Skip to content
Kong Summit 2022: Where API Innovation Runs Wild  —Learn More →
|
search
Konnect Cloud

Konnect Cloud Updates

The updates contained in this topic apply to Konnect Cloud, an application that lets you manage configuration for multiple runtimes from a single, cloud-based control plane, and provides a catalog of all deployed services.

July 2022

2022.07.12

New environment for Konnect
Konnect is now available at cloud.konghq.com, which replaces the konnect.konghq.com environment. The environment at konnect.konghq.com will no longer receive any updates, and will be deprecated in the near future.

Existing organizations will be automatically upgraded to the new Konnect environment over the next 4-6 weeks. We will be contacting your organization administrator with more details on the upgrade process.

You can continue using your konnect.konghq.com account and wait until we migrate it, or create a new account and manually migrate configuration to the new account.

The minimum supported Kong Gateway version for this environment is 2.5.0.1.

Runtime groups
Konnect now manages all runtime configuration through runtime groups, which provide the ability to securely isolate configuration for sets of runtime instances. Essentially, this gives you access to multiple SaaS-managed control planes in one Konnect organization.

Every organization starts with one default runtime group. Additional custom runtime groups are an enterprise-only feature.

Learn more about runtime groups, then read up on how to manage them with the Konnect UI or with decK.

With runtime groups come a few other changes to runtime management for all organizations:

  • Certificate rotation and management:
    • When setting up runtime instances through the Konnect UI, certificates are generated in the browser and pushed to the Konnect API.
    • Konnect no longer requires CA certificates for runtime instances.
    • The validity period for runtime instance certificates has been extended from six months to ten years.
  • Reworked Gateway configuration UI:
    • The Shared Config menu is now part of Runtime Manager. Manage your Gateway services, routes, plugins, upstreams, SNIs, and certificates through a runtime group, alongside all of the runtime instances in that group.
  • You can use labels for categorizing runtime groups. Labels are key:value pairs, and are helpful for organizing, searching, and filtering subsets of Konnect entities.
Teams and roles
You can now manage Konnect authorization with teams and roles. Existing RBAC roles have been converted to predefined teams, which are available for all Konnect organizations.

To manage user access, invite users to Konnect and add them to teams, or assign individual roles to a user.

With a Konnect Enterprise subscription, you can also create custom teams and assign per-entity permissions for each team.

Declarative configuration management support with decK
As of decK 1.12, standard decK commands such as diff, sync, and dump support Konnect runtime groups.
Learn how to use decK with Konnect:
Tags for Konnect services
You can now connect Konnect services to Gateway services with the _KonnectService tag.
Konnect UI/UX redesign
The Konnect UI now has reworked navigation, refreshed colors and styles, and a focus on consistent interactions throughout the application.

Navigation redesign details:

  • Services is renamed to Service Hub
  • Runtimes is renamed to Runtime Manager
  • Shared Config is now part of Runtime Manager
  • Dev Portal settings have moved from the general settings page to the Dev Portal section
  • Refreshed iconography for the main menu
Dev Portal default theme
The Dev Portal now comes with a new default theme: “Mint Rocket”.
Dev Portal SSO support with your own IdP
You can now configure custom identity providers (IdPs) for the Dev Portal.
See the SSO documentation for more information.
Simplified custom Dev Portal URL setup
SSL certificate generation for custom URLs is now handled by Konnect.

To set up a custom URL, see the Dev Portal customization documentation for more information.

Vitals metrics and dashboards
The Vitals overview dashboard has been reworked for Plus and Enterprise tiers. The dashboard now provides metrics for services cataloged by Service Hub within a selected time interval. You can view a graph for each category by clicking Traffic or Errors, and switching between the two views. Each graph is filterable by time frame.

In the Service Hub, graphs for services and routes now show data up to the last 30 days.

Vitals custom reports

Vitals custom reports are now available for Plus and Enterprise tiers. Through the Vitals menu, you can create custom reports to track API requests for services, routes, and applications.

See the custom reports documentation for more information.

Custom plugin requirements have changed
Some custom plugin limitations have changed or been removed. See the latest requirements in the plugin documentation.

Custom plugins can’t be added directly through the Konnect Cloud application. If you have a custom plugin you want to use in Konnect, contact Kong Support.

