⚠️ Important: Strimzi 1.3.0 supports only Kubernetes 1.32 and newer. Kubernetes 1.30 and 1.31 are not supported anymore.
⚠️ ⚠️ ⚠️ Important: From Strimzi 1.0.0, the only supported version of CRD API is v1. The older v1beta2, v1beta1, and v1alpha1 APIs are no longer supported. Before upgrading to Strimzi 1.0.0 and above, make sure to convert all custom resources and upgrade the CRDs.
Main Changes Since 1.2.0
The most important new features are:
- (Early Access) Configurable internal cluster security allows users to configure encryption and authentication on the internal connections within the Apache Kafka cluster.
- Add support for Kafka 4.2.2.
- Update Kafka Exporter to 1.10.0.
- Support for mounting projected service account tokens into Strimzi-managed Pods.
- The
UseConnectBuildWithBuildahfeature gate moves to GA stage, is enabled by default without option to be disabled. - The
UseBackgroundPodDeletionfeature gate moves to beta stage and is enabled by default.
If needed,UseBackgroundPodDeletioncan be disabled in the feature gates configuration in the Cluster Operator. - (Early Access) Integration with cert-manager for issuing certificates.
While the cert-manager feature is in Early Access it is not recommended for use in production. - Updated HTTP Bridge to 1.2.0
- Add fenced brokers, offline replicas and ISR shrink/expand/failed update panels to the example Kafka Grafana dashboards
Major changes, deprecations, and removals
- PKCS12 format certificates are deprecated.
TheSTRIMZI_PKCS12_KEYSTORE_GENERATIONenv var will be set to false by default in a future release. - Kaniko is removed and Buildah is the only tool used for building Connect images.
All changes can be found under the 1.3.0 milestone or in the CHANGELOG.md.
Known issues
- The Cluster Operator deletes cert-manager
Certificateresources when a component is scaled down or disabled.
However, if you switch from a cert-manager CA to a custom CA, theCertificateresources created earlier are not deleted.
Users have to delete the remainingCertificateresources manually. This will be fixed in a future release.
Upgrading from Strimzi 1.2.0
See the documentation for upgrade instructions.
Maven Artifacts
To test the Maven artifacts that are part of this release, use the 1.3.0 version in your pom.xml.
Container Images
The following container images are part of this release:
| Name | Image |
|---|---|
| Operators | quay.io/strimzi/operator@sha256:4deb564fa329afa4046c550a6f8f1a6d00be3b9297e556969acabe6647b6676f
|
| Apache Kafka 4.2.0 | quay.io/strimzi/kafka@sha256:1d67e7fdcb364e16b632d3a7642661bcfe08e140ca6311ed9b9d011793f6c6cb
|
| Apache Kafka 4.2.1 | quay.io/strimzi/kafka@sha256:5b4ebbe9b4f00eb76622e14daddc10927e341fbc3692ea0af0cc07157fb13a57
|
| Apache Kafka 4.2.2 | quay.io/strimzi/kafka@sha256:b9b9e37491ce17c1b2722b3668661de91430d9437acf18c5f5bafaef38138652
|
| Apache Kafka 4.3.0 | quay.io/strimzi/kafka@sha256:941622ab991b155571631018294636f1f3450163719cc6052441b7d3a49ce0d4
|
| Apache Kafka 4.3.1 | quay.io/strimzi/kafka@sha256:1f189b1f0f32684302d8b018b1d21b411e2469a9c465fbdc18fa3599cb5bbdad
|
| Strimzi Bridge | quay.io/strimzi/kafka-bridge@sha256:65b8e957487e35414041c1ef54ae03d1c2a736fce39c5d921bbccadfca282ee6
|
| Maven Builder | quay.io/strimzi/maven-builder@sha256:146af4aa18fafddbd7606b9d92be395850c833c19b2a51a853b845edd5b930ba
|
| Buildah Builder | quay.io/strimzi/buildah@sha256:3ac4d8fde6eca2ad837dc5258390f5ea704949b0539c77a394eb33a63c806b97
|
New Contributors
- @celestina-amadi made their first contribution in #13092
- @ShichengRao made their first contribution in #13081
- @matheusandre1 made their first contribution in #13061
- @mrchatam made their first contribution in #13148
- @huynguyen7 made their first contribution in #13145
- @hcie123 made their first contribution in #13161
- @ajavanma made their first contribution in #13177
- @autokctrl-team made their first contribution in #13171
- @bkurdi97 made their first contribution in #13204
- @berlewis made their first contribution in #13210