Changelog
v2.15.0 (2026-10-15)
New content
- Security Principles — new page covering Zero Trust, open standards, least privilege, digital sovereignty, defense in depth, crypto agility, and software supply chain integrity
- Scope & Shared Responsibility — new page with a full responsibility table clarifying what ApeiroRA provides versus what operators own, and an explicit list of what ApeiroRA does not define
- Identity & Access Management — new page covering OIDC/MFA/SPIFFE authentication, OpenFGA Relationship-Based Access Control (ReBAC), workload identity, and federation
- Network Security — new page covering Zero Trust networking, Zero Trust Workload Identities (in development), IronCore declarative networking (NetworkPolicy, L3 tenant isolation, NATGateway, BMCSecret), CobaltCore for traditional workloads, and intrusion containment integration points
- Software Supply Chain Security — new page covering OCM as Software Bill of Delivery, provenance and signing (RSA, X.509, Sigstore), Open Delivery Gear continuous compliance, and Konfidence delivery governance
- Security Operations — new page covering Greenhouse security observability (adopted by CobaltCore with Heureka), IronCore infrastructure telemetry, OpenTelemetry audit logging, and incident response integration points
- Emerging Threats — new page covering Open Crypto Broker algorithm governance, the architectural path for future post-quantum migration, AI-driven threat analysis (AI as attack force multiplier, AI supply chain risks, why Apeiro's layered architecture is more critical rather than obsolete), and continuous vulnerability visibility via OCM/ODG
- Blog post: Security Compliance Automation — original security compliance automation deep-dive by Frederik Thormaehlen, covering SCF, OCM as compliance backbone, tool-centric to model-centric transition, and the regulatory backdrop (EU CRA, EO 14028)
Updated content
- Security Overview — expanded into a security hub with architecture orientation and navigation table linking all sub-sections; ordered by defense-in-depth layers
- Key Management — rewritten to accurately reflect OpenKCM's current state: pluggable KMS backends (AWS KMS, OpenBao), BYOK/HYOK via CMK component, early-availability warning for Q4 2026 production target
- Secrets Management & PKI — updated tone and structure; added operator responsibilities, Zero Trust Workload Identities complementarity note, and edition-availability qualifier for namespace support
Removed content
- Security Compliance Automation — removed as a documentation page; original content preserved as a blog post (see above)
v2.14.0 (2026-09-24)
New content
v2.13.0 (2026-09-18)
New content
- Blog post: Sovereign Cloud Needs More Than a Region. It Needs Key Control. - OpenKCM perspective on sovereign cloud key governance: covers the key control problem, the project architecture and capabilities, recent releases of Krypton, Krypton Operator, and CMK, and upcoming development priorities
v2.12.0 (2026-09-09)
New content
- Document: IPCEI-CIS Reference Architecture v3.0 - added link to the third version of the IPCEI-CIS Reference Architecture (v2.0 link removed)
- Document: 8ra Collaborative Security Framework (CSF) - added link to the 8ra Collaborative Security Framework
- Blog post: Workload Identity Should Come With the Cluster
v2.11.0 (2026-08-18)
New content
- Videos - new page in the Resources section with three demo videos from the Apeiro channel, including content summaries
- Showroom Scenarios - embedded demo videos for Application Hosting and Development and Management scenarios
- Local Platform Mesh Tutorial - added "See it in Action" video section
v2.10.0 (2026-08-06)
New content
- Blog post: Running Rook at Petabyte Scale Across Multiple Regions - our first external blog post, linking to an article published on Medium
- Document: Running Rook at Petabyte Scale Across Multiple Regions - a Clyso technical whitepaper added to the Documents resources
v2.9.1 (2026-05-06)
Updated content
- Tutorial: Local Platform Mesh - updated to Platform Mesh 0.3.0; tutorials are now served under
/tutorials/instead of/guides/
v2.9.0 (2026-05-05)
New content
- Tutorial: Local Platform Mesh - step-by-step guide to setting up a local Apeiro Showroom environment with a sample Platform Mesh scenario
v2.8.0 (2026-03-31)
New content
- Security in Platform Mesh - an overview authentication, authorization, and other security aspects of the Platform Mesh
v2.6.3 (2026-02-24)
Updated content
- Aligned nomenclature on different plane types: Showroom Hardware Recommendations
- Contact information: Want to connect? Reach out to us at apeiro@sap.com
v2.6.1 (2026-02-06)
Updated content
v2.6.0 (2026-02-04)
New content
- Blog post: Immersive Data Center Management: Advancing Sustainability and Operational Excellence
- Document: Data Center Observability Blueprint
v2.5.0 (2025-12-22)
New content
- Showroom Hardware Recommendations - hardware recommendations for setting up an Apeiro-based cloud infrastructure
Updated content
- Architecture Overview - mapping between IPCEI-CIS Reference Architecture layers and Apeiro components
v2.4.0 (2025-11-12)
New content
v2.3.0 (2025-10-27)
New content
- Getting Started - get started with Apeiro by exploring how you can use individual components in your existing setup.
v2.2.0 (2025-10-13)
New content
- Konfidence - software delivery framework for microservice-based software-as-a-service (SaaS) in Apeiro
- Gardener - Kubernetes-as-a-Service in Apeiro
- Operating Systems - modern cloud-native operating systems such as Garden Linux in Apeiro
- Baremetal - control plane capable for managing the entire physical lifecycle of hardware resource
- Data and Control Plane State - about the role of state in Kubernetes data and control planes
Updated content
- Architecture Overview - link to Konfidence, Gardener, Garden Linux, and Baremetal
- Observability - explanation of different observability signals
v2.1.0 (2025-08-25)
- Blog post: Garden Linux: Enabling AI on Kubernetes with NVIDIA GPUs
v2.0.0 (2025-08-12)
- Update layout to new design
v1.3.0 (2025-06-30)
New Content
- quarterly release of version 2025-06
- new section "Architecture Overview"
- new section "Data Fabric"
- new section "Showroom"
- new section "Resources"
Chore
- display NeoNephos logo
- re-arrange navigation
v1.2.0 (2025-06-03)
- Blog post: Release of OpenBao namespaces
v1.1.0 (2025-03-25)
- Blog post: KCP Multi‑Tenant Control Planes
v1.0.0 (2025-03-13)
- Initial setup of documentation content