Refactored documentation
The Konnect documentation has been refactored to match the new Konnect navigation, and generally reworked to provide a better experience for Konnect users. Let us know what you think via team-docs@konghq.com!
Known issues/limitations
The cloud.konghq.com environment has the following restrictions:
  • Application registration through Dev Portal can only be used with the default runtime group. This restriction will be removed in a future update to Konnect.
  • The following plugins are not supported:
    • OAuth2 Authentication
    • Apache OpenWhisk
    • Vault Auth
    • DeGraphQL
    • GraphQL Rate Limiting Advanced
    • Key Authentication Encrypted
  • decK does not support authenticating against Runtime Groups when single sign-on (SSO) is enabled.

March 2022

2021.03.07

Kong Gateway 2.8.0.0 support
Konnect Cloud now supports Kong Gateway 2.8.0.0 runtimes. You can keep using existing 2.7.x runtimes, or you can upgrade to 2.8.0.0 to take advantage of any new features, updates, and bug fixes.

For all the changes and new features in Kong Gateway 2.8.x, see the changelog.

To use any new features in the release, start up a new 2.8.0.0 runtime.

January 2022

2022.01.14

Custom Domain for Dev Portal
You can now set a custom domain for your Dev Portal through the Konnect Cloud Admin UI.

See the documentation: Add a Custom Domain.

Headers are modifiable
You can now set a welcome message and primary header through the Admin UI for your Dev Portal.

December 2021

2021.12.21

Kong Gateway 2.7.0.0 support
Konnect Cloud now supports Kong Gateway 2.7.0.0 runtimes. You can keep using existing 2.6.x runtimes, or you can upgrade to 2.7.0.0 to take advantage of any new features, updates, and bug fixes.

For all the changes and new features in Kong Gateway 2.7.x, see the changelog.

To use any new features in the release, start up a new 2.7.0.0 runtime.

November 2021

2021.11.30

Single-sign on (SSO) with Okta
Konnect Cloud now supports single sign-on (SSO) access through Okta with OpenID Connect.

See the guide on Setting up SSO with Okta for more information.

2021.11.10

Kong Gateway 2.6.0.0 support
Konnect Cloud now supports Kong Gateway 2.6.0.0 runtimes. You can keep using existing 2.5.x runtimes, or you can upgrade to 2.6.0.0 to take advantage of any new features, updates, and bug fixes.
This release introduces the new jq plugin. It also adds new features and improvements to a long list of plugins, including:
  • Kafka Log and Kafka Upstream: Support for TLS, mTLS, and SASL auth
  • Prometheus: Introduces the data_plane_cluster_cert_expiry_timestamp metric, letting you keep an eye on the status of you data plane certificates
  • Request Termination: Introduces the new trigger configuration option, which tells the plugin to activate only on specific headers or query parameters

To use any new features in the release and gain access to the jq plugin, start up a new runtime.

For all the changes and new features in Kong Gateway 2.6.x, see the changelog.

Tags for auth plugins created by application registration
When you enable application registration on a Service, Konnect Cloud enables two plugins automatically: ACL, and one of Key Authentication or OIDC. These plugins cannot be edited or deleted directly. To help differentiate the Konnect-managed plugins and avoid breaking your service, Konnect now adds two metadata tags for declarative configuration: konnect-managed-plugin and konnect-app-registration.

August 2021

2021.08.31

Kong Gateway 2.5.0.1 support
Konnect Cloud now supports Kong Gateway 2.5.0.1. runtimes. You can keep using existing 2.4.x runtimes, or you can upgrade to 2.5.0.1 to take advantage of any new features, updates, and bug fixes.
This release includes event hook support, improvements to CP-DP communication, new configuration options in plugins, and more.
For all the changes and new features in Kong Gateway 2.5.x, see the changelog.

June 2021

2021.06.24

Global plugin support
You can now configure global plugins through Konnect Cloud. Visit the Shared Config page and select the Plugin menu option to get started.

