wasmCloud v2.3.0

This release introduces key management capabilities for workload configurations and secrets, enhances security with Wasmtime v45, and improves Kubernetes deployment flexibility through namespaced RBAC. Developers also benefit from significantly improved observability and tracing for distributed microservices.

Workload environment variables, configuration, and secrets support — Developers can now inject environment variables, configuration data, and secrets directly into workloads via wash. This simplifies the management of sensitive data and environment-specific settings for distributed applications.

Critical Wasmtime security patches and upgrade to v45 — Provides protection against known vulnerabilities in the underlying Wasmtime engine. This ensures the runtime environment stays secure against potential sandbox escape or execution exploits.

Namespaced RBAC support for Runtime Operator — Administrators can now scope RBAC permissions to specific namespaces rather than requiring cluster-wide privileges. This enables better multi-tenancy and follows the principle of least privilege in shared Kubernetes environments.

Enhanced OTel observability and tracing granularity — Observability is improved with better-structured spans in traces and the recording of HTTP status codes. This makes it significantly easier to debug cross-workload communication and pinpoint failures in distributed traces.

Improved CLI source detection and Git reference support — Simplifies project initialization by allowing developers to pin templates to specific commit SHAs, and ensures reliable development workflows by fixing source detection logic.