# What's New ✨

> Discover new features from the current version in one place.

> For the complete documentation index, see [llms.txt](https://deploy-preview-156--docs-projectcapsule.netlify.app/llms.txt).
> The HTML version of this page is at https://deploy-preview-156--docs-projectcapsule.netlify.app/docs/whats-new/.

## Events 📅

<div class="events-calendar pe-md-3 pe-xl-4">
  <div class="mb-4">
    <p>
      Upcoming opportunities to meet the Project Capsule community. The list
      is sorted automatically from the shared event data.
    </p>
    
      <a class="btn btn-outline-primary btn-sm"
         href="/docs/whats-new/index.xml"
         rel="alternate"
         type="application/rss+xml">
        <i class="fa-solid fa-rss me-1" aria-hidden="true"></i>
        Subscribe to event updates
      </a>
    
  </div>

  
    <details class="mb-4" open>
      <summary class="h4 mb-3">
        Upcoming events
        <span class="badge rounded-pill text-bg-light align-middle fs-6">
          2
        </span>
      </summary>
      <div>
        
          <article class="card mb-3" id="event-swiss-dev-confederation-2026">
  <div class="card-body">
    <div class="row g-3 align-items-start">
      <div class="col-12 col-sm-3 col-lg-2">
        <time class="d-block rounded border text-center px-2 py-2"
              datetime="2026-10-27">
          
            <span class="d-block small fw-semibold text-uppercase text-muted">
              Oct
            </span>
          
          <span class="d-block fs-4 fw-bold lh-sm">27</span>
          <span class="d-block small text-muted">2026</span>
        </time>
      </div>
      <div class="col-12 col-sm-9 col-lg-10">
        <h3 class="h5 mb-1">
          <a href="https://reg.experiences.redhat.com/flow/redhat/3624601/redhatfieldeventspreregnoappform/page/landingregistrationpage" rel="noopener">Swiss Dev Confederation</a>
          <span aria-hidden="true">🇨🇭</span>
        </h3>
        <p class="small fw-semibold text-muted mb-2">27 October 2026</p>
        <div class="mb-0">Together with a long-term adopter, we will demonstrate how Capsule can enhance the multi-tenancy experience with Red Hat OpenShift.</div>
        
      </div>
    </div>
  </div>
</article>

        
          <article class="card mb-3" id="event-kubecon-cloudnativecon-north-america-2026">
  <div class="card-body">
    <div class="row g-3 align-items-start">
      <div class="col-12 col-sm-3 col-lg-2">
        <time class="d-block rounded border text-center px-2 py-2"
              datetime="2026-11-09">
          
            <span class="d-block small fw-semibold text-uppercase text-muted">
              Nov
            </span>
          
          <span class="d-block fs-4 fw-bold lh-sm">9–12</span>
          <span class="d-block small text-muted">2026</span>
        </time>
      </div>
      <div class="col-12 col-sm-9 col-lg-10">
        <h3 class="h5 mb-1">
          <a href="https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/" rel="noopener">KubeCon &#43; CloudNativeCon North America</a>
          <span aria-hidden="true">🇺🇸</span>
        </h3>
        <p class="small fw-semibold text-muted mb-2">9–12 November 2026</p>
        <div class="mb-0">Visit the Project Capsule kiosk in the Solutions Showcase.</div>
        
          <ul class="mb-0 mt-2">
            <li>Kiosk shift: Thursday, 10:15–11:55</li><li>Kiosk number: P-4B</li><li>Location: Level 1, Hall 5</li>
          </ul>
        
      </div>
    </div>
  </div>
</article>

        
      </div>
    </details>
  

  
    <details class="mt-4">
      <summary class="h4 mb-3">
        Past events
        <span class="badge rounded-pill text-bg-light align-middle fs-6">
          2
        </span>
      </summary>
      <div>
        
          <article class="card mb-3" id="event-kcd-sofia-2026">
  <div class="card-body">
    <div class="row g-3 align-items-start">
      <div class="col-12 col-sm-3 col-lg-2">
        <time class="d-block rounded border text-center px-2 py-2"
              datetime="2026-09-29">
          
            <span class="d-block small fw-semibold text-uppercase text-muted">
              Sep
            </span>
          
          <span class="d-block fs-4 fw-bold lh-sm">29</span>
          <span class="d-block small text-muted">2026</span>
        </time>
      </div>
      <div class="col-12 col-sm-9 col-lg-10">
        <h3 class="h5 mb-1">
          <a href="https://kcd.bg/agenda/" rel="noopener">KCD Sofia 2026</a>
          <span aria-hidden="true">🇧🇬</span>
        </h3>
        <p class="small fw-semibold text-muted mb-2">29 September 2026</p>
        <div class="mb-0">Hristo Hristov will speak about Capsule and why Namespaces alone do not provide multi-tenancy.</div>
        
      </div>
    </div>
  </div>
</article>

        
          <article class="card mb-3" id="event-swiss-cloud-native-day-2026">
  <div class="card-body">
    <div class="row g-3 align-items-start">
      <div class="col-12 col-sm-3 col-lg-2">
        <time class="d-block rounded border text-center px-2 py-2"
              datetime="2026-09-17">
          
            <span class="d-block small fw-semibold text-uppercase text-muted">
              Sep
            </span>
          