2021.06.21

Kong Gateway 2.4.1.1 support
Konnect Cloud now supports Kong Gateway 2.4.1.1 runtimes. You can keep using existing 2.3.x runtimes, or you can upgrade to 2.4.1.1 to take advantage of any new features.
The 2.4.1.1 release includes two new plugins: OPA and Mocking. To use these plugins, and any other features newly introduced in this release, start up a new runtime.
For all the changes and new features in Kong Gateway 2.4.x, see the changelog.
More plugins available in Konnect Cloud
The following plugins are now available:

2021.06.15

Default strategy/policy for rate limiting plugins
The rate limiting plugins now default to redis as the rate limiting strategy or policy. This setting allows cluster-wide rate limiting using a Redis server. To store counters in-memory on each node, change this setting to local.

The cluster config strategy/policy is not supported in Konnect Cloud, and does not appear as an option in the plugin configuration anymore.

To find the setting based on the rate limiting plugin, see:

Sorting the runtime status table
You can now sort the runtime status table in Runtime Manager by the Last Seen or Sync Status columns.

May 2021

2021.05.12

Certificate expiration limit extended
The validity period for runtime certificates has been extended from 30 days to six months.

To take advantage of the new validity period, bring up new data planes through the Runtime Manager. For existing instances, generate new certificates.

2021.05.11

Konnect Plus is launched!
Konnect introduces a new plan tier system for subscriptions.
  • Kong Konnect Free: Basic features and plugins with a cloud control plane.
  • Kong Konnect Plus: A pay-as-you-go, credit card-based option that provides a simple way for developers or operators on small teams to quickly start using the services they need right now.
  • Kong Konnect Enterprise: For organizations that want to manage all services across their entire organization. Konnect Enterprise provides connectivity with enterprise-grade security, scalability, and observability across any cloud, platform, and protocol to help teams build powerful digital services and experiences.

If you already have a Konnect or Kong Gateway account and license, this license will roll over seamlessly into the new Konnect Enterprise tier.

Konnect Plus free trials
When you sign up for a Konnect account, you are automatically enrolled into a 30-day Konnect Plus free trial. You don’t need to provide a credit card or any info beyond the account registration. At the end of the trial, you’ll have the choice to keep the account at the Plus tier or downgrade to Free.
Billing and plan management
You can now manage your plan subscription for Free and Plus plan tiers directly from the app. Konnect now includes a Stripe integration, and the process is fully self-serve: choose your plan, add a card, make payments, all through the Konnect app and billing portal.
Self-serve account registration
You can now sign up for a Konnect account without an access code. No more reaching out to Kong support or sales for access – just go to https://konnect.konghq.com and try it out!

2021.05.07

Runtime setup improvements
Runtime setup for Linux and Kubernetes environments has improved. When you configure a new runtime, instead of one Advanced tab, the Runtime Manager now has Linux and Kubernetes tabs. Choose the tab that fits your environment and copy the configuration parameters directly.

Known issues with the Kubernetes tab:

  • The image and repository parameters are in the wrong format and point to a non-existent image. Substitute them with the following:

    image:
  repository: kong/kong-gateway
  tag: "2.3.2.0-alpine"

  • cluster_telemetry_endpoint is missing a space between the parameter and the value. Add a space to fix the formatting:

    cluster_telemetry_endpoint: <your-instance-name>.tp.konnect.konghq.com:443

March 2021

2021.03.16

Runtime setup improvement
Quick setup just got a little bit faster. When configuring a new runtime through the Runtime Manager, HTTPie is no longer required for the quick setup script.

February 2021

2021.02.23

Kong Gateway 2.3 support
Konnect Cloud now supports Kong Gateway 2.3 runtimes. There is no upgrade path for existing runtimes.
To use Kong Gateway 2.3, re-provision a new runtime.
Advanced runtime configuration
You can now configure custom Kong Gateway data planes through the Runtime Manager and run gateway instances outside of Docker. Use the Advanced option when configuring a new runtime to get started.

See the runtime configuration guides for more information:

Logging plugins
The full set of Kong Gateway’s logging plugins is now available through Konnect Cloud. This includes:

2021.02.10

Portal authentication
You can now disable authentication on a Dev Portal, which exposes the Dev Portal publicly to anyone with the link. No one needs to register for Dev Portal access.
New application registrations aren’t available through a public-facing portal.

2021.02.01

Kong Konnect (Konnect) is now generally available!

To get started with Konnect, see the Quickstart Guide.

For more information about Konnect, contact your Kong sales representative.