Skip to main content

Syntasso Kratix Enterprise Release Notes

Overview​

Syntasso Kratix Enterprise (SKE) is the enterprise distribution of Kratix.

The release manifests are available at:

http://syntasso-enterprise-releases.s3-website.eu-west-2.amazonaws.com/#ske/

Check the release notes below for information on each available version.

Release Notes​

v0.58.0 (2026-09-02)​

Fixes​

  • Fixed a zombie-process leak in the SKE core image. Every Git State Store reconcile shells out to git, which forks a git remote-https helper; if the parent was killed mid-operation, the orphaned helper reparented to PID 1, which never reaped it — eventually exhausting the pod's PID limit and breaking reconciliation (and kubectl exec) entirely. The image now runs under tini as PID 1, so orphaned helpers are reaped correctly.
  • The dependency Work for a Promise is now only updated when its contents actually change, instead of on every reconcile.
  • WorkPlacements that never wrote to their State Store can now be deleted. On a Destination with filepath.mode: none, cleanup previously required a state marker file that is only created on the first write, so a WorkPlacement deleted before writing anything was stuck and could never be removed.

Security Fixes​

  • Updated to include latest security updates.

v0.57.0 (2026-08-27)​

Features​

  • Promise authors can now override the reconciliation interval for a single Promise Revision without publishing a new version. For more information, see the Promise Revisions documentation.

Maintenance​

  • Base image updates and package maintenance.

v0.56.0 (2026-08-19)​

Features​

  • Kratix now re-runs promise and resource workflows after a failure, ensuring they always converge rather than remaining in a failed state.

Maintenance​

  • Base image updates and package maintenance.

v0.55.0 (2026-08-12)​

Features​

  • A new workPlacementRewriteInterval option in the Kratix Config controls how often WorkPlacements re-write their files to the state store to correct drift, independently of workflow runs. Set to 0 to disable the periodic drift-correction re-writes. WorkPlacements will still be updated when workflows run. For more information, see the Kratix Config documentation.

Maintenance​

  • Base image updates and package maintenance.

v0.54.0 (2026-08-04)​

Features​

  • A Resource Binding can now be pre-created to pin a Resource Request to a specific Promise version at creation time. This is particularly useful for Compound Promises, where workflows output Resource Requests for component Promises. For more information, see Pinning a Resource Request when it is created.
  • Compound Promises now uses Promise Revisions to resolve required promises. See How required Promises are resolved for more details.

Fixes​

  • Kratix now recovers when a Git State Store is changed outside of Kratix (for example a manual commit, or a Flux or Argo prune). Before each write, Kratix resets its cached clone to the latest remote state instead of rebasing, so writes always start from the true remote state. A new git.minimumFetchInterval Kratix Config option (default 5s) bounds how often the remote is fetched.

Maintenance​

  • Base image updates and package maintenance.

v0.53.0 (2026-07-22)​

Features​

  • S3-compatible release storage now supports path-style addressing via spec.releaseStorage.forcePathStyle. Enable this for stores that do not support virtual-hosted-style addressing, such as an in-cluster MinIO instance.
  • Delete workflows can now pause execution using the wait step, giving platform teams control over deletion ordering and dependencies. See Gating Deletion with Workflow Control.
  • Upgrade Plan rollout group selectors now support matchAll: true to select all Resource Bindings that belong to the referenced Promise and match upgradePath.from.

Maintenance​

  • Base image updates and package maintenance.

v0.52.0 (2026-07-13)​

Features​

  • Introduces the SKE Platform Manager, a new component that manages SKE upgrade plans and runs. The Platform Manager runs its own webhook server; when using the SKE Operator with cert-manager disabled, a separate TLS certificate for the Platform Manager is now required. For information on configuring the required certificates, see the installation documentation.
  • Destinations now surface a warning when referencing a StateStore that does not exist.

Maintenance​

  • Base image updates and package maintenance.

v0.51.0 (2026-07-07)​

Features​

  • PromiseRevision and Resource Bindings are now always enabled — the feature flag has been removed.
  • Updating a resource or Promise no longer suspends active pipeline Jobs mid-execution.

Fixes​

  • Promises now reconcile correctly when their associated Work resources change.

Maintenance​

  • Base image updates and package maintenance.

v0.50.0 (2026-06-24)​

Maintenance​

  • Base image updates and package maintenance.

v0.49.0 (2026-06-05)​

Fixes​

  • Fixed an intermittent crash in the status-writer pipeline sidecar when a parallel pipeline writes to the same Promise status concurrently, causing the Promise to become stuck in PipelinesInProgress.

