Jul 28, 2026 — App Platform v6.1.0
2 days ago
This release enables existing App Platform clusters to be upgraded to the latest 6.x release (v6.0.0 did not have an upgrade path and was only available for new deployments). Please read the upgrade notes below before initiating the upgrade.
For a full list of changes, review the release notes on GitHub: Release v6.1.0.
Changes
- Updated core applications. See the Core application changes table below for details.
Upgrade notes
The automated upgrade procedure migrates SOPS encrypted data to SealedSecrets. This means that all platform secrets are now encrypted by SealedSecrets and support for SOPS has been removed. For more details, see Platform secrets.
Before upgrading to this version, your existing cluster should be on version 5.1.0 or higher. In addition, annotate the apl-operator deployment by running the command below:
kubectl annotate deployment apl-operator argocd.argoproj.io/sync-options=Force=true,Replace=true -n apl-operatorCore application changes
| App Name | Old Version | New Version | Notes |
|---|---|---|---|
| argocd | 9.5.17 | 9.7.1 | Updated |
| cert-manager | v1.20.2 | v1.20.3 | Updated |
| cloudnative-pg | 0.28.2 | 0.28.3 | Updated |
| external-secrets | 2.4.1 | 2.7.0 | Updated |
| istio-base | 1.29.2 | 1.30.2 | Updated |
| istio-cni | 1.29.2 | 1.30.2 | Updated |
| istio-gateway | 1.29.2 | 1.30.2 | Updated |
| istiod | 1.29.2 | 1.30.2 | Updated |
| keycloak | 7.1.11 | 7.2.0 | Updated |
| knative-operator | v1.22.1 | v1.22.2 | Updated |
| kserve | v0.16.0 | v0.19.0 | Updated |
| kserve-crd | v0.16.0 | v0.19.0 | Updated |
| kube-prometheus-stack | 85.4.0 | 86.3.2 | Updated |
| loki | 6.55.0 | 17.4.11 | Updated |
| metrics-server | 3.13.0 | 3.13.1 | Updated |
| oauth2-proxy | 10.6.0 | 10.7.0 | Updated |
| otel-operator | 0.113.1 | 0.117.0 | Updated |
| prometheus-blackbox-exporter | 11.10.0 | 11.15.1 | Updated |
| sealed-secrets | 2.18.5 | 2.18.6 | Updated |
| ztunnel | 1.29.2 | 1.30.2 | Updated |