Release 2.4.2

[Trink0]

Krateo 2.4.2 – Focused on Stability, Security & Consistency

Krateo 2.4.2 is a focused stability release that delivers essential improvements across the platform. While it may be a minor version bump, the updates included play a critical role in enhancing reliability, security, and long-term maintainability.

This release addresses certificate lifecycle automation, improves support for cluster-wide compositions, removes a legacy SPOF (URL_PLURALS), and refines several core components like the core-provider, composition-dynamic-controller, and oasgen-provider.

Rather than bundling these changes into the previous 2.4 release, we’ve taken the time to package them carefully to ensure a smooth upgrade path—and to give these foundational improvements the visibility they deserve.

Component Updates

Make Krateo’s core-provider more solid

Krateo’s core-provider received multiple enhancements aimed at increasing reliability and consistency across deployments:

• certificates are generated leveraging Kubernetes CertificateSigningRequest (exactly like authn)
• certificates are automatically renewed
• certificates are automatically aligned along any resourced managed by the core-provider: CRDs and MutatingWebhookConfiguration
• every core-provider spawn component is automatically reconciled
• Defaults in the CRDs are now applied to the CR.

Cluster-Wide Compositions

• A composition can be deployed in a different namespace from the CompositionDefinition one, improving flexibility and paving the way for better multitenancy support.

No more SPOF for URL_PLURALS

We’ve eliminated the single point of failure created by the external URL_PLURALS service

• Plurals management is no longer a service managed by SnowPlow but a shared library embedded within the components. Therefore, the environment variables pointing to the Plurals service are no longer valid. Check breaking changes for details.

Installer updates

• vcluster has been removed
• The cratedb operator has been removed - we leverage our Helm chart for OpenShift support
• Installer adds the option to disable the installation of composableportal, composableoperations, composablefinops, and oasgenprovider

chart-inspector

• Fixed a bug that prevented chart inspector to find compositions in the cluster and involved the restart of the service to restore a correct state

crd generator

• Krateo’s crdgen support ‘title’ property, thanks to a merged PR in the Kubernetes controller-tools repository

Oasgen-provider

• HTTP Client Refactor
• Reconciliation Logic Audit
  • Align creation logic with core-provider
  • Review update/delete reconciliation flows
  • Optimize status update triggers
• Observability Audit
  • Standardize event reporting format
  • Implement consistent error wrapping
  • Enforce structured logging
• Library Migration
  • Consolidate shared tools into snowplow
  • Update libopenapi to latest stable
  • Verify backward compatibility
• RBAC Tools Alignment
  • Review role definitions
  • Verify permission boundaries
  • Update clusterrole bindings
• oasgen-provider Auth CRDs
  • Implement authentication CRD management
  • Improved cascade deletion of Authentication CRDs and related resources. Now RestResources CRDs are deleted before the related authentication CRDs and generated controller.

Rest dynamic controller

• Fixed a bug that prevented rdc to write events on action
• It went through the same refactoring path as Oasgen-provider
  • Reconciliation Logic Audit
  • Observability Audit
  • Library Migration
  • RBAC Tools Alignment

Composition dynamic controller:

• The composition dynamic controller has now cluster visibility. It can now be deployed in a different namespace from the one where the composition definition is deployed. This is a breaking change for the composition dynamic controller.
• Code refactoring:
  • plumbing library integration
  • Plurals management is no longer a service managed by SnowPlow but a shared library embedded within the components. Therefore, the environment variables pointing to the Plurals service are no longer valid. Check breaking changes for details.

How to Upgrade

helm upgrade installer --version 2.4.2

⚠️ Breaking changes

FINOPS

• resource-tree-handler-chart Removed URL_PLURALS environment variable. Its configuration will not have any effect now (refactor: URL PLURALS now uses plumbing resource-tree-handler#66 and feat: removed URL PLURALS (not needed anymore due to plumbing library) resource-tree-handler-chart#20). Version 0.2.11

• finops-composition-definition-parser-chart Removed URL_PLURALS environment variable. Its configuration will not have any effect now (refactor: removed URL_PLURALS and added Plumbing library finops-composition-definition-parser#14 and refactor: replaced URL_PLURALS with plumbing library finops-composition-definition-parser-chart#16). Version 0.1.1

• Due to cratedb-chart insertion into the installer-chart with version 0.1.4, the default value for cratedbUserSystemName in the finops-database-handler-chart no longer applies. The value is computed as {{ include "cratedb.fullname" . }}-{{ .Values.crate.newUser }}-credentials in the cratedb-chart. This change is already available in the PR branch of the installer from line 5892 to 5902.

• The composition-dynamic-controller has now cluster visibility. It can now be deployed in a different namespace from the one where the composition definition is deployed.

Krateo Core

• URL_PLURALS environment variable is no longer valid either for core-provider and composition-dynamic-control. The environment variable is no longer needed and will not have any effect if set.

Installer

• Installer no longer installs terminal server component