Releases: strimzi/strimzi-kafka-operator
Releases · strimzi/strimzi-kafka-operator
Release list
1.2.0
v1. The older v1beta2, v1beta1, and v1alpha1 APIs are no longer supported. Before upgrading to Strimzi 1.0.0 and above, make sure to convert all custom resources and upgrade the CRDs.
Main Changes Since 1.1.0
The most important new features are:
- Apache Kafka 4.3.1 support
- Templated (per-pod) additional volumes
- Stop auto-mounting Service Account tokens into Pods and mount them through a volume instead
ServerSideApplyPhase1feature gate moves to GA stage and is permanently enabled- Configuring Maven mirrors for Kafka Connect Build
- Connectors that request the stopped or paused state via
.spec.stateare now created directly in that state instead of being started first and then stopped or paused. - Support for broker cordoning during auto-rebalancing on scale down for Kafka 4.3+
- And many more ...
There are also some important changes to the installation files:
- The Cluster, Topic, and User Operator YAML installation files and the Cluster Operator Helm Chart now use the default container security context that matches the Restricted Kubernetes Pod Security Standard. If needed, you can override the default security context by updating the
securityContextproperty in the YAML installation files or use thesecurityContextproperty in the Cluster Operator Helm Chart values.
All changes can be found under the 1.2.0 milestone or in the CHANGELOG.md.
Upgrading from Strimzi 1.1.0
See the documentation for upgrade instructions.
Maven Artifacts
To test the Maven artifacts that are part of this release, use the 1.2.0 version in your pom.xml.
Container Images
The following container images are part of this release:
| Name | Image |
|---|---|
| Operators | quay.io/strimzi/operator@sha256:77f8fa8121a67561c3418de985783d197f51b8931e9a47f793dc0437dc6bb21f |
| Apache Kafka 4.2.0 | quay.io/strimzi/kafka@sha256:57a8fc7f50d37a62c7dc1afbf8300bb7b18b74c6979dd42992e9b8bf93b21d66 |
| Apache Kafka 4.2.1 | quay.io/strimzi/kafka@sha256:47ea0bd5cd416a92cbcfa248ae4b4b01a1e5d6b87aeafa67a691abdc29e20d0d |
| Apache Kafka 4.3.0 | quay.io/strimzi/kafka@sha256:fef34b5438e8556cc08c01f3e254e47346f061b53a4e38d4289853777e0ea7f1 |
| Apache Kafka 4.3.1 | quay.io/strimzi/kafka@sha256:e90a1a74af4226f3ca4d1ebef3ab13bdb09754ae17ca4c1444f7fcbb0ca8ea9a |
| Strimzi Bridge | quay.io/strimzi/kafka-bridge@sha256:3a03af635b3ba64505527864bd0f6ad7b5118637491d8a5b32be78e11733e65a |
| Kaniko Executor | quay.io/strimzi/kaniko-executor@sha256:ca8838eb04f394cd3ae6268d70dd9bc7852c5c603aa30ae6aff407c2c5a29639 |
| Maven Builder | quay.io/strimzi/maven-builder@sha256:dc6becc287c4adc887ff404502595a635e1087c5e444803dec33a3a1dcc8cd8f |
| Buildah Builder | quay.io/strimzi/buildah@sha256:3ac4d8fde6eca2ad837dc5258390f5ea704949b0539c77a394eb33a63c806b97 |
New Contributors
- @BK202503 made their first contribution in #12885
- @acgtun made their first contribution in #12895
- @anxkhn made their first contribution in #12903
- @bboyleonp666 made their first contribution in #12788
- @gggeon96 made their first contribution in #12796
- @rd-patrick-wegner made their first contribution in #12927
- @ShashwatSinha03 made their first contribution in #12920
- @marcus-chae made their first contribution in #12948
- @DavidMachacek made their first contribution in #12928
- @Mopsgeschwindigkeit made their first contribution in #12973
- @KasparMetsa made their first contribution in #12974
- @gferreir made their first contribution in #12999
- @mariusandrian made their first contribution in #13027
Contributors
acgtun, DavidMachacek, and 11 other contributors
Assets 11
1.2.0-rc2
v1. The older v1beta2, v1beta1, and v1alpha1 APIs are no longer supported. Before upgrading to Strimzi 1.0.0 and above, make sure to convert all custom resources and upgrade the CRDs.
Main Changes Since 1.2.0-rc2
- Fix incorrect CA logging
All changes can be found under the 1.2.0 milestone or in the CHANGELOG.md.
Maven artifacts
To test the Maven artifacts that are part of this release, use the 1.2.0-RC2 version in your pom.xml.
