Clever Cloud Documentation – Changelog

Clever Tools 4.9: full Kubernetes lifecycle from the CLI

Tue, 28 Apr 2026 00:00:00 +0000

Clever Tools 4.9.0 is available. This release significantly extends the clever k8s command set to cover the full lifecycle of Clever Kubernetes Engine, as it’s now in public Beta. It also adds Swagger UI access to Otoroshi services and ships smaller quality-of-life improvements.

Kubernetes lifecycle management

The clever k8s command set now covers cluster creation with detailed topology, ongoing operations, node group management, version upgrades and quota visibility. The create command accepts --topology, --flavor, --cluster-version, --replication-factor, --autoscaling, --persistent-storage and --nodegroup to provision a cluster matching your needs in a single command. The get output now reports topology, features, node groups and load balancers.

# Enable access to the k8s command set
clever features enable k8s

# Create a cluster with a control plane topology, version and initial node group
clever k8s create my-cluster \
 --topology dedicated_compute --flavor S --replication-factor 3 \
 --cluster-version 1.36 --autoscaling \
 --nodegroup XS:3 --persistent-storage

# Inspect the cluster (topology, features, node groups, load balancers)
clever k8s get my-cluster

# Update metadata or features
clever k8s update my-cluster --description "Production cluster" --tag env:prod,team:platform

Node groups have their own subcommands to list, create, get, update and delete, with autoscaling bounds and arbitrary tags:

# Create an autoscaling node group
clever k8s nodegroups create my-cluster workers XS:3 --autoscaling --min 3 --max 10

# List node groups attached to a cluster
clever k8s nodegroups list my-cluster

# Update bounds or target count
clever k8s nodegroups update my-cluster workers --count 5

# Delete a node group
clever k8s nodegroups delete my-cluster workers --yes

Version management is now first-class. The version subcommand reports the installed version and offers to upgrade to the latest available release when the cluster is outdated. The version update subcommand upgrades a cluster to an explicit target version when you prefer to drive the upgrade yourself:

# Check the current version and prompt for an upgrade if available
clever k8s version my-cluster

# Upgrade the cluster to a target version
clever k8s version update my-cluster --target 1.36

Two more commands round out the set: clever k8s activity shows recent deployment events of a cluster, and clever k8s quota reports the Kubernetes quota, current usage and remaining capacity for an organisation during public Beta.

clever k8s activity my-cluster --limit 100
clever k8s quota

Once your cluster reaches the ACTIVE state, retrieve its kubeconfig and drive it with kubectl like any other Kubernetes cluster. With --persistent-storage enabled at creation time, a default Ceph RBD StorageClass is provisioned on the cluster, so any PersistentVolumeClaim you create is bound automatically:

# Generate the kubeconfig and set it as your current context
clever k8s get-kubeconfig my-cluster > ~/.kube/config

# Inspect cluster nodes and the persistent storage driver
kubectl get nodes
kubectl get csidrivers
kubectl get storageclasses

# Deploy a workload and let it consume the default StorageClass
kubectl create deployment nginx --image=nginx
kubectl expose deployment nginx --port=80 --type=LoadBalancer

Learn more about Clever Kubernetes Engine

Otoroshi Swagger UI

You can now open the Otoroshi Swagger UI directly from the CLI with a new clever otoroshi open swaggerui subcommand. The clever otoroshi get command also exposes the Swagger URL alongside the other endpoints, so you can hand it over to teammates or automation without opening the Console first.

# Open the Swagger UI of an Otoroshi service in your browser
clever otoroshi open swaggerui my-otoroshi

# Get service details, including the Swagger URL
clever otoroshi get my-otoroshi

How to upgrade

To upgrade Clever Tools, use your favourite package manager. For example with npm:

npm update -g clever-tools
clever version

Images update: Ruby 4.0.3, Git 2.54, Yarn 4.14

Tue, 28 Apr 2026 00:00:00 +0000

We updated all our images, except PHP. Deployment is in progress for all our users.

Common:
- Linux kernel 6.19.14
- CA certificates 20260223
- Git 2.54.0
Node.js & Bun:
- Yarn 4.14.1
Ruby:
- Update to 3.2.11
- Update to 3.4.9
- Update to 4.0.3

Kubernetes 1.36 is available

Fri, 24 Apr 2026 00:00:00 +0000

We added support for Kubernetes 1.36.0 “Haru”, which ships multiple enhancements. Fine-grained kubelet API authorization and faster SELinux labelling of volumes reach GA, while Workload Aware Scheduling and DRA device taints and tolerations move to beta. The long-deprecated gitRepo volume plugin is permanently removed, and Service.spec.externalIPs enters deprecation ahead of its removal in v1.43. Kubernetes 1.36.0 can be selected for new deployments; v1.35 remains the default for now. Migration of existing clusters will be available soon.

Decommissioning Logs API v2 endpoints

Thu, 23 Apr 2026 00:00:00 +0000

Clever Cloud is decommissioning the legacy Logs API v2 endpoints on May 23rd, 2026. The v4 API has been available for some time and provides a more reliable and consistent interface to access your application logs. If you still rely on v2 endpoints to fetch logs, migrate to the v4 API as soon as possible.

May 23rd, 2026: v2 logs endpoints will be permanently disabled. Any integration still using v2 will stop receiving logs.

How to migrate

The v4 Logs API exposes the same capabilities with an improved interface. Update your HTTP calls to target the v4 endpoints documented in the Logs section of the v4 API reference. Authentication and query parameters follow the same conventions as the rest of the v4 API.

After migrating, your integration can continue fetching logs via v4.

If you have any questions or need help with the migration, contact our support team.

Logs API v4 reference

Otoroshi 17.15 brings agents with tools and memory, OAuth2 token exchange, PluginPresets and requires Java 25

Thu, 23 Apr 2026 00:00:00 +0000

Otoroshi v17.15.1 is available. It introduces an OAuth2 token exchange plugin implementing RFC 8693 for secure service-to-service API communication, a new PluginPreset kind to package and reuse plugin configurations, a MandatoryConsumerPreset plugin and a workflow-based authentication module. The OAuth2Caller plugin can now rely on an authentication module for the client credentials flow, and $2b$ / $2y$ Bcrypt hashes are now accepted.

A redesigned admin interface and manual

The admin interface has been redesigned with refreshed themes, a new home page, a reworked API editor with sticky actions and form views capped at 1000 px to improve readability. The UI also now only displays entities a user is actually authorized to see. The full manual has been reworked as well, with ditaa schemas replaced by mermaid ones, and the OpenAPI specification and Swagger UI can be protected behind an optional access secret.

