Releases · strimzi/strimzi-kafka-operator

29 Sep 14:24

0.48.0

c643d5d

0.48.0 Latest

Latest

⚠️ Important: Strimzi 0.48.0 supports only Kubernetes 1.27 and newer. Kubernetes 1.25 and 1.26 are not supported anymore

Main changes since 0.47.0

This release contains the following new features and improvements:

Add support for Kafka 4.1.0.
Remove support for Kafka 3.9.0 and 3.9.1.
KRaft mode and Kafka Node Pools are now enabled by default.
The strimzi.io/node-pools and strimzi.io/kraft annotations are not required anymore and will be ignored if set.
Make properties broker.session.timeout.ms, broker.heartbeat.interval.ms and controller.socket.timeout.ms configurable
Add monitoring of custom resources using kubernetes-state-metrics (KSM) (see Strimzi proposal 087)
Ignore users (their ACLs, Quotas and SCRAM-SHA-512 credentials) managed by some other tools based on a configurable pattern in User Operator
Support for type: custom client authentication (to make it easier to use custom authentication mechanisms such as AWS IAM)
Added support for Strimzi Metrics Reporter to Kafka Connect, Mirror Maker 2 and Kafka Bridge.
Add new feature gate ServerSideApplyPhase1 (disabled by default) that adds support for Server Side Apply for ConfigMap, Ingress, PVC, Service, and ServiceAccount according to Strimzi Proposal #105.
Added distinction between changes of "cluster-wide" broker properties applied dynamically at cluster level, and "per-broker" broker properties applied dynamically at broker level.
Extend the EntityOperator, Cruise Control and KafkaExporter deployment to support PDB via the template section in the CR spec.
Added support for KIP-1073
to get the list of the registered brokers by using the Kafka Admin API. It replaces the usage of the .status.registeredNodeIds field in Kafka.
Added support for KIP-745 in Kafka Connector and Mirror Maker 2, allowing the usage of
includeTasks and onlyFailed arguments in Kafka connectors restart.
Update OAuth library to 0.17.0.
Additional OAuth configuration options have been added for 'oauth' authentication on the listener and the client.
On the listener clientGrantType has been added.
On the client grantType has been added.

Major changes, deprecations and removals

Fix RBAC naming for KafkaMirrorMaker2 to avoid RoleBinding collisions when a KafkaConnect with the same name exists in the same namespace. KafkaMirrorMaker2 now uses dedicated RoleBinding names.

Upgrade note for KafkaMirrorMaker2 users (0.47.0 → 0.48.0+): Cleanup recommended

After upgrading the operator, a new (dedicated) RoleBinding for KafkaMirrorMaker2 will be created and used automatically.
The old RoleBinding, if it exists, may remain in the cluster but is no longer referenced.
```
# List RoleBindings for your KafkaMirrorMaker2 instance (replace <namespace> and <mm2-name>)
kubectl get rolebindings -n <namespace> \
  -l strimzi.io/kind=KafkaMirrorMaker2,strimzi.io/cluster=<mm2-name>
```
If multiple RoleBindings are shown, the legacy one is <mm2-name>-connect-connect-role
and the new one is <mm2-name>-mirrormaker2-role.

You can safely delete just the legacy RoleBinding (unused after upgrade):
```
kubectl delete rolebinding -n <namespace> <mm2-name>-connect-connect-role
```
From Strimzi 0.48.0 on, we support only Kubernetes 1.27 and newer.
Kubernetes 1.25 and 1.26 are not supported anymore.
Disable Cruise Control network resource goals when resource capacities are not set.
The strimzi_resource_state metric in the Cluster Operator is deprecated and is planned to be removed in Strimzi 0.51.
Use kube-state-metrics based metrics from the examples as a replacement.
The field .spec.enableMetrics in KafkaBridge is now deprecated and replaced by .spec.metricsConfig.
The User Operator does not ignore the ACL rules for the * and ANONYMOUS users by default anymore.
If you need to re-enable this feature, you can do it by configuring the STRIMZI_IGNORED_USERS_PATTERN environment variable to the following regular expression: ^\*|ANONYMOUS$.
In case you deployed the User Operator through a Kafka custom resource, you can set it using the following YAML directly in the Kafka CR:
```
apiVersion: kafka.strimzi.io/v1beta2
kind: Kafka
spec:
  #...
  entityOperator:
    template:
      userOperatorContainer:
        env:
          - name: STRIMZI_IGNORED_USERS_PATTERN
            value: "^\\*|ANONYMOUS$" # Double \ needed for escaping
    #...
```
In case you use the standalone User Operator, you can set the environment variable in its Deployment.
Please keep in mind that the ignored users will apply not only to ACLs, but also to Quotas and SCRAM-SHA credentials.
The field .status.registeredNodeIds in Kafka is now deprecated, it is not used anymore, and it will be removed in the future.

