Skip to content

Versioning and support

This topic explains how Next-Gen Trust Security (NGTS) Kubernetes components are versioned, the difference between Standard-Term Support (STS) and Long-Term Support (LTS), and how long Palo Alto Networks supports each release type.

Semantic versioning

Palo Alto Networks follows Semantic Versioning 2.0.0, with a v prefix on Docker image tags: v<major>.<minor>.<patch>. For example, v1.20.1.

Each part of the version number represents a type of change:

  • <major>: Incompatible API changes or significant new functionality that breaks backward compatibility.
  • <minor>: New functionality that is backward-compatible.
  • <patch>: Backward-compatible bug fixes or minor enhancements. Critical bugs and vulnerabilities are fixed in patch versions of supported releases.

Patch version upgrades do not contain breaking changes or changed behavior. Minor versions introduce new features in a backward-compatible manner, while major versions may include changes that are not backward-compatible, clearly indicated.

Release types

Only cert-manager and Distributed Issuer offer Long-Term Support (LTS) releases. All other components have Standard-Term Support (STS) releases only.

  • Standard-Term Support (STS): Supported until the second subsequent minor version is released, ensuring at least two versions are always supported.
  • Long-Term Support (LTS): Supported for a minimum of two years, with a minimum six-month overlap between LTS versions. LTS releases include backported critical bug and security fixes and guaranteed response times for critical issues.

For currently supported versions and their timelines, see cert-manager supported versions and Distributed Issuer supported versions.

Support lifecycle

Each NGTS Kubernetes component release has two phases:

  • Development Period: Palo Alto Networks actively maintains the release, fixing functional issues and CVEs.
  • Support Period: Palo Alto Networks provides technical support but does not release fixes. To receive a fix, upgrade to a newer version still within its Development Period.

Palo Alto Networks provides enterprise support for NGTS Kubernetes components under the applicable Legal Agreements.