API management, data exporters and plugin development

API management gains direct subscription to a plan and a new consistency service. The PostgreSQL data exporter now supports retention and plugin developers can rely on a reusable stateful clients internal API. Several fixes address a race condition in data exporters loading, legacy audit event layouts, body consumption handling and the OAuth2Caller password grant type.

LLM extension: agents, memory and Kreuzberg

This release includes LLM extension 0.0.75, which significantly expands agent capabilities with built-in tools (system_exec, file_read, file_write, http_call), a per-session working memory, autonomous persistent memory on Redis and PostgreSQL and a new agent OpenAI proxy plugin. Embedding stores and persistent memories now support many backends (PostgreSQL, Redis, Elasticsearch, OpenSearch, Qdrant, Weaviate, Pinecone, ChromaDB), a semantic cache on Redis with a custom embedding model and MCP audit events. The Anthropic provider exposes version and beta settings, and Kreuzberg is now available as a content-to-markdown and OCR backend.

Java 25 is now required

Otoroshi 17.15 requires Java 25 to load the Kreuzberg content-to-markdown and OCR backend. Starting with this release, all new Otoroshi add-ons are created with CC_JAVA_VERSION=25, and any update to Otoroshi 17.15 automatically switches the underlying Java application to Java 25. If you prefer to handle this manually, you can set CC_JAVA_VERSION to 25 on the Java application backing your Otoroshi add-on and rebuild it before updating Otoroshi itself.

You can update through your add-on dashboard in the Clever Cloud Console. You can also set CC_OTOROSHI_VERSION of the underlying Java application to v17.15.1_1776891995 and rebuild it, or use Clever Tools:

clever features enable operators

clever otoroshi version check yourOtoroshiNameOrId
clever otoroshi version update yourOtoroshiNameOrId
clever otoroshi version update yourOtoroshiNameOrId v17.15.1_1776891995

Learn more about Otoroshi with LLM on Clever Cloud

Kubernetes 1.36 is available

Wed, 22 Apr 2026 00:00:00 +0000

Kubernetes release 1.36.0 is available on Clever Kubernetes Engine. Headline changes include faster SELinux volume labeling promoted to GA, external signing of ServiceAccount tokens through cloud KMS or HSMs, and Dynamic Resource Allocation gaining taints and tolerations for physical devices. The gitRepo volume driver — deprecated since v1.11 — has been permanently removed; migrate to init containers or git-sync tools. Select 1.36 explicitly at creation with --cluster-version 1.36; the default for new clusters remains 1.35. Migration of existing clusters will be available soon.

Matomo 5.9 is available with CNIL compliance automation and segment management

Wed, 22 Apr 2026 00:00:00 +0000

Our Matomo add-on has been updated to version 5.9.0 which is now used by default. You can enable “Enforce compliance” to automatically apply CNIL-compliant settings to your sites, without manual configuration. A dedicated page lets you create, edit and organise all your segments in one place, accessible from the Visitors menu and segment selector. The updated calendar adds new date presets for frequently used reporting periods.

This release also brings security enhancements such as multi-session sign-out, the ability to export a dashboard to scheduled reports, and various bug fixes across segment handling, visitor mapping and database optimization. No major database upgrade is required.

You can deploy this release from our Console or Clever Tools. Existing customers’ add-ons are already up-to-date.

API update: rotate GitHub webhook secrets for your applications

Tue, 21 Apr 2026 00:00:00 +0000

The Clever Cloud API now exposes a dedicated endpoint to rotate the GitHub webhook secret of an application linked to a GitHub repository.

The rotation applies to the target application and its siblings sharing the same webhook, so a single call keeps every linked deployment in sync with the new secret. Until now, rotating a webhook secret meant creating a new application, which was cumbersome and error-prone. The new endpoint replaces that workflow with a single authenticated call.

How to use it

You can call this endpoint through any authenticated request to the Clever Cloud API, or through the clever curl command of Clever Tools, which signs the request using the active user profile:

clever curl -X POST https://api.clever-cloud.com/v2/organisations/{orgId}/applications/{appId}/github-webhook/secret

The response confirms the rotation. Any existing GitHub push event already in flight keeps working with the previous secret until GitHub picks up the new configuration; subsequent deliveries use the rotated secret automatically.

Refer to the v2 API reference for the full request and response schema.

Images update: Node.js 24.15, Clever Tools 4.8, nginx 1.30, FrankenPHP 1.12.2

Tue, 21 Apr 2026 00:00:00 +0000

We updated all our images, except PHP. Deployment is in progress for all our users.

Common:
- Linux kernel 6.19.13
- Chromium 147.0.7727.101
- Clever Tools 4.8.0
- htop 3.5.0
- nano 9.0
- nginx 1.30.0
- OpenSSH 10.3p1
- OpenSSL 3.5.6
- SQLite 3.53.0
FrankenPHP:
- Update to 1.12.2 (with CC_PHP_VERSION=8.5)
- Symfony CLI 5.17.1
Go:
- Update to 1.26.2
Node.js & Bun:
- Update to 24.15.0 (npm 11.12.1)
- Bun 1.3.12
Python:
- Update to 3.13.13
- Update to 3.14.4
- uv 0.11.7
Ruby:
- Update to 3.2.11

Matomo 5.8 is available with AI chatbot traffic tracking

Wed, 15 Apr 2026 00:00:00 +0000

The Matomo add-on on Clever Cloud has been updated to version 5.8.0, which is now used by default. This release introduces a new AI Assistants menu with dedicated reports to track AI chatbot traffic separately from human visits, covering platforms such as Cloudflare, Amazon CloudFront and WordPress. The All Websites dashboard now shows a “Total AI Chatbots Requests” metric, and “Total Hits” combines human visits with AI chatbot requests. This version also improves scheduled reports formatting, CSV/TSV export options and archiving performance.

You can deploy this release from the Clever Cloud Console or Clever Tools. Existing customers’ add-ons are already up-to-date.

JS Client 12.1: new features for Keycloak, Matomo, Metabase and Otoroshi

Mon, 13 Apr 2026 00:00:00 +0000

Clever Cloud JS client 12.1 is available. This release extends the new client structure introduced in v12 with dedicated commands for four managed add-ons: Keycloak, Matomo, Metabase and Otoroshi.

New add-on commands

You can now manage the lifecycle of these services directly from the client. For Matomo, the release adds RebootMatomoCommand and RebuildMatomoCommand to reboot the add-on or rebuild it without cache, and exposes the associated Materia KV identifier through resource.kvId in the GetMatomoInfoCommand output. Keycloak, Metabase and Otoroshi each get their own dedicated command set on the same model.

import { CcApiClient } from "@clevercloud/client/cc-api-client.js";
import { GetMatomoInfoCommand } from "@clevercloud/client/cc-api-commands/matomo/get-matomo-info-command.js";

const client = new CcApiClient({
 authMethod: {
 type: 'api-token',
 apiToken: process.env.CLEVER_API_TOKEN,
 },
});

const info = await client.send(new GetMatomoInfoCommand({ id: 'addon_xxxxxxxx' }));
console.log(info.resource.kvId);

Bug fixes

Events: the events client now uses ws:// when the API host is served over http://, restoring support for local development setups.
Matomo: GetMatomoInfoCommand no longer sorts available versions, preserving the order returned by the API.

