CHANGELOG.md

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

4.15.1 (2026-03-23)

Bug Fixes

• fix: release gh action input #3076 (3044e3e9)

4.15.0 (2026-03-23)

Features

• support recursive paths for GitOps manifests (#2999) (29800f0)
• BYO Git (#2914) (c8cf17a)
• support subdirectories for byo catalogs (#2985) (ec52536)
• add revcovery mode (#2974) (503b3fb)
• shallow clone in argo repo server (#2977) (cdf48fc)
• get aplCharts version from versions.yaml (#3071) (f1ab43a)
• added LB annotations to preserve IP prior to the Gateway API upgrade (#2975) (977b7c0)
• set gitops targetrevision to gitops branch (#3041) (066f23d)
• BYO catalog (#2901) (0c7aa04)
• added apl-operator livenessProbe (#3000) (0f5bf7e)
• remove thanos (#2899) (91dd1ef)
• set keycloak login url to platform related realm (#2945) (e83c9af)
• add Gateway API CRDs and essential chart (#3030) (831061b)
• remove Minio (#2903) (1fd2405)

Bug Fixes

• add gitea username to env (#3008) (6732e76)
• rename catalog url to repositoryUrl (#2946) (0c6aae8)
• update sealed secret path for charts repo migration (#3006) (7cd5c91)
• replace non working datasouces in dashboards (#2979) (519f758)
• change pattern for catalog repositoryUrl (#2953) (ba2ec0c)
• update git-credentials secret name to gitea-credentials in team-ns (#2961) (755231d)
• adjust exporter name (#2932) (ffeaf0b)
• do not add error to apl-installation-status cm (#2942) (1742122)
• improve pull error handling with reset and retry logic (#3036) (1421d6c)
• apl-gitea-operator load env (#3042) (82ac1f7)
• setting branch in argocd app (#3029) (47716bc)
• argocd grafana dashboard (#3011) (fabc07a)
• do not track resources created by TriggerTemplate (#3024) (ac7b0c4)
• remove otomi.git required in values-schema (#2963) (8dbd3ef)
• add extraArgs to disable secure metrics in otel-operator (#2959) (b04faee)
• compare timestamps when re-encrypting (#2926) (d243785)
• configurable gitops branch for argocd-image-updater (#3049) (a15ca00)
• prevent access to internal apl service (#2933) (b4fa8f6)
• remove hardcoded main branch to pull from the values repo (#3009) (02f158d)
• trivy dashboard (#2973) (d88edc8)
• escape single quotes in template string generation (#2957) (79dbf72)
• update cert-manager values to use crds (#2913) (f32b806)
• support Loki without object storage (#2882) (1461593)

CI

• run compare script once PR is ready (#2922) (2308260)
• reduce noise of comparison script (#2915) (e0c540c)
• compose compare pr comment as file (#2910) (6a10d36)
• set default 1.35 for deploying apl (#3039) (7cb4df6)
• fix extra dependencies not merged correctly with same version (#2986) (c2c2210)
• compare using separate working copies (#2909) (d51ee5d)

Others

• bump docker/metadata-action from 5 to 6 (#3021) (cf0ad4c)
• update oauth2-proxy to version 10.1.4 (#2955) (c02d46e)
• v4.14.0 changelog update (#2981) (a30e8ad)
• bump docker/setup-buildx-action from 3 to 4 (#3022) (060366d)
• bump the npm-dependencies group with 10 updates (#2900) (aeed140)
• update sealed-secrets to version 2.18.1 (#2944) (d39656c)
• update keycloak to version 7.1.8 (#2939) (662db0c)
• bump docker/login-action from 3 to 4 (#3020) (bd49fbd)
• update loki to version 6.53.0 (#2937) (3619088)
• update cloudnative-pg-plugin-barman-cloud to version 0.5.0 (#2912) (b33b94a)
• update kube-prometheus-stack to version 81.5.0 (#2911) (121302b)
• update oauth2-proxy to version 10.1.2 (#2898) (11f4fc7)
• bump docker/setup-qemu-action from 3 to 4 (#3019) (6869442)
• bump helmfile/helmfile-action from 2.2.0 to 2.3.0 in the github-actions-dependencies group (#2972) (b07ac3c)
• update kube-prometheus-stack to version 81.6.3 (#2943) (8cd9ecb)
• update kube-prometheus-stack to version 81.6.9 (#2948) (55a5d01)
• update kube-prometheus-stack to version 81.6.2 (#2940) (6935b72)
• bump docker/build-push-action from 6 to 7 (#3023) (480435b)
• update loki to version 6.52.0 (#2921) (f4efbef)
• update otel-operator to version 0.105.1 (#2938) (8c4ac22)
• update cert-manager to version v1.19.3 (#2905) (2c7de74)
• bump helmfile/helmfile-action from 2.3.0 to 2.3.1 in the github-actions-dependencies group (#2998) (53fe8c2)
• update argocd to version 9.4.9 (#3025) (8b08191)
• update argocd to version 9.4.6 (#2992) (7f69342)
• update cert-manager to version v1.19.4 (#2983) (28c434e)
• update kube-prometheus-stack to version 81.6.1 (#2936) (fb7ad97)
• update sealed-secrets to version 2.18.3 (#2988) (68579c9)
• bump the npm-dependencies group with 7 updates (#3016) (b7c8908)
• update argocd to version 9.4.10 (#3031) (1d31832)
• bump @types/supertest from 6.0.3 to 7.2.0 (#2995) (207bcba)
• update policy-reporter to version 3.7.2 (#2950) (bb83f18)
• update cloudnative-pg-plugin-barman-cloud to version 0.4.0 (#2826) (20ce445)
• update policy-reporter to version 3.7.3 (#3013) (1917544)
• bump the npm-dependencies group with 8 updates (#2967) (8dd29c2)
• update cloud-firewall to version 0.2.1 (#2987) (a0271ae)
• update loki to version 6.55.0 (#3037) (d0fc6ae)
• update knative-operator to version v1.21.1 (#2991) (adbf544)
• bump @types/tar from 6.1.13 to 7.0.87 (#2968) (a6709a0)
• update prometheus-blackbox-exporter to version 11.8.0 (#2924) (5ade9db)
• update cloudnative-pg to version 0.27.1 (#2920) (b4e9cb5)
• update ingress-nginx to version 4.14.3 (#2906) (bbf8d9e)
• bump the npm-dependencies group with 7 updates (#2928) (3b1af8c)
• update argocd to version 9.4.4 (#2966) (29a97e2)
• update istio to version 1.29.1 (#3033) (fe984da)
• bump the npm-dependencies group with 8 updates (#2994) (68f6926)
• update loki to version 6.54.0 (#3034) (4e4836c)
• update kube-prometheus-stack to version 81.5.2 (#2931) (7e78521)
• update trivy-operator to version 0.32.0 (#2941) (784d446)
• update tekton-pipelines to version 1.9.1 (#2989) (a79b25a)
• update argocd to version 9.4.5 (#2990) (5a00943)
• update otel-operator to version 0.105.0 (#2883) (248d9f8)
• update keycloak to version 7.1.9 (#3027) (c38c370)
• update argocd to version 9.4.7 (#3007) (e8694bd)
• update istio to version 1.29.0 (#2954) (13f310d)
• bump the npm-dependencies group with 8 updates (#2951) (2e636cc)
• post release v4.14.0 (#2980) (b0b07c3)
• bump helmfile/helmfile-action from 2.1.1 to 2.2.0 in the github-actions-dependencies group (#2902) (2c8fced)

4.14.0 (2026-02-24)

Features

• add jwt verification for api (#2800) (4134d12)
• adding k8s v1.35 support (#2862) (93980e9)
• custom kubernetes manifest in the values repo (#2893) (0a3cf8d)
• deploy secrets as secretRef in chart values (#2805) (b8c16dd)
• make platform db connection pooling configurable (#2730) (41187a2)
• optimize helm chart values for the argocd sync (#2863) (f135fb4)
• remove tempo app (#2870) (ed0f77d)
• replace Promtail with OpenTelemetry collector (#2784) (6440cd9)
• run traces command every 5 minutes for 30 minutes (#2876) (59a554d)
• updated helloworld image to point to linode org (#2783) (1003005)

Bug Fixes

• adding tekton-pipeline labels to match chart-created ns (#2801) (77f3b22)
• attempt to migrate values on every operator cycle (#2807) (9e240c7)
• buildpacks using ORCS (#2935) (88deccf)
• condition syntax (#2887) (ded886a)
• core tag in api deployment (#2767) (710d520)
• disabling tekton-pipeline redundant ns creation (#2781) (ce40d93)
• do not install wiz admission controler as it is part of wiz-kube… (#2838) (27100a3)
• duplicate credentials warning in Argocd (#2796) (7da039d)
• encrypt adminUsername (#2804) (fdf7a4d)
• Harbor DB backup object storage secret refs (#2857) (65ead02)
• harbor storage credentials (#2918) (d499931)
• no active cluster error in local dev environment (#2885) (618b184)
• only add label for teamresources (#2792) (892a009)
• reattempt password validity reset on any expiration error (#2927) (c8f3a20)
• render list with unique set of source repositories in argocd project (#2833) (2c6da6a)
• replace hanging kubectl delete command with api call (#2785) (dee2fdc)
• replace kubectl with k8s client library for argocd apps (#2881) (2cc232b)
• serviceMonitor in Loki values (#2877) (6436358)
• set correct version for apl-nodejs-helloworld (#2897) (111f885)
• sortUserArraysByName (#2875) (92a69a5)
• team workload ineffectively deleted (#2867) (005e4ee)
• update tekton-pipeline ns labels (#2793) (f1830fc)
• upgrade script to scale down argocd applicatioset controller (#2814) (c9f31de)
• use file selector for avoiding parallel processing (#2797) (40f3c97)
• use the values managed file only if workload imageUpdateStrategy is set (#2806) (39d64f5)

