ADRs
ADR-2026-06-12 - Auth policy pod label (otomi.io/auth-policy)
ADR-2026-06-25 - Manifests directory in the values repo
ADR-2026-06-25 - git-server as the default values repository backend
ADR-2026-06-25 - Git credential management via Kubernetes Secret
What's Changed
- chore(chart-deps): update istio to version 1.29.2 by @svcAPLBot in #3136
- chore(deps): bump helmfile/helmfile-action from 2.4.1 to 2.4.2 in the github-actions-dependencies group by @dependabot[bot] in #3132
- chore(deps): bump the npm-dependencies group with 7 updates by @dependabot[bot] in #3131
- fix: making the deleteFile function synchronous by @Ani1357 in #3129
- feat: generate redis secret for ArgoCD deployment by @ElderMatt in #3144
- feat: platform secrets as sealed secrets by @ferruhcihan in #2978
- fix: remove hardcoded command from apl-operator chart by @CasLubbers in #3138
- fix: versions by @ferruhcihan in #3148
- chore: remove unused tracing collector by @merll in #3127
- chore(chart-deps): update cloudnative-pg-plugin-barman-cloud to version 0.6.0 by @svcAPLBot in #3140
- ci: add acl on cluster creation by @merll in #3139
- chore(chart-deps): update argocd to version 9.5.1 by @svcAPLBot in #3154
- fix: add missing migration function by @merll in #3160
- ci: check availability of Kubernetes API before attempting Helm install by @merll in #3151
- fix: remove auth from console endpoint by @merll in #3150
- ci: fix dev cluster update after merge by @merll in #3153
- chore(chart-deps): update oauth2-proxy to version 10.4.3 by @svcAPLBot in #3143
- chore(chart-deps): update cert-manager to version v1.20.2 by @svcAPLBot in #3135
- chore(chart-deps): update argocd to version 9.5.2 by @svcAPLBot in #3161
- ci: remove hasExternalDNS from values by @Ani1357 in #3158
- fix: do not attempt to re-install by @CasLubbers in #3170
- chore(chart-deps): update gitea to version 12.5.3 by @svcAPLBot in #3146
- fix: use XListenerSet for Istio compatibility by @merll in #3164
- ci: revert "remove hasExternalDNS from values" by @merll in #3176
- feat: remove tls passthrough by @merll in #3172
- feat: enable CNPG backup plugin by @merll in #3149
- ci: sanity check for schema versions by @merll in #3180
- chore(chart-deps): update argocd to version 9.5.4 by @svcAPLBot in #3179
- chore(chart-deps): update keycloak to version 7.1.11 by @svcAPLBot in #3174
- chore(deps): bump the npm-dependencies group with 3 updates by @dependabot[bot] in #3165
- chore(deps): bump linode/apl-tools from v2.11.0 to v2.11.1 in the docker-dependencies group by @dependabot[bot] in #3169
- chore(deps): bump uuid from 13.0.0 to 14.0.0 by @dependabot[bot] in #3167
- chore: swap order of migrations according to release by @merll in #3182
- feat: restart ArgoCD controller in case of unrecoverable error by @merll in #3178
- chore: update external secrets to 2.4.0 by @merll in #3187
- fix: cors filter syntax by @merll in #3189
- feat: add app label to http route by @j-zimnowoda in #3190
- chore(chart-deps): update argocd to version 9.5.7 by @svcAPLBot in #3188
- chore(chart-deps): update argocd to version 9.5.9 by @svcAPLBot in #3191
- chore(chart-deps): update kyverno to version 3.7.2 by @svcAPLBot in #3181
- chore(chart-deps): update policy-reporter to version 3.7.4 by @svcAPLBot in #3186
- chore(chart-deps): update external-secrets to version 2.4.1 by @svcAPLBot in #3192
- chore(chart-deps): update otel-operator to version 0.111.0 by @svcAPLBot in #3194
- feat: use smart git-http-server by @CasLubbers in #3103
- fix: do not remove .dec because they are not supported anymore by @j-zimnowoda in #3200
- test: fix by @j-zimnowoda in #3202
- fix: target namespace of grafana secrets by @merll in #3195
- chore(chart-deps): update kube-prometheus-stack to version 83.7.0 by @svcAPLBot in #3175
- docs: update link to documentation by @j-zimnowoda in #3208
- chore(chart-deps): update argocd to version 9.5.11 by @svcAPLBot in #3197
- feat: use default serviceentry resolution on wildcard by @merll in #3183
- chore: upgrade base images by @merll in #3216
- chore(deps): bump the npm-dependencies group across 1 directory with 9 updates by @dependabot[bot] in #3201
- feat: refactor tekton-pipelines chart to support private registries by @Ani1357 in #3163
- chore(deps): bump helmfile/helmfile-action from 2.4.2 to 2.4.3 in the github-actions-dependencies group by @dependabot[bot] in #3185
- chore(chart-deps): update prometheus-blackbox-exporter to version 11.10.0 by @svcAPLBot in #3204
- chore(chart-deps): update argocd to version 9.5.12 by @svcAPLBot in #3209
- chore(chart-deps): update otel-operator to version 0.112.1 by @svcAPLBot in #3212
- chore: adjust version of tekton-pipeline chart by @merll in #3221
- fix: failed connection between grafana and alertmanager by @ferruhcihan in #3222
- fix: include monitoring crds in chart for handling upgrades reliably by @merll in #3219
- feat: update secrets management for alertmanager configuration by @ferruhcihan in #3207
- fix: enforce jwt pub key update to sidecars by @merll in #3217
- chore(chart-deps): update external-dns to version 1.21.1 by @svcAPLBot in #3196
- chore: upgrade base image of core to v2.11.2 by @merll in #3218