Maintenance​

  • Base image updates and package maintenance.
important

Upgrading from v0.48.0: If you observe a Promise stuck in PipelinesInProgress state and the status-writer container in the configure pipeline pod is crashing with missing status.kratix.workflows.pipelines, this is a known issue in v0.48.0. Upgrade to v0.49.0 to resolve it.

v0.48.0 (2026-06-03)​

Features​

  • Workflow status is now surfaced on Resource Bindings.
  • Introduce a platform-wide ResourceBindingVersionStrategy setting in the Kratix Config to control whether new Resource Bindings pin to a specific version (pinned) or track latest (floating, default).
  • Resource Bindings can be reconciled on-demand using the kratix.io/reconcile label.
  • Pipeline Jobs now carry an owner reference to their parent resource or Promise, making job-to-resource relationships discoverable.
  • Unpausing a Resource Request no longer triggers an unnecessary reconciliation.

Fixes​

  • Fixed: invalid Resource Binding version no longer prevents resource deletion.
  • UpgradeFailed status now propagates correctly to Resource Bindings.
  • Fixed inconsistent upgrade status for Resource Bindings during promise upgrades.
  • Improved error message when an SSH private key is missing from the configured Secret.

Security Fixes​

  • Updated golang.org/x/crypto and golang.org/x/net dependencies to address recent CVEs.

Maintenance​

  • Base image updates and package maintenance.

v0.47.0 (2026-05-18)​

Features​

  • UpgradeRun now captures a snapshot of resource groups at creation time, recording which resources belong to each rollout group in a ConfigMap referenced from status.resourceListRefs.
  • Image pull secrets are no longer injected when not explicitly defined. Customers using private or air-gapped registries no longer need to create a dummy syntasso-registry secret in target namespaces.

Fixes​

  • Fix an issue where Resource Bindings would be left behind after deleting a Promise.
  • Fix an issue where multiple Promise Revisions could be created for the same Promise version, causing failures on reconciliation.

Maintenance​

  • Security: bump golang.org/x/net to v0.53.0.
  • Base image updates and package maintenance.

v0.46.0 (2026-04-28)​

Fixes​

  • Ensure we are not throwing an error when listing resource requests if the CRD does not exist.
  • Reset reconcile condition when running from suspended.

Maintenance​

  • Base image updates and package maintenance.

v0.45.0 (2026-04-17)​

Features​

  • Introducing the ability to retry Promise and Resource Workflows via an optional Workflow Control file, with detailed retry states now visible in the status.kratix of Promises and Requests. Check the reference docs for more details.

Fixes​

  • Use label selectors for the Kratix Promise webhook.
  • Ensure pipeline jobs are cleaned up when the workflow is Suspended and not Completed.
  • Ensure we run the configure workflows when a resource request is unpaused.

Maintenance​

  • Base image updates (Chainguard) and package maintenance.

v0.44.0 (2026-03-26)​

Features​

  • Add an additional column to StateStores to display the name and endpoint of Bucket stores and the URL and endpoint of Git stores
  • Detail the state of pipeline executions in the status.kratix of Promises and Requests
  • Promise and Resource Workflows can be suspended via an optional Workflow Control file
  • The DefaultResourceRequirements for workflows can be configured via the Kratix Config
  • Improve logging to detail the Resource Requests a reconciliation belongs to

Fixes​

  • Promise revisions can now be created successfully even when the Promise version contains special characters.
    • Kratix will no longer use the Promise Version directly in the Promise Revision name. It will instead use a unique hash derived from the Promise version.
    • For backwards compatibility, revisions following the previous name format will continue to work.
  • Promises are no longer set to Unavailable when all of their Resource Requests are reconciled

Maintenance​

  • Bump base images and dependencies

v0.43.0 (2026-03-04)​

important

Please note that as of v0.43.0, the SKE images will be accessible at ghcr.io not registry.syntasso.io.

Please ensure that your Syntasso Registry secret is updated to reflect this. If it is not updated, your cluster will be unable to pull the images and the kratix-controller-manager pod will fail to start.

Features​

  • Introduce perform improvements for the Work Placement controller

Fixes​

  • Ensure the jobs to delete are calculated properly when cleaning up old jobs
  • Update descriptions for Kratix CRDs
  • Cleanup healthrecords even if parent promise is deleted

Maintenance​

  • Base image updates (Chainguard) and package maintenance.

v0.42.0 (2026-02-13)​

Fixes​

  • OpenTelemetry dependency updates.

