All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
Added for new features.
Changed for changes in existing functionality.
Deprecated for soon-to-be removed features.
Removed for now removed features.
Fixed for any bug fixes.
Security in case of vulnerabilities.
Breaking Changed Breaking for backward-incompatible changes that require user intervention.
[Feature] domainRoute now supports setting prefix paths [Feature] kuscia job now supports multiple parties (1 party , 2 parties , 3 parties) [Feature] appImage's mountPath now supports relative paths [Feature] Support for setting DomainRoute reverse tunnel mode through the Kuscia API [Feature] Support for PKCS 8 format certificates [Feature] Added DataSource List API to KusciaAPI. KusciaAPI Master side supports Query and List DataSource but does not display sensitive information.
[Documentation] Correct description of monitoring metrics in the Kuscia metric documentation [scripts] During kuscia init, check that the node ID cannot be master [Feature] Remove the trailing "/" from the RelatedURI field when creating domainData via KusciaAPI [Feature] Added heartbeat time check to domainRoute, setting it to not ready if it exceeds the threshold [Feature] Moved error code definitions in the code to Protobuf
[NA]
[Bugfix] Fixed the issue of port conflicts in runp serving multi-replica [Bugfix] Fixed the issue of state anomalies being caused by multiple executions of kusciaJob stop and restart [Unit Test] Improved the stability and concurrency of unit tests
- [Documentation] SCQL on Kuscia Tutorial.
- [Feature] Support for ARM architecture.
- [Feature] Support for reverse tunneling multiple replicas.
- [Feature] New CGROUP restrictions under RunP and RunC for Kuscia nodes.
- [Security Hardening] Change the node registration request's MD5 hash to Sha256.
- [Security Hardening] Node certificate issuance requires the CN field to be a Domain name.
- [Script] kuscia.sh upgrade retains k3s resources, memory restrictions.
- [KusciaAPI] KusciaJob's TaskStatus new field alias.
- [Integration Testing] Improved integration testing stability.
- [Optimization] Modified the Access-Domain information that allows access to the Service.
- [Upgrade] Upgraded the dependent Envoy version to 1.29.4.
- Fixed the issue where the kusciaTask status was incorrect when stopping a KusciaJob.
- Fixed the issue of nodes not scheduling applications upon deletion/upgrade.
- Fixed the issue of not being able to delete task sub-resources.
- Fixed the issue where Service name was too long, causing task creation to fail.
- [Alpha] Kuscia Job now has new interface capabilities for retrying, pausing, and canceling jobs.
- [Alpha] One-way Networking: Support for collaboration where only one party needs to expose a public port, eliminating the need for the other party to also do so. Documentation to follow.
- [Documentation] How to use the Kuscia API to run a SecretFlow Serving.
- [Documentation] Introduction to Kuscia listening ports.
- [Documentation] Added documentation explaining DataMesh interface.
- [Scripts] Added kuscia.sh and init_example_data.sh scripts.
- Modified the default task state in the job query results from Kuscia API.
- Optimized processing flows for KusciaJob and KusciaTask.
- Added isTLS field to the kuscia API for creating DomainRoute interface.
- Kuscia API has added a Suspended state enumeration to kusciaJob.
- Revised container launch deployment steps in point-to-point and centralized deployment documentation.
- Modified the pre-validation logic of the master address when initiating lite mode.
- Deprecated:start_standalone.sh,deploy.sh. Recommended use kuscia.sh
- Fixed an occasional concurrent read-write map issue causing panics in the DomainRoute module.
- Fixed an issue with image repository names in the Agent module.
- Strengthened integration tests for improved stability.
- Fixed an issue where changes to the Configmap in Runk mode did not take effect for Serving.
- Fixed an error when creating DomainDataSource with Kusica API.
- Fixed a potential issue with abnormal startup when the protocol is set to TLS in the Kuscia configuration file.
- add the documents of datasource api
- add kusciaapi errorcode doc
- add kuscia init command generating kuscia config
- update domain register and handshake error
- report events when Pod failed to start in RunK mode
- Change the mounting directory for logs and data of Kuscia deploying with Docker
- {{ROOT}}/kuscia-{{DEPLOY_MODE}}-{{DOMAIN_ID}}-data -> {{ROOT}}/{{DOMAIN_CONTAINER_NAME}}/data.
- {{ROOT}}/kuscia-{{DEPLOY_MODE}}-{{DOMAIN_ID}}-logs -> {{ROOT}}/{{DOMAIN_CONTAINER_NAME}}/logs.
- {{ROOT}}/kuscia-{{DEPLOY_MODE}}-{{DOMAIN_ID}}-certs was deleted.
- fix some unit test case
- fix the issue of inconsistent states among multiple parties in KusciaDeployment
- fix the issue of ClusterDefine only having unilateral information under KusciaDeployment in P2P scenarios
- fix kusciaapi grpc role check
- Upgrade certain dependency packages to fix security vulnerabilities in pkg.
- Upgrade interconnection protocol from kuscia-alpha to kuscia-beta to support interconnection between Kuscia-Master and Kuscia-Autonomy.
- Kuscia monitor, Kuscia exposes a set of metric data, which can be used as data sources for collection by external monitoring tools (such as Prometheus).
- The Kuscia API added a job approve interface ，allowing participants to review jobs .
- Add some pre-check before kuscia running, such as health check of the connection of database.
- Add parameter validation to the kuscia api.
- The create job interface of kuscia API added the attribute 'customed-fields' .
- Support configuring the application's image ID in AppImage to prevent domain's application image from being tampered with.
- Added the curl command example for requesting the kuscia API.
- polish the agent runtime docs.
- Changed some kuscia-crds （KusciaJob，KusciaTask，KusciaDeployment）from cluster to namespace (cross-domain).
- Correct some inaccurate descriptions in the document.
- Add network error troubleshooting document.
- Add steps for pre creating data tables in the process of deploying kusica on K8s.
- The token from lite to master supports rotation.
- When deploying using deploy.sh, no kuscia API client certificate was generated.
- Support deploying kuscia on K8s.
- Support running algorithm images based on runp and runk modes.
- Support configuring Path prefix in domain public URL addresses.
- Optimize deployment configuration and add configuration documentation.
- Optimize error information of task and error logs of kuscia.
- When there is a duplicate node error, the node will not exit but will try again.
- Change ClusterDomainRoute status to be unready when dest domain is unreachable.
- Add document of Kuscia overview.
- Move pod scheduling phase to the task pending phase.
- Add document for deploying Kuscia on k8s.
- Optimize log output.
- Optimize Kuscia deployment configuration and add configuration documentation.
- Optimize error messages due to scheduling failures.
- When there is a duplicate node error, the node will not exit but will try again.
- Change ClusterDomainRoute status to be unready when dest domain is unreachable.
- Support register secretflow psi image.
- Add KusciaDeployment operator.
- Support non MTLS network communication in P2P networking mode.
- Support the deployment of new lite domain in centralized clusters.
- Support non MTLS network communication in centralized networking mode.
- Supports the deployment of an autonomy domain across machines.
- Add Integration Test.
- Correct datamesh service name for p2p
- Fix document typo.
- Fix errors when installing secretpad using non-root user.
- Fix the issue of token failure after restarting Kuscia.
- Kuscia init release.