camunda-platform-8.9-14.0.0-alpha2

The changelog is automatically generated and it follows Conventional Commits format.

camunda-platform-14.0.0-alpha2 (2025-12-05)

Features

• Backport custom client creation to 8.6 and 8.9 (#4710)
• Define custom users through values.yaml (#4670)
• Add RDBMS support to 8.9 helm charts (#4572)
• Enhance Keycloak integration with realm support and additional client configurations

Fixes

• Incorrect example for keycloak in readme.md (#4586)
• Remap replicas key from legacy to new keys (#4554)
• Refactor tls secrets to use new pattern (#4599)
• ExtraVolumeClaimTemplateTemplate indent for orchestration cluster (#4697)
• Remove client env vars from qa scenario files (#4726)
• Typo lower case values (#4737)
• Remove leftover console secret constraints (#4749)
• Remove conditional rendering from management identity configmap (#4771)
• Let helm chart support hybrid auth (#4785)
• Return none for authMethod when component is disabled (#4810)
• Align 8.9 retention config with Wave 1 property names (#4813)
• Enable auto-ddl by default (#4821)
• Modeler webapp to websockets connection not using override option (#4812)
• Add requestBodySize to orchestration multipart config (#4838)
• 8.9 version bumps for alpha2 (#4843)
• Correct chart version

Release Info

Supported versions:

• Camunda applications: 8.9
• Camunda version matrix: 8.9
• Helm values: 14.0.0-alpha2
• Helm CLI: N/A

Camunda images:

• docker.io/camunda/camunda:8.9.0-alpha2
• docker.io/camunda/connectors-bundle:8.9.0-alpha2
• docker.io/camunda/console:8.9.0-alpha2
• docker.io/camunda/identity:8.9.0-alpha2
• docker.io/camunda/keycloak:26.3.3
• docker.io/camunda/optimize:8.9.0-alpha2
• docker.io/camunda/web-modeler-restapi:8.9.0-alpha2
• docker.io/camunda/web-modeler-webapp:8.9.0-alpha2
• docker.io/camunda/web-modeler-websockets:8.9.0-alpha2

Non-Camunda images:

• docker.io/bitnamilegacy/elasticsearch:8.18.0
• docker.io/bitnamilegacy/os-shell:12-debian-12-r43
• docker.io/bitnamilegacy/postgresql:14.18.0-debian-12-r0
• docker.io/bitnamilegacy/postgresql:15.10.0-debian-12-r2

Verification

For quick verification of the Helm chart integrity using Cosign:

cosign verify-blob camunda-platform-14.0.0-alpha2.tgz \
  --bundle "camunda-platform-14.0.0-alpha2-cosign-bundle.json" \
  --certificate-identity-regex "https://github.com/camunda/camunda-platform-helm" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

For detailed verification instructions, check the steps in the camunda-platform-14.0.0-alpha2-cosign-verify.sh file.

camunda-platform-8.8-13.3.0

The changelog is automatically generated and it follows Conventional Commits format.

camunda-platform-13.3.0 (2025-12-05)

Features

• Support password field for jks (#4782)

Fixes

• Correct extraVolumeMounts binding in importer deployment (#4829)
• Modeler webapp to websockets connection not using override option (#4812)
• Replace SNAPSHOT tags with stable versions in 8.8 values-digest.yaml (#4826)
• Add requestBodySize to orchestration multipart config (#4838)

Release Info

Supported versions:

• Camunda applications: 8.8
• Camunda version matrix: 8.8
• Helm values: 13.3.0
• Helm CLI: N/A

Camunda images:

• docker.io/camunda/camunda:8.8.6
• docker.io/camunda/connectors-bundle:8.8.4
• docker.io/camunda/console:8.8.56
• docker.io/camunda/identity:8.8.3
• docker.io/camunda/keycloak:26.3.3
• docker.io/camunda/optimize:8.8.2
• docker.io/camunda/web-modeler-restapi:8.8.4
• docker.io/camunda/web-modeler-webapp:8.8.4
• docker.io/camunda/web-modeler-websockets:8.8.4