Maintenance​

  • Base image updates (Chainguard) and package maintenance.

v0.41.0 (2025-12-24)​

Fixes​

  • Resource Bindings will now properly use the latest Promise Revision by default.

v0.40.0 (2025-12-09)​

Features​

  • Introducing Promise Revisions and Resource Bindings, which gives platform engineers more fine grained control of promise upgrades. Check the guides and reference docs for more details.
  • Allow metrics and traces to be individually enabled via the Kratix Config.

v0.39.0 (2025-11-05)​

Features​

  • The introduction of OpenTelemetry metrics detailing the scheduling of documents in Kratix.
  • The introduction of log levels in the Kratix Controllers. The log levels default to info and the desired log level can be configured via the Kratix Config.
  • This release introduces the short names wp and dest for workPlacements and Destinations respectively.
  • Better GitStateStore authentication: Kratix now automatically retries authentication after trimming trailing whitespace from secrets.

Fixes​

  • Improve the OpenTelemetry tracing by only tracing Kratix-related API operations.
  • Improve the log levels to ensure messages are logged at the correct level of severity.
  • Improve the OpenTelemetry tracing to detail the kratix.action within the trace attributes.
  • Update WorkPlacements to ensure they are not re-reconciled unnecessarily.

Security Fixes​

  • Updated to include latest security updates including the previously mentioned vulnerability associated with an indirect dependency of SKE core.

v0.38.0 (2025-10-21)​

warning

To upgrade to this version, you will need to update your SKE Operator to v0.18.1 or later.

Features​

  • Support for GithubApp on GitStateStore authentication methods, as documented here.
  • Structured logs and log levels can now be configured via the Kratix Config. See the Kratix Config for more information.
  • Kratix can now emit traces via OpenTelemetry. See the Kratix Config for more information.

Known issues​

  • There is a known security vulnerability associated with an indirect dependency of SKE core. SKE is not impacted by the vulnerability. We are waiting for an upstream dependency release to update in the next version.

v0.37.0 (2025-10-07)​

warning

To upgrade to this version, you will need to update your SKE Operator to v0.18.1 or later.

Features​

  • The Pipeline Adapter image, as a standalone image, is now deprecated. The pipeline-adapter binary is not included in the SKE Platform image.

v0.36.0 (2025-10-01)​

Features​

  • Added support for pausing reconciliation for resource requests
  • Surface writer errors in destination status & events

v0.35.0 (2025-09-16)​

Features​

  • Added support for running workflows in a specific namespace regardless of where resource requests are created, as documented here.

v0.34.0 (2025-08-28)​

Fixes​

  • Fixed a bug where empty work status conditions would cause errors.
  • Improved handling of VersionID cache to prevent status update failures.

Security Fixes​

  • Updated to include latest security updates.

v0.33.0 (2025-08-11)​

Features​

  • Kratix default containers that's part of any configure workflow now have resource requests and limits set

v0.32.0 (2025-07-30)​

Features​

  • Added support for multiple HealthRecords in a HealthStatus field, as documented here

Security Fixes​

  • Updated to include latest security updates.

v0.31.0 (2025-07-15)​

Features​

  • Pipeline resource limits and request can now be configured per container.
  • Failing to clone a Git State Store will no longer trigger an error. Instead, the error will be logged and Kratix will try again after a short period.

Security Fixes​

  • Updated to include latest security updates.

v0.30.0 (2025-07-10)​

Features​

  • Introduce new status.workflows, status.workflowsSucceeded, and status.workflowsFailed fields for Promises and Resource Requests.

Fixes​

  • Fix an issue where workgroupIDs were not being correctly interpolated into events.

Security Fixes​

  • Updated to include latest security updates

v0.29.0 (2025-06-27)​

Features​

Fixes​

  • Kratix will not write the kratix-write-probe.txt file when a State Store is registered. Permissions and connection to the State Store will be checked in other ways.

Security Fixes​

  • Updated to include the latest security updates

v0.28.0 (2025-06-16)​

Features​

  • Added support for configuring a backoff limit on workflow jobs.
  • Improved the Work and WorkPlacement status conditions and events to offer better observability.
  • Pipelines can now define node selectors and tolerations to control workload placement on specific nodes.
  • GitStateStore now supports SSH access with users other than git.

Security Fixes​

  • Updated to include the latest security updates

v0.27.0 (2025-05-06)​

Features​

  • Added additional container environment variables to Kratix workflows containers. Check the workflow reference for the complete list of available environment variables.

v0.26.0 (2025-04-29)​

Features​

  • This release introduces the Kratix Metrics Service which emits a default set of metrics detailing the Kratix Controller's performance as a whole. These can be collected via Prometheus-compatible scraping. Check the installation instructions for details about how you can configure metrics collection.

v0.25.0 (2025-04-25)​

Features​

  • The Default Reconciliation Interval is configurable via the Kratix Config

v0.24.0 (2025-04-15)​

Fixes​

  • Resource Requests workflows will now retrigger every 10hrs.

