Version Compatibility Matrix

Last Updated: 2025-12-08 This document tracks all infrastructure component versions across deployment methods and provides upgrade guidance.

Last Updated: 2025-12-08

This document tracks all infrastructure component versions across deployment methods and provides upgrade guidance.

Current Versions

Application Dependencies

Component	Version	Source	Notes
LangGraph	0.6.10	requirements-pinned.txt	Latest stable
LangChain Core	0.3.79	requirements-pinned.txt	Latest stable
LiteLLM	1.52.3	requirements-pinned.txt	Multi-LLM support
MCP	1.1.2	requirements-pinned.txt	Model Context Protocol
FastAPI	0.119.0	requirements-pinned.txt	Web framework
Pydantic	2.12.0	requirements-pinned.txt	Data validation
OpenTelemetry SDK	1.37.0	requirements-pinned.txt	Observability

Infrastructure Components (Docker Compose)

Service	Image	Current Version	Previous Version	Updated
Authorization & Auth
OpenFGA	openfga/openfga	v1.10.2	v1.5.0	2025-10-14
Keycloak	ghcr.io/vishnu2kmohan/keycloak-optimized	26.4.2	26.4.0	2025-12-08
Databases
PostgreSQL	postgres	16-alpine	15-alpine	2025-10-14
Redis	redis	7-alpine	7-alpine	✓ Current
Observability (LGTM Stack)
Grafana Alloy	grafana/alloy	v1.9.0	N/A (new)	2025-12-08
Grafana Loki	grafana/loki	3.5.1	N/A (new)	2025-12-08
Grafana Mimir	grafana/mimir	2.16.1	N/A (new)	2025-12-08
Grafana Tempo	grafana/tempo	2.8.0	N/A (new)	2025-12-08
Grafana	grafana/grafana	11.5.1	10.2.3	2025-10-14
Legacy Observability (deprecated)
OpenTelemetry Collector	otel/opentelemetry-collector-contrib	0.137.0	0.91.0	2025-10-14
Jaeger	jaegertracing/all-in-one	1.74.0	1.53.0	2025-10-14
Prometheus	prom/prometheus	v3.2.1	v2.48.0	2025-10-14

Kubernetes Base Manifests

Component	Image	Current Version	Notes
Init Containers	busybox	1.36	Latest stable
Keycloak	ghcr.io/vishnu2kmohan/keycloak-optimized	26.4.2	Updated 2025-12-08 (GHCR optimized image)
Redis Session	redis	7-alpine	Current stable
PostgreSQL	postgres	16-alpine	New deployment
OpenFGA	openfga/openfga	v1.10.2	New deployment

Note: Keycloak now uses a pre-optimized GHCR image with --optimized mode, enabling readOnlyRootFilesystem: true for enhanced security. Health check endpoints are at /authn/health/* paths to match the KC_HTTP_RELATIVE_PATH=/authn configuration for Traefik gateway routing.

Helm Chart Dependencies

Chart	Repository	Version	App Version	Notes
OpenFGA	openfga.github.io	0.2.12	1.10.2	Updated 2025-10-14
PostgreSQL	charts.bitnami.com	16.6.2	16.x	Updated 2025-10-14
Redis	charts.bitnami.com	20.6.2	7.x	Updated 2025-10-14
Keycloak	charts.bitnami.com	24.2.2	26.x	Updated 2025-10-14

Upgrade Summary (2025-10-14)

Critical Updates

1. OpenFGA: v1.5.0 → v1.10.2 (5 minor versions)

   • Risk: Medium
   • Breaking Changes: None affecting our usage
   • Features Added: ReverseExpand improvements, performance optimizations
   • Action: Test authorization flows after upgrade

2. Keycloak: 23.0 → 26.4.0 (3 major versions)

   • Risk: High
   • Breaking Changes: Review Keycloak Upgrading Guide
   • Features Added: Passkeys, improved OAuth 2.0 support, federated client auth
   • Action: Review realm configurations, test SSO flows

3. OpenTelemetry Collector: 0.91.0 → 0.137.0 (46 versions!)

   • Risk: High
   • Breaking Changes: Multiple config schema changes
   • Action: Review otel-collector.yaml configuration compatibility