Non-Camunda images:

• docker.io/bitnamilegacy/elasticsearch:8.18.0
• docker.io/bitnamilegacy/os-shell:12-debian-12-r43
• docker.io/bitnamilegacy/postgresql:14.18.0-debian-12-r0
• docker.io/bitnamilegacy/postgresql:15.10.0-debian-12-r2

Verification

For quick verification of the Helm chart integrity using Cosign:

cosign verify-blob camunda-platform-13.3.0.tgz \
  --bundle "camunda-platform-13.3.0-cosign-bundle.json" \
  --certificate-identity-regex "https://github.com/camunda/camunda-platform-helm" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

For detailed verification instructions, check the steps in the camunda-platform-13.3.0-cosign-verify.sh file.

camunda-platform-8.7-12.7.3

The changelog is automatically generated and it follows Conventional Commits format.

camunda-platform-12.7.3 (2025-12-04)

Fixes

• Add back zeebe secret referenced as string (#4822)

Release Info

Supported versions:

• Camunda applications: 8.7
• Camunda version matrix: 8.7
• Helm values: 12.7.3
• Helm CLI: N/A

Camunda images:

• docker.io/camunda/connectors-bundle:8.7.13
• docker.io/camunda/console:8.7.92
• docker.io/camunda/identity:8.7.11
• docker.io/camunda/keycloak:26.3.3
• docker.io/camunda/operate:8.7.20
• docker.io/camunda/optimize:8.7.14
• docker.io/camunda/tasklist:8.7.20
• docker.io/camunda/web-modeler-restapi:8.7.14
• docker.io/camunda/web-modeler-webapp:8.7.14
• docker.io/camunda/web-modeler-websockets:8.7.14
• docker.io/camunda/zeebe:8.7.20

Non-Camunda images:

• docker.io/bitnamilegacy/elasticsearch:8.17.4
• docker.io/bitnamilegacy/os-shell:12-debian-12-r43
• docker.io/bitnamilegacy/postgresql:14.18.0-debian-12-r0
• docker.io/bitnamilegacy/postgresql:15.10.0-debian-12-r2

Verification

For quick verification of the Helm chart integrity using Cosign:

cosign verify-blob camunda-platform-12.7.3.tgz \
  --bundle "camunda-platform-12.7.3-cosign-bundle.json" \
  --certificate-identity-regex "https://github.com/camunda/camunda-platform-helm" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

For detailed verification instructions, check the steps in the camunda-platform-12.7.3-cosign-verify.sh file.

camunda-platform-8.6-11.11.2

The changelog is automatically generated and it follows Conventional Commits format.

camunda-platform-11.11.2 (2025-12-04)

Fixes

• Add back zeebe secret referenced as string (#4822)

Release Info

Supported versions:

• Camunda applications: 8.6
• Camunda version matrix: 8.6
• Helm values: 11.11.2
• Helm CLI: N/A

Camunda images:

• docker.io/camunda/connectors-bundle:8.6.22
• docker.io/camunda/console:8.6.92
• docker.io/camunda/identity:8.6.23
• docker.io/camunda/keycloak:25.0.6
• docker.io/camunda/operate:8.6.32
• docker.io/camunda/optimize:8.6.21
• docker.io/camunda/tasklist:8.6.32
• docker.io/camunda/web-modeler-restapi:8.6.23
• docker.io/camunda/web-modeler-webapp:8.6.23
• docker.io/camunda/web-modeler-websockets:8.6.23
• docker.io/camunda/zeebe:8.6.32

Non-Camunda images:

• docker.io/bitnamilegacy/elasticsearch:8.15.4
• docker.io/bitnamilegacy/os-shell:12-debian-12-r43
• docker.io/bitnamilegacy/postgresql:14.18.0-debian-12-r0
• docker.io/bitnamilegacy/postgresql:15.10.0-debian-12-r2

