2026.1

Using werf

The separate common key vault is not used in single-tenant setups. Instead, the existing key vault is updated with the secrets required by the system app. Therefore, the commonsecrets value must be set to false in the global environment YAML file, as shown below:

# Enable only if secret wzcommon-secrets is present
  commonsecrets:
    enabled: false

See Prepare environment files for WorkZone container installation.

WorkZone PDF

Container updates:

  • The wzpdf.init container now runs on the Linux platform.

  • A new webapi container has been introduced.

Authentication

Authentication by the WorkZone wzcs.oauth2 component is deprecated. Authentication is now handled through the Microsoft Identity Platform, which requires changes to Helm charts and other container configuration.

In the 2026.1 Helm charts, the WORKZONE_AUTHENTICATION_TYPE environment variable is set by default:

WORKZONE_AUTHENTICATION_TYPE: "MicrosoftIdentity"

Key vault values

Removed key:

WORKZONE-PDF-CRAWLER-CLIENTSECRET

New keys:

WORKZONE_AZURE_SYS_TENANTID

WORKZONE_AZURE_SYS_SJCRAWLERUSER_ENTERPRISE_OBJECTID

WORKZONE_AZURE_SYS_SJCRAWLERUSER_CLIENTID

WORKZONE_AZURE_SYS_SJCRAWLERUSER_CLIENTSECRET

See WorkZone PDF and Preparing container installation.

WorkZone for Office

Key vault values

New key:

WORKZONE-AZURE-SYS-SYSTEMUSER-ENTERPRISE-OBJECTID

See Preparing container installation.

WZLogic

New URLs has been intoduced to support QraphQL in Datafordeler, you must add GraphQL URLs to both the values.yaml and the environment.yaml files

values.yaml


wzlogic:
      datafordeler:
        CprBaseUri: https://s5-certservices.datafordeler.dk/
        CvrBaseUri: https://s5-certservices.datafordeler.dk/
        BfeBaseUri: https://certservices.datafordeler.dk/
        EventsBaseUri: https://s5-certservices.datafordeler.dk/
        CprGraphQLUri: https://graphql.datafordeler.dk/CPR
        CvrGraphQLUri: https://graphql.datafordeler.dk/flexibleCurrent/v1

environment.yaml


wzlogic:
      datafordeler:
        CprBaseUri: https://test04-s5-certservices.datafordeler.dk/
        CvrBaseUri: https://test03-s5-certservices.datafordeler.dk/
        EventsBaseUri: https://test03-s5-certservices.datafordeler.dk/
        CprGraphQLUri: https://test04-graphql.datafordeler.dk/CPR
        CvrGraphQLUri: https://test06-graphql.datafordeler.dk/flexibleCurrent/v1

See Contact synchronization and Preparing container installation.

Conversion of data from a single‑byte character set to UTF‑8

Until the 2024.1 release, WorkZone supported both UTF-8 and MSWIN1253. From the 2024.2 release onward, only UTF‑8 is supported. Customers who are not yet using UTF‑8 must therefore convert their data from a single‑byte character set to UTF‑8 when migrating to container‑based hosting on 2024.2 or later releases.

In a private cloud setup (on‑premises or managed by a partner), customers are responsible for performing this conversion in collaboration with their operations provider.

Documentation updates

Containers update

The wzfo/init container has been replaced with wzo/init. See WorkZone containers.

Pod secrets update

Added more pod secrets for WorkZone that are stored in a Key Vault. See Prepare the Key Vault for installing WorkZone

Containers update

A new wopihost container has been added. See WERF deployment packages.

Containers update

The WZTC container has been removed. WorkZone Teams works from the teams.workzone.cloud and does not require deploying a container. See WERF deployment packages.

Updated values.yaml file

Code for the values.yaml file has been updated, to ensure proper WorkZone 365 installation. See Preparing container installation.

No changes in this release.

New containers

The following new containers have been added: 

  • odata4 in the WZCS repo - OData V4 service.

  • service in the WZEI repo -

See WERF deployment packages.

Contact synchronization

A new page about how to deploy containers that are required for using Contact synchronization.

Windows node pools til Windows Server 2019

WorkZone 2024.5 is the last version that supports Windows node pools for Windows Server 2019. Please upgrade to Windows Server 2022 before next release. See Microsoft article Upgrade the OS version for your Azure Kubernetes Service (AKS) Windows workloads.

Install or upgrade archive databases

The DBUpgrade container now contains the two new environment variables WORKZONE_DB_TYPE and WORKZONE_ARCHIVE_PERIOD. You can use the variables to install or upgrade archive databases.

See WorkZone Database (DB) Upgrade container.

werf packages updates

The standard werf packages now supports WorkZone 2024.3.

See WERF deployment packages.

Contact synchronization

New container contactsyncconfigservice in the WZLOGIC repo

A new contactsyncconfigservice container is now deployed to the WZLOGIC repo. The contactsyncconfigservice container contains a service that provides the configuration API for Contact Sync services (CPR/CVR Lookup and Update).

See Container deployment and packages.

New keys in the key vault

As KMD Logic is no longer used when looking up and updating contacts, the KMD Logic keys are no longer needed in the key vault. The KMD Logic keys have been replaced with two new keys that are used for synchronization of contacts.

New keys:

WORKZONE-CONTACTSYNCCONFIG-ENCRYPTION-KEY

WORKZONE-CONTACTSYNCCONFIG-DECRYPTION-KEY

Obsolete keys:

WORKZONE-LOGIC-CPR-CONFIGURATIONID

WORKZONE-LOGIC-CPR-SUBSCRIPTIONID

WORKZONE-LOGIC-CVR-CONFIGURATIONID

WORKZONE-LOGIC-CVR-SUBSCRIPTIONID

WORKZONE-LOGIC-TOKENPROVIDER-CLIENTSECRET

See Prepare the Key Vault for installing WorkZone.

New API wzlogic/contactsync/configservice container

A new container wzlogic/contactsync/configservice has been added. The container updates CPR/CVR certificates and passwords.

See API containers.