Security Fixes​

  • Updated to include latest security updates

v0.23.0 (2025-04-03)​

Features​

v0.22.0 (2025-03-25)​

Features​

v0.21.0 (2025-03-18)​

Features​

  • Support setting default image pull policy through kratix config.
  • Added a new filepath mode for Destinations: aggregatedYAML. When set to aggregatedYAML, all Works scheduled to the Destination will write to the same file in the State Store.

v0.20.0 (2025-03-11)​

Features​

  • Support manual reconciliation of a Promise or Resource Delete workflow.

Security Fixes​

  • Updated to include latest security updates

v0.19.0 (2025-03-04)​

Features​

Bug fixes​

  • Upgraded SKE core dependencies to fix Golang CVE from previous release.

v0.18.0 (2025-02-26)​

Features​

  • Introduces stricter validation of Promise Workflow Pipelines in the Promise webhook to ensure that a Job can be successfully generated from the Pipeline definition. Please note that as the validations now ensure that any specified fields are valid, you may be prevented from applying Promises that you were previously able to apply.
  • Support workload files being written to the root directory of a Destination. For a given Destination, when spec.filepath.mode is set to none and spec.path is not set, all Works scheduled will write to the root directory of this Destination.

Known issues​

There is a known Golang CVE associated with an indirect dependency of SKE core. SKE is not impacted by the vulnerability. We are waiting for an upstream dependency release to update in the next version.

v0.17.0 (2025-01-29)​

Features​

Bug fixes​

  • BucketStateStore can now delete files from GCS buckets.

Security Fixes​

  • Updated to include latest security updates

v0.16.0 (2024-01-14)​

  • Updated to include latest security updates

v0.15.0 (2024-01-08)​

  • Updated to include latest security updates

v0.14.0 (2024-12-27)​

  • Updated to include latest security updates

v0.13.0 (2024-12-17)​

Features​

  • Add new configuration, spec.cleanup: none | all, for Destinations. When set to all, all files in the State Store for that Destination will be deleted when the Destination itself is deleted. none is the default behaviour, where no files are deleted.

Security Fixes​

  • Updated to include latest security updates

v0.12.0 (2024-12-12)​

Security Fixes​

  • Updated to include latest security updates

v0.11.0 (2024-12-04)​

Bug Fixes​

  • Ensure canary documents respect destination file path mode. When filepath.mode for a given Destination is set to none, test documents are written to the root of the path, previously the files were written to nested sub-directories.

v0.10.0 (2024-11-27)​

Features​

  • Introduce the kratix.io/reconcile-resources label for Promises. When set to true on a promise, kratix will re-reconcile all resource requests for that Promise
  • Detail the status.lastSuccessfulConfigureWorkflowTime to state when configure workflows last ran successfully

Bug Fixes​

  • Prevent the deletion of Destination Selectors configmaps is deleted while a resource request's Job is still in flight

v0.9.0 (2024-11-12)​

Security Fixes​

  • Updated to include latest security updates

v0.8.0 (2024-11-05)​

Bug Fixes​

  • Prevent rolebindings for different resource requests in different namespaces from overriding each other.

v0.7.0 (2024-10-30)​

Features​

  • Breaking Change - Promise and Resource status condition PipelineCompleted is replaced by ConfigureWorkflowCompleted to reflect success of the entire Configure workflow, rather than success of a single pipeline.
    • You need to migrate usage of PipelineCompleted to ConfigureWorkflowCompleted after upgrading (e.g. in any automation which watches for this condition).
  • Add regular reconciliation for the Promise Configure workflow, rerunning at least every 10 hours.
  • Add support for configuring HTTP authorization for Promise Releases.

v0.6.0 (2024-10-01)​

Features​

  • Breaking Change - Compress the workload.content in Works and WorkPlacements to reduce their size
    • Due to the nature of this change, you may observe errors when existing Works and WorkPlacements are retrieved as they are expected to be compressed. To ensure existing Works and WorkPlacements are compressed as expected, re-run the pipelines for any deployed Promises and Resource Requests.
  • Security Updates

v0.5.0 (2024-09-26)​

Features​

v0.4.0 (2024-09-17)​

Features​

v0.3.0 (2024-08-20)​

Features​

v0.2.0 (2024-08-13)​

Features​

v0.1.0 (2024-08-02)​

Features​

  • OSS Kratix features pulled in
  • security updates