Pipeline component catalog
This page describes the component capabilities associated with Nexo and their exact status in the immutable 0.2.0 Private Preview bundle.
:::danger Configuration is not execution
The 0.2.0 chart installs 24 CRD schemas, but its pinned Operator registers only 18. The pinned Proxy renders router and connection phases but does not execute them. Do not treat a visible dashboard option or installed schema as enforced behavior.
:::
0.2.0 support matrix
| Component | Phase | Minimum tier | 0.2.0 status |
|---|---|---|---|
| Connection Pipeline | Connection | Free | Unavailable: schema only and connection phase not executed |
| Logging | Request + response | Free | Available |
| Metrics | Request + response | Free | Available |
| Index Advisor | Request + response | Free | Unavailable: schema only |
| X-Ray | Request + response | Free | Unavailable: no dedicated CRD |
Access Control (Filter) | Request | Free | Ineffective: Operator and Proxy configuration contracts differ |
| Query Guard | Request | Free | Unavailable: schema only |
| Query Size Limit | Request | Free | Available; compatibility alias of Query Guard entitlement |
| Version Compatibility | Request + response | Free | Available; owning Proxy may require reconciliation after edits |
| Rate Limiting | Request | Pro | Available |
| Query Rewrite | Request | Pro | Available |
| MongoDB Cache | Request + response | Pro | Available |
| Read/Write Splitter | Router | Pro | Unavailable: schema only and router phase not executed |
| Traffic Split | Router | Pro | Ineffective: reconciled resource, but router phase not executed |
| Shadow Traffic | Request + response | Pro | Available |
| PII Masking | Response | Pro | Available |
| Audit Log | Request + response | Pro | Available |
| Tenant Isolation | Router | Business | Ineffective: reconciled resource, but router phase not executed |
| Field Encryption | Request + response | Enterprise | Unavailable: schema only |
| Change Stream Fanout | Response | No canonical entitlement | Unsupported: dashboard manifest only |
| Geo-Routing | Router | No canonical entitlement | Unsupported: dashboard manifest only |
| Cross-Cluster Federation | Router + response | No canonical entitlement | Unsupported: dashboard manifest only |
| Query Replay | Request + response | No canonical entitlement | Unsupported: dashboard manifest only |
| Intelligent Failover | Router + response | No canonical entitlement | Unsupported: dashboard manifest only |
Growth has the same component set as Pro with higher limits and additional sub-features. Query Size Limit does not count as a separate commercial component from Query Guard.
:::warning Reconcile the owning Proxy after selected edits
The pinned Proxy controller does not watch NexoTrafficSplit,
NexoTenantIsolation, NexoQuerySizeLimit, or NexoVersionCompat. After editing any
of those resources, trigger reconciliation of the owning NexoProxy through the
approved deployment workflow and verify the active graph revision. Reconciliation does
not make router-phase components executable in 0.2.0.
:::
:::note Dashboard tier labels
The canonical entitlement list in this table is authoritative. The dashboard manifests display Version Compatibility as Pro and Index Advisor, Cache, and Audit as Business, although their canonical minimum tiers are Free, Free, Pro, and Pro. Treat those badges as a known UI discrepancy, not as the commercial entitlement decision.
:::
Dashboard-manifest-only concepts
Five additional built-in manifests describe Change Stream Fanout, Geo-Routing, Cross-Cluster Federation, Query Replay, and Intelligent Failover. They have no canonical tier entitlement and no supported 0.2.0 deployment contract:
- Change Stream Fanout would multiplex a change stream to multiple consumers.
- Geo-Routing would select targets from regional or residency context.
- Cross-Cluster Federation would expose multiple clusters as a logical database.
- Query Replay would record and replay sampled traffic for migration testing.
- Intelligent Failover would shift traffic using cluster health scores.
Do not deploy a borrowed CRD mapping or infer support from a visible dashboard card.
Marketplace entries
Sample community-plugin cards in the dashboard are not a supported 0.2.0 marketplace. Deploy only artifacts explicitly pinned and approved in the installed bundle.
The sample cards are Field Trimmer, Timestamp Injector, Mock Responses, Chaos Monkey, Slack Alert, S3 Query Archive, PagerDuty Incident, and Elasticsearch Sync. They are UI examples, not supported 0.2.0 artifacts.