EMQX Operator 2.3.2

Highlights

• Operator can now be configured to watch several specified namespaces, instead of watching either all namespaces or only the namespace where it is deployed. Helm users can set watchNamespaces, and the chart will create the required namespace-scoped RBAC bindings automatically. (#1219)
• EMQX configuration parsing now uses an in-tree EMQX-flavored HOCON parser, matching EMQX configuration semantics more closely when the operator processes spec.config.data. (#1209, #1212, #1217)

Fixes & Improvements

• Correctly handle scaling replicant nodes down to zero replicas without leaving the operator in an inconsistent reconcile loop. (#1210)
• Keep EMQX cluster membership consistent by force-leaving stale stopped core nodes from the controller, instead of relying on pod PreStop hooks. (#1211)
• Preserve non-changeable dashboard listener settings during configuration updates, instead of dropping related configuration entries. (#1212)
• Correctly pass spec.config.mode to the EMQX Config API so Merge and Replace updates behave as configured. (#1217)
• Allow the Helm pre-upgrade Job pod and container security contexts to be customized from chart values. (#1215)
• Remove unused persistentvolumes permissions from manager RBAC. (#1219)