How to upgrade

Add or update @clevercloud/client in your project:

npm install @clevercloud/client@12.1.0

Refer to the new client documentation for usage details and share your feedback on the GitHub repository.

Keycloak 26.5.7 (security update)

Mon, 13 Apr 2026 00:00:00 +0000

The release 26.5.7 of Keycloak is available on Clever Cloud. It addresses seven security vulnerabilities: CVE-2025-14083, CVE-2026-1002, CVE-2026-3429, CVE-2026-4634, CVE-2026-4636, CVE-2026-3872 and CVE-2026-4282.

You can update through the add-on’s dashboard in the Clever Cloud Console. You can also set CC_KEYCLOAK_VERSION of the underlying Java application to 26.5.7 and rebuild it, or use Clever Tools:

clever features enable operators

clever keycloak version check yourKeycloakNameOrId
clever keycloak version update yourKeycloakNameOrId
clever keycloak version update yourKeycloakNameOrId 26.5.7

Learn more about Keycloak on Clever Cloud

Clever Tools 4.8: OAuth consumers and drains for add-ons

Thu, 09 Apr 2026 00:00:00 +0000

Clever Tools 4.8.0 is available. This release adds a new oauth-consumers command set to manage OAuth consumers from the CLI and extends clever drain to operate on add-ons.

OAuth consumers management

You can now create and manage OAuth consumers directly from the CLI. The new clever oauth-consumers command set covers the full lifecycle: list, create, get details, update, open in the Console and delete. Consumers can be referenced by name (when unambiguous) or by their consumer key, and the get command supports a --with-secret flag when you need to retrieve the consumer secret for application configuration.

# List OAuth consumers
clever oauth-consumers list

# Create a new consumer with rights and callback URL
clever oauth-consumers create my-app \
 --description "My application" \
 --url https://my-app.example.com \
 --base-url https://my-app.example.com/oauth/callback \
 --rights access-personal-information,access-organisations

# Get details, including the secret
clever oauth-consumers get my-app --with-secret

# Update an existing consumer
clever oauth-consumers update my-app --description "Updated description"

# Open the consumer page in the Console
clever oauth-consumers open my-app

# Delete a consumer
clever oauth-consumers delete my-app --yes

These commands target the current profile’s organisation by default. The create command accepts the --org option to specify the consumer’s organisation. For other commands, the consumer key is enough to identify the resource.

Learn more about OAuth consumers

Drains on add-ons

The clever drain commands now accept an --addon option to manage log drains on add-ons, in addition to applications. All drain subcommands (create, enable, disable, get, remove and the top-level listing) accept this new option, which resolves either an add-on ID or its real ID. The --addon option is mutually exclusive with --app and --alias.

# List drains on an add-on
clever drain --addon postgresql_xxxxxxxx

# Create a drain on an add-on
clever drain create --addon postgresql_xxxxxxxx raw-http https://logs.example.com

# Get a specific drain
clever drain get --addon postgresql_xxxxxxxx <DRAIN-ID>

# Remove a drain
clever drain remove --addon postgresql_xxxxxxxx <DRAIN-ID>

Bug fixes

Network groups commands have been adapted to the @clevercloud/client v12 API change for peer configuration, restoring proper peer handling.

How to upgrade

To upgrade Clever Tools, use your favourite package manager. For example with npm:

npm update -g clever-tools
clever version

Images update: mdBook 0.5, Static Web Server 2.42, OAuth2Proxy 7.15.1, Tailscale 1.96.3

Tue, 07 Apr 2026 00:00:00 +0000

We updated all our images, except PHP. Deployment is in progress for all our users.

Common:
- Linux kernel 6.19.11
- nginx 1.28.3
- OAuth2Proxy 7.15.1
- Tailscale 1.96.3
Python:
- uv 0.11.2
Ruby:
- Update to 3.3.11
- Update to 4.0.2
Static:
- mdBook 0.5.2
- Static Web Server 2.42.0
V (Vlang):
- Update to 0.5.1

mdBook 0.5

mdBook 0.5 introduces some breaking changes. If your configuration is not yet compatible, follow the migration guide.

Terraform provider 1.11.0

Thu, 02 Apr 2026 00:00:00 +0000

The 1.11.0 release of the Clever Cloud Terraform provider is available. It adds new resources (add-on provider, OAuth consumer, vulnerability scanner), improved validation for environment variables, add-on options and plan slugs, exponential backoff retry for 503 errors, and multiple bug fixes.

Learn more about Clever Cloud Terraform provider

MySQL 8.0.45 and 8.4.8 are available

Tue, 31 Mar 2026 00:00:00 +0000

We updated MySQL images for releases 8.4 (8.4.8-8) and 8.0 (8.0.45-36). They’re now available for add-ons creation and migration.

Invoices now group services by sub-organisation

Mon, 30 Mar 2026 00:00:00 +0000

Some of our customers operate organisations on behalf of third parties, such as business providers, and manage sub-organisations for them. Starting with the next billing cycle, invoices will be improved for these use cases:

Billed services will be grouped by sub-organisation within the invoice
A per sub-organisation summary will be included at the beginning of the invoice, providing a clear overview of costs

This makes it easier to track and allocate costs across sub-organisations, without changing the existing detailed breakdown.

Current invoice detail on the left, new per sub-organisation summary on the right

Materia KV: new hash, string and TTL commands

Mon, 30 Mar 2026 00:00:00 +0000

Materia KV adds six new commands to its Redis-compatible layer, expanding hash, string and time to live (TTL) management capabilities:

HEXISTS: check if a field exists in a hash
HSETNX: set a hash field only if it doesn’t already exist
HINCRBY: increment the integer value of a hash field
GETDEL: atomically get a string value and delete its key
EXPIREAT: set key expiration using an absolute Unix timestamp in seconds
PEXPIREAT: set key expiration using an absolute Unix timestamp in milliseconds

These commands are available for new and already deployed add-ons, with no additional configuration.

This update also brings reliability improvements to the underlying storage layer. The SCAN, HSCAN, SSCAN and KEYS commands now produce more accurate results thanks to fixes in the scan boundary logic.

Transactions now enforce retry limits of 5 retries with a 5-second timeout, preventing cascading retries from overwhelming the cluster under heavy contention. Previously, transactions could retry indefinitely on conflict.

