Skip to main content
Version: 0.7 (Next)

Konstruct 0.6.7

Released: July 2026

Highlights​

  • IaC modules are referenced at their source — the Crossplane Workspace for an IaC deployment now points directly at the registered module repository instead of a copy committed to your GitOps repository
  • GitOps catalog supports GitHub App connections — catalog operations now work when your platform authenticates to GitHub through a GitHub App
  • Fixed: workload cluster content deleted too early — a cluster's GitOps repository content is no longer removed before the cluster itself has actually been deleted

IaC modules are referenced at their source​

Deploying an IaC catalog item previously cloned the reference module repository, copied the module into your GitOps repository under terraform/{deployment-name}, committed the copy, and pointed the Crossplane Workspace at that copy. The copy froze the module at deploy time — fixes to the reference module never reached existing deployments — and every deployment added module files and commits to your GitOps repository.

The Workspace module source now references the module repository directly:

git::<repository>//<path>?ref=<branch>

The repository, path, and branch come from the catalog item's registration; when no branch is registered, main is used. Nothing is cloned or committed into your GitOps repository, and the module's lifecycle stays managed at its source — updating the module in its repository is enough for deployments that track that branch.

Deployments created on 0.6.7 or later use the direct source. Module copies committed under terraform/ by earlier releases are no longer created for new deployments.

GitOps catalog supports GitHub App connections​

The GitOps catalog now works on platforms that authenticate to GitHub through a GitHub App connection. Previously catalog operations only supported token-based git authentication; with 0.6.7 they work with either, so a GitHub App-connected platform gets the full catalog without falling back to a personal access token.

No configuration changes are needed — if your platform already uses a GitHub App connection, the catalog works after upgrading.

Fixed: workload cluster content deleted too early​

Deleting a workload cluster removed the cluster's content from the GitOps repository before the cluster itself had actually been deleted. Pulling that content out from under a deletion still in progress could interrupt it, leaving the deletion failed or the cluster orphaned.

Deletion now runs in the right order: the cluster is deleted first, and its GitOps repository content is removed only after the cluster is actually gone.

Upgrade notes​

Update the targetRevision in your platform team's Konstruct Argo CD Application manifest to 0.6.7:

spec:
  source:
    chart: konstruct
    repoURL: oci://europe-west2-docker.pkg.dev/civo-com/charts
    targetRevision: 0.6.7

Commit and push — Argo CD syncs the new version automatically. No manual migration steps are required.

  • Existing IaC deployments are unaffected. The direct module source applies to deployments created on 0.6.7 or later; deployments created earlier keep working from the copy they were deployed with.

What's next?​