Major Updates

4. Jaeger: 1.53.0 → 1.74.0 (21 versions)

   • Risk: Medium
   • Features: Performance improvements, v2 architecture available
   • Action: Test trace visualization

5. PostgreSQL: 15-alpine → 16-alpine (1 major version)

   • Risk: Medium
   • Breaking Changes: Minor, mostly backward compatible
   • Action: Test database migrations, backup before upgrade

6. Prometheus: v2.48.0 → v3.2.1 (Major version bump!)

   • Risk: High
   • Breaking Changes: Review Prometheus 3.0 Migration Guide
   • Features: Native histograms, improved performance
   • Action: Test PromQL queries, review dashboard compatibility

7. Grafana: 10.2.3 → 11.5.1 (1 major version)

   • Risk: Medium
   • Features: Enhanced alerting, new visualizations
   • Action: Test dashboards, review plugin compatibility

New Components

8. PostgreSQL StatefulSet (New)

   • Now deployed as StatefulSet with persistent storage
   • Includes multi-database initialization script
   • Shared by OpenFGA and Keycloak

9. OpenFGA Kubernetes Deployment (New)

   • High-availability setup with 2 replicas
   • Uses PostgreSQL backend (previously memory only)
   • Proper health checks and resource limits

Breaking Changes

Keycloak 23.0 → 26.4.0

Potential Issues:

• Deprecated features from 23.x may be removed in 26.x
• Admin console UI changes
• Some REST API endpoints may have changed

Migration Steps:

1. Backup Keycloak database: kubectl exec -it postgres-0 -- pg_dump -U postgres keycloak > keycloak-backup.sql
2. Review release notes
3. Test authentication flows in staging environment
4. Update client configurations if needed

OpenTelemetry Collector 0.91.0 → 0.137.0

Configuration Changes:

• Review monitoring/otel-collector/otel-collector.yaml
• Some processor configurations may need updates
• New recommended practices for pipeline setup

Migration Steps:

1. Validate config: docker run otel/opentelemetry-collector-contrib:0.137.0 validate --config=/etc/otel-collector-config.yaml
2. Review changelog
3. Test metric export to Prometheus
4. Test trace export to Jaeger

Prometheus v2 → v3

Breaking Changes:

• Native histogram format changes
• Some PromQL functions updated
• TSDB format changes (backward compatible for reads)

Migration Steps:

1. Review dashboards for deprecated PromQL functions
2. Test alert rules compatibility
3. Backup Prometheus data: kubectl cp prometheus-xxx:/prometheus ./prometheus-backup
4. Consider running v2 and v3 in parallel initially

Compatibility Testing Checklist

Before Deploying

• Review all release notes and changelogs
• Backup all databases (PostgreSQL, Redis if persistent)
• Export Keycloak realm configurations
• Export Grafana dashboards
• Document current OpenFGA authorization model

After Deploying (Docker Compose)

## Start all services
docker compose up -d

## Check service health
docker compose ps
docker compose logs openfga
docker compose logs keycloak
docker compose logs otel-collector
docker compose logs prometheus
docker compose logs jaeger
docker compose logs grafana

## Test OpenFGA
curl http://localhost:8080/healthz

## Test Keycloak
curl http://localhost:8180/health/ready

## Test OTEL Collector
curl http://localhost:13133

## Test Prometheus
curl http://localhost:9090/-/healthy

## Test Jaeger
curl http://localhost:16686/api/services

## Test Grafana
curl http://localhost:3000/api/health

After Deploying (Kubernetes)

## Deploy with Kustomize
kubectl apply -k deployments/kustomize/overlays/staging

## Check all pods
kubectl get pods -n mcp-server-langgraph

## Check service endpoints
kubectl get svc -n mcp-server-langgraph

## Test PostgreSQL
kubectl exec -it postgres-0 -n mcp-server-langgraph -- psql -U postgres -c "SELECT version();"

## Test OpenFGA
kubectl run curl-test --rm -it --restart=Never --image=curlimages/curl -- \
  curl -f http://openfga.mcp-server-langgraph:8080/healthz

## Test Keycloak
kubectl run curl-test --rm -it --restart=Never --image=curlimages/curl -- \
  curl -f http://keycloak.mcp-server-langgraph:8080/health/ready