Otoroshi 17.14 enhances remote catalogs, adds PostgreSQL data export and MCP OAuth2 enforcement

Mon, 30 Mar 2026 00:00:00 +0000

Otoroshi v17.14 is available with significant enhancements to remote catalogs. They now support organisation scanning, additional GitHub-like providers, pattern-based and YAML-formatted descriptor files, as well as Kubernetes-like manifests. This release also introduces PostgreSQL as a data exporter target and adds Redis Sentinel password support with the Lettuce driver.

New mandatory flags are available on client certificate plugins and OIDC JWT verification for APIs, offering finer control over authentication requirements. The expression language has been improved with path-based read support for deep structures such as user profiles, with complex structure stringification. Several fixes address tunnel handler plugin visibility, Kafka data exporter host validation, and the “Override Location header” plugin behaviour.

This release includes LLM extension 0.0.74, adding over 40 new providers through an enhanced generic OpenAI client (including Minimax, Morph, Cloud Temple and many others). MCP exposition has been significantly strengthened with all missing methods now implemented (resources, templates, prompts), fine-grained per-tool scoped authorisations, and OAuth2 enforcement with a new MCP Protected Resource Metadata document plugin. This version also introduces an OpenAI Responses proxy plugin and a new OpenAI API aggregator plugin that unifies chat completions, responses, Anthropic /messages and context serving into a single endpoint.

You can update through add-on’s dashboard in the Clever Cloud Console. You can also set CC_OTOROSHI_VERSION of the underlying Java application to v17.14.0_1774627527 and rebuild it, or use Clever Tools:

clever features enable operators

clever otoroshi version check yourOtoroshiNameOrId
clever otoroshi version update yourOtoroshiNameOrId
clever otoroshi version update yourOtoroshiNameOrId v17.14.0_1774627527

Learn more about Otoroshi with LLM on Clever Cloud

Images update: FrankenPHP 1.12, Gradle 9.4, Rust 1.94, set PHP & Composer versions in all runtimes

Wed, 25 Mar 2026 00:00:00 +0000

We updated all our images, except PHP. Deployment is in progress for all our users.

Common:
- Linux kernel 6.19.7
- Anubis 1.25.0
- Chromium 146.0.7680.153
- Clever Tools 4.7.1
- cURL 8.19.0
- FFmpeg 8.1
- Ghostscript 10.07
- OAuth2Proxy 7.14.3
- Poppler 26.03
- SQLite 3.52.0
- Varnish 8.0.1
- Vim 9.2.0096
Elixir:
- Erlang 26.2.5.18
- Erlang 27.3.4.9
- Erlang 28.4.1
FrankenPHP:
- Update to 1.12.1 with PHP 8.5.4 (with CC_PHP_VERSION=8.5)
Go:
- Update to 1.26.1
Java:
- Gradle 9.4.1
- Maven 3.9.14
Node.js & Bun:
- Update to 24.14.1 (npm 11.11.0)
- Bun 1.3.11
- Yarn 4.13.0
Python:
- Update to 3.10.20
- Update to 3.11.15
- Update to 3.12.13
- uv 0.10.12
Ruby:
- Update to 3.4.9
Rust:
- Update to 1.94.0
- Rustup 1.29.0
Static:
- Caddy 2.11.2

PHP & Composer version

You can now set CC_PHP_VERSION and CC_COMPOSER_VERSION in any runtime. We also fixed a bug that prevented to use another Composer version than the LTS with FrankenPHP.

Log drains collection

We removed old log drains stack, except for application still using it.

Learn more about log drains old stack deprecation

Keycloak 26.5.6 (security update)

Mon, 23 Mar 2026 00:00:00 +0000

The release 26.5.6 of Keycloak is available on Clever Cloud. It addresses eight security vulnerabilities: CVE-2026-1180, CVE-2026-1035, CVE-2025-14777, CVE-2025-14082, CVE-2026-3121, CVE-2026-3190, CVE-2026-3911 and CVE-2026-2366.

You can update through the add-on’s dashboard in the Clever Cloud Console. You can also set CC_KEYCLOAK_VERSION of the underlying Java application to 26.5.6 and rebuild it, or use Clever Tools:

clever features enable operators

clever keycloak version check yourKeycloakNameOrId
clever keycloak version update yourKeycloakNameOrId
clever keycloak version update yourKeycloakNameOrId 26.5.6

Learn more about Keycloak on Clever Cloud

Metabase 59 is now used by default

Mon, 23 Mar 2026 00:00:00 +0000

The x.59 branch of Metabase is available on Clever Cloud since earlier this month. It’s now the default branch deployed with the release 0.59.3. It means that:

All new add-ons will use it
All add-ons using default configuration (community-latest) will use it after a rebuild

You can update through the add-on’s dashboard in the Clever Cloud Console. You can also set CC_METABASE_VERSION of the underlying Java application to 0.59 or 1.59 for the enterprise edition (EE) and rebuild it, or use Clever Tools:

clever features enable operators

clever metabase version check yourMetabaseNameOrId
clever metabase version update yourMetabaseNameOrId
clever metabase version update yourMetabaseNameOrId 0.59

Drains legacy stack deprecation

Thu, 19 Mar 2026 00:00:00 +0000

For the past few months, Clever Cloud has provided a new drain stack and a v4 API that is more reliable and provides better monitoring. It’s available through Clever Tools since release 4.4.0. If you still use the legacy drains implementation, we encourage you to migrate to the new stack as soon as possible.

The legacy drains will be disabled on June 1st, 2026. In the meantime, we will make some changes to prepare for the migration and help you transition smoothly:

March 19th, 2026: we added CC_PREVENT_LEGACY_LOGSCOLLECTION=false environment variable on applications linked to a legacy active drain
Starting with the next image release, if not set to false, we will consider this environment variable as true and only push logs of applications with a drain to the new drain stack
June 1st, 2026: legacy drains will be disabled and all applications will need to use the new drain stack to receive logs

How to migrate

To migrate to the new drain stack, just create a new drain with Clever Tools, then remove CC_PREVENT_LEGACY_LOGSCOLLECTION=false from your application environment variables and restart it. The new drain should start receiving logs immediately.

If you have any questions or if you need help with the migration, contact our support team.

Learn more about Clever Tools drain command

Clever Tools 4.7: SSH remote commands, improved drains and backup downloads

Wed, 11 Mar 2026 00:00:00 +0000

Clever Tools 4.7.0 is available. This release enhances SSH with remote command execution and interactive instance selection, improves drain monitoring and fixes database backup downloads.

SSH remote command execution

You can now execute a single command on a running instance with the new --command (or -c) option. The command runs in a login shell and exits immediately, making it convenient for quick diagnostics, scripting or automation.

