supports setting service name
[Feature] Decoupling of app image and Kuscia image support for dynamic updating of app image through Proot implementation of RunP runtime

Changed

[Dependency] Upgrade golang version to 1.22
[Documentation] Added Gateway Path Rewrite explanation
[Documentation] Updated and optimized KusciaAPI documentation description
[Documentation] Updated documentation on exposing Kuscia monitoring ports
[Documentation] Updated description for built-in domain
[Documentation] Updated documentation path for common issues
[Feature] KusciaAPI task creation supports participants not including oneself
[Feature] Pre-check of permissions
[Feature] Enhanced KusciaDeployment controller handling logic on node restart

Breaking Changed

[NA]

Fixed

[Feature] Fixed synchronization issue when job verification fails or task creation fails in P2P scenario
[Feature] Fixed issue with host data path mounting due to permission

Security

[Vulnerability] Fixed some security vulnerabilities

v0.10.0b0

Added

[Feature] domainRoute now supports setting prefix paths
[Feature] kuscia job now supports multiple parties (1 party , 2 parties , 3 parties)
[Feature] appImage's mountPath now supports relative paths
[Feature] Support for setting DomainRoute reverse tunnel mode through the Kuscia API
[Feature] Support for PKCS 8 format certificates
[Feature] Added DataSource List API to KusciaAPI. KusciaAPI Master side supports Query and List DataSource but does not display sensitive information.

Changed

[Documentation] Correct description of monitoring metrics in the Kuscia metric documentation
[scripts] During kuscia init, check that the node ID cannot be master
[Feature] Remove the trailing "/" from the RelatedURI field when creating domainData via KusciaAPI
[Feature] Added heartbeat time check to domainRoute, setting it to not ready if it exceeds the threshold
[Feature] Moved error code definitions in the code to Protobuf

Breaking Changed

[NA]

Fixed

[Bugfix] Fixed the issue of port conflicts in runp serving multi-replica
[Bugfix] Fixed the issue of state anomalies being caused by multiple executions of kusciaJob stop and restart
[Unit Test] Improved the stability and concurrency of unit tests

v0.9.0b0

Added

• [Documentation] SCQL on Kuscia Tutorial.
• [Feature] Support for ARM architecture.
• [Feature] Support for reverse tunneling multiple replicas.
• [Feature] New CGROUP restrictions under RunP and RunC for Kuscia nodes.

Changed

• [Security Hardening] Change the node registration request's MD5 hash to Sha256.
• [Security Hardening] Node certificate issuance requires the CN field to be a Domain name.
• [Script] kuscia.sh upgrade retains k3s resources, memory restrictions.
• [KusciaAPI] KusciaJob's TaskStatus new field alias.
• [Integration Testing] Improved integration testing stability.
• [Optimization] Modified the Access-Domain information that allows access to the Service.
• [Upgrade] Upgraded the dependent Envoy version to 1.29.4.

Fixed

• Fixed the issue where the kusciaTask status was incorrect when stopping a KusciaJob.
• Fixed the issue of nodes not scheduling applications upon deletion/upgrade.
• Fixed the issue of not being able to delete task sub-resources.
• Fixed the issue where Service name was too long, causing task creation to fail.

v0.8.0b0

Added

• Kuscia supports arm architecture.
• Kuscia Job supports retrying, pausing, and canceling capability.
• Added documentation "How to use the Kuscia API to run a SecretFlow Serving".
• Added documentation "Introduction to Kuscia listening ports".
• Added documentation for DataMesh API.
• Added kuscia.sh and init_example_data.sh scripts.

Changed

• Modified the default task state in the job query results from Kuscia API.
• Optimized processing flows for KusciaJob and KusciaTask.
• Added isTLS field to the kuscia API for creating DomainRoute interface.
• Kuscia API has added a Suspended state enumeration to kusciaJob.
• Revised container launch deployment steps in point-to-point and centralized deployment documentation.
• Modified the pre-validation logic of the master address when initiating lite mode.

Breaking Changes

• Deprecated start_standalone.sh and deploy.sh. Recommended using kuscia.sh.