Reverts

• added PR ref during checkout (#2889) (#2892) (df21f4b)
• encrypt adminUsername (#2804) (#2813) (57aff7d)
• helm chart name (#2856) (c16ad49)

CI

• add copilot instructions (#2846) (c3fb698)
• added PR ref during checkout (#2889) (87edf58)
• added repository_dispatch trigger (#2831) (151b671)
• attach output comparison to automated PRs (#2880) (0438eed)
• do not install wiz-sensor (#2772) (1008b41)
• ensure exact match on helm chart name (#2895) (d4fab33)
• fix output evaluation (#2890) (1c83978)
• fix output variable name (#2891) (416ed34)
• improve readability of chart diff output (#2894) (5a97591)
• missing commit message in event (#2888) (797aded)
• syntax and use workflow_dispatch instead (#2832) (f6b6e36)
• update codeowners (#2859) (cb8b016)
• update log gathering command for APL operator (#2771) (32be4d3)

Others

• chart-deps: update argocd to version 9.1.5 (#2763) (19e8ea9)
• chart-deps: update argocd to version 9.2.4 (#2827) (2201df4)
• chart-deps: update argocd to version 9.3.4 (#2847) (998b42e)
• chart-deps: update argocd to version 9.3.6 (#2871) (28c7e31)
• chart-deps: update argocd to version 9.3.7 (#2878) (1a7853f)
• chart-deps: update cert-manager to version v1.19.2 (#2786) (936ee70)
• chart-deps: update cloudnative-pg to version 0.27.0 (#2787) (189d010)
• chart-deps: update external-dns to version 1.20.0 (#2828) (e945b65)
• chart-deps: update gitea to version 12.5.0 (#2865) (886374a)
• chart-deps: update harbor to version 1.18.1 (#2788) (07e607d)
• chart-deps: update harbor to version 1.18.2 (#2872) (96dcfe5)
• chart-deps: update ingress-nginx to version 4.14.1 (#2776) (222cd89)
• chart-deps: update ingress-nginx to version 4.14.2 (#2873) (d04955d)
• chart-deps: update istio to version 1.28.2 (#2818) (3e325f9)
• chart-deps: update istio to version 1.28.3 (#2854) (7e6f61c)
• chart-deps: update keycloak to version 7.1.5 (#2754) (dd25bf2)
• chart-deps: update keycloak to version 7.1.6 (#2840) (60b2bfc)
• chart-deps: update keycloak to version 7.1.7 (#2858) (b999725)
• chart-deps: update kube-prometheus-stack to version 79.9.0 (#2761) (b4e7db6)
• chart-deps: update kube-prometheus-stack to version 80.13.3 (#2843) (068e507)
• chart-deps: update kube-prometheus-stack to version 80.14.1 (#2845) (b1d5f81)
• chart-deps: update kube-prometheus-stack to version 80.14.3 (#2848) (64f3354)
• chart-deps: update kube-prometheus-stack to version 80.14.4 (#2849) (c051b18)
• chart-deps: update loki to version 6.51.0 (#2860) (39f20b2)
• chart-deps: update oauth2-proxy to version 10.0.0 (#2842) (3bb2ee6)
• chart-deps: update oauth2-proxy to version 10.1.0 (#2855) (8edfe0f)
• chart-deps: update oauth2-proxy to version 10.1.1 (#2866) (770369d)
• chart-deps: update oauth2-proxy to version 8.5.1 (#2735) (1de4e98)
• chart-deps: update policy-reporter to version 3.7.0 (#2746) (bbdaf33)
• chart-deps: update policy-reporter to version 3.7.1 (#2830) (973873e)
• chart-deps: update prometheus-blackbox-exporter to version 11.5.0 (#2744) (6ea0183)
• chart-deps: update prometheus-blackbox-exporter to version 11.7.0 (#2835) (ffa62f5)
• chart-deps: update prometheus-blackbox-exporter to version 11.7.1 (#2884) (469f658)
• chart-deps: update prometheus-msteams to version 1.3.5 (#2762) (6b16ac6)
• chart-deps: update prometheus-msteams to version 1.3.6 (#2819) (2b3908d)
• chart-deps: update sealed-secrets to version 2.18.0 (#2812) (90b7652)
• chart-deps: update tekton-pipelines to version 1.6.1 (#2688) (4d4711d)
• clean up old Istio Operator chart (#2662) (cd74991)
• deprecate thanos (#2739) (eaee9d2)
• deps: bump @eslint/compat from 1.4.1 to 2.0.0 (#2750) (76d8c04)
• deps: bump actions/checkout from 5 to 6 (#2751) (8e34016)
• deps: bump glob from 11.0.3 to 13.0.0 (#2749) (abc5f4d)
• deps: bump globals from 16.5.0 to 17.0.0 (#2852) (3241559)
• deps: bump linode/apl-tools from v2.10.5 to v2.10.6 in the docker-dependencies group (#2780) (5e49b15)
• deps: bump the npm-dependencies group across 1 directory with 13 updates (#2764) (1b79ad6)
• deps: bump the npm-dependencies group across 1 directory with 9 updates (#2837) (89a5f9f)
• deps: bump the npm-dependencies group with 10 updates (#2779) (50e14b6)
• deps: bump the npm-dependencies group with 3 updates (#2798) (dec62d1)
• deps: bump the npm-dependencies group with 8 updates (#2850) (e70cc78)
• deps: bump the npm-dependencies group with 8 updates (#2868) (8b308ab)
• post release changelog v4.13.0 (#2853) (957cd8b)
• rc versions update (0e8556a)
• update base image in Dockerfile and workflow (#2775) (6ac55b2)
• update schema-ref-parser and add it to the transformIgnorePatterns (#2789) (16ec507)
• updated versions (ea63f80)
• upgrade binaries of base image (#2774) (f525da1)
• upgrade Gitea to 1.25.2 (#2758) (852bcd2)

4.13.0 (2026-01-19)

Features

• check if endpointslice is available for oauth2proxy (#2631) (1fe320d)
• default disable egress policies for enterprise clusters (#2619) (d066ba1)
• make platform db connection pooling configurable (#2730) (41187a2)
• removing falco (#2705) (d467609)
• update default tests/fixtures cluster settings (#2706) (f252960)
• remove presync and postsync helmfile hooks (#2712) (8da47cf)
• removing kiali (#2683) (b79dba2)
• cleanup httpbin argocd app after upgrade (#2720) (43b82a2)
• upgrade argocd image updater and leverage argocd application sources (#2642) (cef74c2)
• removing kured (#2695) (0cdfe51)
• upgrade yargs, uuid and node 24 (#2653) (bf15aff)
• fix team tekton-dashboard (#2597) (d7c17b6)
• add collect traces command (#2645) (f28e76f)
• add jwt verification for api (#2800) (4134d12)
• add Linode Cloud Firewall Controller (#2643) (03139bf)
• skip runtime upgrades on initial install (#2715) (af433ba)
• remove velero (#2721) (5db8608)
• using coredns for lke-e clusters (#2635) (24e99d6)
• delete jaeger (#2732) (fe87c02)
• replace install job by apl-operator (#2501) (5ffb36b)
• remove httpbin (#2647) (65dded3)
• fetch pending pods correctly (#2707) (9e8edfe)

Bug Fixes

• use the values managed file only if workload imageUpdateStrategy is set (#2806) (39d64f5)
• helm operation in progress (#2708) (5a6707a)
• attempt to migrate values on every operator cycle (#2807) (9e240c7)
• update tekton-pipeline ns labels (#2793) (f1830fc)
• upgrade script to scale down argocd applicatioset controller (#2814) (c9f31de)
• adding tekton-pipeline labels to match chart-created ns (#2801) (77f3b22)
• do not perform runtimeUpgrades if deployingVersion and version are the same (#2742) (224f26e)
• disabling tekton-pipeline redundant ns creation (#2781) (ce40d93)
• skip initial values after install and isolate bootstrap errors (#2753) (42f9abb)
• maintenance (#2726) (081a22d)
• PostgreSQL image upgrade considered for 4.12 release (#2652) (92ae932)
• quote string to avoid conversion in Loki config (#2654) (5d0abed)
• added ArgoCD diff exclusions for creationTimestamp (#2756) (1ad00d8)
• updated external-dns deploymentStrategy (#2666) (61aaa49)
• launch bash on tty startup (#2640) (31589ce)
• get console version in gotmpl (#2759) (d8b6247)
• service names in otel crds (#2690) (9e3b39a)
• kfp workflow image (#2719) (2ba9e9e)
• retry local charts repo read (#2667) (65f873a)
• core tag in api deployment (#2767) (710d520)
• replace hanging kubectl delete command with api call (#2785) (dee2fdc)
• embed all required changes in tty image (#2639) (2c448c2)
• handle upgrade from previous versions (#2760) (d9c80e6)
• force apply essential manifests on upgrade (#2682) (9c7786f)

