What's New in This Guide

Release 25.2.202- G48318-03, September 2026

Prerequisites
- Updated supported Kubernetes versions to 1.34.x, 1.33.x, and 1.32.x.
- Updated the Helm requirement to 3.19.1.
- Updated supported CNE and cnDBTier releases to 25.2.2xx, 25.2.1xx, and 25.1.2xx.
- Updated the OSO requirement to 25.2.2xx.
Customizing SEPP
- Added ocsepp_servicemesh_config_custom_values_25.2.202.yaml to the customization package.
- Documented how to customize and save the file when configuring the ASM data plane.
Global Parameters
- Updated localProfile.sanValidationRequired: SAN validation is always enabled for capability-exchange handshakes; Remote SEPP-level control is configured in Remote SEPP configuration.
- Noted that localProfile.sanValidationRequired is planned for removal from custom-values.yaml in Release 26.2.200.
- Updated localProfile.domain from a single domain to a list of authorized destination-domain suffixes for N32F target API-root validation.
- Added localProfile.domainValidationReq, including validation behavior and its default value of false.
n32-egress-gateway and plmn-ingress-gateway Parameters
- Changed the default global.type service type from NodePort to ClusterIP.
- Updated Supported Upgrade Paths.
- Updated Supported Rollback Paths.

Release 25.2.201- G48318-02, July 2026

General Updates:

Updated the release number to 25.2.201 in the entire document.
Updated the SEPP images in the Pushing the SEPP Images to Customer Docker Registry, Pushing the Roaming Hub or Hosted SEPP Images to Customer Docker Registry, and Pushing the SEPP Images to OCI Docker Registry sections to mention the compatible docker image versions for various microservices.
Updated the following sections to provide information about Oracle’s error correction policy and open source support policies:
- Oracle Error Correction Policy
- Oracle Open Source Support Policies
Added the following parameters in the n32-ingress-gateway, plmn-ingress-gateway, n32-egress-gateway, and plmn-ingress-gateway sections:
- enableForwardedHeader
- enableXForwardedForHeader
- enableXForwardedHostHeader
- enableXForwardedPortHeader
- enableXForwardedProtoHeader
- enableXForwardedPrefixHeader
- addHostToConnectionFailureMetric
- addPortToConnectionFailureMetric
- addErrorReasonToConnectionFailureMetric
- addDestHostToHttpReqMetric
- addDestinationHostToResponseMetric
- addErrorReasonToResponseMetric
Added n32cHandshakeStrictMncMatchEnabled parameter to the pn32c and cn32c sections.

Upgrade, Rollback, and Uninstall Updates:

Release 25.2.200- G48318-01, April 2026

General Updates:

Updated the release number to 25.2.200 in the entire document.
Updated the SEPP images in the Pushing the SEPP Images to Customer Docker Registry, Pushing the Roaming Hub or Hosted SEPP Images to Customer Docker Registry, and Pushing the SEPP Images to OCI Docker Registry sections to mention the compatible docker image versions for various microservices.
Updated the following sections to provide information about Oracle’s error correction policy and open source support policies:
- Oracle Error Correction Policy
- Oracle Open Source Support Policies
Updated the Software Requirements section.
Added the OSO Resource Requirements section.

Upgrade, Rollback, and Uninstall Updates:

Release 25.2.200 – G48318-01, April 2026

General Updates

Updated the release number to 25.2.200 throughout the document.
Updated the SEPP images in the Pushing the SEPP Images to Customer Docker Registry, Pushing the Roaming Hub or Hosted SEPP Images to Customer Docker Registry, and Pushing the SEPP Images to OCI Docker Registry sections to identify compatible Docker image versions for the various microservices.
Added the ocsepp_alertrules_rh_hosted_<version>.yaml and ocsepp_alertrules_promha_rh_hosted_<version>.yaml files to the CSAR package for Hosted SEPP deployment mode.
Updated the following sections to provide information about Oracle’s error correction policy and open source support policies:
- Oracle Error Correction Policy
- Oracle Open Source Support Policies
Updated the Software Requirements section.
Added the OSO Resource Requirements section.
Changed the ocsepp_configuration_openapi_<version>.yaml file format to ocsepp_configuration_openapi_<version>.json.
Added the Customization of OpenAPI JSON appendix for updating OpenAPI server URLs and selecting the required API-group server.

Installation Updates

Updated the following sections to enable Hosted SEPP deployment mode:
- Configuring Secrets at PLMN Egress and Ingress Gateway
- Configuring Secrets at N32 Egress and Ingress Gateway
- Supported Upgrade Paths
- Automatically Creating Service Account, Role, and Rolebinding
Added the following parameters for Hosted SEPP deployment mode:
- global.hostedSepp
- global.sniHeaderName
- cn32c.sniHeaderName
- pn32c.sniHeaderName
- pn32f.sniHeaderName
- cn32f.sniHeaderName
- n32-ingress-gateway.multiFqdn.enabled
- n32-ingress-gateway.multiFqdn.fqdnDetails.fqdn
- n32-ingress-gateway.multiFqdn.fqdnDetails.caroot_file
Updated the Configuring SEPP for NRF Interaction section.
Added Configuring SEPP Alerts for non-OCCNE Versions to the Alert Configuration.
Added the following parameters for Error Response and Logging Enhancement for SEPP in the Global Parameters, n32-ingress-gateway, plmn-ingress-gateway, n32-egress-gateway, and plmn-egress-gateway sections:
- seppSbiTimerTimezone
- seppMaxRspTimerEnabled
Added the following parameters for Lifecycle Management (LCM)-based automation in the Global Parameters section:
- autoCreateResources.enabled
- serviceAccount.create
Added global.localProfile.EnhancedLoggingNFType for Error Response and Logging Enhancement for SEPP in the Global Parameters section.

Upgrade, Rollback, and Uninstall Updates

Updated the supported upgrade paths in the Upgrading SEPP section.
Updated the supported rollback paths in the Rolling Back SEPP section.
Added a note about the rollback sequence for an n-site geo-replicated setup in the Rolling Back SEPP section.