Container Images
The following container images are part of this release:
| Name | Image |
|---|---|
| Operators | quay.io/strimzi/operator@sha256:77f8fa8121a67561c3418de985783d197f51b8931e9a47f793dc0437dc6bb21f |
| Apache Kafka 4.2.0 | quay.io/strimzi/kafka@sha256:57a8fc7f50d37a62c7dc1afbf8300bb7b18b74c6979dd42992e9b8bf93b21d66 |
| Apache Kafka 4.2.1 | quay.io/strimzi/kafka@sha256:47ea0bd5cd416a92cbcfa248ae4b4b01a1e5d6b87aeafa67a691abdc29e20d0d |
| Apache Kafka 4.3.0 | quay.io/strimzi/kafka@sha256:fef34b5438e8556cc08c01f3e254e47346f061b53a4e38d4289853777e0ea7f1 |
| Apache Kafka 4.3.1 | quay.io/strimzi/kafka@sha256:e90a1a74af4226f3ca4d1ebef3ab13bdb09754ae17ca4c1444f7fcbb0ca8ea9a |
| Strimzi Bridge | quay.io/strimzi/kafka-bridge@sha256:3a03af635b3ba64505527864bd0f6ad7b5118637491d8a5b32be78e11733e65a |
| Kaniko executor | quay.io/strimzi/kaniko-executor@sha256:ca8838eb04f394cd3ae6268d70dd9bc7852c5c603aa30ae6aff407c2c5a29639 |
| Maven Builder | quay.io/strimzi/maven-builder@sha256:dc6becc287c4adc887ff404502595a635e1087c5e444803dec33a3a1dcc8cd8f |
| Buildah builder | quay.io/strimzi/buildah@sha256:3ac4d8fde6eca2ad837dc5258390f5ea704949b0539c77a394eb33a63c806b97 |
1.2.0-rc1
v1. The older v1beta2, v1beta1, and v1alpha1 APIs are no longer supported. Before upgrading to Strimzi 1.0.0 and above, make sure to convert all custom resources and upgrade the CRDs.
Main Changes Since 1.1.0
The most important new features are:
- Apache Kafka 4.3.1 support
- Templated (per-pod) additional volumes
- Stop auto-mounting Service Account tokens into Pods and mount them through a volume instead
ServerSideApplyPhase1feature gate moves to GA stage and is permanently enabled- Configuring Maven mirrors for Kafka Connect Build
- Connectors that request the stopped or paused state via
.spec.stateare now created directly in that state instead of being started first and then stopped or paused. - Support for broker cordoning during auto-rebalancing on scale down for Kafka 4.3+
- And many more ...
There are also some important changes to the installation files:
- The Cluster, Topic, and User Operator YAML installation files and the Cluster Operator Helm Chart now use the default container security context that matches the Restricted Kubernetes Pod Security Standard. If needed, you can override the default security context by updating the
securityContextproperty in the YAML installation files or use thesecurityContextproperty in the Cluster Operator Helm Chart values.
All changes can be found under the 1.2.0 milestone or in the CHANGELOG.md.
Upgrading from Strimzi 1.1.0
See the documentation for upgrade instructions.
Maven artifacts
To test the Maven artifacts that are part of this release, use the 1.2.0-RC1 version in your pom.xml.
Container Images
The following container images are part of this release:
| Name | Image |
|---|---|
| Operators | quay.io/strimzi/operator@sha256:4f8b863880e2dfabde6a6a06459587cfb215cb7f1a42611e74b081d55d6ef18b |
| Apache Kafka 4.2.0 | quay.io/strimzi/kafka@sha256:db3957572af378ea9207ab0e1c38f792c573d08fb78efe49aad47d8d3cba4f18 |
| Apache Kafka 4.2.1 | quay.io/strimzi/kafka@sha256:eb35ea88ad3bafab681b7e71ec094bb8d1e79bedf8623335f874674cfd2e1264 |
| Apache Kafka 4.3.0 | quay.io/strimzi/kafka@sha256:2a0f9d7ad075bc4ff78adcd71fa2df34c7b85bad19ce624d86ec73b167b21cd7 |
| Apache Kafka 4.3.1 | quay.io/strimzi/kafka@sha256:e91b3a9f9be5e7416e3509c39321ca4f5b90f73dcd9cc23ab024dd4f31a77f2d |
| Strimzi Bridge | quay.io/strimzi/kafka-bridge@sha256:3a03af635b3ba64505527864bd0f6ad7b5118637491d8a5b32be78e11733e65a |
| Kaniko executor | quay.io/strimzi/kaniko-executor@sha256:ca8838eb04f394cd3ae6268d70dd9bc7852c5c603aa30ae6aff407c2c5a29639 |
| Maven Builder | quay.io/strimzi/maven-builder@sha256:44b7d2d5cf0e2b7f558d686d6ecd3b093bf0f85fbecfcc9ee7952ad792fd72ae |
| Buildah builder | quay.io/strimzi/buildah@sha256:3ac4d8fde6eca2ad837dc5258390f5ea704949b0539c77a394eb33a63c806b97 |
New Contributors
- @BK202503 made their first contribution in #12885
- @acgtun made their first contribution in #12895
- @anxkhn made their first contribution in #12903
- @bboyleonp666 made their first contribution in #12788
- @gggeon96 made their first contribution in #12796
- @rd-patrick-wegner made their first contribution in #12927
- @ShashwatSinha03 made their first contribution in #12920
- @marcus-chae made their first contribution in #12948
- @DavidMachacek made their first contribution in #12928
- @Mopsgeschwindigkeit made their first contribution in #12973
- @KasparMetsa made their first contribution in #12974
- @gferreir made their first contribution in #12999
- @mariusandrian made their first contribution in #13027
Contributors
acgtun, DavidMachacek, and 11 other contributors
Assets 11
1.1.0
v1. The older v1beta2, v1beta1, and v1alpha1 APIs are no longer supported. Before upgrading to Strimzi 1.0.0 and above, make sure to convert all custom resources and upgrade the CRDs.
