Release Notes 2026.08.2¶
Overview¶
This document outlines the updates and improvements introduced in Excalibur 2026.08.2, released on August 7, 2026.
This is a maintenance release. It improves the reliability of self-managed deployments and aligns the database proxy and PAM Orchestrator services with the platform's standard configuration and logging behavior.
Fixes¶
Self-hosted reliability¶
PAM Orchestrator restarted repeatedly after a brief Redis outage¶
On self-managed Kubernetes deployments, the PAM Orchestrator treated its cache (Redis) as a required dependency at startup. If Redis was briefly unreachable when the service started, for example while a node was being recycled, the service restarted continuously until Redis returned.
The service now starts even when Redis is temporarily unavailable, retries the connection in the background, and recovers automatically once Redis is reachable. Its health check no longer depends on Redis, so a short cache outage no longer causes restarts.
Configuration Changes¶
Action required for self-hosted deployments
If you manage your own Helm values, review these changes before you upgrade. Excalibur-hosted (SaaS) environments are updated automatically and require no action.
This release aligns the database proxy and PAM Orchestrator with the platform's standard logging defaults. Both services now log to the console by default, with Loki and syslog shipping turned off, the same as every other service. The chart no longer forces Loki on for these two services.
If you deliberately ship the logs of these services to Loki, set the relevant value explicitly in your own values file:
| Value | Status | Description |
|---|---|---|
EXC_DB_PROXY_LOG_LOKI_ENABLED |
Optional | Set to 'true' to ship database proxy logs to Loki. |
EXC_PAM_ORCHESTRATOR_LOG_LOKI_ENABLED |
Optional | Set to 'true' to ship PAM Orchestrator logs to Loki. |
One database proxy environment variable was renamed for consistency. If you set the database proxy minimum TLS version through an environment override, update the name; the default configuration is unaffected.
| Previous name | New name |
|---|---|
DB_LISTENER_MIN_TLS_VERSION |
EXC_DB_PROXY_LISTENER_MIN_TLS_VERSION |
For full configuration guidance, see the Installation and Implementation Guide.
Security and Maintenance¶
This release includes internal consolidation of service configuration handling, corrected configuration documentation, and dependency updates. These strengthen the product without changing how you use it day to day.