Verification

For quick verification of the Helm chart integrity using Cosign:

cosign verify-blob camunda-platform-11.11.2.tgz \
  --bundle "camunda-platform-11.11.2-cosign-bundle.json" \
  --certificate-identity-regex "https://github.com/camunda/camunda-platform-helm" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

For detailed verification instructions, check the steps in the camunda-platform-11.11.2-cosign-verify.sh file.

camunda-platform-8.8-13.2.2

The changelog is automatically generated and it follows Conventional Commits format.

camunda-platform-13.2.2 (2025-12-02)

Fixes

• Let helm chart support hybrid auth (#4785)

Release Info

Supported versions:

• Camunda applications: 8.8
• Camunda version matrix: 8.8
• Helm values: 13.2.2
• Helm CLI: N/A

Camunda images:

• docker.io/camunda/camunda:8.8.5
• docker.io/camunda/connectors-bundle:8.8.3
• docker.io/camunda/console:8.8.52
• docker.io/camunda/identity:8.8.2
• docker.io/camunda/keycloak:26.3.3
• docker.io/camunda/optimize:8.8.1
• docker.io/camunda/web-modeler-restapi:8.8.3
• docker.io/camunda/web-modeler-webapp:8.8.3
• docker.io/camunda/web-modeler-websockets:8.8.3

Non-Camunda images:

• docker.io/bitnamilegacy/elasticsearch:8.18.0
• docker.io/bitnamilegacy/os-shell:12-debian-12-r43
• docker.io/bitnamilegacy/postgresql:14.18.0-debian-12-r0
• docker.io/bitnamilegacy/postgresql:15.10.0-debian-12-r2

Verification

For quick verification of the Helm chart integrity using Cosign:

cosign verify-blob camunda-platform-13.2.2.tgz \
  --bundle "camunda-platform-13.2.2-cosign-bundle.json" \
  --certificate-identity-regex "https://github.com/camunda/camunda-platform-helm" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

For detailed verification instructions, check the steps in the camunda-platform-13.2.2-cosign-verify.sh file.

camunda-platform-8.7-12.7.2

The changelog is automatically generated and it follows Conventional Commits format.

Release Info

Supported versions:

• Camunda applications: 8.7
• Camunda version matrix: 8.7
• Helm values: 12.7.2
• Helm CLI: 3.19.2

Camunda images:

• docker.io/camunda/connectors-bundle:8.7.12
• docker.io/camunda/console:8.7.91
• docker.io/camunda/identity:8.7.10
• docker.io/camunda/keycloak:26.3.3
• docker.io/camunda/operate:8.7.19
• docker.io/camunda/optimize:8.7.13
• docker.io/camunda/tasklist:8.7.19
• docker.io/camunda/web-modeler-restapi:8.7.13
• docker.io/camunda/web-modeler-webapp:8.7.13
• docker.io/camunda/web-modeler-websockets:8.7.13
• docker.io/camunda/zeebe:8.7.19

Non-Camunda images:

• docker.io/bitnamilegacy/elasticsearch:8.17.4

• docker.io/bitnamilegacy/os-shell:12-debian-12-r43

• docker.io/bitnamilegacy/postgresql:14.18.0-debian-12-r0

• docker.io/bitnamilegacy/postgresql:15.10.0-debian-12-r2
  Supported versions:

• Camunda applications: 8.7

• Camunda version matrix: 8.7

• Helm values: 12.7.1

• Helm CLI: 3.19.2

Verification

For quick verification of the Helm chart integrity using Cosign:

cosign verify-blob camunda-platform-12.7.2.tgz \
  --bundle "camunda-platform-12.7.2-cosign-bundle.json" \
  --certificate-identity-regex "https://github.com/camunda/camunda-platform-helm" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

For detailed verification instructions, check the steps in the camunda-platform-12.7.2-cosign-verify.sh file.

camunda-platform-8.6-11.11.1

The changelog is automatically generated and it follows Conventional Commits format.