Documentation

• updated getting started section and links to documentation (#2530) (26f7d92)
• correct product name (#2738) (684519f)

CI

• support lke enterprise (#2752) (a1d02fb)
• add update for multiple apps provided by chart (#2713) (0bd7a86)
• fix static otel crd during chart upgrades (#2681) (725c242)
• group PRs for some charts (#2676) (dd06a12)

Others

• update otel-operator to version 0.99.1 (#2728) (f7d34ab)
• update cert-manager to version v1.19.1 (#2602) (1016d01)
• update kiali-operator to version 2.18.0 (#2669) (7baa060)
• correct product name (#2737) (4159afc)
• bump linode/apl-tools from v2.10.4 to v2.10.5 in the docker-dependencies group (#2727) (a55ded6)
• update gitea to version 12.4.0 (#2572) (884f62a)
• update argocd to version 9.1.3 (#2722) (c299a75)
• bump actions/setup-node from 5 to 6 (#2611) (1ed0790)
• bump @commitlint/cli from 19.8.1 to 20.0.0 (#2556) (4424ed9)
• update oauth2-proxy to version 8.5.0 (#2725) (2b852f0)
• update cloudnative-pg to version 0.26.1 (#2620) (7523069)
• update otel-operator to version 0.99.0 (#2693) (2cb5342)
• bump semantic-release from 24.2.9 to 25.0.2 (#2703) (9fcffbb)
• use latest patch and clear apt cache (#2641) (dc0f996)
• update argocd to version 9.1.4 (#2745) (9990ec9)
• update prometheus-blackbox-exporter to version 11.4.1 (#2592) (64c536a)
• update prometheus-blackbox-exporter to version 11.4.2 (#2697) (88daaba)
• update opentelemetry-operator to version 0.98.0 (#2615) (1ab6136)
• update kiali-operator to version 2.17.0 (#2591) (a858b09)
• update loki-distributed to version 0.80.5 (#2120) (9dc4e0d)
• update Core base image (#2636) (d168321)
• update base image and binaries (#2634) (a08d245)
• update ingress-nginx to version 4.14.0 (#2668) (a2bcd4b)
• bump @commitlint/config-conventional from 19.8.1 to 20.0.0 (#2664) (1b69e41)
• update promtail to version 6.17.0 (#2194) (0917476)
• update harbor to version 1.18.0 (#2534) (5a7d24c)
• bump the npm-dependencies group with 20 updates (#2630) (dd80be7)
• post release v4.12.0 (#2646) (7b068ef)
• remove drone and e2e (#2717) (c101534)
• update trivy-operator to version 0.31.0 (#2546) (73e0755)
• update oauth2-proxy to version 8.3.2 (#2648) (5d69dbe)
• bump @jest/types from 29.6.3 to 30.2.0 (#2704) (273ac5d)
• update kube-prometheus-stack to version 79.5.0 (#2716) (f13ce56)
• upgrade ArgoCD Image Updater and migrate to upstream chart (#2734) (3502d62)
• update oauth2-proxy to version 8.3.3 (#2699) (b4e6bf5)
• update keycloakx to version 7.1.4 (#2573) (ce8a3a4)
• add recommended vscode pkg (#2384) (6238b0c)
• update policy-reporter to version 3.5.0 (#2520) (a127b28)
• update argo-cd to version 8.6.4 (#2608) (d21a8d6)
• update Istio to version 1.27.3 (#2633) (1504b93)
• update promtail to version 6.17.1 (#2657) (b2b34d4)
• update kube-prometheus-stack to version 79.0.1 (#2650) (1fd9d6e)
• update kserve to version v0.16.0 (#2686) (7775c2f)
• deprecate tempo (#2740) (61a30f0)
• update sealed-secrets to version 2.17.9 (#2694) (85742a1)
• update kyverno to version 3.5.2 (#2535) (a05e177)
• bump the npm-dependencies group across 1 directory with 13 updates (#2680) (3ac554c)
• update loki-distributed to version 0.80.6 (#2655) (9dab7b6)
• bump the npm-dependencies group with 2 updates (#2702) (e5b1712)

4.12.0 (2025-10-30)

Features

• add .editorconfig to values repository (#2492) (4b58405)
• add databases and knowledgebases to gitops directories (#2547) (b70a794)
• add install and remove it from apply (#2470) (c2dd635)
• add kserve to core (#2549) (eccb344)
• add network policies for otomi-api (#2490) (71f740d)
• add support for Linode Kubernetes Engine tier configuration (#2464) (5fb5efe)
• add Wiz setup and configuration for Linode Kubernetes Integration (#2465) (f3ee976)
• adding k8s v1.34 support (#2564) (bcc5b4a)
• migrate gitea dependencies from bitnami (#2527) (66094f0)
• update PostgreSQL to new base images (#2609) (e77dffd)
• update rabbitmq bitnami chart to legacy (#2604) (c0eeaae)
• updated external-dns chart to use official chart (#2560) (8490afc)
• upgrade oauth2-proxy chart and move away from bitnami redis dependency (#2582) (4e7de44)
• use keycloakx chart instead of bitnami (#2521) (a674373)
• use native metrics-server chart (#2514) (f6fdadd)
• use native minio helm chart instead of bitnami (#2541) (699e8d6)
• using Thanos image from quay registry instead of bitnami (#2568) (106abd8)

Bug Fixes

• aiEnabled default false and ensure aiGitOpsDirs (#2566) (fd1da9b)
• check template output for apply (#2585) (4f72c1c)
• deploy namespaces during upgrade (#2626) (1b3e5f8)
• do setup wiz after checkout (#2504) (c83115e)
• include region in KFP endpoint (#2599) (d84d083)
• installation reattempts and race condition with operator (#2571) (b368695)
• job: remove default value for useORCS in job.yaml (#2513) (23b15f8)
• knative local gateway label selector (#2607) (ab2f41d)
• kubeflow-pipelines compatability with MinIO (#2528) (3e93325)
• metrics-server image reference for orcs (#2537) (40f3e96)
• only update deployment state on completion (#2618) (1ef510f)
• orcs image reference for tekton-pipelines (#2563) (e53b5c3)
• re-creation of team files (#2466) (5bf87f7)
• removing .github dir from apl-charts (#2605) (e4b99a0)
• skip check on operator app sync (#2553) (777ddaf)
• storage configuration for pipeline output artifacts (#2567) (b1dc966)
• team namespace not being created (#2561) (93fc252)
• team-ns builds docker.yaml (#2617) (f08eb5f)
• tekton-tasks git-clone basic auth (#2606) (342f585)
• unambiguously refer to ArgoCD apps (#2493) (a493555)
• update apl-operator before other upgrades (#2500) (9575284)
• update ingress in pre-upgrade to avoid upgrade deadlock (#2552) (d76e5d3)

CI

• add cnpg barman plugin chart (#2623) (b90c872)
• adjust chart versions (#2624) (82b1501)
• align chart index version with used chart (#2629) (59edd74)
• do not deploy httpbin (#2622) (6042de9)
• fix apps side effect (#2480) (5aac034)
• fix chart download dir and semver check (#2593) (f772551)
• fix integration tests with ORCS (#2569) (d57d798)
• fix post-upgrade function (#2482) (189d630)
• fix variable name in upgrade script (#2471) (993cdb6)
• fixes for chart autoupdater and chart index (#2588) (af28c17)
• move commit ref to variable to force quoting (#2583) (2059e65)
• PR autoupdate to use GH API and pass on errors (#2551) (f6207f2)
• using k8s v1.34 by default (#2616) (95a98c1)

Others

• chart-deps: update argo-cd to version 8.3.0 (#2458) (fbc7876)
• chart-deps: update argo-cd to version 8.5.8 (#2557) (92e379d)
• chart-deps: update cert-manager to version v1.19.0 (#2577) (846cffb)
• chart-deps: update cloudnative-pg to version 0.26.0 (#2456) (ca1f4a5)
• chart-deps: update external-dns to version 8.9.2 (#2327) (363e95c)
• chart-deps: update gitea to version 12.2.0 (#2473) (b59ea1c)
• chart-deps: update harbor to version 1.17.2 (#2428) (36f9e69)
• chart-deps: update ingress-nginx to version 4.13.1 (#2453) (dd30e4b)
• chart-deps: update ingress-nginx to version 4.13.3 (#2558) (7c3bf89)
• chart-deps: update keycloak to version 24.9.0 (#2417) (13d0d52)
• chart-deps: update kube-prometheus-stack to version 75.18.1 (#2435) (6300f3b)
• chart-deps: update kyverno to version 3.5.1 (#2483) (985810f)
• chart-deps: update policy-reporter to version 3.4.2 (#2479) (d597d37)
• chart-deps: update sealed-secrets to version 2.17.4 (#2476) (98b7f4b)
• chart-deps: update sealed-secrets to version 2.17.7 (#2526) (246d5cf)
• chart-deps: update tekton-pipeline to version 1.3.1 (#2477) (9f51d27)
• deps: bump actions/checkout from 4 to 5 (#2468) (8e16920)
• deps: bump actions/setup-node from 4 to 5 (#2508) (a4b24e7)
• deps: bump amannn/action-semantic-pull-request from 5 to 6 (#2467) (f3cdd31)
• deps: bump ncipollo/release-action from 1.18.0 to 1.19.0 in the github-actions-dependencies group (#2488) (2469a78)
• deps: bump ncipollo/release-action from 1.19.0 to 1.20.0 in the github-actions-dependencies group (#2507) (3a42628)
• deps: bump the npm-dependencies group across 1 directory with 17 updates (#2540) (cfed5e7)
• deps: bump the npm-dependencies group with 10 updates (#2469) (2b9d6e1)
• deps: bump the npm-dependencies group with 4 updates (#2487) (ce4326c)

