Apoxy v0.16.0
Released March 19, 2026
I'll help you generate release notes for version v0.16.0. Let me read through the commits and organize them by category.
Features
- Homebrew tap support - Add official Homebrew tap for easier CLI installation (5007d92)
- Tunnel connection management - Add CloseConnection method for disconnecting individual connections (0310192)
- Cluster liveness tracking - Add agent connection labels for monitoring cluster liveness (9fcda94)
- Coordination lease heartbeat - Add coordination lease heartbeat and mirror protection types for improved reliability (d7fb8d5)
- Interactive cluster selection - CLI k8s install now defaults cluster-name to kube context with interactive picker (8d225f0)
- Cross-platform compilation - Add build tags and non-Linux stub for lwtunnel to support cross-platform builds (a34284f)
- Kubernetes context override - Add k8s install context override option (d3f2153)
Bug Fixes
- DNS resolution - Fix ndots search domain resolution and start DNS proxy in tunnel runtime (ca4745a)
- Gateway route CRDs - Skip unavailable gateway route CRDs to prevent errors (8d04f8b)
- Tunnel race condition - Fix race between agent registration and endpoint address allocation (849f400)
Improvements
- Tunnel resource cleanup - Close active connections when TunnelNode is deleted (560e629)
- Enhanced TUI - Improve tunnel TUI with full UUIDs, wider IP columns, dashboard link, and general cleanup (d7e13ac)
- Runtime high availability - Remove leader election from tunnel for per-pod connections and add runtime HA support (0e1f8d8, f98bcca)
- Better logging - Improve runtime and reverse proxy logging (40ab984)
- Faster endpoint propagation - Implement aggressive DNS refresh for faster tunnel endpoint propagation (5124f0f)
- Overlay network advertising - Advertise overlay network prefix to tunnel clients (be67ec6)
- Default TLS on DomainRecords - Enable TLS by default on ref-target DomainRecords (d4acfe0)
Infrastructure
- Proxy source pinning - Pin tunnel proxy source to apoxynet (c26d6f2)
- Proxy monitoring restrictions - Lock down proxy object monitoring changes for cloud infrastructure (d82a5cd)
- Coordination API updates - Add coordination/v1 to openapi-gen inputs (0e6bbc0)
- Mirror coordination - Use coordination.apoxy.dev for mirror lease heartbeat (0b319d9)
- Tunnel reconciliation - Bootstrap reconcile on tunnel startup (0848501)
- Runtime reorganization - Reorganize runtime components and fix tunnel startup (5561519)
- Certificate separation - Separate serving certs from upstream mTLS (810c04a)
- API cleanup - Remove deprecated Domain v1alpha2 API entirely (ac33949)
Full Changelog: https://github.com/apoxy-dev/apoxy/compare/v0.15.0...v0.16.0