## Check logs
kubectl logs -n mcp-server-langgraph -l app=mcp-server-langgraph --tail=50
kubectl logs -n mcp-server-langgraph -l app=openfga --tail=50
kubectl logs -n mcp-server-langgraph -l app=keycloak --tail=50

Integration Tests

• Test user authentication (Keycloak)
• Test authorization checks (OpenFGA)
• Test session management (Redis)
• Test LLM API calls with tracing
• Verify traces in Jaeger UI
• Verify metrics in Prometheus
• Verify dashboards in Grafana
• Test health check endpoints
• Verify database connectivity
• Test graceful shutdown/restart

Version Update Policy

Semantic Versioning

We follow this upgrade cadence:

• Patch versions (x.y.Z): Apply immediately in development, test, then production
• Minor versions (x.Y.z): Test in staging for 1 week before production
• Major versions (X.y.z): Extended testing (2-4 weeks), create rollback plan

Update Frequency

• Security patches: Within 48 hours
• Minor updates: Monthly
• Major updates: Quarterly or as needed
• Dependency updates: Bi-weekly (automated via Dependabot)

Rollback Procedures

Docker Compose Rollback

## Stop current services
docker compose down

## Restore previous docker-compose.yml from git
git checkout HEAD~1 docker-compose.yml

## Restore data if needed
docker volume restore prometheus-data
docker volume restore grafana-data
docker volume restore postgres-data

## Start previous versions
docker compose up -d

Kubernetes Rollback

## Rollback specific deployment
kubectl rollout undo deployment/mcp-server-langgraph -n mcp-server-langgraph
kubectl rollout undo deployment/keycloak -n mcp-server-langgraph
kubectl rollout undo deployment/openfga -n mcp-server-langgraph

## Check rollout status
kubectl rollout status deployment/mcp-server-langgraph -n mcp-server-langgraph

## Helm rollback (if using Helm)
helm rollback mcp-server-langgraph 1 --namespace mcp-server-langgraph

References

• OpenFGA Releases
• Keycloak Releases
• OpenTelemetry Collector Releases
• Jaeger Releases
• PostgreSQL Release Notes
• Prometheus Releases
• Grafana Releases

Support Matrix

Component	Minimum Version	Recommended	Maximum Tested
Kubernetes	1.25	1.28+	1.31
Helm	3.0	3.12+	3.16
Docker	20.10	24.0+	28.2
Python	3.10	3.12	3.12

Known Issues

Keycloak 26.4.0

• Some older themes may need updates
• Check realm import/export compatibility
• Review custom extensions for API changes

OpenTelemetry Collector 0.137.0

• Configuration validation may be stricter
• Some deprecated processors removed
• Review pipeline configurations for new best practices

Prometheus 3.2.1

• Native histograms enabled by default (can disable)
• TSDB compaction behavior changed
• Some legacy recording rules may need updates

Change Log

Date	Component	From	To	Notes
2025-12-08	LGTM Stack	N/A	Added	Migrated to Grafana LGTM (Loki, Grafana, Tempo, Mimir)
2025-12-08	Grafana Alloy	N/A	v1.9.0	Replaces OTEL Collector + Promtail
2025-12-08	Grafana Loki	N/A	3.5.1	Log aggregation (new)
2025-12-08	Grafana Mimir	N/A	2.16.1	Replaces Prometheus
2025-12-08	Grafana Tempo	N/A	2.8.0	Replaces Jaeger
2025-12-08	Keycloak	26.4.0	26.4.2	GHCR optimized image, readOnlyRootFilesystem: true
2025-10-14	OpenFGA	v1.5.0	v1.10.2	Added PostgreSQL backend
2025-10-14	Keycloak	23.0	26.4.0	Major upgrade, test SSO
2025-10-14	OTEL Collector	0.91.0	0.137.0	Review config schema (deprecated - use Alloy)
2025-10-14	Jaeger	1.53.0	1.74.0	Performance improvements (deprecated - use Tempo)
2025-10-14	PostgreSQL	15-alpine	16-alpine	Added StatefulSet
2025-10-14	Prometheus	v2.48.0	v3.2.1	Major upgrade, test queries (deprecated - use Mimir)
2025-10-14	Grafana	10.2.3	11.5.1	Test dashboard compatibility
2025-10-14	Helm Charts	Various	Updated	All Bitnami charts updated