4.11.0 (2025-09-22)

Features

• add deprecated labels for Jaeger, Falco, Httpbin and Kiali apps (#2421) (c1ec6ad)
• add network policies chart (#2434) (e86ef65)
• added ORCS support for external-dns (#2386) (b29224c)
• adding aplCharts version support (#2401) (e2a34aa)
• adding ORCS support for kubeflow (#2420) (a0dd5a3)
• cleanup /tmp/otomi directory before applying apps (#2422) (14d96d0)
• enable prometheus by default (#2425) (edc3c98)
• optionally use cnpg backup plugin (#2451) (6a2ed5f)

Bug Fixes

• deploying apl (#2442) (e5f68d5)
• disabling immediate cnpg backups (#2443) (5d3d76e)
• handle merge conflicts in apl-operator (#2452) (08212c9)
• push apl-charts repository with tag (#2455) (d3e0d62)
• re-creation of team files (#2466) (23ccd89)
• replace fs-extra with fs (#2427) (c13a263)
• smoke tests should fail on template rendering failure (#2426) (a550fd6)
• unambiguously refer to ArgoCD apps (#2493) (4c719f1)
• update apl-operator before other upgrades (#2500) (ed87801)

CI

• always set PR to draft, mention pending version update (#2439) (0af02f6)

Others

• chart-deps: update cert-manager to version v1.18.2 (#2305) (add84f1)
• chart-deps: update istiod to version 1.26.3 (#2398) (0031651)
• chart-deps: update kyverno to version 3.5.0 (#2404) (041a194)
• chart-deps: update policy-reporter to version 3.3.2 (#2408) (d4a8c0a)
• chart-deps: update policy-reporter to version 3.4.0 (#2462) (b1139b8)
• chart-deps: update trivy-operator to version 0.30.0 (#2433) (a1c62d4)
• deps: bump ignore-walk from 7.0.0 to 8.0.0 (#2415) (69f34e0)
• deps: bump the npm-dependencies group across 1 directory with 12 updates (#2444) (d3b1995)
• remove project schema (#2441) (23e988c)
• update version for runtime upgrade (#2463) (83e9906)
• upgrade Gitea (#2454) (20e5662)

4.10.1 (2025-09-17)

Bug Fixes

• apl-operator upgrade (f601e38)

4.10.0 (2025-08-21)

Bug Fixes

• migrate CloudnativePG backup to plugin for improved resource control (#2299) - (64865ec) - merll
• deploying apl (#2442) - (f007cfd) - CasLubbers
• disabling immediate cnpg backups - (f6d09be) - Ani1357

Features

• add kubeflow pipelines to core (#2198) - (807208b) - Sander Rodenhuis
• load prometheus rules for cnpg (#2353) - (d4e1672) - jeho
• skip apl-operator application in development mode (#2340) - (10225bb) - CasLubbers
• remove invalid logic regarding namespace creation (#2362) - (75e95e4) - jeho
• knativeserving cr upgrade script (#2368) - (6e4bb4d) - Ani Argjiri
• ignoring metadata.generation for ValidatingWebhookConfiguration… (#2395) - (4c74c76) - Ani Argjiri
• add ORCS monitoring (#2308) - (f3a53e1) - CasLubbers
• removed unused policy-reports dashboards and whitelisted registries (#2409) - (376f476) - Ani Argjiri
• optionally use cnpg backup plugin (#2451) - (ffec8ea) - merll

Miscellaneous Chores

• (chart-deps) update sealed-secrets to version 2.17.3 (#2234) - (f85585e) - svcAPLBot
• (chart-deps) upgrade metrics-server to 0.8.0 (#2361) - (07128b0) - merll
• (deps) update apl-tools version in dockerfile (#2367) - (12d3699) - Ferruh
• (deps) bump the npm-dependencies group with 8 updates (#2369) - (b95049c) - dependabot[bot]

Revert

• adding KnativeServing CR ORCS support (#2260)" (#2352) - (5d1cc36) - jeho

Ci

• add chart-deps label to newly created pull requests (#2412) - (c2d790e) - CasLubbers

4.9.0 (2025-08-06)

Features

• default platform storage class (#2376) (2f661f9)

Bug Fixes

• prometheus-operator storageclass (#2410) (6c08492)

4.8.0 (2025-07-31)

Features

• add Prometheus monitoring configuration for database resources (#2317) (1ede9d0)
• add support for deleting Tekton-managed pods and enhance Istio … (#2287) (41560c1)
• adding harbor ORCS support (#2385) (97eca95)
• adding knative ORCS support (#2357) (23d46e0)
• adding KnativeServing CR ORCS support (#2260) (9871159)
• adding ORCS support for tekton tasks (#2387) (74ed32d)
• apl-operator clean error messages (#2290) (3b53e6b)
• enabling ORCS by default (#2337) (afde740)
• making linode provider an ORCS dependency (#2380) (cb7d265)
• nickname as username for gitea (#2303) (d39d9ac)
• reverting ORCS migration for upgraded clusters (#2381) (1ac4b86)
• set custom repository and use selectors on argocd applications (#2286) (8f0cc6b)
• updating tekton registry (#2339) (a2b1488)

Bug Fixes

• enhance commit and push operations with quiet mode and error han… (#2304) (8107c42)
• net-istio-webhook image override (#2382) (b28798e)
• reattempt on first installation failure (#2310) (59a513d)
• remove version tag of Keycloak (#2319) (76d6e25)
• rendering keycloak release (#2390) (88ffe4b)
• set database connections to 32 for Gitea, Harbor and KC (#2311) (47173b2)
• specify branch in git pull to ensure correct updates from origin (#2301) (a43a164)
• typo for kyverno prometheus label (#2309) (ebdfbff)
• update home url for the apl chart (#2347) (2e3d389)
• velero linode plugin image (#2345) (b0f56ca)

Code Refactoring

• remove deprecated otomi-pipelines references (#2312) (b9e7de0)

CI

• add CloudFirewall rule for prometheus-node-exporter (#2324) (f1eed4e)
• adding ORCS support to the apl installer job and dev github action (#2379) (94c63d8)
• oauth2-proxy chart source (#2285) (b9f555f)
• pin commit hash in ArgoCD target revision (#2307) (fde66ba)
• workflow_dispatch with useORCS set tu true (#2300) (01c2955)

Others

• chart-deps: upgrade oauth2 proxy to 7.12.18 and fix session interruption (#2288) (8ff04ae)
• deps: bump @apidevtools/json-schema-ref-parser from 13.0.1 to 14.0.2 (#2295) (3b6e68a)
• deps: bump dotenv from 16.5.0 to 17.0.0 (#2296) (fd6610c)
• deps: bump jest and @types/jest (#2297) (cdf27bd)
• deps: bump ncipollo/release-action from 1.16.0 to 1.18.0 in the github-actions-dependencies group (#2294) (2a724b4)
• deps: bump the npm-dependencies group with 12 updates (#2318) (6760d28)
• deps: bump the npm-dependencies group with 8 updates (#2293) (9ab1317)
• deps: bump the npm-dependencies group with 9 updates (#2343) (2dfd8c0)
• post release changelog v4.7.0 (#2289) (64defcc)
• update helm version to 3.18.4 (#2338) (7431a3e)
• update readme image (#2302) (56d54a5)

4.7.0 (2025-06-26)

Features

• add argocd prometheus rules (#2262) (822cc2b)
• add ensure git ops directories to apply-as-apps (#2211) (a033abb)
• add post-install cleanup job (#2207) (84fd5ab)
• APL-672 adding ORCS support (#2203) (57b802d)
• compatibility k8s version v1.33 (#2107) (29c92ce)
• deploy manifest using apl-operator instead of using Tekton (#2151) (bb1623d)
• detect and restart pods with old istio-proxy version (#2232) (373408f)
• implement restart functionality for otomi-api deployment (#2272) (ed2b8a7)
• optimize the order of deploying manifests during the initial installation (#2250) (109943a)
• replace clusterrole for secrets with namespaced role and removed ingress update clusterrole (#2163) (bc22632)
• upgrade Gitea to recent release (#2085) (8267993)
• upgrade k8s/client-node and node 22 (#2204) (b09b0f3)
• upgrade Keycloak to recent release and deprovision operator (#2078) (9e84b9f)

