--- title: What’s new in ForgeOps 2026.3 description: Review new ForgeOps features, release changes, supported Ping Advanced Identity Software versions, and deployment updates component: forgeops version: 2026.3 page_id: forgeops:start:whats-new canonical_url: https://docs.pingidentity.com/forgeops/2026.3/start/whats-new.html llms_txt: https://docs.pingidentity.com/forgeops/llms.txt docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md revdate: 2026-08-28T11:57:11Z section_ids: release_information: Release information highlights_in_2026_3_release: Highlights in 2026.3 release deprecated_features: Deprecated features release_notes_for_2026_3: Release notes for 2026.3 --- # What's new in ForgeOps 2026.3 ## Release information ### Highlights in 2026.3 release * Optionally enable IDM admin UI In PingIDM 8.1.0, the IDM admin UI was removed. Accordingly, it was removed in the ForgeOps 2026.3.1 release. We have made it possible to enable the IDM admin UI optionally in ForgeOps deployments. * The `main` branch contains pre-release artifacts The ForgeOps early adapter artifacts have been moved from the `dev` branch to the `main` branch of the [ForgeOps repository](https://github.com/ForgeRock/forgeops). The `main` branch will be the default branch for the ForgeOps repository. Note that the pre-release artifacts in the `main` branch are not meant for production use and are only meant for testing and providing feedback on the new features and changes. The `dev` branch that used to contain the pre-release artifacts is discontinued and will no longer be updated. * Helm-generated secrets You can now generate secrets using Helm in ForgeOps deployments. A Kubernetes job was created to generate an ssh key and store it in a secret. This is used by `amster` to connect to am. A new subcommand, **forgeops migrate sa2hs**, has been added. This subcommand can be used to migrate secrets from secret agent to Helm-generated secrets. * Integration with PingOne Worker service ForgeOps provides integration with PingOne Worker service in ForgeOps 2026.3.0 release. This allows ForgeOps users to leverage real-time risk scores for better authentication decisions. * Helm chart for RCS A new Helm chart has been created for RCS Server. This allows users to synchronize data with a ForgeOps deployment. * Supported Ping Advanced Identity Software images ForgeOps supports the last three major or minor versions of the Ping Advanced Identity Software images. With the availability of 8.1 images, ForgeOps supports 8.1, 8.0, and 7.5 versions of the platform images, and **7.4 images are no longer supported**. ## Deprecated features The following features are deprecated in ForgeOps 2026.3 release: * Kustomize Support for Kustomize-based deployments is deprecated. The ForgeOps team recommends migrating to Helm chart-based deployments. The ForgeOps Helm charts are actively maintained. Learn about migrating to Helm chart-based deployments in the [Migrate from Kustomize to Helm chart-based deployments](https://github.com/ForgeRock/forgeops/blob//2026.3.2/how-tos/migrate-kustomize-to-helm.md) article. * Secret agent The secret agent operator is deprecated. Users need to migrate to the built-in Helm-generated secrets or an alternative secrets management solution. Use [Migrate to Helm-generated secrets](../prepare/security/migrate-helmsec.html) for guidance on migrating to Helm-generated secrets. ## Release notes for 2026.3 Further release information is available in the [ForgeOps release notes](../rn/rn.html).