# List application files
clever ssh -c 'ls -lah $APP_HOME'

# Inspect application environment variables
clever ssh -c "env | sort"

# Read application logs
clever ssh -c "journalctl -u bas-deploy.service --no-pager -n 50"

This also enables AI coding assistants (Claude Code, Codex, Cursor, OpenCode…) to inspect the state of a running instance, analyse configuration files, check logs or troubleshoot issues on your behalf.

Interactive instance selection

When multiple instances are running, clever ssh now displays an interactive selection prompt instead of a numbered list. This provides a more intuitive experience when choosing which instance to connect to.

clever ssh
> ? Select an instance:
> ❯ Sleepy Ponita - Instance 0 - UP (11281f38-...)
> Tense Caterpie - Instance 1 - UP (b10d19d9-...)

Improved drain monitoring

The clever drain and clever drain get commands now display message rates and throughput with dynamic units (messages/hour, messages/minute, messages/second, KiB/second, MiB/second) that adapt to the actual values. Retry information is also shown, including attempt count, last and next attempt timestamps, helping you troubleshoot delivery issues more effectively.

Bug fixes

Database backup downloads now use Node.js stream pipelines, fixing backpressure issues that could cause incomplete downloads on large backups.
Detached HEAD deployments are now handled correctly when using the system Git feature, fixing failures that occurred when deploying from a detached HEAD state.

How to upgrade

To upgrade Clever Tools, use your favourite package manager. For example with npm:

npm update -g clever-tools
clever version

PostgreSQL 18.3, 17.9, 16.13, 15.17, 14.22 are available

Mon, 09 Mar 2026 00:00:00 +0000

New PostgreSQL versions are available for new add-ons and migration:

PostgreSQL 18.3
PostgreSQL 17.9
PostgreSQL 16.13
PostgreSQL 15.17
PostgreSQL 14.22

These versions include multiple bug fixes and improvements. PostgreSQL 14 and 15 are now shipped without plls and plcoffee extensions, which are no longer supported with up to date add-ons.

Learn more about PostgreSQL on Clever Cloud

Keycloak 26.5.5 (security update)

Fri, 06 Mar 2026 00:00:00 +0000

The release 26.5.5 of Keycloak is available on Clever Cloud. It addresses four security vulnerabilities: CVE-2026-3047, CVE-2026-3009, CVE-2026-2603 and CVE-2026-2092.

You can update through the add-on’s dashboard in the Clever Cloud Console. You can also set CC_KEYCLOAK_VERSION of the underlying Java application to 26.5.5 and rebuild it, or use Clever Tools:

clever features enable operators

clever keycloak version check yourKeycloakNameOrId
clever keycloak version update yourKeycloakNameOrId
clever keycloak version update yourKeycloakNameOrId 26.5.5

Learn more about Keycloak on Clever Cloud

Otoroshi 17.13 brings Kubernetes Gateway API support, remote catalogs and audio STT extensions

Wed, 04 Mar 2026 00:00:00 +0000

Otoroshi v17.13 is available with experimental support for the Kubernetes Gateway API, enabling standardised Kubernetes-native traffic management. This release also introduces remote catalogs, allowing to fetch and manage plugin or configuration catalogs from external sources.

A webhook validator plugin is also included, providing HMAC signature verification for incoming webhook payloads. It supports multiple algorithms (SHA256, SHA512, SHA384, SHA1) and is provider-agnostic with configurable signature headers and signing templates, compatible with services such as GitHub, Stripe, Slack or YouSign.

Security headers plugin now supports Referrer-Policy and Permissions-Policy headers, and new configuration options allow exposing public keys with algorithms in JWKS endpoints. Several router fixes improve path matching with wildcard domains, query/header/cookie matching prioritisation, and trailing slash handling. The strict mode of the JWT user extractor plugin has also been fixed.

This release includes LLM extension 0.0.73, bringing audio speech-to-text support with Mistral Voxtral model and Azure OpenAI Audio API. It also includes various provider payload cleanups for Anthropic and xAI formats.

You can update through add-on’s dashboard in the Clever Cloud Console. You can also set CC_OTOROSHI_VERSION of the underlying Java application to v17.13.0_1772616661 and rebuild it, or use Clever Tools:

clever features enable operators

clever otoroshi version check yourOtoroshiNameOrId
clever otoroshi version update yourOtoroshiNameOrId
clever otoroshi version update yourOtoroshiNameOrId v17.13.0_1772616661

Learn more about Otoroshi with LLM on Clever Cloud

Metabase 59 is available, with Data Studio, AI and box-and-whisker plots

Tue, 03 Mar 2026 00:00:00 +0000

The x.59 branch of Metabase is now available on Clever Cloud. It introduces Data Studio, a comprehensive toolkit for data governance including a semantic layer library, dependency graphs, diagnostic tools and data transforms. It also brings box-and-whisker plots, conditional colors for big number displays, AI-powered text-to-SQL for open source users via Anthropic API, a new Agent API, multiple enhancements and bug fixes.

clever features enable operators

clever metabase version check yourMetabaseNameOrId
clever metabase version update yourMetabaseNameOrId
clever metabase version update yourMetabaseNameOrId 0.59

This new branch is not yet the default if you use community-latest, we’ll move to it in the next few weeks.

Terraform provider 1.10.0

Tue, 03 Mar 2026 00:00:00 +0000

The 1.10.0 release of the Clever Cloud Terraform provider is available. It adds Linux runtime support for applications, missing feature flags for MySQL, PostgreSQL and MongoDB add-ons, and includes multiple bug fixes (add-on API responses, app state handling, Elasticsearch versioning, OAuth signature method).

Learn more about Clever Cloud Terraform provider

Images update: FrankenPHP 1.11.3 (PHP 8.5), Request Flow in all runtimes

Wed, 25 Feb 2026 00:00:00 +0000

We updated all our images. Deployment is in progress for all our users.

Common:
- Clever Tools 4.6.1
- md4c 0.5.2
- Redis 8.6.1
- Mise 2026.2.19
- Otoroshictl 0.0.17
FrankenPHP:
- Update to 1.11.3 (with CC_PHP_VERSION=8.5)
Python:
- uv 0.10.4
Static:
- Caddy 2.11.1
- Static Web Server 2.41.0

PHP Version in FrankenPHP

Customers asked for PHP version choice in our FrankenPHP runtime. PHP 8.4 is still the default, but you can now select PHP 8.5 by setting CC_PHP_VERSION=8.5 in your environment variables. It will use the latest FrankenPHP binary release (currently 1.11.3). PHP 8.5 will be the default in the coming months.

We’ll only support non end-of-life (EOL) versions of PHP in FrankenPHP, so regularly check PHP’s supported versions.

Request Flow extension

Request Flow is now available in all our runtimes, including Python without uv and Ruby.