Bug Fixes

• actually check for difference between files (#2164) (eaf03aa)
• add default values to apl-operator (#2251) (67c3dd2)
• added v1.33 to the supportedK8sVersions.json file (#2159) (b6e761f)
• adjust Gitea backup service account (#2187) (18dc630)
• always deploy tekton and apl related namespaces (#2284) (2058097)
• annotate Gitea volume (#2158) (3c2dc50)
• APL-851 knative service url rendering (#2214) (c0d37e6)
• barman compatibility with non-aws object storage (#2221) (98e5ed7)
• create gitea-db-secret before database exists (#2279) (b4ae09d)
• create initial credential secret before the message shows up (#2226) (5650905)
• handle error when retrieving git log for empty repository (#2257) (b497184)
• include ingress-nginx apps in values (#2132) (6141f21)
• incompatibility between helm and helm-secrets (#2215) (d5df084)
• knative-operator templating (#2236) (826a394)
• only run coverage report on changes in src (#2202) (1e6cad4)
• perform cleanup after installation within job (#2235) (658254e)
• pre-upgrade script, username, and installation order for Keycloak (#2128) (219a594)
• prerelease versions in upgrade check (#2246) (54fe687)
• prerelease versions in upgrade check (#2248) (ccb22b7)
• quote sensitive values in Helm templates (#2150) (214bd5d)
• removed apl docs links from apps (#2245) (c09c727)
• restart otomiApi deploy after 4.7.0 upgrade (#2280) (044a662)
• restore istiod configuration (#2177) (82f7af7)
• sealed secrets sample file (#2201) (78583dd)
• set default k8s version 1.32 (#2156) (d12707a)
• set default k8s version to 1.33 for gh workflows (#2220) (70a4a98)
• skip runtime upgrades during intial install and pre-release on same patch (#2278) (c360dac)
• small fixes in go templates (#2157) (9c818e8)
• status code evaluation from k8s client (#2225) (340f7b6)
• suppress output during cleanup of ClusterRoleBinding (#2252) (61bc164)
• team grafana password (#2168) (44e5238)
• tekton-triggers-webhook image (#2258) (a8f51d3)
• update apply state (#2231) (377ca60)
• update helmfile template version in migration script for apl-operator (#2261) (a465450)
• update istio proxy image tag for ORCS (#2281) (375054b)
• use single-instance cache for Gitea (#2208) (f6bdf74)

CI

• enhance dependabot configuration for auto-approval and grouping… (#2271) (6523159)
• install Cloud Firewall Controller for LKE cluster (#2137) (9111015)
• read gitea-credentials from cluster (#2171) (588a480)
• remove pre-commit hook (#2186) (30fa367)
• restart dev apl-operator after main branch update (#2178) (29fb155)
• update apps.yaml with charts (#2270) (e1bba4f)

Others

• add code owners (#2141) (2dd59af)
• added .editorconfig (#2209) (71de040)
• chart-deps: update harbor to version 1.17.1 (#2190) (270b467)
• chart-deps: update ingress-nginx to version 4.11.6 (#2165) (95156b3)
• chart-deps: Upgrade Kiali Operator (#2176) (8220f96)
• chart-deps: upgrade Knative Operator to 1.18.1 (#2181) (9ec688e)
• deps: bump actions/checkout from 3 to 4 (#2122) (7d9d239)
• deps: bump the npm-dependencies group with 18 updates (#2277) (2ee5d81)
• deps: update dependencies, replace ts-node with tsx, add new eslint file (#2125) (29e22ab)
• deps: upgrade argocd to v3.0.3 (#2175) (f782fcb)
• follow db default version of platform (#2197) (c924925)
• Helmfile v1 compatibility [TOOLS][MINOR] (#2136) (515ceca)
• set versions to main (#2127) (9c73f65)
• update SECURITY.md (f5d0464)
• update the displayed versions (#2152) (4bac5c5)
• update versions (71e8eca)
• Upgrade CloudnativePG Operator (#2183) (48369f4)
• upgrade Istio and deprovision istio operator (#2155) (b8a1c94)
• Upgrade Keycloak to latest release (#2174) (f5f68a0)
• Upgrade to Istio 1.26.1 (#2210) (2d978ee)
• v4.6.0 changelog anf package*.json update [ci skip] (#2182) (ca23641)

4.6.0 (2025-05-27)

Features

• compatibility k8s version v1.33 (#2107) (9bd46c9)
• upgrade Gitea to recent release (#2085) (8267993)
• upgrade Keycloak to recent release and deprovision operator (#2078) (9e84b9f)

Bug Fixes

• added v1.33 to the supportedK8sVersions.json file (#2159) (9809d45)
• annotate Gitea volume (#2158) (731e810)
• include ingress-nginx apps in values (#2132) (6141f21)
• pre-upgrade script, username, and installation order for Keycloak (#2128) (219a594)
• quote sensitive values in Helm templates (#2150) (214bd5d)

Others

• add code owners (#2141) (2dd59af)
• deps: bump actions/checkout from 3 to 4 (#2122) (7d9d239)
• deps: update dependencies, replace ts-node with tsx, add new eslint file (#2125) (29e22ab)
• set versions to main (#2127) (9c73f65)
• update the displayed versions (#2152) (4bac5c5)
• versions: updating apl projects versions (be18652)

4.5.0 (2025-05-06)

Features

• add argocd sync waves to ensure tasks and pipelines are created in the right order (#2117) (9ac4dcc)
• add gitea repo public url as env (#2034) (332fdcb)
• allow gitea-operator to list pods in Gitea namespace (#2106) (2062488)
• argocd to check repo every 15s (#2075) (81578f6)
• auto creation of webhooks in gitea for builds (#1971) (b5338af)
• CNPG recovery options (#1926) (98d8bfe)
• improve gitops compatibility by defining new file structure (#1930) (8e15923)
• new build page (#2026) (7bee88b)
• rely solely on metadata name (#2040) (0f89b2b)
• service page using new components (#1996) (f3b5745)
• split up team policies to single file (#2057) (33d68ff)
• static team settings page (#2024) (b6c66b1)
• switching to linode-block-storage as default for tekton builds (#2101) (776f3c4)
• update api and console versions (#2019) (793df47)
• updated ingress_nginx helm chart to v4.11.5 (#2011) (4d81a61)
• updated keycloak operator and gitea values (#2008) (ebda118)
• use internal service for traffic between apl-api and gitea (#2016) (775e307)

Bug Fixes

• 5xx errors (#2025) (85f474f)
• alert values (#2077) (053077b)
• always deploy ingress for team core apps (#2110) (5121cad)
• commit and push (#2066) (d358c38)
• correct values order (#2074) (d92a543)
• decrypt after updated structure encryption (#2082) (9be7903)
• dont run team-tasks on "ci_skip" commits (#2103) (8e129bd)
• ensure sealedsecrets and workloadValues directories exist (#2069) (ac1b191)
• get envDir path from the function argument (#2004) (8341059)
• log complete error of ajv validation (#2065) (1420a40)
• move operator rbac to chart (#2093) (790b99f)
• obtaining the apl version from values repo (#2003) (242a42e)
• only encrypt secret files if not encrypted (#2086) (920ef83)
• process resource quota as list (#2055) (3a344b4)
• pull before pushing to gitea in commitAndPush func (#2063) (96003c8)
• rabbitmq out of sync in argocd (#2018) (c4ed6dd)
• remove coverage annotations (#2050) (0eab891)
• remove resourcequota and limitrange limits (#2115) (73fdd55)
• render build git-credentials only if secretName specified (#2062) (ffdfa3e)
• replace username and password from git related logs (#2037) (94b056f)
• selfservice defaults (#2104) (5e60e9e)
• set resource limits to enforce resource defaults for containers (#2100) (41d316a)
• set team defaults (#2095) (6f7d447)
• team access to loki logs (#2116) (c39bc9b)
• team-ns build templates for git credentials (#2068) (8716f15)
• updated keycloak init container version rendering (#2108) (ce8f4f0)

Others

• chart-deps: update external-dns to version 8.7.8 (#2015) (3bb0b16)
• deps: bump @types/lodash from 4.17.13 to 4.17.16 (#2041) (3143105)
• deps: bump @types/retry from 0.12.2 to 0.12.5 (#1915) (f8aa45a)
• deps: bump debug and @types/debug (#1913) (a2a5b79)
• deps: bump ncipollo/release-action from 1.15.0 to 1.16.0 (#1972) (54b2960)
• deps: bump ts-node-dev from 1.1.8 to 2.0.0 (#1914) (7a586c1)
• set api version 4.1.1 (#2036) (e186417)
• update .env.sample (#2017) (22cc2f5)
• update api version (#2030) (a6254b2)
• update pull request template (#2046) (e58f39d)
• update task version (#2022) (7b3ce79)
• update versions (#2043) (fb4340f)

Tests

• add build fixtures (#2067) (c0f4765)