- chore(chart-deps): update kube-prometheus-stack to version 84.5.0 by @merll in #3220
- feat: increase lieveness probe failureThreshold for apl-operator by @j-zimnowoda in #3012
- chore(chart-deps): update argocd to version 9.5.13 by @svcAPLBot in #3223
- chore(chart-deps): update knative-operator to version v1.22.1 by @svcAPLBot in #3225
- fix: expand AppProject RBAC policy wildcards to explicit resource types by @j-zimnowoda in #3215
- fix: image hashes by @merll in #3226
- chore(deps): bump helmfile/helmfile-action from 2.4.3 to 2.4.4 in the github-actions-dependencies group by @dependabot[bot] in #3232
- chore(chart-deps): update cloudnative-pg to version 0.28.1 by @svcAPLBot in #3233
- fix: add excludePaths to authpolicy-jwt for monitoring namespace by @ferruhcihan in #3236
- chore(chart-deps): update tekton-pipelines to version 1.12.0 by @svcAPLBot in #3224
- chore: kserve helm repository moved to new url by @merll in #3237
- chore(deps): bump ignore-walk from 8.0.0 to 9.0.0 by @dependabot[bot] in #3231
- chore(deps): bump @commitlint/config-conventional from 20.5.3 to 21.0.0 by @dependabot[bot] in #3230
- chore(deps): bump lint-staged from 16.4.0 to 17.0.4 by @dependabot[bot] in #3229
- chore(deps): bump @commitlint/cli from 20.5.3 to 21.0.1 by @dependabot[bot] in #3228
- chore(deps): bump the npm-dependencies group across 1 directory with 12 updates by @dependabot[bot] in #3238
- ci: refresh tool cache by @merll in #3241
- chore: upgrade node environment of ci scripts by @merll in #3242
- ci: fix stale node cache and remove refresh workflow by @merll in #3243
- chore(chart-deps): update otel-operator to version 0.112.2 by @svcAPLBot in #3240
- chore(chart-deps): update cloudnative-pg to version 0.28.2 by @svcAPLBot in #3239
- fix: pvc migration for the gitea-gitea-valkey by @ferruhcihan in #3234
- ci: adjust name for kserve chart in index and script by @merll in #3245
- ci: do not install wiz without APL by @merll in #3244
- chore(chart-deps): update harbor to version 1.19.0 by @svcAPLBot in #3210
- chore: upgraded postgres images by @merll in #3235
- chore(deps): bump the npm-dependencies group with 4 updates by @dependabot[bot] in #3256
- chore(chart-deps): update argocd to version 9.5.14 by @svcAPLBot in #3247
- chore(chart-deps): update otel-operator to version 0.113.1 by @svcAPLBot in #3250
- chore(deps): update kube prometheus stack to 85.2.0 by @merll in #3262
- chore: remove ingress-nginx and istio-ingress-gateway by @merll in #3246
- fix: missing admin team deployment by @merll in #3263
- fix: restore team admin services by @merll in #3264
- chore(deps): bump the npm-dependencies group with 6 updates by @dependabot[bot] in #3276
- chore(chart-deps): update oauth2-proxy to version 10.6.0 by @svcAPLBot in #3273
- chore(chart-deps): update argocd to version 9.5.15 by @svcAPLBot in #3268
- chore(chart-deps): update kube-prometheus-stack to version 85.3.3 by @svcAPLBot in #3275
- chore(chart-deps): update kyverno to version 3.8.1 by @svcAPLBot in #3259
- fix: add excludePaths to authpolicy-jwt for monitoring team by @ferruhcihan in #3277
- fix: load raw values from tekton app values by @merll in #3261
- fix: update ESO refresh interval for harbor and keycloak operators by @ferruhcihan in #3260
- chore: remove promtail by @merll in #3266
- feat: remove server related code and tools sidecar dependencies by @ferruhcihan in #3265
- fix: update Grype to more recent image for fixing db updates by @merll in #3280
- chore: remove migration code prior to 5.0 release by @merll in #3267
- ci: added job filter to avoid pending jobs by @merll in #3152
- feat: add apiToken handling to external-dns-raw template by @vaheed in #2917
- feat: clean up pvc after pipelinerun by @merll in #3281
- chore(chart-deps): update kube-prometheus-stack to version 85.4.0 by @svcAPLBot in #3284
- fix: remove domain field with overly restrictive validation by @merll in #3282
- fix: setting namespace in team-admin services by @merll in #3286
- ci: optimize docker cache usage by @j-zimnowoda in #3289
- feat: preliminary setup for Istio ambient mesh by @merll in #3251
- chore(chart-deps): update harbor to version 1.19.1 by @svcAPLBot in #3283
- chore: use mirror for git-server images by @merll in #3291
- chore(chart-deps): update argocd to version 9.5.16 by @svcAPLBot in #3287
- feat: add httproute for git server by @merll in #3293
- feat: enhance git credential handling for apl-operator by @ferruhcihan in #3292
- chore: activate pulling eso image from mirror by @merll in #3214
- ci: remove unused properties by @j-zimnowoda in #3298
- feat: add support for Kubernetes v1.36 by @merll in #3301
- feat: team secret management with sealed secrets by @ferruhcihan in #3285
- chore: support mirror for tekton-piplines images by @merll in #3290
- chore(chart-deps): update argocd to version 9.5.17 by @svcAPLBot in #3294
- chore(deps): bump the npm-dependencies group with 10 updates by @dependabot[bot] in #3305
- fix: rendering Loki password for team by @j-zimnowoda in #3299
- chore(chart-deps): update gitea to version 12.6.0 by @svcAPLBot in #3254
New Contributors
Full Changelog: v5.1.0...v6.0.0