          <span class="d-block fs-4 fw-bold lh-sm">17</span>
          <span class="d-block small text-muted">2026</span>
        </time>
      </div>
      <div class="col-12 col-sm-9 col-lg-10">
        <h3 class="h5 mb-1">
          <a href="https://cloudnativeday.ch/" rel="noopener">Swiss Cloud Native Day</a>
          <span aria-hidden="true">🇨🇭</span>
        </h3>
        <p class="small fw-semibold text-muted mb-2">17 September 2026</p>
        <div class="mb-0">Meet the Capsule maintainers at Swiss Cloud Native Day 2026. We will be there with a booth sponsored by Peak Scale.</div>
        
      </div>
    </div>
  </div>
</article>

        
      </div>
    </details>
  
</div>


## Security 🔒

* **(Enterprise)**: Projectcapsule is now providing their releases on an immutable OCI registry, which allows users to verify the integrity of the images and provides a more secure way to distribute the images. Which is not possible on GHCR due to the fact that GHCR does not support immutability of images.
* [OpenShift] Added documentation showing how to prevent CapsuleUsers from modifying OpenShift-managed namespace labels and annotations, including `openshift.io/run-level`, to help prevent SecurityContextConstraints bypasses. [Read More](/docs/operating/setup/openshift/#example-tenant-and-tenantowners)

## Breaking Changes ⚠️

* For [`TenantResource`](/docs/replications/tenant/) the [impersonation](/docs/replications/tenant/#impersonation) is now configured by default, always using the `default` `ServiceAccount` of the target namespace. This change is to ensure that the `TenantResource` can be used in a more secure way, without the need to configure impersonation manually. If you are using `TenantResource` with impersonation, you will need to update your configuration to use the `default` `ServiceAccount` of the target namespace.

## Features ✨

* **Capsule**: Ships with diverese improvements to Admission-Time and reconcile time for all components. We are continuing to improve the performance and stability of Capsule, and we are always looking for ways to make it easier to use and more powerful.
* **Capsule**: Added 1:1 compatible Quota-System for direct migration and functional replacement of the deprecated ResourceQuotas. [Read More](/docs/tenants/rules/#migration)
* **Capsule**: Added new capabilites to Rules-API:
   * [Metadata Enforcement](/docs/rules/enforcement/metadata/)
   * [Service Enforcement](/docs/rules/enforcement/services/)
   * [Ingress Enforcement](/docs/rules/enforcement/ingress/)
   * [Workload Enforcement](/docs/rules/enforcement/workloads/)
* **Proxy**: Added RBAC-Reflection for non Tenant-Owners. [Read More](/docs/proxy/reflection/)

### Deprecations

  * Announcing deprecation of the legacy Quota-System. The legacy Quota-System will be removed in a future release. Please migrate to the new Quota-System as soon as possible. [Read More](/docs/tenants/rules/#migration)

  * Announcing deprecation of the  [Custom Resources (CRD Quantities)](/docs/tenants/quotas/#custom-resources). The legacy CustomQuotas will be removed in a future release. Please migrate to the new [`GlobalCustomQuotas`/`CustomQuotas`](/docs/resource-management/customquotas/) as soon as possible. [Read More](/docs/tenants/rules/#migration)

  * Announcing deprecation of the [Pod Metadata Options](/docs/tenants/metadata/#pods). Please migrate to the new [`Metadata Rules`](/docs/rules/enforcement/metadata/#migrate-pod-metadata) as soon as possible.

  * Announcing deprecation of the [Service Metadata Options](/docs/tenants/metadata/#services). Please migrate to the new [`Metadata Rules`](/docs/rules/enforcement/metadata/#migrate-service-metadata) as soon as possible.

  * Announcing deprecation of certain [Namespace Metadata Options](/docs/tenants/metadata/#namespaces). Please migrate to the new [`Metadata Rules`](/docs/rules/enforcement/metadata/#migrate-namespace-metadata) as soon as possible.

## Fixes 🐛

* Fixed PVC-Controller mutating `PersistentVolumes` with empty tenant label value
* Fixed Helm-Values for [Strict Mode](/docs/operating/setup/installation/#strict-rbac)

## Documentation 📚

We have added new documentation for a better experience. See the following topics:

* **[Resource Management decision table](/docs/resource-management/)**
* **[Resource Management for workloads](/docs/operating/best-practices/workloads/#resource-management)**

## Ecosystem 🌐

Newly added documentation to integrate Capsule with other applications:

* [Headlamp Plugin](/ecosystem/integrations/headlamp/#plugins)
* [Argo CD](/ecosystem/integrations/argocd/)

## Roadmap 🗺️

In the upcoming releases we are planning to work on the following features:

  * Capsule: Porting more Properties to the Namespace Rule Approach.
  * Capsule: Adding `transformers` for `Global`/`TenantResources`.
  * Capsule: Adding `healthChecks` for `Global`/`TenantResources`.
  * Capsule: Introducing Break-The-Glass to allow temporary elevation of permissions for Tenant Owners, with an approval process by Platform Administrators.
  * Capsule: Adding custom health checks for ArgoCD to upstream
  * Capsule: Adding Generic Implementation for `Global`/`TenantResources`.
  * Website: Improving the documentation with more examples and use-cases.

---

Last modified October 12, 2026: feat(docs): publish markdown renditions content negotiation for agents (#159) (e13616c)