Fixed

• Fixed an occasional concurrent read-write map issue causing panics in the DomainRoute module.
• Fixed an issue with image repository names in the Agent module.
• Strengthened integration tests for improved stability.
• Fixed an issue where changes to the Configmap in Runk mode did not take effect for Serving.
• Fixed an error when creating DomainDataSource with Kusica API.
• Fixed a potential issue with abnormal startup when the protocol is set to TLS in the Kuscia configuration file.

v0.9.0.dev240508

Added

• [Documentation] SCQL on Kuscia Tutorial.
• [Feature] Support for ARM architecture.
• [Feature] Support for reverse tunneling multiple replicas.
• [Feature] New CGROUP restrictions under RunP and RunC for Kuscia nodes.

Changed

• [Security Hardening] Change the node registration request's MD5 hash to Sha256.
• [Security Hardening] Node certificate issuance requires the CN field to be a Domain name.
• [Script] kuscia.sh upgrade retains k3s resources, memory restrictions.
• [KusciaAPI] KusciaJob's TaskStatus new field alias.
• [Integration Testing] Improved integration testing stability.
• [Optimization] Modified the Access-Domain information that allows access to the Service.
• [Upgrade] Upgraded the dependent Envoy version to 1.29.4.

Fixed

• Fixed the issue where the kusciaTask status was incorrect when stopping a KusciaJob.
• Fixed the issue of nodes not scheduling applications upon deletion/upgrade.
• Fixed the issue of not being able to delete task sub-resources.
• Fixed the issue where Service name was too long, causing task creation to fail.

v0.7.0b0

Added

• Add serving docs.
• Add kuscia ports description.

Changed

• Optimize kuscia agent config
• Update ss metrics
• Update standalone.sh path pre_check
• Update scheduler log
• Update check domain exists
• Reduce additional metrics of ssexporter
• Update kuscia config doc

Fixed

• Fix kusciaTask default state
• Fix domainRoute rolling update and refactor code.
• Fix datamesh probe
• Fix invalid repository name
• Fix the command of getting runtime
• Fix typos in kusciajob_cn.md and kuscia-monitor.md
• Fix datamesh bazel file

v0.8.0.dev240409

Fixed:

• fixed envoy 404

v0.8.0.dev240331

Added

[Alpha] Kuscia Job now has new interface capabilities for retrying, pausing, and canceling jobs.
[Alpha] One-way Networking: Support for collaboration where only one party needs to expose a public port, eliminating the need for the other party to also do so. Documentation to follow.
[Documentation] How to use the Kuscia API to run a SecretFlow Serving.
[Documentation] Introduction to Kuscia listening ports.
[Documentation] Added documentation explaining DataMesh interface.
[Scripts] Added kuscia.sh and init_example_data.sh scripts.

Changed

Modified the default task state in the job query results from Kuscia API.
Optimized processing flows for KusciaJob and KusciaTask.
Added isTLS field to the kuscia API for creating DomainRoute interface.
Kuscia API has added a Suspended state enumeration to kusciaJob.
Revised container launch deployment steps in point-to-point and centralized deployment documentation.
Modified the pre-validation logic of the master address when initiating lite mode.

Breaking Changes

Deprecated:start_standalone.sh,deploy.sh. Recommended use kuscia.sh

Fixed

Fixed an occasional concurrent read-write map issue causing panics in the DomainRoute module.
Fixed an issue with image repository names in the Agent module.
Strengthened integration tests for improved stability.
Fixed an issue where changes to the Configmap in Runk mode did not take effect for Serving.
Fixed an error when creating DomainDataSource with Kusica API.
Fixed a potential issue with abnormal startup when the protocol is set to TLS in the Kuscia configuration file.

v0.6.0b0

Added

Upgrade interconnection protocol from kuscia-alpha to kuscia-beta to support interconnection between Kuscia-Master and Kuscia-Autonomy.
Kuscia monitor, Kuscia exposes a set of metric data, which can be used as data sources for collection by external monitoring tools (such as Prometheus).
The Kuscia API added a job approve interface ，allowing participants to review jobs .
Add some pre-check before kuscia running, such as health check of the connection of database.
Add parameter validation to the kuscia api.
The create job interface of kuscia API added the attribute 'customed-fields' .
Support configuring the application's image ID in AppImage to prevent domain's application image from being tampered with.
Added the curl command example for requesting the kuscia API.
polish the agent runtime docs.

Changed

Changed some kuscia-crds （KusciaJob，KusciaTask，KusciaDeployment）from cluster to namespace (cross-domain).

Fixed

Correct some inaccurate descriptions in the document.