All changes can be found under the 0.48.0 milestone.

Maven artifacts

To test the Maven artifacts that are part of this release, use the 0.48.0 version in your pom.xml.

Upgrading from Strimzi 0.47.0

See the documentation for upgrade instructions.

Container images

The following container images are part of this release:

Name	Image
Operators	`quay.io/strimzi/operator@sha256:73dc9555c4a73094b497ffb14d816de5ff40144ffc470efd75ccf128afa22778`
Apache Kafka 4.0.0	`quay.io/strimzi/kafka@sha256:48db05ad2e9fa39eb388089e7e25654bcbf4da1ddc3a5635d675056c28bbcb96`
Apache Kafka 4.1.0	`quay.io/strimzi/kafka@sha256:34450afc1a3399a9026fc3c6ec90e9f6adfec9faf6520545b4d84e90cda34964`
Strimzi Bridge	`quay.io/strimzi/kafka-bridge@sha256:53034f64f0b672f10b5bacea1c7a25132f118df7fd5c9032c4dbf702ed93796a`
Kaniko executor	`quay.io/strimzi/kaniko-executor@sha256:a5088c14d7b8bf1d336669cba047b971bf3ece8969647dae2c1e3a07a7be0c5e`
Maven Builder	`quay.io/strimzi/maven-builder@sha256:64380efcb8da87fdc0e0de238a20456be9abb830174c2f2331882b7a84657e57`

New Contributors

@shunki-fujita made their first contribution in #11787
@kiku99 made their first contribution in #11862
@bissquit made their first contribution in #11849

What's Changed

Fix Strimzi Metric Exporter in Kafka brokers record in CHANGELOG by @scholzj in #11637
Bump main branch to 0.48.0-SNAPSHOT by @scholzj in #11638
Added testing Apache Kafka RCs with staging repo on the dev doc by @ppatierno in #11645
Drop support for Kube 1.25 and 1.26 by @scholzj in #11640
Fixed ambiguos call with varargs parameter by @ppatierno in #11649
Add Strimzi 0.47.0 to the main branch by @scholzj in #11655
Fixed deletion of auto-rebalancing related ConfigMap by @ppatierno in #11653
Refactor CC capacity configuration classes by @kyguy in #11615
Remove unused DeploymentConfig operators and other references by @scholzj in #11659
Use persistent link for Maven used in TF jobs by @Frawless in #11660
Add Strimzi 0.47.0 to the Upgrade/Downgrade STs by @scholzj in #11658
feat(kafka): adding new properties as expections to broker configs by @rlanhellas in #11668
Fix non-default primitive types within KafkaRebalance by @ppatierno in #11672
docs(kraft): note on migrating zookeeper clusters by @PaulRMellor in #11666
docs(pdb): clarifies PodDisruptionBudget behavior by @PaulRMellor in #11663
feat(examples,metrics,kube-state-metrics): extend for 'KafkaAccess' by @sebastiangaiser in #11677
feat(helm-charts,helm3,strimzi-kafka-operator): add optional deploymentStrategy to CO by @sebastiangaiser in #11681
Disable CC network resource goals when resource capacities are not set. by @kyguy in #11465
fix(operator): operator stuck when failing in parse kubernetes version by @rlanhellas in #11641
Fix gramma and clarity across codebase by @see-quick in #11692
Remove the KRaft and NodePool annotations by @scholzj in https://github.com/strimzi/strimzi-kafka-ope...

Contributors

mstruk, jcpunk, and 18 other contributors

Assets 10

24 Sep 17:35

ppatierno

0.48.0-rc1

c643d5d

0.48.0-rc1 Pre-release

Pre-release

⚠️ Important: Strimzi 0.48.0 supports only Kubernetes 1.27 and newer. Kubernetes 1.25 and 1.26 are not supported anymore