Skip to content

2026.1.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 17 Apr 19:44
· 171 commits to main since this release
2026.1.0
c9ae983

RELEASE=2026.1.0

Release Notes

Highlights in this release

Traefik is now the default prereqs ingress controller

The prereqs script now deploys Traefik proxy by default instead of Nginx
Ingress.

Upgrade your environments

The new custom image requires changes to your environments and your default
environment if you are using the FORGEOPS_DATA functionality. Run forgeops env against your environments with the --upgrade flag.

forgeops env -e my_env --upgrade

New image for customizations

The forgeops config command has a new build subcommand to create custom
busybox images for AM and IDM with the FBC config profile. The deployment (Helm
and Kustomize) have been updated to use the FBC on these images if it
exists. If it doesn't exist, then it will use the built-in config in images as
before. Now it is no longer necessary to build the config into images.

  • See forgeops config build --help for more info

New Features/Updated functionality

Direct debug-logs output to a file

Added the ability to send the output of bin/debug-logs directly to a file.

New product versions available

The following secure versions are available:

  • 8.1.0 now available for all products
  • PingIDM 8.0.1
  • PingDS 8.0.2
  • PingAM 7.5.2 and 8.0.2
  • Secret Agent 1.2.10
  • PingGateway 2025.11.0 and 2025.11.1

Helm 4 supported

Tested Helm 4 with our charts and everything works.

New --retain option for troubleshooting Amster

You can use the --retain {duration} option with forgeops amster import and
forgeops amster export commands to keep the pod running longer.

Increased TTL

Amster, ds-set-passwords and keystore-create jobs will now remain for two hours
after completion to allow viewing logs. This value can be amended.

Moved upgrade logic into env command

The forgeops upgrade logic has been moved to forgeops env as a flag. You
can now call it like:

forgeops env -e my_env --upgrade

Display a message when requested image version isn't available

The forgeops image command will select the next available version if the user
requests a version that isn't available for a product. Now, it will tell you
that it can't find the requested image to avoid confusion.

Ability to specify external DS hosts in Helm chart

Added the ability to specify external DS host names in your values.yaml.
See platform.external_ds in charts/identity-platform/values.yaml for more
info.

Updated python dependency versions

The python dependencies have been updated in lib/python/requirements.txt.
Use forgeops configure to update your venv.

cd /path/to/forgeops
source .venv/bin/activate
./bin/forgeops configure

Ability to build am-config-upgrader image

Added am-config-upgrader/Dockerfile and the ability to build an
am-config-upgrader image with forgeops build.

Repository clean up

The forgeops repository has been cleaned up by moving several items around.
This is being done to focus the forgeops repository on the essential artifacts
needed to manage ForgeOps deployments.

  • Moved examples from etc folder to the samples folder in forgeops-extras
    repository.
  • Moved the contents of the cluster folder into the etc folder.
  • Removed the scripts in the old bin folder, as their functionality is now
    provided through the forgeops tool.
    • bin/amster -> forgeops amster
    • bin/config -> forgeops config
    • bin/am-config-upgrader -> forgeops upgrade-am-config

Adding ability to skip appending the image to a repo when building

This is a user suggestion to make it easier to use AWS ECR repos. You can now
use --skip-image-append with the image, build, and config build subcommands,
and the software will use what was given as the image repository as the full
image name minus the tag.

Bugfixes

Fixed bug in base-generate.sh

There was a step missing in the logic for base-generate.sh that prevented the
updated files from being placed properly. It now copies the results of helm template into the proper location.

Fixed bugs in amster

Included the --full option in forgeops amster export to enable exporting
all realm entities. The bugs in this option have been fixed.

forgeops amster import {src} wasn't overwriting the configuration baked in to
the image with the provided configuration. This has now been corrected.

forgeops amster export now waits for AM to be up. Previously this function
was only included in the import command.

Fixed forgeops upgrade-am-config

The 8.0.2 am-config-upgrader image changed permission on some files which
caused forgeops upgrade-am-config to break. The forgeops upgrade-am-config
command now connects to the container as root. This is an ephemeral
container running outside the cluster and reduces the security impact.

The keystore-create job now uses the AM image directly

Prior to 2026.1.0, the keystore-create job specified the AM image as an init
container separately. This meant that once you select a new AM image it didn't
update the keystore-create job. The job now uses the AM image as defined in
both Helm and Kustomize.

How-tos

Included new procedures

Full Changelog: 2025.2.1...2026.1.0

Assets 2
Loading