Release Info

Supported versions:

• Camunda applications: 8.6
• Camunda version matrix: 8.6
• Helm values: 11.11.1
• Helm CLI: 3.19.2

Camunda images:

• docker.io/camunda/connectors-bundle:8.6.21
• docker.io/camunda/console:8.6.91
• docker.io/camunda/identity:8.6.22
• docker.io/camunda/keycloak:25.0.6
• docker.io/camunda/operate:8.6.31
• docker.io/camunda/optimize:8.6.20
• docker.io/camunda/tasklist:8.6.31
• docker.io/camunda/web-modeler-restapi:8.6.22
• docker.io/camunda/web-modeler-webapp:8.6.22
• docker.io/camunda/web-modeler-websockets:8.6.22
• docker.io/camunda/zeebe:8.6.31

Non-Camunda images:

• docker.io/bitnamilegacy/elasticsearch:8.15.4

• docker.io/bitnamilegacy/os-shell:12-debian-12-r43

• docker.io/bitnamilegacy/postgresql:14.18.0-debian-12-r0

• docker.io/bitnamilegacy/postgresql:15.10.0-debian-12-r2
  Supported versions:

• Camunda applications: 8.6

• Camunda version matrix: 8.6

• Helm values: 11.11.0

• Helm CLI: 3.19.2

Verification

For quick verification of the Helm chart integrity using Cosign:

cosign verify-blob camunda-platform-11.11.1.tgz \
  --bundle "camunda-platform-11.11.1-cosign-bundle.json" \
  --certificate-identity-regex "https://github.com/camunda/camunda-platform-helm" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

For detailed verification instructions, check the steps in the camunda-platform-11.11.1-cosign-verify.sh file.

camunda-platform-8.8-13.2.1

The changelog is automatically generated and it follows Conventional Commits format.

camunda-platform-13.2.1 (2025-11-27)

Fixes

• Remove conditional rendering from management identity configmap (#4771)

Release Info

Supported versions:

• Camunda applications: 8.8
• Camunda version matrix: 8.8
• Helm values: 13.2.1
• Helm CLI: 3.19.2

Camunda images:

• docker.io/camunda/camunda:8.8.4
• docker.io/camunda/connectors-bundle:8.8.3
• docker.io/camunda/console:8.8.48
• docker.io/camunda/identity:8.8.2
• docker.io/camunda/keycloak:26.3.3
• docker.io/camunda/optimize:8.8.1
• docker.io/camunda/web-modeler-restapi:8.8.3
• docker.io/camunda/web-modeler-webapp:8.8.3
• docker.io/camunda/web-modeler-websockets:8.8.3

Non-Camunda images:

• docker.io/bitnamilegacy/elasticsearch:8.18.0

• docker.io/bitnamilegacy/os-shell:12-debian-12-r43

• docker.io/bitnamilegacy/postgresql:14.18.0-debian-12-r0

• docker.io/bitnamilegacy/postgresql:15.10.0-debian-12-r2
  Supported versions:

• Camunda applications: 8.8

• Camunda version matrix: 8.8

• Helm values: 13.2.0

• Helm CLI: 3.19.2

Verification

For quick verification of the Helm chart integrity using Cosign:

cosign verify-blob camunda-platform-13.2.1.tgz \
  --bundle "camunda-platform-13.2.1-cosign-bundle.json" \
  --certificate-identity-regex "https://github.com/camunda/camunda-platform-helm" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

For detailed verification instructions, check the steps in the camunda-platform-13.2.1-cosign-verify.sh file.

camunda-platform-8.7-12.7.1

The changelog is automatically generated and it follows Conventional Commits format.

camunda-platform-8.8-13.2.1 (2025-11-27)

