DevOps release notes

Click here for recommended Kubernetes versions for deploying ForgeRock Identity Platform 7.2.

Click here for recommended NGINX ingress versions for deploying ForgeRock Identity Platform 7.2.

Click here for limitations when deploying ForgeRock Identity Platform 7.2 on Kubernetes.

Click here for more information about the rapidly evolving nature of the forgeops repository, including technology previews, legacy features, and feature deprecation and removal.

March 3, 2023

Additional documented DS limitations in CDK and CDM deployments

December 8, 2022

CDM deployments on EKS should now use Kubernetes version 1.22

CDM deployments should now use NGINX Ingress Controller version 1.4.0 or higher

August 17, 2022

Changes

The bin/config export command now handles object deletion correctly

August 15, 2022

Documentation updates

New deployment step: back up the secrets that contain the DS master and TLS keys

Secret generation documentation corrected

Secret management recommendations changed

July 26, 2022

Documentation updates

Base Docker images page updated

June 30, 2022

This major new release of the forgeops repository supports ForgeRock Identity Platform 7.2. In addition to enabling new features in the platform, this release adds usability and security enhancements.

Highlights

New forgeops command

DS operator released from technology preview status

New CDM deployment technology

Multicluster deployment sample

Configuration profiles moved to docker directory

New CDM backup techniques

Changes

IDM evaluation-only Docker image repository name change

The IDM canonical configuration is now built in to the idm Docker image

New bin/ds-debug.sh script

The RCS Agent has been removed from the CDM and CDK deployments

The LDIF importer is no longer used

CDM deployments create a third ds-idrepo replica

Number of AM pods in small CDM clusters changed to 2

Changes to the steps for installing a CA certificate in a CDK deployment

Limitation on IDM workflow support in the CDK and CDM

Use the new cluster/minikube/cdk-minikube utility to create a Minikube cluster

New recommendation: use the Hyperkit and Docker drivers for Minikube clusters

CDK deployments on Minikube require the volume snapshots plugin

Deprecated

DevOps artifacts for deploying ForgeRock Identity Platform 7.1

Previous CDM technology

CDM cluster creation and deletion scripts

The schedule-backups.sh script

Dynamic AM configuration in the amster Docker image

Removed

IDM canonical configuration in the docker/idm/config-profiles/cdk directory

Installing the CDK using the skaffold run command

The cdk command

The print-secrets command

July 12, 2021

Highlights

New CDK technology released from technology preview status

DS operator supported for use with the CDK

Changes

New amster command

Statement on forgeops repository feature evolution

Deprecated

Previous CDK technology

Removed

Cloud Deployment Quickstart (CDQ)

May 12, 2021

This major new release of the forgeops repository supports ForgeRock Identity Platform 7.1. In addition to enabling new features in the platform, this release adds usability and security enhancements.

Highlights

New CDK technology preview

DS operator technology preview

New RCS Agent pod in the CDM

Cloud Deployment Quickstart (CDQ)

New Secret Agent operator

New cluster provisioning scripts

Small, medium, and large CDM cluster sizing

Changes

Several Docker images from ForgeRock are supported in production deployments

Third-Party Kubernetes support changes

IDM is now a Kubernetes deployment

Python 3 is now on the list of required third-party software

Secrets are not created automatically when you install the platform on the CDM

Volume snapshots technology preview

Configuration expressions in the AM configuration are preserved when the configuration is exported

CDK and CDM deployment verified on newer Kubernetes versions

The Secret Agent operator lets you change individual administration passwords

CDM deployments no longer create a third ds-idrepo replica

CDM backups are now taken from the -0 DS instances by default

Regions for CDM cluster creation no longer default

Long form command-line options for the ingress-controller-deploy.sh command

How to eliminate the need to accept a self-signed certificate on Minikube deployments

All main AM run-time data types supported when exporting configuration data

Performance benchmark changes

Small and medium clusters now use a single node pool

Task maps and checklists in the documentation

Minikube cni=true option

Deprecated

DevOps artifacts for deploying ForgeRock Identity Platform 7.0

forgeops-secret job

Cluster provisioning using Pulumi

2020 release notes archive

Click here.