OTOMI Files

Overview

Platform admins can define arbitrary ArgoCD applications in the apl-addons namespace.

ADRs

• ADR-2026-08-11 - Operator readiness signals the first completed apply
• ADR-2026-08-19 - apl-addons ArgoCD project for platform-admin addon deployments

Core App updates

What's Changed

• ci: move chart index file to charts/ by @j-zimnowoda in https://github.com/linode/apl-core/pull/3496
• ci: fix SealedSecrets helm repo url by @merll in https://github.com/linode/apl-core/pull/3513
• chore(chart-deps): update external-secrets to version 2.9.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3516
• chore(chart-deps): update sealed-secrets to version 2.19.1 by @svcAPLBot in https://github.com/linode/apl-core/pull/3514
• feat(chart): allow the platform namespaces to be created out-of-band by @aweingarten in https://github.com/linode/apl-core/pull/3468
• ci: split the deploy action into re-runnable jobs by @j-zimnowoda in https://github.com/linode/apl-core/pull/3521
• feat(platform-auth): add functions to manage platform auth pod restar… by @CasLubbers in https://github.com/linode/apl-core/pull/3491
• chore(deps): bump the npm-dependencies group with 7 updates by @dependabot[bot] in https://github.com/linode/apl-core/pull/3518
• chore(chart-deps): update otel-operator to version 0.120.3 by @svcAPLBot in https://github.com/linode/apl-core/pull/3519
• feat(operator): gate readiness on installation completion by @aweingarten in https://github.com/linode/apl-core/pull/3464
• chore: upgrade tools and tty binaries by @merll in https://github.com/linode/apl-core/pull/3525
• fix: helm plugin sources do not support verification by @merll in https://github.com/linode/apl-core/pull/3528
• chore(chart-deps): update kube-prometheus-stack to version 88.3.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3526
• chore(chart-deps): update loki to version 18.7.6 by @svcAPLBot in https://github.com/linode/apl-core/pull/3527
• chore(chart-deps): update prometheus-blackbox-exporter to version 11.17.2 by @svcAPLBot in https://github.com/linode/apl-core/pull/3520
• fix: helm image checksum by @merll in https://github.com/linode/apl-core/pull/3530
• chore: update base image version by @merll in https://github.com/linode/apl-core/pull/3529
• feat: configure shell image and support orcs by @merll in https://github.com/linode/apl-core/pull/3531
• chore(chart-deps): update policy-reporter to version 3.9.1 by @svcAPLBot in https://github.com/linode/apl-core/pull/3510
• chore(chart-deps): update loki to version 18.8.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3532
• chore(chart-deps): update kyverno to version 3.8.2 by @svcAPLBot in https://github.com/linode/apl-core/pull/3507
• fix(oauth2-proxy): poll keycloak over the backchannel in wait-for-keycloak by @aweingarten in https://github.com/linode/apl-core/pull/3467
• fix: wait for keycloak command by @CasLubbers in https://github.com/linode/apl-core/pull/3544
• feat: ensure server side apply to mitigate the last applied annotation overflow by @j-zimnowoda in https://github.com/linode/apl-core/pull/3452
• fix: mount cache folder as volume by @j-zimnowoda in https://github.com/linode/apl-core/pull/3548
• refactor(oidc): move issuer-specific values behind derived values by @CasLubbers in https://github.com/linode/apl-core/pull/3543
• docs: update release process by @j-zimnowoda in https://github.com/linode/apl-core/pull/3550
• chore(chart-deps): update loki to version 18.9.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3545
• fix: rendering the external-dns and cert-manager settings by @j-zimnowoda in https://github.com/linode/apl-core/pull/3549
• fix(argocd): prevent ESO from copying tracking-id annotation to argocd-secret by @CasLubbers in https://github.com/linode/apl-core/pull/3557
• chore(chart-deps): update harbor to version 1.19.2 by @svcAPLBot in https://github.com/linode/apl-core/pull/3504
• chore(chart-deps): update keycloak to version 7.2.3 by @svcAPLBot in https://github.com/linode/apl-core/pull/3553
• chore(chart-deps): update knative-operator to version v1.23.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3554
• chore(chart-deps): update kube-prometheus-stack to version 88.5.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3555
• fix: rendering external-dns secrets by @j-zimnowoda in https://github.com/linode/apl-core/pull/3559
• chore(chart-deps): update sealed-secrets to version 2.19.2 by @svcAPLBot in https://github.com/linode/apl-core/pull/3556
• chore(chart-deps): update loki to version 18.9.1 by @svcAPLBot in https://github.com/linode/apl-core/pull/3560
• chore(chart-deps): update cloudnative-pg-plugin-barman-cloud to version 0.7.1 by @svcAPLBot in https://github.com/linode/apl-core/pull/3501
• ci: adding new linode dns to apl deploy by @jverma-git in https://github.com/linode/apl-core/pull/3552
• feat: apl-addons by @j-zimnowoda in https://github.com/linode/apl-core/pull/3562
• feat(adr): add operator readiness signal after first successful apply by @CasLubbers in https://github.com/linode/apl-core/pull/3563
• chore(deps): bump the npm-dependencies group with 8 updates by @dependabot[bot] in https://github.com/linode/apl-core/pull/3546
• chore(deps): bump @apidevtools/json-schema-ref-parser from 15.5.1 to 16.0.0 by @dependabot[bot] in https://github.com/linode/apl-core/pull/3547
• chore(chart-deps): update sealed-secrets to version 2.19.3 by @svcAPLBot in https://github.com/linode/apl-core/pull/3569
• chore(deps): bump the github-actions-dependencies group with 6 updates by @dependabot[bot] in https://github.com/linode/apl-core/pull/3517
• chore(chart-deps): update loki to version 18.11.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3567
• chore(chart-deps): update kube-prometheus-stack to version 88.5.2 by @svcAPLBot in https://github.com/linode/apl-core/pull/3565
• chore(chart-deps): update kube-prometheus-stack to version 88.5.4 by @svcAPLBot in https://github.com/linode/apl-core/pull/3584
• chore(chart-deps): update loki to version 18.11.2 by @svcAPLBot in https://github.com/linode/apl-core/pull/3585
• chore(chart-deps): update otel-operator to version 0.122.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3587
• fix: provide git credentials on first attempt by @merll in https://github.com/linode/apl-core/pull/3590
• fix(prometheus): add scrapeConfig to prometheusSpec selectors by @CasLubbers in https://github.com/linode/apl-core/pull/3558
• chore(deps): bump the npm-dependencies group with 2 updates by @dependabot[bot] in https://github.com/linode/apl-core/pull/3588
• chore(chart-deps): update tekton-pipelines to version 1.14.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3512
• ci: add g6-dedicated-2 type by @amartyni in https://github.com/linode/apl-core/pull/3597
• chore(chart-deps): update loki to version 18.11.3 by @svcAPLBot in https://github.com/linode/apl-core/pull/3594
• chore(chart-deps): update kube-prometheus-stack to version 88.6.1 by @svcAPLBot in https://github.com/linode/apl-core/pull/3605

New Contributors

• @jverma-git made their first contribution in https://github.com/linode/apl-core/pull/3552
• @amartyni made their first contribution in https://github.com/linode/apl-core/pull/3597

Full Changelog: https://github.com/linode/apl-core/compare/v6.2.1...v6.3.0