CI

• added automatic deployment to dev for commits to main (#2047) (a0a4623)
• added checkout step to deploy-to-dev job (#2048) (ea0722b)
• added pr-autoupdate job (#2053) (b731a85)
• added release candidate pipelines (#2076) (54d4727)
• fix compare.sh script (#2045) (b299c9f)
• fixed git config order (#2096) (4305ef1)
• path of workload values in installation profiles (#2028) (d8e3552)
• update manifest kind in fixtures (#2029) (830b5b2)
• update test fixtures (#2039) (5e1dc9c)
• updated github token to bot token (#2099) (4258f87)
• updated trigger_dev.sh clone directory (#2049) (aa419a9)
• updated workflow to use a PAT instead of the default GITHUB_TOKEN (#2088) (f098b49)
• using BOT_EMAIL and BOT_USERNAME variables (#2094) (b9bb9dc)
• using node 20 (#2092) (ed24a18)

4.4.0 (2025-03-14)

Features

• add coderepository schema & fixtures (#1945) (0382ee1)
• added semantic-release gh-actions (#1933) (8b379fa)
• added upgrade script for secrets (#1967) (86b8ae0)
• api endpoint (#1982) (24b45e9)
• Add self-service option for admins to add external helm charts to the catalog (#1979) (fb993e1)
• create service accounts for gitea organizations (#1929) (40a3d20)
• deploy sealed secrets from the values repo (#1924) (f70c855)
• update versions.yaml (#1989) (69224d6)

Bug Fixes

• check for helm secrets version and update it (#1927) (b74377c)
• checking if gitea is ready in git-clone tasks (#1936) (a3dfb4a)
• falco dashboard title (#1928) (d0fb19c)
• generate password with special characters (#1938) (f16ce6b)
• ignoreDifferences for apps created by team-admin (#1995) (80e260e)
• removed git error which can expose credentials (#1944) (4c00fa1)
• unique admin password for gitea (#1910) (a2f1349)
• unique admin password for gitea (#1940) (eea8299)
• workload with validatingwebhookcfg (#1942) (70d6aee)

Reverts

• fix - unique admin password for gitea (#1939) (7d8bf90)

CI

• add charts and alias (#1931) (57c74ec)
• added alias for rabbitmq operator (#1966) (c557cbf)
• added more linode types to the integration workflow (#1976) (2c6e084)
• update chart index and improve checks (#1963) (0ee8cd2)
• update chart references (#1937) (fea5c4c)
• update workflow to support k8s 1.32 and wait for kubeconfig (#1943) (ab7b631)

Others

• chart-deps: update cert-manager to version v1.17.1 (#1941) (e634d34)
• chart-deps: update harbor to version 1.16.2 (#1903) (af1a3a0)
• chart-deps: update rabbitmq-cluster-operator to version 3.20.1 (#1969) (d3f8a2f)
• deps: bump helm/chart-releaser-action from 1.6.0 to 1.7.0 (#1901) (d759673)
• deps: bump ncipollo/release-action from 1.14.0 to 1.15.0 (#1893) (abdee3d)
• tasks version to 3.7.0 (#1977) (cfa5608)
• updated api and console versions (#1999) (753e480)
• versions (#1970) (40ef843)

4.3.0 (2025-02-10)

Features

• add coverage to github ci (#1920) (232bb48)
• add support for Kubernetes 1.32 (#1894) (9b1e19c)
• added more charts to the chart-index (#1900) (061d372)
• updating teams defaults (#1909) (6dc29db)
• fix decrypt (#1922) (ea3badf)
• fix open redirect vulnerability (#1899) (f180cc9)
• increase Gitea timeout (#1921) (21a0691)
• lowering DBs cpu resources (#1891) (07ba2b9)

Bug Fixes

• added team networkpolicies to the team-ns values gotemplate (#1902) (51300a5)
• bootstrap team password (#1917) (b5ac229)
• encryption (#1919) (3773a29)
• package-lock (#1923) (4d488b7)
• team network policies (#1904) (9b5ee85)
• update message (#1889) (152dcd2)
• update session settings for Gitea (#1908) (0b639bb)
• use emptydir for Gitea backup volume on custom provider (#1898) (80ebd93)

Others

• chart-deps: update cert-manager to version v1.16.2 (#1874) (bfeb0a0)
• chart-deps: update cert-manager to version v1.16.3 (#1896) (7d78be9)
• chart-deps: update cloudnative-pg to version 0.23.0 (#1880) (84748ed)
• chart-deps: update harbor to version 1.16.1 (#1892) (75fc895)
• chart-deps: update promtail to version 6.16.6 (#1877) (bada051)
• chart-deps: update sealed-secrets to version 2.17.1 (#1897) (e3f074a)
• deps: bump actions/checkout from 3 to 4 (#1869) (ea9e397)
• deps: bump actions/setup-node from 3 to 4 (#1868) (d13e48c)
• deps: bump linode/apl-tools from v2.8.6 to v2.8.7 (#1870) (21dcaf9)
• update changelog (#1890) (2c0e39f)
• update console and api to latest release (#1932) (0fab990)
• update task version to 3.6.0 (#1895) (5e07fd0)
• update task version to 3.6.1 (#1916) (9e1b61f)
• updated trivy-operator helm chart registry (#1905) (6cb6017)

4.2.2 (2025-01-09)

Features

• lowering DBs cpu resources (#1891) (df2245a)

4.2.1 (2025-01-08)

Bug Fixes

• update message (#1889) (4552c4a)

4.2.0 (2025-01-08)

Features

• add dependabot (#1807) (497c66d)
• add path for gitea (#1835) (6e62d6a)
• add prometheus rule to validate db backup executions (#1866) (5586cd9)
• add prometheus rules for cnpg backups (#1837) (99e9e20)
• add resource configuration for apps to teams (#1819) (64a51c3)
• lower database memory footprint (#1856) (8dfe18b)
• cnpg upgrade fix (#1871) (faa8ac8)
• github-actions update (#1825) (e0bc42e)
• lower pipeline and db footprint (#1873) (3b76352)
• upgrade to node 20 (#1797) (69d7364)
• patch argocd resources when oomkilled (#1814) (99553f3)
• removed uneeded tag (#1811) (8cc8441)
• render only relevant values for team-ns helm chart (#1872) (37bdd3c)
• update helm secrets (#1839) (6ea07ae)
• updated cloud-tty tools [TTY][MINOR] (#1815) (26f388e)
• updated release tag generation (#1816) (ea936d6)
• upgrade Trivy Operator to support k8s version 1.31 (#1845) (e78fdb8)
• upgrading cnpg chart and postgresql version (#1784) (2e355c5)

Bug Fixes

• git url encoding in otomi-tasks (#1808) (74a1705)
• apl-tools patch image generation (#1824) (662db99)
• broken builds in the input files (#1838) (de56ccb)
• CNPG object storage endpint URL (#1812) (3b79846)
• dependabot ignore >=21 node (#1823) (d921978)
• ensure correct working directory and increase retry timeout (#1882) (4ab74e0)
• install minio based on enabled (#1847) (f99e49f)
• reference to team network policies (#1888) (1467a61)
• removed external-secrets charts from chart-index (#1864) (8a20b29)
• removed repoUrl variable from error message (#1885) (1f64773)
• resource check for argocd controller (#1836) (a02a5b8)
• skip assignment of team-admin to argocd admin roles (#1818) (39a53f9)
• update values schema to adhere k8s naming (#1850) (8e8e21d)

CI

• add script to check for helm chart updates (#1827) (d77351d)
• update chart version index for a single chart (#1867) (d636aba)

Tests

• set the isPreinstalled flag (#1887) (d78625f)

Others

• deps: bump linode/apl-tools from v2.8.2 to v2.8.5 (#1820) (82e3716)
• deps: bump ncipollo/release-action from 1.12.0 to 1.14.0 (#1821) (4aa18e6)
• update api v3.4.0 (#1826) (be6aa6e)
• update console (#1886) (1ce8700)
• versions (#1817) (5f1ea8c)
• versions (#1879) (ff29a21)

4.1.0 (2024-11-12)

Features

• added cors for ouath2-proxy ingress (#1799) (d0ee298)
• added policy setting to external-dns values (#1793) (d6d9741)
• adjust retry factor to 1 and 30 retries of 1 minute (#1801) (70099bc)
• object storage wizard (#1790) (4d28234)
• set datasource for trivy dashboard to default (#1796) (cd52cc0)
• update tools version (#1794) (718719b)

Bug Fixes

• change default falco driver (#1795) (5fc6f14)
• datasource for team and platform Grafana dashboards (#1785) (6782421)
• falco team grafana falco dashboard datasource (#1806) (378903f)

Others

• rename application to app (#1804) (9d886eb)
• update packages and docker image [TOOLS][MINOR] (#1788) (1ab0fca)
• versions (#1802) (8dca419)

4.0.0 (2024-11-01)