Learn more about Request Flow

Fixes

This release fixes issues with logs in some Java applications.

Redis 8.6.1 is available (Security update)

Wed, 25 Feb 2026 00:00:00 +0000

We updated Redis™ to release 8.6.1. It brings bug fixes, performance optimizations from 8.6.0 and a security patch. Redis™ 8.6.1 is available for new add-ons. Those already deployed can upgrade through migration.

Starting with this release, Transparent Huge Pages (THP) are disabled at startup to prevent latency spikes and memory fragmentation under heavy workloads, in line with official Redis documentation.

Learn more about Redis™ on Clever Cloud

Keycloak 26.5.4 (security update)

Mon, 23 Feb 2026 00:00:00 +0000

The release 26.5.4 of Keycloak is available on Clever Cloud. It fixes bugs, improves performance and addresses five security vulnerabilities: CVE-2026-1190, CVE-2026-0707, CVE-2025-5416, CVE-2026-2575 and CVE-2026-2733.

You can update through the add-on’s dashboard in the Clever Cloud Console. You can also set CC_KEYCLOAK_VERSION of the underlying Java application to 26.5.4 and rebuild it, or use Clever Tools:

clever features enable operators

clever keycloak version check yourKeycloakNameOrId
clever keycloak version update yourKeycloakNameOrId
clever keycloak version update yourKeycloakNameOrId 26.5.4

Learn more about Keycloak on Clever Cloud

Metabase security patches for versions 54 to 58

Fri, 20 Feb 2026 00:00:00 +0000

Metabase versions 0.54.20, 0.55.20, 0.56.20, 0.57.13 and 0.58.7 are now available on Clever Cloud. These releases fix security vulnerabilities (CVEs) and should be applied as soon as possible.

If you use community-latest as your CC_METABASE_VERSION, you have nothing to do or simply need to restart your instance to get the latest patched version. If you use a specific version, update CC_METABASE_VERSION of the underlying Java application to the latest patch for your branch and rebuild it.

You can update through the add-on’s dashboard in the Clever Cloud Console, or use Clever Tools:

clever features enable operators

clever metabase version check yourMetabaseNameOrId
clever metabase version update yourMetabaseNameOrId

Learn more about Metabase on Clever Cloud

Clever Tools 4.6: multi-profile, config providers, system Git and AI skill

Wed, 18 Feb 2026 00:00:00 +0000

Clever Tools 4.6.0 is available. This release brings multi-profile support, config provider commands, add-on logs migration to the v4 API, optional system Git support and an AI assistant skill.

Multi-profile support

You can now login to multiple Clever Cloud accounts, each with its own credentials and alias. New commands allow you to list and switch between profiles, making it easier to work across different accounts or environments from a single machine. Each profile can also have per-profile endpoint and OAuth overrides configured during login for custom Clever Cloud deployments.

# Create named profiles
clever login --alias personal
clever login --alias work

# Create a profile with custom API endpoint
clever login --alias staging --api-host https://clever-cloud-api.example.com

# List all profiles
clever profile list

# Switch to another profile
clever profile switch --alias work

# With exactly 2 profiles, switch to the other one
clever profile switch

# Display the current profile
clever profile

Config providers

New config-provider commands are now available, giving you direct access to manage config providers from the CLI. You can list, get, set, remove and import environment variables.

# List all config providers
clever config-provider list

# Get variables from a config provider (by name or ID)
clever config-provider get my-config-provider

# Export variables in shell format
clever config-provider get my-config-provider --format shell

# Set a variable
clever config-provider set my-config-provider MY_VAR "my-value"

# Remove a variable
clever config-provider rm my-config-provider MY_VAR

# Import variables from a .env file
cat my-vars.env | clever config-provider import my-config-provider

# Import variables from JSON
echo '[{"name":"FOO","value":"bar"}]' | clever config-provider import my-config-provider -F json

AI assistant skill

Clever Tools is now available as a skill for AI coding assistants such as Claude Code, Codex, Cursor or GitHub Copilot. Once installed, the assistant gets knowledge of CLI commands, Clever Cloud concepts, available runtimes, add-on providers and common workflows.

# Install the skill for your AI coding assistant
npx skills add CleverCloud/clever-tools

System Git support (beta)

By default, Clever Tools uses an embedded JavaScript Git implementation for deploy operations. While it works without requiring Git to be installed, it can be slow on large repositories or branches with rewritten history (rebases, squashes), and does not support SSH-based protocols.

You can now opt in to use your system’s native git command instead, for faster and more reliable deployments. This feature is currently in beta and requires git to be available in your PATH.

# Enable system Git
clever features enable system-git

# Deploy as usual, now using your system's git
clever deploy

# Disable if not needed anymore
clever features disable system-git

How to upgrade

To upgrade Clever Tools, use your favorite package manager. For example with npm:

npm update -g clever-tools
clever version

Images update: Kernel 6.19, Request Flow in Go, Java, Node.js, PHP and Static with Apache

Wed, 18 Feb 2026 00:00:00 +0000

We updated all our images. Deployment is in progress for all our users.

Common:
- Linux Kernel 6.19.2
- ClamAV 1.5.1
- Mise 2026.2.13
- Otoroshictl 0.0.16
.NET:
- Update to 8.0.123
- Update to 9.0.113
Elixir:
- Erlang 27.3.4.7
Node.js & Bun:
- Update to 24.13.1 (npm 11.8.0)
PHP:
- Update to 8.4.18
- Update to 8.5.3
Rust:
- Update to 1.93.1

Apache Basic Auth

X-Robots-Tag: noindex, nofollow header is now added to responses with Basic Authentication through Apache

Request Flow extension

Request Flow is now available in Go, Java/Scala, Meteor, Node.js & Bun, PHP and Static with Apache runtimes. Python (without uv) and Ruby are coming soon. If your application currently uses Varnish in Go or Node.js, you must ask support to switch to this new release. Your application will have to move from port 8081 to 9000.

Learn more about Request Flow

Images update: .NET 10, Go 1.26, Mise 2026.2, Python 3.14, uv 0.10

Thu, 12 Feb 2026 00:00:00 +0000

We updated all our images. Deployment is in progress for all our users.

Common:
- git 2.53.0
- Mise 2026.2.8
- nginx 1.28.2
- pgpool2 4.7
.NET:
- Update to 10.0.102
Docker:
- Docker 29.2.1
Go:
- Update to 1.26.0
Node.js & Bun:
- Bun 1.3.9
- nvm 0.40.4
Python:
- Update to 3.13.12
- Update to 3.14.3
- pip 26.0.1
- uv 0.10.2

.NET 10 support

You can now set CC_DOTNET_VERSION=10.0, default version is still 8.0. We’ll move to 10.0 in the coming weeks.