Main changes since 1.0
This release contains the following new features and improvements:
- Allow failed
KafkaConnectorsto be stopped and reject pausing of failed connectors since this operation is not supported by Kafka Connect - Add support for Apache Kafka 4.3.0 and 4.2.1
- Remove support for Kafka 4.1.x
- Reconcile Cruise Control before Entity Operator when both are enabled.
- New Cluster operator configuration option
STRIMZI_PKCS12_KEYSTORE_GENERATIONto disable generating PKCS12 stores in CA and Kafka userSecretresources. - Support for Gateway API-based
type: tlsroutelistener - Support for dependency scope configuration of Maven artifacts in Kafka Connect Build
- Support for configuring per-broker listener annotation and label templates.
- Improved support for custom Apache Kafka versions
- Add
UseBackgroundPodDeletionfeature gate (alpha, disabled by default) to use background deletion propagation when deleting pods during rolling updates. - Strimzi Drain Cleaner updated to 1.6.0 (included in the Strimzi installation files)
- Strimzi Access Operator updated to 0.3.0 - included in Strimzi installation files, examples, and documentation
- KafkaBridge and KafkaMirrorMaker2 now use PEM files instead of P12/JKS for TLS authentication and TLS truststore. PEM files are accessed directly from secrets using KubernetesSecretConfigProvider.
- It's now possible to configure mTLS
validityDaysandrenewalDaysfor eachKafkaUser
All changes can be found under the 1.1.0 milestone or in the CHANGELOG.md.
Upgrading from Strimzi 0.51.0
See the documentation for upgrade instructions.
Container images
The following container images are part of this release:
| Name | Image |
|---|---|
| Operators | quay.io/strimzi/operator@sha256:0b18356206d5b98888bb1bca6acd389bbb302ecdcb5f7ea697ddfefbe1a653e6 |
| Apache Kafka 4.2.0 | quay.io/strimzi/kafka@sha256:79d91d6a9dc9dc08ea1e75cb8b5cf1a73069a1db265b67335f444b4043f72f5b |
| Apache Kafka 4.2.1 | quay.io/strimzi/kafka@sha256:4cdf885bba8b67a637f8565058a8a26ed7115e1c7bdf76d6f32df3cd1aa38503 |
| Apache Kafka 4.3.0 | quay.io/strimzi/kafka@sha256:b6848a53c01eec98b37866450a1227c3a41707785ec65b37063d2733a105bf36 |
| Strimzi Bridge | quay.io/strimzi/kafka-bridge@sha256:dcec1c978f4174c101b78fd290a698fad89f83439c9a868bbbd9c9750b146fdf |
| Kaniko executor | quay.io/strimzi/kaniko-executor@sha256:ca8838eb04f394cd3ae6268d70dd9bc7852c5c603aa30ae6aff407c2c5a29639 |
| Maven Builder | quay.io/strimzi/maven-builder@sha256:4662f4f9714e24dd24c139e795f90e9cc4bbe454f244d3b73d9234857971fd16 |
| Buildah builder | quay.io/strimzi/buildah@sha256:3ac4d8fde6eca2ad837dc5258390f5ea704949b0539c77a394eb33a63c806b97 |
New Contributors
- @neeraj-laad made their first contribution in #12652
- @TheoBrigitte made their first contribution in #12691
- @pkotak made their first contribution in #12743
- @gilvansfilho made their first contribution in #12746
- @gaganhr94 made their first contribution in #12656
- @officialasishkumar made their first contribution in #12732
- @afausti made their first contribution in #12783
- @aveek22 made their first contribution in #12791
- @won-seoop made their first contribution in #12776
- @mahitha-ada made their first contribution in #12824
- @chon3806 made their first contribution in #12675
Contributors
mahitha-ada, aveek22, and 9 other contributors
Assets 11
1.1.0-rc1
v1. The older v1beta2, v1beta1, and v1alpha1 APIs are no longer supported. Before upgrading to Strimzi 1.0.0 and above, make sure to convert all custom resources and upgrade the CRDs.