Features

• add init container for oauth2 proxy (#1779) (e3886cc)
• add thanos for prom HA (#1729) (6dd3ad7)
• add support for externally-managed-tls-secret (#1746) (f72ff6c)
• remove gatekeeper (#1737) (fe9f06f)
• upgrade tools versions (#1743) (d7918dc)
• upgrade ingress apps (#1761) (990d3a1)
• implement argocd applicaiton removal (#1727) (bb4a757)
• chart index (#1759) (f29e5bf)
• add configurable core apps resources and scaling optimization (#1754) (938ac7d)
• default platform admin user (#1770) (7f1f6d3)
• gitea backup to object storage (#1723) (d2d3064)
• implement age values encryption (#1709) (20ced03)
• improve installer job feedback (#1755) (d3e0783)
• add ispreinstalled flag (#1760) (e498b48)
• support k8s 1.31 upgrade (#1742) (c298d8d)
• add oauth2-proxy custom error page (#1758) (fef95dd)
• implement single prometheus for the whole platform (#1724) (79d84e2)
• remove optional private grafana (#1783) (9cc2b7e)
• upgrade apl-tools [TOOLS][MINOR] (#1735) (dbfc089)
• upgrade Istio Knative and Kiali (#1736) (600f584)
• upgrade kube-prometheus-stack (#1764) (4ce16ea)
• user management (#1740) (9eedbab)

Bug Fixes

• apl helm chart helpers(#1734) (a2460b9)
• Apl 307 apl-charts repo creation (#1774) (73aac2f)
• argocd queue processors and controller resource defaults (#1782) (ca5447a)
• byo certificate name (#1781) (92cc4fc)
• default cpu requests (#1741) (2cd44b4)
• default resource config (#1726) (5396b10)
• default resource config (#1747) (361e3d8)
• determine exact k8s version step (#1728) (f7f5271)
• get kms values & age key generation order (#1768) (570061d)
• helm notes (#1731) (f416c63)
• increase trivy limits in Harbor (#1777) (738a5d3)
• keycloak login page tag (#1778) (e85ff2c)
• knative domain-template (#1738) (5145a05)
• quote team password (#1765) (2401eac)
• remove additional cluster logic (#1787) (5e133c1)
• remove duplicate imagePullPolicy (#1752) (3c393d4)
• remove install instructions in README (#1771) (26f2c9a)
• remove upgrade script (#1786) (c50ba52)
• resource defaults (#1732) (6783cbb)
• Revert "fix: default resource config (#1747)" (#1750) (5b1d52f)
• set versions to main (#1730) (3c89f34)
• Trivy indent and capabilities (#1780) (04a2511)
• updated gh-actions, added no-apl (#1772) (af37325)
• upgrade Grafana stack (#1766) (3a75202)
• upgrade istio to 1.22.5 (#1769) (94fdabd)
• use platform-admin group instead of team-admin (#1762) (fdbd80d)
• values changes for istio resources (#1745) (603b281)
• versions (#1725) (460276e)
• versions (#1749) (4ad18c0)

Others

• Integration test domains (#1763) (b64c334)
• versions (#1775) (0980afb)
• versions (#1791) (cd68c48)
• github actions update to support valid dns by default (#1748) (73ed921)

3.0.0 (2024-09-19)

Bug Fixes

• v3 readme (#1722) (086072d)

3.0.0-rc.1 (2024-09-19)

Features

• add endpoint with values-schema (#1692) (65a00cb)
• added keycloak operator (#1625) (d8648fd)
• added linode as a deploy option (#1622) (7993122)
• apl operators cleanup (#1648) (9cd8b83)
• apl-console linode dockerhub (#1675) (1cd5dac)
• bootstrap default values (#1659) (cf1bf3c)
• console prefix (#1634) (ba34f5d)
• core apps that are always enabled (#1670) (174bf3f)
• decouple Gitea from community helm chart (#1595) (6e3178a)
• deploy core apps via argocd (#1630) (98ee9af)
• disabled release test and notification job for 3.0.0 rc (e97af7f)
• empty rawValues in defaults (#1671) (d43ac21)
• fix argocd out of sync issues (#1711) (c76c31b)
• gitea app operator (#1624) (89e03c5)
• harbor app operator (#1628) (43a050e)
• improve query_limits configuration for loki (#1612) (5e6d3db)
• improve robustness of initial install (#1623) (48730d9)
• increase resource limits for prometheus workloads (#1631) (5b0c2a2)
• kyverno policies (#1462) (07636a5)
• linode dockerhub apl-api (#1676) (5560608)
• linode dockerhub apl-tasks (#1677) (015f8f8)
• linode dockerhub apl-tty (#1679) (71c5ecc)
• make compatible with k8s 1.29 (#1619) (8f911d6)
• make compatible with k8s 1.30 [TOOLS][MINOR] (#1687) (7600d78)
• one backend obj for all apps (#1640) (b759896)
• only deploy gitops essential apps on initial install (#1690) (890b7f3)
• remove shortcuts (#1637) (096d9a1)
• remove team jobs (#1665) (142837d)
• remove wait-for job (#1702) (1fc5153)
• removed digitalocean deploy (#1615) (5776bc6)
• removing hashicorp vault and external-secrets (#1618) (dbca465)
• run test not in docker by default (#1606) [TOOLS][MAJOR] (a94b854)
• serve values-schema to api endpoint (#1678) (9401913)
• support for Akamai EdgeDNS (#1708) (12c11dd)
• updating tasks version (#1611) (04d5dac)
• use linode dockerhub for apl-core and apl-tools (#1686) (d979b43)

Bug Fixes

• add apl-keycloak-operator namespace (#1645) (57e23fd)
• add metricsgenerator resources to schema (#1592) (2f83b72)
• add missing if check in otomi tools image build (#1621) (7cbb16c)
• add trusted root certificates to images (#1620) (4dbb03e)
• added missing env variables to the chart-release job (31a3743)
• added the GHA workspace as a safe dir for git (cabdd65)
• announcement (f1dbac1)
• announcement [ci skip] (1f734ed)
• announcement akamai [ci skip] (29e7d51)
• apl deployment via GH actions (#1643) (aad6d71)
• apl keycloak operator tls (#1646) (7ef335d)
• apl readme rebranding (#1642) (fb16dcb)
• apl-146: validate-templates (#1672) (df5d907)
• argocd defaults (#1663) (c96cd83)
• argocd defaults (#1666) (011653d)
• argocd hpa defaults (#1681) (582999c)
• bucket only linode (#1703) (6ace30c)
• change repo url for catalog charts (#1635) (1a1f632)
• clone repo in pipeline (#1699) (329bace)
• cnpg linode obj location for gitea and keycloak (#1674) (183a8b1)
• defaults for linode webhook and tempo app (#1718) (d012094)
• don't exclude pipelinerun in argocd (#1656) (15bbc76)
• enable argo metrics (#1694) (d49c16c)
• enable workflow dispatch for otomi tools build (#1603) (7856756)
• errors in otomi-db chart (#1627) (8c8bbda)
• ex dns resources and dns apiToken Linode (#1719) (233e73e)
• falco custom rules (#1715) (c197173)
• git protocol (#1700) (632c127)
• gitea enabled flag (#1657) (feb7c65)
• gitea oauth configuration (#1673) (ecfb07a)
• handle version prefix in tools version increment script [TOOLS][MAJOR] (#1616) (5eda777)
• ignores in team trivy dashboard (#1713) (5b7bbc2)
• increase mem limits of apl-gitea operator (#1721) (5511bf4)
• keycloak login page and logout link (#1644) (d2b9e49)
• keycloak tab name (#1720) (776b94e)
• locations in schedule (#1717) (ec0e7de)
• loki auth for multi-tenancy (#1662) (abb6c81)
• loki storage config without OBJ (#1680) (5c2b76d)
• migrate cnpg storage property (#1688) (38c8cf9)
• missing cluster.yaml file (#1668) (909ddc1)
• missing env vars in release worklfow (8d594d4)
• move hardcoded certificates to the derived templates (#1667) (e9cf4ab)
• nginx defaults (#1693) (5c1097d)
• oauth2-proxy dns config go template (#1655) (dc07e16)
• readme docs link (#1697) (816c9f1)
• remove aws specif charts (#1638) (90832ce)
• remove providers ingress (#1651) (b435c57)
• rename docs links to new domain (#1698) (3539829)
• rm azure monitor (#1584) (056a3cc)
• rm civo (#1705) (9af2bc6)
• rm cloud storage and configure the storage class per app (#1636) (5be31fd)
• rm hasCloudLB flag (#1591) (7c2a833)
• rm home alerts (#1706) (318b386)
• rm opencost (#1585) (e9a8b4a)
• rm private ingress (#1712) (1d475d3)
• rm thanos (#1589) (6c0adc3)
• set defaults for apps (#1710) (00a9d35)
• set falco default driver (#1714) (8c421ed)
• set linode as default for otomi deploy (#1633) (cfaad40)
• set workflow input to 1.29 (#1695) (60e429d)
• sni hosts (#1658) (1642303)
• tagline [ci skip] (5675458)
• tekton pipelines rerun (#1594) (8847396)
• trivy resource defaults (#1682) (c74deb3)
• update dns ttl for linode dns provider (#1654) (73f5545)
• values changes (#1652) (6bedd2a)
• velero storage backup location (#1716) (643a4bd)
• versions.yaml (#1684) (4257b36)
• wrong indenting in otomi-db chart (#1626) (34a6608)

