You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
GatewayArea: what it touches
New FeaturesKind: in v2.1.228,
New FeaturesSection of the release
What
If the gateway runs without OIDC it can never mint a session JWT, which silently disables managed policies, admin spend limits and telemetry forwarding. The gateway now names exactly which of those configured sections are inert and suggests either removing them or configuring OIDC.
Evidence
oidc is not configured (CRI-only deployment), so no gateway session JWT can ever be minted
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
