Mar 23, 2026 — App Platform v4.15.1
This release introduces bring your own (BYO) capabilities to the App Platform. Users can now use their own Git provider to store the App Platform values and benefit from the already established organization policies and services. Users can now also add their own catalogs with curated helm charts to the App Platform, which gives users the power to easily deploy workloads of their choosing. Gateway API CRDs have been added in preparation for future ingress migration. Thanos and Minio have been removed as platform dependencies, completing their deprecation from the previous release.
For a full list of changes, review the release notes on GitHub: Release v4.15.1.
New
- Added bring your own (BYO) Git support, allowing users to use an external Git repository instead of the built-in Gitea for storing platform values
- Added bring your own (BYO) Catalog support with subdirectory and recursive path support, enabling users to bring their own Helm chart catalogs
- Added a recovery mode for platform troubleshooting and disaster recovery scenarios
- Added Gateway API Custom Resource Definitions and an essential chart in preparation for future ingress migration
- Enabled shallow cloning in the ArgoCD repo server, improving performance for large repositories
- GitOps target revision and ArgoCD image updater now respect the configured gitops branch, enabling more flexible branching strategies
- Added load balancer annotations to preserve IP addresses prior to the Gateway API upgrade
- Added a liveness probe to the apl-operator for improved reliability
- APL Charts version is now read from versions.yaml, improving version management consistency
- Keycloak login URL now points to the platform-related realm
Changed
- Updated core applications. See the Core application changes table below for details.
Fixed
- Fixed Loki support without object storage
- Fixed non-working datasources in Grafana dashboards for ArgoCD and Trivy
- Improved pull error handling with reset and retry logic
- Fixed sealed secret path for charts repo migration
- Fixed branch setting in ArgoCD applications
- Fixed credential and environment variable handling for the Gitea operator
- Fixed timestamp comparison when re-encrypting secrets
- Fixed escaping of single quotes in template string generation
- Prevented access to internal APL services
- Added extraArgs to disable secure metrics in the OpenTelemetry operator
- Updated cert-manager values to use CRDs
- Fixed resources created by TriggerTemplate being incorrectly tracked
- Removed hardcoded main branch reference when pulling from the values repo
- Removed the otomi.git required field from the values schema
Removed
- Minio
- Thanos
Core application changes
| App Name | Old Version | New Version | Notes |
|---|---|---|---|
| Alertmanager | 0.30.1 | 0.31.1 | Updated |
| Argo CD | 3.2.6 | 3.3.3 | Updated |
| Cert-manager | 1.19.2 | 1.19.4 | Updated |
| CloudNative PostgreSQL Operator | 1.28.0 | 1.28.1 | Updated |
| Grafana | 12.3.1 | 12.3.3 | Updated |
| Ingress-NGINX | 1.14.2 | 1.14.3 | Updated |
| Istio | 1.28.3 | 1.29.1 | Updated |
| Keycloak | 26.5.1 | 26.5.5 | Updated |
| Knative Operator | 1.18.1 | 1.21.1 | Updated |
| Loki | 3.6.4 | 3.6.7 | Updated |
| Minio | RELEASE.2025-09-07T16-13-09Z | – | Removed |
| OpenTelemetry Operator | 0.138.0 | 0.144.0 | Updated |
| Sealed Secrets | 0.34.0 | 0.36.0 | Updated |
| Tekton Pipelines | 1.6.0 | 1.9.1 | Updated |
| Thanos | 0.36.1 | – | Removed |
| Trivy Operator | 0.29.0 | 0.30.0 | Updated |
Post-upgrade actions
Delete resources for Minio and Thanos
App Platform doesn’t automatically clean up all resources for apps that are removed and no longer supported (in case the user wants to keep using them). If you are no longer using Minio or Thanos and want to remove it and its resources, run the commands below
-
Minio
kubectl delete application minio -n argocd kubectl delete namespace minio -
Thanos
kubectl delete application thanos -n argocd kubectl delete namespace thanos