CI

• add renovate github action (d6954f1)
• change bot user (bfe3510)
• disable velero for full install profile (#1685) (9bf5ed3)
• remove marketplace integrations (#1602) (c82b047)
• rename chart (#1641) (c1d9134)

Tests

• bootstrap values as part of test suite (#1669) (6d5ad13)
• improve the compare.sh script (#1683) (ebf7635)
• manifest compare utilities (#1664) (3fc50c5)
• semver compare for rc releases (#1704) (8cdab4f)

Others

• apl-core transfer (#1639) (22eef0f)
• apl-task version (#1647) (c317521)
• apl-tasks version (#1707) (612c9e5)
• bump tools version in otomi core image (#1617) (f365a75)
• release: 3.0.0-rc.0 (f5da461)

3.0.0-rc.0 (2024-09-18)

Features

• add endpoint with values-schema (#1692) (65a00cb)
• added keycloak operator (#1625) (d8648fd)
• added linode as a deploy option (#1622) (7993122)
• apl operators cleanup (#1648) (9cd8b83)
• apl-console linode dockerhub (#1675) (1cd5dac)
• bootstrap default values (#1659) (cf1bf3c)
• console prefix (#1634) (ba34f5d)
• core apps that are always enabled (#1670) (174bf3f)
• decouple Gitea from community helm chart (#1595) (6e3178a)
• deploy core apps via argocd (#1630) (98ee9af)
• empty rawValues in defaults (#1671) (d43ac21)
• fix argocd out of sync issues (#1711) (c76c31b)
• gitea app operator (#1624) (89e03c5)
• harbor app operator (#1628) (43a050e)
• improve query_limits configuration for loki (#1612) (5e6d3db)
• improve robustness of initial install (#1623) (48730d9)
• increase resource limits for prometheus workloads (#1631) (5b0c2a2)
• kyverno policies (#1462) (07636a5)
• linode dockerhub apl-api (#1676) (5560608)
• linode dockerhub apl-tasks (#1677) (015f8f8)
• linode dockerhub apl-tty (#1679) (71c5ecc)
• make compatible with k8s 1.29 (#1619) (8f911d6)
• make compatible with k8s 1.30 [TOOLS][MINOR] (#1687) (7600d78)
• one backend obj for all apps (#1640) (b759896)
• only deploy gitops essential apps on initial install (#1690) (890b7f3)
• remove shortcuts (#1637) (096d9a1)
• remove team jobs (#1665) (142837d)
• remove wait-for job (#1702) (1fc5153)
• removed digitalocean deploy (#1615) (5776bc6)
• removing hashicorp vault and external-secrets (#1618) (dbca465)
• run test not in docker by default (#1606) [TOOLS][MAJOR] (a94b854)
• serve values-schema to api endpoint (#1678) (9401913)
• support for Akamai EdgeDNS (#1708) (12c11dd)
• updating tasks version (#1611) (04d5dac)
• use linode dockerhub for apl-core and apl-tools (#1686) (d979b43)

Bug Fixes

• add apl-keycloak-operator namespace (#1645) (57e23fd)
• add metricsgenerator resources to schema (#1592) (2f83b72)
• add missing if check in otomi tools image build (#1621) (7cbb16c)
• add trusted root certificates to images (#1620) (4dbb03e)
• announcement (f1dbac1)
• announcement [ci skip] (1f734ed)
• announcement akamai [ci skip] (29e7d51)
• apl deployment via GH actions (#1643) (aad6d71)
• apl keycloak operator tls (#1646) (7ef335d)
• apl readme rebranding (#1642) (fb16dcb)
• apl-146: validate-templates (#1672) (df5d907)
• argocd defaults (#1663) (c96cd83)
• argocd defaults (#1666) (011653d)
• argocd hpa defaults (#1681) (582999c)
• bucket only linode (#1703) (6ace30c)
• change repo url for catalog charts (#1635) (1a1f632)
• clone repo in pipeline (#1699) (329bace)
• cnpg linode obj location for gitea and keycloak (#1674) (183a8b1)
• defaults for linode webhook and tempo app (#1718) (d012094)
• don't exclude pipelinerun in argocd (#1656) (15bbc76)
• enable argo metrics (#1694) (d49c16c)
• enable workflow dispatch for otomi tools build (#1603) (7856756)
• errors in otomi-db chart (#1627) (8c8bbda)
• ex dns resources and dns apiToken Linode (#1719) (233e73e)
• falco custom rules (#1715) (c197173)
• git protocol (#1700) (632c127)
• gitea enabled flag (#1657) (feb7c65)
• gitea oauth configuration (#1673) (ecfb07a)
• handle version prefix in tools version increment script [TOOLS][MAJOR] (#1616) (5eda777)
• ignores in team trivy dashboard (#1713) (5b7bbc2)
• increase mem limits of apl-gitea operator (#1721) (5511bf4)
• keycloak login page and logout link (#1644) (d2b9e49)
• keycloak tab name (#1720) (776b94e)
• locations in schedule (#1717) (ec0e7de)
• loki auth for multi-tenancy (#1662) (abb6c81)
• loki storage config without OBJ (#1680) (5c2b76d)
• migrate cnpg storage property (#1688) (38c8cf9)
• missing cluster.yaml file (#1668) (909ddc1)
• move hardcoded certificates to the derived templates (#1667) (e9cf4ab)
• nginx defaults (#1693) (5c1097d)
• oauth2-proxy dns config go template (#1655) (dc07e16)
• readme docs link (#1697) (816c9f1)
• remove aws specif charts (#1638) (90832ce)
• remove providers ingress (#1651) (b435c57)
• rename docs links to new domain (#1698) (3539829)
• rm azure monitor (#1584) (056a3cc)
• rm civo (#1705) (9af2bc6)
• rm cloud storage and configure the storage class per app (#1636) (5be31fd)
• rm hasCloudLB flag (#1591) (7c2a833)
• rm home alerts (#1706) (318b386)
• rm opencost (#1585) (e9a8b4a)
• rm private ingress (#1712) (1d475d3)
• rm thanos (#1589) (6c0adc3)
• set defaults for apps (#1710) (00a9d35)
• set falco default driver (#1714) (8c421ed)
• set linode as default for otomi deploy (#1633) (cfaad40)
• set workflow input to 1.29 (#1695) (60e429d)
• sni hosts (#1658) (1642303)
• tagline [ci skip] (5675458)
• tekton pipelines rerun (#1594) (8847396)
• trivy resource defaults (#1682) (c74deb3)
• update dns ttl for linode dns provider (#1654) (73f5545)
• values changes (#1652) (6bedd2a)
• velero storage backup location (#1716) (643a4bd)
• versions.yaml (#1684) (4257b36)
• wrong indenting in otomi-db chart (#1626) (34a6608)

CI

• add renovate github action (d6954f1)
• change bot user (bfe3510)
• disable velero for full install profile (#1685) (9bf5ed3)
• remove marketplace integrations (#1602) (c82b047)
• rename chart (#1641) (c1d9134)

Others

• apl-core transfer (#1639) (22eef0f)
• apl-task version (#1647) (c317521)
• apl-tasks version (#1707) (612c9e5)
• bump tools version in otomi core image (#1617) (f365a75)

Tests

• bootstrap values as part of test suite (#1669) (6d5ad13)
• improve the compare.sh script (#1683) (ebf7635)
• manifest compare utilities (#1664) (3fc50c5)
• semver compare for rc releases (#1704) (8cdab4f)

2.11.0 (2024-04-19)

Features

• disable policy check for velero so restic can access hostpath (#1581) (796c5ed)
• schema for harbor databases (#1587) (6054f4c)
• improve upgrade scripts (#1571) (bbfd883)
• upgrade istio to 1.20 (#1590) (337a405)

Bug Fixes

• argocd resource configuration (#1580) (cd9c84f)
• remove OLM and argocd-operator related resources (#1586) (b17113b)
• removed unused gitlab app (#1583) (bd167a9)

2.10.0 (2024-04-05)

Features

• adjustments to Grafana team permissions (#1563) (3d16c1d)
• argocd deployed as chart (#1568) (c98f7fe)
• make netpols independent of Services (#1503) (69b7bbe)
• remove deprecated storage option for loki and GCS (#1556) (d0738e6)

Bug Fixes

• added runAsUser parameter for velero's node-agent (#1566) (0e6d021)
• metrics server extra args (#1570) (758daae)
• opencost gcp schema property is a secret (#1542) (c8b5c36)
• removed networkpolicy (#1567) (a50ad47)
• removed service account from values changes (#1565) (efcc095)

Others

• install dependencies (#1560) (c6da7ac)
• semver compatible chart version for devs (#1559) (e9bf224)
• versions (1ba02ce)

2.9.0 (2024-03-14)

Features

• add support for k8s 1.28 (#1546) (a84665b)
• always enable argocd app (#1555) (71a3e67)
• continue installation if the cluster validation cannnot be perf… (#1538) (41513c3)
• update velero cli (#1544) (7c9c3ce)
• whitelist all ingress traffic if team network policies are disa… (#1540) (6b4d70d)

Bug Fixes

• exclude argocd namespace from podAffinity mutation (#1547) (8a15029)
• update paketo builder image (#1548) (bb9b50d)