Python 3.14 support

You can now set CC_PYTHON_VERSION=3.14, default version is still 3.13. We’ll move to 3.14 in the coming weeks.

Mise 2026.2

Latest branch of Mise includes many changes such as Node.js version detection from package.json, hooks overhaul or Shell-style variable expansion in env values. You can benefit from them with this release.

Learn more about latest versions of Mise

Fixes

This release includes:

A fix for Mise Tasks management in Linux Runtime
A fix for CC_NODE_BUILD_TOOL=yarn-berry

Keycloak 26.5.3 (security update)

Tue, 10 Feb 2026 00:00:00 +0000

The release 26.5.3 of Keycloak is available on Clever Cloud. It fixes bugs, reduces memory consumption during startup and addresses four security vulnerabilities: CVE-2026-1609, CVE-2026-1529, CVE-2026-1486 and CVE-2025-14778.

You can update through the add-on’s dashboard in the Clever Cloud Console. You can also set CC_KEYCLOAK_VERSION of the underlying Java application to 26.5.3 and rebuild it, or use Clever Tools:

clever features enable operators

clever keycloak version check yourKeycloakNameOrId
clever keycloak version update yourKeycloakNameOrId
clever keycloak version update yourKeycloakNameOrId 26.5.3

Learn more about Keycloak on Clever Cloud

Materia KV supports Set value type

Thu, 05 Feb 2026 00:00:00 +0000

Materia KV now supports multiple commands to create and manage sets. You don’t have anything to change in your configuration to benefit from this new feature, just use the new supported commands in your applications.

Matomo 5.7 is available

Wed, 04 Feb 2026 00:00:00 +0000

The Matomo add-on on Clever Cloud has been updated to version 5.7.1, which is now used by default. The 5.7 branch focuses on stability, performance, usability and security.

You can deploy this release from the Clever Cloud Console or Clever Tools. Existing customers’ add-ons are already up-to-date.

Images update: Bun 1.3.8, OAuth2 Proxy 7.14, more PHP 8.5 extensions

Tue, 03 Feb 2026 00:00:00 +0000

We updated all our images. Deployment is in progress for all our users.

Common:
- OAuth2 Proxy 7.14.2
- Otoroshictl 0.0.15
- Tailscale 1.94.1
.NET:
- Update to 6.0.136
Docker:
- Docker Buildx 0.31.1
Java:
- Update to 11.0.30_p7
- Update to 17.0.18_p8
- Update to 21.0.10_p7
- Update to 25.0.2_p10
- Gradle 9.3.1
Node.js & Bun:
- Bun 1.3.8
PHP:
- Composer 2.9.5
- mcrypt extension 1.0.9
- PDFlib extension 11.0.0
- solr extension 2.9.1
- xdebug extension 3.5.0
Python:
- uv 0.9.28

Docker Buildx

As previously announced, Docker Buildx is now the default build system for Docker applications. You can switch back to the legacy build system by setting the CC_DOCKER_BUILDX environment variable to false.

Otoroshi 17.12 is available with JWT Verification, new WAF engine and plugin improvements

Fri, 30 Jan 2026 00:00:00 +0000

Otoroshi v17.12 is available with multiple improvements. It brings JWT verification support based on the settings of an OIDC authentication module with optional user session extraction through OIDCJwtVerifier. The release also allows Fail2Ban to be triggered by other plugins that can’t use the requestError phase.

This version also integrates a new WAF engine providing JVM-native implementation of ModSecurity SecLang with the OWASP Core Rule Set included. This eliminates binary dependencies and simplifies deployment in containerized environments, with flexible modes for comprehensive WAF inspection or lightweight request validation.

For plugin developers, this version introduces various internal improvements: Monaco editor support in classic forms for enhanced code editing experience, provider helpers to create customizable errors in plugins, and the ability to always display plugins even if missing from the JS plugins list.

This release includes LLM extensions 0.0.68 and 0.0.69, bringing OpenResponses-compatible endpoints for standardized LLM response handling through the OpenResponses framework. These versions embed rate limit and budget consumption data in GatewayEvents and LLMAuditEvents for enhanced tracking, and support exposing any model with an Anthropic API compatible format.

You can update through add-on’s dashboard in the Clever Cloud Console. You can also set CC_OTOROSHI_VERSION of the underlying Java application to v17.12.0_1769783775 and rebuild it, or use Clever Tools:

clever features enable operators

clever otoroshi version check yourOtoroshiNameOrId
clever otoroshi version update yourOtoroshiNameOrId
clever otoroshi version update yourOtoroshiNameOrId v17.12.0_1769783775

Learn more about Otoroshi with LLM on Clever Cloud

Images update: Docker 29.2, Gradle 9.3, Rust 1.93 and more runtimes with Request Flow

Wed, 28 Jan 2026 00:00:00 +0000

We updated all our images. Deployment is in progress for all our users.

Common:
- Clever Tools 4.5.3
- qpdf 12.3.2
- Mise 2026.1.8
Docker:
- Update to 29.2.0
- Docker Buildx 0.31.0
Elixir:
- Erlang 28.3.1
Go:
- Update to 1.25.6
Java:
- Gradle 8.14.4
- Gradle 9.3.0
- Maven 3.9.12
Node.js & Bun:
- Bun 1.3.7
PHP:
- Update to 8.3.30
- Update to 8.4.17
- Update to 8.5.2
- Composer 2.9.4
Python:
- uv 0.9.26
Ruby:
- Update to 3.2.10
Rust:
- Update to 1.93.0

Request Flow expansion

Request Flow is now available in .NET, Elixir, Haskell and Rust applications. We plan its expansion to more runtimes in the coming weeks in three releases:

Go and Node.js/Bun
Java and PHP
Python and Ruby

This feature is still in its testing phase, feel free to test it and give us feedback.

Changes in applications custom metrics retention

Tue, 27 Jan 2026 00:00:00 +0000

Starting February 2nd, 2026, the retention period for custom application metrics will be 7 days. This change only affects metrics that you expose from your applications through the statsd protocol or Prometheus endpoints.

System metrics remain unaffected by this change. All automatically collected metrics, including CPU usage, RAM consumption, disk usage, network activity, and load metrics, will continue to be available with the existing retention period.

Terraform provider 1.9.0

Fri, 23 Jan 2026 00:00:00 +0000

The 1.9.0 release of the Clever Cloud Terraform provider is available. It brings bug fixes, Java JAR support, app-to-app dependencies, more integrations and backup datasource for PostgreSQL.

Learn more about Clever Cloud Terraform provider

Images update: PHP 8.5, Composer 2.9, Ruby 4.0, V (Vlang) 0.5

Thu, 15 Jan 2026 00:00:00 +0000

We updated all our images. Deployment is in progress for all our users.

