⚠️ ⚠️ ⚠️ SECURITY: Strimzi 0.50.1 and 0.51.0 addresses CVE-2026-27133 and CVE-2026-27134. If you use Strimzi 0.47.0 or newer, please read the advisories and if you are affected, please upgrade to 0.50.1 or 0.51.0.
⚠️ Important: Strimzi 0.51 supports only Kubernetes 1.30 and newer. Kubernetes 1.27, 1.28, and 1.29 are not supported anymore.
⚠️ Important: Strimzi 0.49 introduced new API version v1 to all Strimzi custom resources.
- Make sure to Upgrade the CRDs as part of the Strimzi upgrade as well (especially when using Helm).
- The old API versions (
v1alpha1,v1beta1, andv1beta2) will continue to be supported until Strimzi 1.0.0 / 0.52.0. - Before upgrading to Strimzi 0.51.0 from Strimzi 0.48 or older, make sure that you update your
KafkaUserresources to use the.spec.authorization.acls[]operationsfield instead of the deprecated.spec.authorization.acls[]operation. - For more details about the migration to the
v1API and CRD upgrades, see the documentation.
Main changes since 0.50
This release contains the following new features and improvements:
- Add support for Kafka 4.2.0 and remove support for Kafka 4.0.0 and 4.0.1
- Allow configuration of additional Kafka options on a per-listener basis (
connections.max.reauth.ms,max.connections,max.connections.*andmax.connection.creation.rate) ServerSideApplyPhase1feature gate moved to beta, and is now enabled by default
All changes can be found under the 0.51.0 milestone.
Major changes, deprecations, and removals
There are also many important changes, deprecations, and removals:
- The
ingresslistener type is deprecated due to the archiving of the Ingress NGINX Controller for Kubernetes (March 2026).
The code remains in the Strimzi codebase, but no further improvements or development are planned.
Maven artifacts
To test the Maven artifacts that are part of this release, use the 0.51.0-RC1 version in your pom.xml.
Upgrading from Strimzi 0.50.0
See the documentation for upgrade instructions.
Container images
The following container images are part of this release:
| Name | Image |
|---|---|
| Operators | quay.io/strimzi/operator@sha256:ef3e406aa09449dd0241d53cdc81e15e58bf59b51f2425fb64384a179d676b1d
|
| Apache Kafka 4.1.0 | quay.io/strimzi/kafka@sha256:28741c73503a63d74da3cdb482ec2b8b3a07e570ffdcad94bbcf568856c6ef4b
|
| Apache Kafka 4.1.1 | quay.io/strimzi/kafka@sha256:b8826823abe035973631c939a45f060203d5b73aefee6b20eea777fbf1a4a08f
|
| Apache Kafka 4.2.0 | quay.io/strimzi/kafka@sha256:bb6a6020c44b7fc7910ac79f76e87e42aef1e9423e2bc9372f73834c5e5c8b22
|
| Strimzi Bridge | quay.io/strimzi/kafka-bridge@sha256:c871fc40e920a69ab4b44efa80068a77849803142b20f22cd6f787c85cba481a
|
| Kaniko executor | quay.io/strimzi/kaniko-executor@sha256:ca8838eb04f394cd3ae6268d70dd9bc7852c5c603aa30ae6aff407c2c5a29639
|
| Maven Builder | quay.io/strimzi/maven-builder@sha256:a3899df1b46bc5f34f204c059e9716568497cab1043d3f1ffb973e7204626a49
|
| Buildah builder | quay.io/strimzi/buildah@sha256:3ac4d8fde6eca2ad837dc5258390f5ea704949b0539c77a394eb33a63c806b97
|
New Contributors
- @alephys26 made their first contribution in #12368
- @Pinimo made their first contribution in #12366
- @mastermaxx03 made their first contribution in #12385
- @nbarrientos made their first contribution in #12401