Main changes since 1.0
This release contains the following new features and improvements:
- Allow failed
KafkaConnectorsto be stopped and reject pausing of failed connectors since this operation is not supported by Kafka Connect - Add support for Apache Kafka 4.3.0 and 4.2.1
- Remove support for Kafka 4.1.x
- Reconcile Cruise Control before Entity Operator when both are enabled.
- New Cluster operator configuration option
STRIMZI_PKCS12_KEYSTORE_GENERATIONto disable generating PKCS12 stores in CA and Kafka userSecretresources. - Support for Gateway API-based
type: tlsroutelistener - Support for dependency scope configuration of Maven artifacts in Kafka Connect Build
- Support for configuring per-broker listener annotation and label templates.
- Improved support for custom Apache Kafka versions
- Add
UseBackgroundPodDeletionfeature gate (alpha, disabled by default) to use background deletion propagation when deleting pods during rolling updates. - Strimzi Drain Cleaner updated to 1.6.0 (included in the Strimzi installation files)
- Strimzi Access Operator updated to 0.3.0 - included in Strimzi installation files, examples, and documentation
- KafkaBridge and KafkaMirrorMaker2 now use PEM files instead of P12/JKS for TLS authentication and TLS truststore. PEM files are accessed directly from secrets using KubernetesSecretConfigProvider.
- It's now possible to configure mTLS
validityDaysandrenewalDaysfor eachKafkaUser
All changes can be found under the 1.1.0 milestone or in the CHANGELOG.md.
Upgrading from Strimzi 0.51.0
See the documentation for upgrade instructions.
Container images
The following container images are part of this release:
| Name | Image |
|---|---|
| Operators | quay.io/strimzi/operator@sha256:0b18356206d5b98888bb1bca6acd389bbb302ecdcb5f7ea697ddfefbe1a653e6 |
| Apache Kafka 4.2.0 | quay.io/strimzi/kafka@sha256:79d91d6a9dc9dc08ea1e75cb8b5cf1a73069a1db265b67335f444b4043f72f5b |
| Apache Kafka 4.2.1 | quay.io/strimzi/kafka@sha256:4cdf885bba8b67a637f8565058a8a26ed7115e1c7bdf76d6f32df3cd1aa38503 |
| Apache Kafka 4.3.0 | quay.io/strimzi/kafka@sha256:b6848a53c01eec98b37866450a1227c3a41707785ec65b37063d2733a105bf36 |
| Strimzi Bridge | quay.io/strimzi/kafka-bridge@sha256:dcec1c978f4174c101b78fd290a698fad89f83439c9a868bbbd9c9750b146fdf |
| Kaniko executor | quay.io/strimzi/kaniko-executor@sha256:ca8838eb04f394cd3ae6268d70dd9bc7852c5c603aa30ae6aff407c2c5a29639 |
| Maven Builder | quay.io/strimzi/maven-builder@sha256:4662f4f9714e24dd24c139e795f90e9cc4bbe454f244d3b73d9234857971fd16 |
| Buildah builder | quay.io/strimzi/buildah@sha256:3ac4d8fde6eca2ad837dc5258390f5ea704949b0539c77a394eb33a63c806b97 |
New Contributors
- @neeraj-laad made their first contribution in #12652
- @TheoBrigitte made their first contribution in #12691
- @pkotak made their first contribution in #12743
- @gilvansfilho made their first contribution in #12746
- @gaganhr94 made their first contribution in #12656
- @officialasishkumar made their first contribution in #12732
- @afausti made their first contribution in #12783
- @aveek22 made their first contribution in #12791
- @won-seoop made their first contribution in #12776
- @mahitha-ada made their first contribution in #12824
- @chon3806 made their first contribution in #12675
Contributors
mahitha-ada, aveek22, and 9 other contributors
Assets 10
1.0.1
v1 CRD API. The older v1beta2, v1beta1, and v1alpha1 APIs are no longer supported. Before upgrading to Strimzi 1.0.1, make sure to convert all custom resources and upgrade the CRDs.
Main changes since 1.0.0
- Entity Operator cross-namespace watching is now controlled by the
STRIMZI_ENTITY_OPERATOR_WATCHED_NAMESPACE_ENABLEDenvironment variable in the Cluster Operator.
This feature is now disabled by default.