Common:
- Linux kernel 6.17.13
- cURL 8.18.0
- NGINX 1.28.1
- OAuth2 Proxy 7.13.0
- Otoroshictl 0.0.13
- Poppler 26.01.0
- Tailscale 1.92.4
Docker:
- Update to 29.1.4
Elixir:
- Update to 1.19.5
- Erlang 28.3
Node.js:
- Update to 24.13.0 (npm 11.6.2)
- Bun 1.3.6
PHP:
- Update to 8.1.34
- Update to 8.2.30
- Update to 8.3.29
- Update to 8.4.16
- Update to 8.5.1
- Composer 2.9.2
- Symfony CLI 5.16.1
- Blackfire extension 1.92.51
- gRPC extension 1.76.0
- Imagick extension 3.8.1
- Maxmind DB extension 1.13.0
- New Relic extension 12.2.0.27
- Protobuf extension 3.23.4, 3.25.8 and 4.33.2
- Redis extension 6.3.0
- Tideways extension 5.31.0 (Daemon 1.11.4)
- YAML extension 2.3.0
Python:
- uv 0.9.24
Ruby:
- Update to 3.4.8
- Update to 4.0.1
V (Vlang):
- Update to 0.5

PHP 8.5 and Composer 2.9

PHP 8.5 is now available. To use it, set CC_PHP_VERSION=8.5 as PHP 8.4 release is still the default version. We’ll move to PHP 8.5 as the default version in April 2026. PHP 8.1 is now considered as end-of-life.

Supported extensions for PHP 8.5 are: amqp, apcu, blackfire, event, excimer, gnupg, grpc, imagick, imap, mailparse, maxminddb, memcached, oauth, opentelemetry, pdo_sqlsrv, protobuf, pspell, rdkafka, redis, sqlsrv, ssh2, tideways, uploadprogress, yaml, zip.

Composer 2.9 introduces a new default behavior: it automatically blocks updates to packages with known security advisories. As mentioned by developers, “it prevents you from accidentally updating to vulnerable package versions. You can configure this behavior via the new audit.block-insecure config settings if needed.”

Learn more about Composer Audit configuration settings

Hugo default version update

In next release, we will update the default Hugo version to 0.152 and only keep 0.150and superior as available versions. If you need an older version, use Mise to set hugo or hugo-extended version in mise.toml file.

Clever Tools 4.5 is available

Wed, 14 Jan 2026 00:00:00 +0000

Clever Tools 4.5.1 is available, with everything from 4.5.0 plus a bug fix for Arch Linux users. This release is a big step forward in our CLI redesign, with major changes under the hood to the way commands are structured and implemented.

Learn more about Clever Tools file structure rework in our ADR

Better help our users

From a user perspective, this release mainly brings clearer --help outputs:

It also allows us to automatically generate reference documentation during the release process with an LLM-ready version.

Pave the way for future improvements

These changes were an essential building block for the next major step: redesigning the Clever Tools commands and options. An effort that will be carried out gradually over the coming months.

How to upgrade

To upgrade Clever Tools, use your favorite package manager. For example with npm:

npm update -g clever-tools
clever version

Metabase 58 is available with Documents and Guest Embeds

Tue, 13 Jan 2026 00:00:00 +0000

The x.58 branch of Metabase is now available on Clever Cloud. It brings multiple improvements and bug fixes, Modular Embedding, Guest Embeds, but also Documents. They let you blend charts and metrics with narrative text using Markdown or a rich text editor. Collaborate with comments, mentions, and emoji reactions—like a Notion doc meets Metabase, or a lightweight Jupyter notebook.

To update, set CC_METABASE_VERSION of the add-on’s Java application to 0.58 for the community edition or 1.58 for the enterprise edition (EE). This new branch is the default if you use community-latest.

You can update through add-on’s dashboard in the Clever Cloud Console. You can also set CC_METABASE_VERSION of the underlying Java application to 0.58 or 1.58 for the enterprise edition (EE) and rebuild it, or use Clever Tools:

clever features enable operators

clever metabase version check yourMetabaseNameOrId
clever metabase version update yourMetabaseNameOrId
clever metabase version update yourMetabaseNameOrId 0.58

Keycloak 26.5 is available with CORS enhancements, logout confirmation, workflows

Thu, 08 Jan 2026 00:00:00 +0000

The release 26.5.1 of Keycloak is available on Clever Cloud. It brings bug fixes and new features from the 26.5.0 release:

CORS enhancements
Logout confirmation page
Organization invitation management
Enhanced HTTP performance (preview)
Hiding OpenID Connect scopes from the discovery endpoint
Workflows (preview) to automate administrative tasks and processes within a realm
OpenTelemetry support for metrics and logging, combining all observability information in this popular standard
JWT Authorization Grants (preview), the recommended alternative to external to internal token exchange (RFC 7523)

You can update through add-on’s dashboard in the Clever Cloud Console. You can also set CC_KEYCLOAK_VERSION of the underlying Java application to 26.5.1 and rebuild it, or use Clever Tools:

clever features enable operators

clever keycloak version check yourKeycloakNameOrId
clever keycloak version update yourKeycloakNameOrId
clever keycloak version update yourKeycloakNameOrId 26.5.1

Otoroshi 17.11 is available with new Data Exporters, OpenFGA Authorizations, Websocket Mirroring

Mon, 05 Jan 2026 00:00:00 +0000

Otoroshi v17.11 is available with multiple improvements and bug fixes. It brings Datadog and New Relic data exporters, fine-grained authorizations through OpenFGA API, a plugin to mirror websocket traffic to another target, workflow support for websocket message transformations and 3 new load balancing strategies: HeaderHash, CookieHash and QueryHash.

This release comes with LLM extension 0.0.67 which supports Cloud Temple as new provider, Nano Banana as Image model provider and Azure OpenAI as embedding model provider.

You can update through add-on’s dashboard in the Clever Cloud Console. You can also set CC_OTOROSHI_VERSION of the underlying Java application to v17.11.0_1767272929 and rebuild it, or use Clever Tools:

clever features enable operators

clever otoroshi version check yourOtoroshiNameOrId
clever otoroshi version update yourOtoroshiNameOrId
clever otoroshi version update yourOtoroshiNameOrId v17.11.0_1767272929

Learn more about Otoroshi with LLM on Clever Cloud

Kubernetes 1.35 is available

Tue, 23 Dec 2025 00:00:00 +0000

We updated Kubernetes to release 1.35.0. It brings bug fixes, in-place update of Pod resources, numeric values for taints, OCI images mounted as volumes and is the last to support cgroup v1. Kubernetes 1.35.0 is available for new deployments. Migration of existing clusters will be available soon.