Released: 2026-03-05
Adds spec.userAccess.roles[] and spec.registration metadata. Requires catalog-version annotation.
If spec.userAccess.roles or spec.registration is declared but the catalog-version annotation is missing or below 0.6.0, the builder ignores those blocks (roles and registration metadata are not registered in Koko). This is a silent failure — the service deploys but its roles/registration never appear in the Console.
catalog-info.yaml 0.6.0: spec.userAccess.roles and spec.registration
require the catalog-version annotation.
ADD to metadata.annotations:
insureco.io/catalog-version: "0.6.0"
Without this annotation, roles and registration metadata are silently
ignored and never registered in Koko.
0.6.0 also introduced auth.passport (JWT enrichment: branding, scopes, headless embed, allowedOrigins). Passport is parsed under spec.auth and is NOT gated by VERSION_RULES, but the reference doc recommends declaring catalog-version "0.6.0" when using it.
Roles and registration are registered in Koko as fire-and-forget steps on deploy (non-blocking) — a Koko outage will not fail the build, but the metadata will be missing until the next successful deploy.
Last updated: July 15, 2026