If you havewatchedNamespaceconfigured in your Kafka CR's Entity Operator sections and it differs from the cluster namespace, you must setSTRIMZI_ENTITY_OPERATOR_WATCHED_NAMESPACE_ENABLED=truein the Cluster Operator deployment:env: - name: STRIMZI_ENTITY_OPERATOR_WATCHED_NAMESPACE_ENABLED value: "true"
- Fixes CVE-2026-55225
- Fixes CVE-2026-55226
Upgrading from Strimzi 0.51.0
See the documentation for upgrade instructions. Make sure to follow the CRD upgrade instructions!
Container images
The following container images are part of this release:
| Name | Image |
|---|---|
| Operators | quay.io/strimzi/operator@sha256:9c32dfe22d8602f43e8d8780706fbf65f023bcde3cef272688f35d1eead2640f |
| Apache Kafka 4.1.0 | quay.io/strimzi/kafka@sha256:b7da827ad38b199877387893a6cdf381d4eddae92854141eefe4a7a3b31c3b8f |
| Apache Kafka 4.1.1 | quay.io/strimzi/kafka@sha256:1c4811ff5ac8368a44327e24431775602fe9e008c20a45814858776c348658c8 |
| Apache Kafka 4.1.2 | quay.io/strimzi/kafka@sha256:39bce6f044fe43c62b1355b4e855866899685f316db15cd25a27f7f37fffa99f |
| Apache Kafka 4.2.0 | quay.io/strimzi/kafka@sha256:8cbd25d7bb132cc64fde7ac8460a5e4198fc67deadfd1bef5430866a7befbe47 |
| Strimzi Bridge | quay.io/strimzi/kafka-bridge@sha256:dcec1c978f4174c101b78fd290a698fad89f83439c9a868bbbd9c9750b146fdf |
| Kaniko executor | quay.io/strimzi/kaniko-executor@sha256:ca8838eb04f394cd3ae6268d70dd9bc7852c5c603aa30ae6aff407c2c5a29639 |
| Maven Builder | quay.io/strimzi/maven-builder@sha256:101291b64945417a01d152d12803bc8b42a4d8c9b4735b61957c4c99e4ae9f35 |
| Buildah builder | quay.io/strimzi/buildah@sha256:3ac4d8fde6eca2ad837dc5258390f5ea704949b0539c77a394eb33a63c806b97 |
1.0.0
v1 CRD API. The older v1beta2, v1beta1, and v1alpha1 APIs are no longer supported. Before upgrading to Strimzi 1.0.0, make sure to convert all custom resources and upgrade the CRDs.
Main changes since 0.51
This release contains the following new features and improvements:
- Remove support for the
v1beta2API (andv1alpha1andv1beta2forKafkaTopicandKafkaUser) and fully move to thev1API - Add support for Kafka 4.1.2
- Add support for
advertisedPortTemplatein listener configuration to add more flexibility when configuring advertised ports. - Support for
type: environment-variablerack awareness based on environment variables that do not require ClusterRoleBindings - Add support for TLS/SSL on the HTTP Bridge
- Add support for force-renewal of KafkaUser certificates via
strimzi.io/force-renewannotation - The
UseConnectBuildWithBuildahfeature gate moves to the beta stage and is enabled by default - And many more ...
All changes can be found under the 1.0.0 milestone or in the CHANGELOG.md.
Upgrading from Strimzi 0.51.0
See the documentation for upgrade instructions. Make sure to follow the CRD upgrade instructions!
Container images
The following container images are part of this release:
| Name | Image |
|---|---|
| Operators | quay.io/strimzi/operator@sha256:fe09836e37ed891a5931292701ec7c81ccb3b0b26599f7d2326ea4af891247aa |
| Apache Kafka 4.1.0 | quay.io/strimzi/kafka@sha256:70a7368438d1c5e0d5272848d588c812c53e3b853c68424c017b548039c23596 |
| Apache Kafka 4.1.1 | quay.io/strimzi/kafka@sha256:d48bbc220e28246c76342f6b77f9be53b07ac4909240ebfa4a6139d61a951bd4 |
| Apache Kafka 4.1.2 | quay.io/strimzi/kafka@sha256:6a52c514833a91ac08ee6cf10609b60961580170661caadec0a6992a7208c2a2 |
| Apache Kafka 4.2.0 | quay.io/strimzi/kafka@sha256:87c6b1c1081bfc25f88a0490d580f5696f5e419482d686df612cdfdf04711059 |
| Strimzi Bridge | quay.io/strimzi/kafka-bridge@sha256:dcec1c978f4174c101b78fd290a698fad89f83439c9a868bbbd9c9750b146fdf |
| Kaniko executor | quay.io/strimzi/kaniko-executor@sha256:ca8838eb04f394cd3ae6268d70dd9bc7852c5c603aa30ae6aff407c2c5a29639 |
| Maven Builder | quay.io/strimzi/maven-builder@sha256:326a67a6d60820e04757e40d3c9651046108e06aff2346256b772982d86d4b0e |
| Buildah builder | quay.io/strimzi/buildah@sha256:3ac4d8fde6eca2ad837dc5258390f5ea704949b0539c77a394eb33a63c806b97 |
New Contributors
- @marvin-roesch made their first contribution in #12477
- @Paramesh324 made their first contribution in #12509
- @marcelojscosta made their first contribution in #12527
- @QuentinBisson made their first contribution in #12560
- @guancioul made their first contribution in #12631
- @mamccorm made their first contribution in #12506
Contributors
marcelojscosta, QuentinBisson, and 4 other contributors
Assets 12
1.0.0-rc2
v1 CRD API. The older v1beta2, v1beta1, and v1alpha1 APIs are no longer supported. Before upgrading to Strimzi 1.0.0, make sure to convert all custom resources and upgrade the CRDs.
Main changes since 1.0.0-rc1
- Fix resuming stopped or paused Kafka Connect connectors
All changes can be found under the 1.0.0 milestone or in the CHANGELOG.md.
Upgrading from Strimzi 0.51.0 or 1.0.0-rc1
See the documentation for upgrade instructions.
Container images
The following container images are part of this release:
| Name | Image |
|---|---|
| Operators | quay.io/strimzi/operator@sha256:fe09836e37ed891a5931292701ec7c81ccb3b0b26599f7d2326ea4af891247aa |
| Apache Kafka 4.1.0 | quay.io/strimzi/kafka@sha256:70a7368438d1c5e0d5272848d588c812c53e3b853c68424c017b548039c23596 |
| Apache Kafka 4.1.1 | quay.io/strimzi/kafka@sha256:d48bbc220e28246c76342f6b77f9be53b07ac4909240ebfa4a6139d61a951bd4 |
| Apache Kafka 4.1.2 | quay.io/strimzi/kafka@sha256:6a52c514833a91ac08ee6cf10609b60961580170661caadec0a6992a7208c2a2 |
| Apache Kafka 4.2.0 | quay.io/strimzi/kafka@sha256:87c6b1c1081bfc25f88a0490d580f5696f5e419482d686df612cdfdf04711059 |
| Strimzi Bridge | quay.io/strimzi/kafka-bridge@sha256:dcec1c978f4174c101b78fd290a698fad89f83439c9a868bbbd9c9750b146fdf |
| Kaniko executor | quay.io/strimzi/kaniko-executor@sha256:ca8838eb04f394cd3ae6268d70dd9bc7852c5c603aa30ae6aff407c2c5a29639 |
| Maven Builder | quay.io/strimzi/maven-builder@sha256:326a67a6d60820e04757e40d3c9651046108e06aff2346256b772982d86d4b0e |
| Buildah builder | quay.io/strimzi/buildah@sha256:3ac4d8fde6eca2ad837dc5258390f5ea704949b0539c77a394eb33a63c806b97 |
1.0.0-rc1
v1 CRD API. The older v1beta2, v1beta1, and v1alpha1 APIs are no longer supported. Before upgrading to Strimzi 1.0.0, make sure to convert all custom resources and upgrade the CRDs.
Main changes since 0.51
This release contains the following new features and improvements:
- Remove support for the
v1beta2API (andv1alpha1andv1beta2forKafkaTopicandKafkaUser) and fully move to thev1API - Add support for Kafka 4.1.2
- Add support for
advertisedPortTemplatein listener configuration to add more flexibility when configuring advertised ports. - Support for
type: environment-variablerack awareness based on environment variables that do not require ClusterRoleBindings - Add support for TLS/SSL on the HTTP Bridge
- Add support for force-renewal of KafkaUser certificates via
strimzi.io/force-renewannotation - The
UseConnectBuildWithBuildahfeature gate moves to the beta stage and is enabled by default - And many more ...
All changes can be found under the 1.0.0 milestone or in the CHANGELOG.md.
Upgrading from Strimzi 0.51.0
See the documentation for upgrade instructions.
Container images
The following container images are part of this release:
| Name | Image |
|---|---|
| Operators | quay.io/strimzi/operator@sha256:5647bd5c2c6ba5e772f421a4b7a2fe93ef0e827754030420461617f029fcb8e5 |
| Apache Kafka 4.1.0 | quay.io/strimzi/kafka@sha256:c9cfd22e7fd530ca164e00bb84cb8cfcad8966bafd5a21a4dfc05ae6bed7f72a |
| Apache Kafka 4.1.1 | quay.io/strimzi/kafka@sha256:d92c810a87146db8c8b3c3bf7ea36d7bcd5b98c6c3500c82df1335544cb6ce56 |
| Apache Kafka 4.1.2 | quay.io/strimzi/kafka@sha256:cc69c7273083f0a783918f427f488aa929ece57f23e0e7f341cd71ce73611afd |
| Apache Kafka 4.2.0 | quay.io/strimzi/kafka@sha256:5f1a5918e4bc2eb5b343e8e4dba91d8d1b0ae4dd2b0ca9b74211bc0b86efd69c |
| Strimzi Bridge | quay.io/strimzi/kafka-bridge@sha256:dcec1c978f4174c101b78fd290a698fad89f83439c9a868bbbd9c9750b146fdf |
| Kaniko executor | quay.io/strimzi/kaniko-executor@sha256:ca8838eb04f394cd3ae6268d70dd9bc7852c5c603aa30ae6aff407c2c5a29639 |
| Maven Builder | quay.io/strimzi/maven-builder@sha256:12d8b936062778dc66ead7348aea81b34320b312675bb443bffa49ca49220c59 |
| Buildah builder | quay.io/strimzi/buildah@sha256:3ac4d8fde6eca2ad837dc5258390f5ea704949b0539c77a394eb33a63c806b97 |
New Contributors
- @marvin-roesch made their first contribution in #12477
- @Paramesh324 made their first contribution in #12509
- @marcelojscosta made their first contribution in #12527
- @QuentinBisson made their first contribution in #12560
- @guancioul made their first contribution in #12631
- @mamccorm made their first contribution in #12506
Contributors
marcelojscosta, QuentinBisson, and 4 other contributors
Assets 12
0.45.2
Note
This release was tested on Kubernetes 1.25.0, 1.35.0, and 1.35.2.
Main changes since 0.45.1
This release contains the following new features and improvements:
- Dependency updates and CVE fixes
- Add support for Kafka 3.9.2
All changes can be found under the 0.45.2 milestone.
Watch out also for some notable changes, deprecations, and removals:
- Strimzi 0.45 is the last minor Strimzi version with support for ZooKeeper-based Apache Kafka clusters and MirrorMaker 1 deployments.
Please make sure to migrate to KRaft and MirrorMaker 2 before upgrading to Strimzi 0.46 or newer. - Strimzi 0.45 is the last Strimzi version to include the Strimzi EnvVar Configuration Provider (deprecated in Strimzi 0.38.0) and Strimzi MirrorMaker 2 Extensions (deprecated in Strimzi 0.28.0).
Please use the Apache Kafka EnvVarConfigProvider and Identity Replication Policy instead.
Upgrade to Strimzi 0.46-0.51
Upgrade to Strimzi 0.46-0.51 is possible, however, if you are currently using Kafka 3.9.2, the operator will fail after the upgrade with an error similar to this:
2026-03-07 17:16:15 WARN AbstractOperator:567 - Reconciliation #15(watch) Kafka(myproject/my-cluster): Failed to reconcile
io.strimzi.operator.cluster.model.KafkaUpgradeException: Unsupported Kafka.spec.kafka.version: 3.9.2. Supported versions are: [4.1.1, 4.2.0, 4.0.0, 4.0.1, 4.1.0, 3.0.0, 3.2.3, 3.3.2, 3.4.1, 3.5.0, 3.5.1, 3.6.0, 3.5.2, 3.6.1, 3.7.0, 3.6.2, 3.7.1, 3.8.0, 3.0.1, 3.1.0, 3.1.1, 3.2.0, 3.1.2, 3.2.1, 3.3.1, 3.4.0, 2.1.0, 3.8.1, 3.9.0, 3.9.1, 2.6.2, 2.7.1, 2.8.0, 2.8.1, 2.5.1, 2.6.0, 2.6.1, 2.7.0, 2.3.1, 2.4.0, 2.4.1, 2.5.0, 2.1.1, 2.2.0, 2.2.1, 2.3.0]
at io.strimzi.operator.cluster.model.KafkaVersion$Lookup.version(KafkaVersion.java:148)
at io.strimzi.operator.cluster.operator.assembly.KRaftVersionChangeCreator.detectToAndFromVersions(KRaftVersionChangeCreator.java:157)
at io.vertx.core.impl.future.Composition.complete(Composition.java:40)
at io.vertx.core.impl.future.FutureBase.lambda$emitResult$0(FutureBase.java:59)
at io.netty.util.concurrent.AbstractEventExecutor.runTask(AbstractEventExecutor.java:148)
at io.netty.util.concurrent.AbstractEventExecutor.safeExecute(AbstractEventExecutor.java:141)
at io.netty.util.concurrent.SingleThreadEventExecutor.runAllTasks(SingleThreadEventExecutor.java:535)
at io.netty.channel.SingleThreadIoEventLoop.run(SingleThreadIoEventLoop.java:201)
at io.netty.util.concurrent.SingleThreadEventExecutor$5.run(SingleThreadEventExecutor.java:1195)
at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74)
at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30)
at java.base/java.lang.Thread.run(Thread.java:1583)
When that happens, use the following command to update the Kafka version annotation on the Kafka Pods:
kubectl annotate pod -l strimzi.io/kind=Kafka,strimzi.io/component-type=kafka,strimzi.io/cluster=CLUSTER_NAME strimzi.io/kafka-version=3.9.1 --overwrite -n NAMESPACE_NAME
Where CLUSTER_NAME is the name of your cluster and NAMESPACE_NAME is its namespace.
