strimzi/strimzi-kafka-operator 0.50.1

on GitHub

⚠️ ⚠️ ⚠️ SECURITY: Strimzi 0.50.1 addresses CVE-2026-27133 and CVE-2026-27134. If you use Strimzi 0.47.0 or newer, please read the advisories and if you are affected, please upgrade to 0.50.1.

⚠️ Important: Strimzi 0.49 introduced new API version v1 to all Strimzi custom resources.

• Make sure to Upgrade the CRDs) as part of the Strimzi upgrade as well (especially when using Helm).
• The old API versions (v1alpha1, v1beta1, and v1beta2) will continue to be supported until Strimzi 1.0.0 / 0.52.0.
• Before upgrading to Strimzi 0.50.1, make sure that you update your KafkaUser resources to use the .spec.authorization.acls[]operations field instead of the deprecated .spec.authorization.acls[]operation.
• For more details about the migration to the v1 API and CRD upgrades, see the documentation.

⚠️ Important: Strimzi 0.50 is the last Strimzi version with support for Kubernetes 1.27, 1.28, and 1.29. From Strimzi 0.51.0 on, we will support only Kubernetes 1.30 and newer.

Main changes since 0.50.0

This release contains the following bug fixes and improvements:

• Fixes CVE-2026-27133
• Fixes CVE-2026-27134
• Include the full CA chain in broker certificates
• v1 API Conversion Tool bug fixes (handling of number conversions and empty YAML documents)
• Dependency updates

All changes can be found under the 0.50.1 milestone.

Upgrading from Strimzi 0.50.0

See the documentation for upgrade instructions.

Container images

The following container images are part of this release: