Release Notes for Tetrate Patch Service

New capabilities land here as they ship.

Technical Preview

The initial release of Tetrate Patch Service includes:

New Features

• Cluster inventory: an in-cluster agent reporting full snapshots of the Tetrate images running and every managed product installed, with a per-cluster drill-down, version and status badges, and a products column in the Clusters view. The agent recognizes Tetrate's workloads against the release catalog, so no workload needs labeling and your own applications are never reported.
• CVE scanning: nightly fleet-wide scans of every observed image, findings categorized as actionable, pending, or third party, and freshness warnings that never present missing data as clean.
• Release catalog: public machine-readable release manifests with registry-verified digests, powering categorization, upgrade available markers, and upgrade targets that never cross image variants.
• Managed data plane: a private per-customer GitOps repository reconciled by ArgoCD, with automated upgrade pull requests, one per environment, and evidence-based rollout tracking. Every automated request is labeled with the layer it upgrades and the size of its version jump, and an Upgrades view lists each product with the clusters it reaches and the requests waiting on it.
• Upgrade review in the console: opening a pending upgrade shows its description, the checks gating it, its diff and its conversation, and releases it with approve, hold, merge and close, all without leaving for GitHub. Commands travel as comments on the request under your own GitHub account, and the panel reports what it sent rather than claiming an outcome the automation has not reached yet.
• Cloud account discovery: AWS account connections through an assumable IAM role with no stored credentials, fleet-wide cluster discovery, and per-cluster install targets with bulk installs. Each connection carries a name, discovered from the account when the role allows it and editable at any time.
• The tetrate CLI: single-command cluster onboarding, multi-cluster planning across kubeconfig contexts, and managed product installs, for macOS and Linux.