Once you change the annotation, the upgrade will proceed.
Important
Upgrading directly to Strimzi 1.0.0 or newer will not be supported.
Upgrading from Strimzi 0.45.1
See the documentation for upgrade instructions.
Upgrading from Strimzi 0.22 or earlier
Direct upgrade from Strimzi 0.22 or earlier is not supported anymore! You have to upgrade first to one of the previous versions of Strimzi. You will also need to convert the CRD resources. For more details, see the documentation.
Container images
The following container images are part of this release:
| Name | Image |
|---|---|
| Operators | quay.io/strimzi/operator@sha256:fbf54c39a3b066be84639dc88a3c14d2d90ff30618578a16080fe16375d7c641 |
| Apache Kafka 3.8.0 | quay.io/strimzi/kafka@sha256:24f83460f4a904a0511c81e981ba27d72229cef985b222e983dd7eb7a2f49d0f |
| Apache Kafka 3.8.1 | quay.io/strimzi/kafka@sha256:4f52fd8232e61385f928539f6e2aa2d23c9ba9ce18390ee735f55f9ae110ecdc |
| Apache Kafka 3.9.0 | quay.io/strimzi/kafka@sha256:50d6b41639435813d6e5458d100c619c91d8345f7868f7cd86330d2a0817922b |
| Apache Kafka 3.9.1 | quay.io/strimzi/kafka@sha256:7d25fde4ae8c5f0611a03a1c150a7d9d2e81d287a96e2cac8e93bb657c599cb6 |
| Apache Kafka 3.9.2 | quay.io/strimzi/kafka@sha256:5d96fe7c68db643f4916146176a7587aaf9f91c32fa9da7300f013e3e79298d8 |
| Strimzi Bridge | quay.io/strimzi/kafka-bridge@sha256:c462441a966f0732855e684b4840563bfad45391345c9511fa49e1630ba9c3e3 |
| Kaniko executor | quay.io/strimzi/kaniko-executor@sha256:ef1a39c363e145041d80103c3c12da9429ce06cf21dff6fb1fb75d0c0ed9c35b |
| Maven Builder | quay.io/strimzi/maven-builder@sha256:a18ce42d8b882510ec848b3542b1a213707b3aa1ad160cdc95828c26a740725e |
New Contributors
What's Changed
- [release-0.45.x][ST] Fix setup Minio and freeze Minio version by @im-konge in #11587
- [AZP] Add cleanup phase to UTs/ITs job for build - release-0.45.x branch by @im-konge in #11896
- Fix kuberntes-client exclusion by @fvaleri in #11892
- [release-0.45.x] Fix Postgres issue in STs and clean the cache by @im-konge in #12045
- Bumped Vert.x and Netty to fix CVEs on 0.45.x branch by @ppatierno in #12060
- Bumped Vertx 4.5.22 and Netty 4.1.128.Final on 0.45.x branch by @ppatierno in #12064
- Upgrade Zookeeper to remediate CVE-2024-47554 by @shub-est in #12237
- Upgraded Nimbus Jose JWT to 10.0.2 to remediate CVE-2025-53864 by @shub-est in #12247
- Upgraded GRPC Netty Shaded to remediate CVE-2025-55163 by @shub-est in #12251
- Upgraded Cruise Control to 2.5.146 by @shub-est in #12255
- Updated Netty to 4.1.130.Final to resolve CVE-2025-67735 by @shub-est in #12286
- Updated Apache Log4J to 2.25.3 to remediate CVE-2025-68161 by @shub-est in #12288
- Update Vertx to 4.5.24 to remediate CVE-2026-1002 by @shub-est in #12367
- Add support for Kafka 3.9.2 by @im-konge in #12321
- Update Kafka Exporter to 1.9.0 - release-0.45.x by @im-konge in #12449
- [release-0.45.x] Update CHANGELOG with information about CVE fixes and other information by @im-konge in #12460
- Update Jackson to address CVE GHSA-72hv-8253-57qq by @MichaelMorrisEst in #12485
Contributors
ppatierno, fvaleri, and 3 other contributors