Fixes

• Add connectors logging to application.yaml (#4686)

Release Info

Supported versions:

• Camunda applications: 8.7
• Camunda version matrix: 8.7
• Helm values: 12.7.1
• Helm CLI: 3.19.2

Camunda images:

• docker.io/camunda/connectors-bundle:8.7.12
• docker.io/camunda/console:8.7.91
• docker.io/camunda/identity:8.7.10
• docker.io/camunda/keycloak:26.3.3
• docker.io/camunda/operate:8.7.18
• docker.io/camunda/optimize:8.7.13
• docker.io/camunda/tasklist:8.7.18
• docker.io/camunda/web-modeler-restapi:8.7.13
• docker.io/camunda/web-modeler-webapp:8.7.13
• docker.io/camunda/web-modeler-websockets:8.7.13
• docker.io/camunda/zeebe:8.7.18

Non-Camunda images:

• docker.io/bitnamilegacy/elasticsearch:8.17.4

• docker.io/bitnamilegacy/os-shell:12-debian-12-r43

• docker.io/bitnamilegacy/postgresql:14.18.0-debian-12-r0

• docker.io/bitnamilegacy/postgresql:15.10.0-debian-12-r2
  Supported versions:

• Camunda applications: 8.7

• Camunda version matrix: 8.7

• Helm values: 12.7.0

• Helm CLI: 3.19.2

Verification

For quick verification of the Helm chart integrity using Cosign:

cosign verify-blob camunda-platform-12.7.1.tgz \
  --bundle "camunda-platform-12.7.1-cosign-bundle.json" \
  --certificate-identity-regex "https://github.com/camunda/camunda-platform-helm" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

For detailed verification instructions, check the steps in the camunda-platform-12.7.1-cosign-verify.sh file.

camunda-platform-8.6-11.11.0

The changelog is automatically generated and it follows Conventional Commits format.

camunda-platform-11.11.0 (2025-11-25)

Features

• Backport custom client creation to 8.6 and 8.9 (#4710)
• Define custom users through values.yaml (#4670)

Fixes

• Incorrect example for keycloak in readme.md (#4586)
• Remove client env vars from qa scenario files (#4726)

Release Info

Supported versions:

• Camunda applications: 8.6
• Camunda version matrix: 8.6
• Helm values: 11.11.0
• Helm CLI: 3.19.2

Camunda images:

• docker.io/camunda/connectors-bundle:8.6.21
• docker.io/camunda/console:8.6.91
• docker.io/camunda/identity:8.6.22
• docker.io/camunda/keycloak:25.0.6
• docker.io/camunda/operate:8.6.30
• docker.io/camunda/optimize:8.6.20
• docker.io/camunda/tasklist:8.6.30
• docker.io/camunda/web-modeler-restapi:8.6.22
• docker.io/camunda/web-modeler-webapp:8.6.22
• docker.io/camunda/web-modeler-websockets:8.6.22
• docker.io/camunda/zeebe:8.6.30

Non-Camunda images:

• docker.io/bitnamilegacy/elasticsearch:8.15.4

• docker.io/bitnamilegacy/os-shell:12-debian-12-r43

• docker.io/bitnamilegacy/postgresql:14.18.0-debian-12-r0

• docker.io/bitnamilegacy/postgresql:15.10.0-debian-12-r2
  Supported versions:

• Camunda applications: 8.6

• Camunda version matrix: 8.6

• Helm values: 11.10.3

• Helm CLI: 3.19.2

Verification

For quick verification of the Helm chart integrity using Cosign:

cosign verify-blob camunda-platform-11.11.0.tgz \
  --bundle "camunda-platform-11.11.0-cosign-bundle.json" \
  --certificate-identity-regex "https://github.com/camunda/camunda-platform-helm" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

For detailed verification instructions, check the steps in the camunda-platform-11.11.0-cosign-verify.sh file.