Skip to content

feat(helm): update chart strimzi-kafka-operator to 0.50.1#370

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/strimzi-kafka-operator-0.x
Open

feat(helm): update chart strimzi-kafka-operator to 0.50.1#370
renovate[bot] wants to merge 1 commit intomainfrom
renovate/strimzi-kafka-operator-0.x

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Nov 22, 2025

This PR contains the following updates:

Package Update Change
strimzi-kafka-operator (source) minor 0.48.00.50.1

Release Notes

strimzi/strimzi-kafka-operator (strimzi-kafka-operator)

v0.50.1

Compare Source

  • Include the full CA chain in broker certificates
  • v1 API Conversion Tool bug fixes (handling of number conversions and empty YAML documents)

v0.50.0

Compare Source

  • Use Java 21 as the runtime and language level
  • Strimzi Drain Cleaner updated to 1.5.0 (included in the Strimzi installation files)
  • Support for Linux user namespaces in Strimzi Pods through the hostUsers Pod option
Major changes, deprecations, and removals
  • Strimzi Operators are now using Java 21 as the runtime and language level.
    The only exceptions are the api, test, crd-annotations, and crd-generator modules which use Java 11 as the language level for compatibility with older java versions.
    These modules will remain using the Java 11 language level up to and including Strimzi 0.51.
    They will move to Java 21 language level in Strimzi 1.0.0.
    If you use one of these modules as a dependency in your Java project, you will need to upgrade to Java 21 as well.
  • connector.plugin.version option is now forbidden in KafkaConnect CR in .spec.config and in KafkaMirrorMaker2 CR in .spec.mirrors[].sourceConnector.config and .spec.mirrors[].checkpointConnector.config. Please use the dedicated version field instead.

v0.49.1

Compare Source

  • Fixed TLS configuration in MirrorMaker 2 examples
  • v1 API Conversion Tool bug fixes (Improved CRD validation before doing the conversion, conversion of Node Pools with single volume persistent storage, various typos)
  • Fixed incorrect default names for Strimzi Metrics Provider metrics
  • Fixed Push secret handling when UseConnectBuildWithBuildah feature gate is enabled
  • Documentation improvements

v0.49.0

Compare Source

  • Add support for Kafka 4.0.1 and 4.1.1
  • Set blockOwnerDeletion to true in the owner references in Strimzi managed resources.
    Deleting the Strimzi custom resources will now by default wait for the deletion of all the owned Kubernetes resources.
  • Introduce the v1 API to Strimzi CRDs and move User and Topic Operators to use it.
    The v1 APi Conversion Tool can be used to convert the resources in files or in your Kubernetes cluter from the v1beta2 API to the v1 API.
  • Make .spec sections required in the v1 version of all Strimzi custom resources.
  • Make .spec.replicas properties required in the v1 of the KafkaBridge, KafkaConnect, and KafkaMirrorMaker2 custom resources.
  • New fields .spec.groupId, .spec.configStorageTopic, .spec.offsetStorageTopic, and .spec.statusStorageTopic in the KafkaConnect custom resource for configuring Connect's group ID and internal topics.
  • New way of defining the target (.spec.target) and source clusters (.spec.mirrors[].source) in the KafkaMirrorMaker2 custom resources.
  • Improved behavior for merging the Kafka and KafkaNodePool template sections.
    The templates are now merged at a property level.
    If two different properties are defined in the two template sections, both are applied.
    If the same property is defined in both template sections, only the property from the KafkaNodePool template is used.
    See the Strimzi Proposal 120 for more details.
  • Strimzi Access Operator installation files updated to version 0.2.0
  • New feature gate UseConnectBuildWithBuildah (disabled by default) for running the Connect Build feature with Buildah instead of Kaniko on Kubernetes - according to Strimzi Proposal #​114.
  • New field spec.version in the KafkaConnecter custom resource, and new version fields for each connector under spec.mirrors[] in the KafkaMirrorMaker2 custom resource for configuring the desired version of a connector.
  • New field .volumeAttributesClass for persistent-claim type Storage in Kafka and KafkaNodePool custom resource. Enables configuring VolumeAttributesClass for PersistentVolumeClaims available since Kubernetes v1.34.
  • Update OAuth library to 0.17.1 to fix KeycloakAuthorizer issue on Kafka 4.1.0
Major changes, deprecations, and removals
  • This version introduces a new API version to our CRDs.
    Before upgrading to Strimzi 0.49 or newer, make sure that you update your KafkaUser resources to use the .spec.authorization.acls[]operations field instead of the deprecated .spec.authorization.acls[]operation.
    Especially when using Helm, make sure that the CRDs are updated when you upgrade the operator.
  • When rack-awareness is enabled in the Kafka custom resource (.spec.kafka.rack), Strimzi will not automatically add the best-effort-affinity rules for spreading the Kafka Pods between the zones.
    Please make sure to set your own topologySpreadConstraint or affinity rules instead.
  • The .status.kafkaMetadataState field in the Kafka custom resource is deprecated and not used anymore.
  • The type: oauth authentication in Kafka brokers and Kafka clients (Kafka Connect, MirrorMaker 2, and Strimzi HTTP Bridge) has been deprecated.
    Please use the type: custom authentication instead.
    The Strimzi OAuth library continues to be packaged with the Strimzi container images.
    Follow the documentation for the examples and migration details.
  • The Keycloak authorization (type: keycloak) has been deprecated and will be removed in the future.
    To use the Keycloak authorizer, you can use the type: custom authorization.
    The Strimzi OAuth library with the Keycloak authorizer continues to be packaged with the Strimzi container images.
    Follow the documentation for the examples and migration details.
  • CPU and memory configuration for the Kafka nodes in .spec.kafka.resources is deprecated and will be removed in the v1 CRD API.
    Please use the KafkaNodePool resources to configure CPU and memory for Kafka nodes.
  • The group.id, config.storage.topic, offset.storage.topic, and status.storage.topic fields in .spec.config section of the KafkaConnect resource are deprecated and will be forbidden in the v1 CRD API.
    Please use the new .spec.groupId, .spec.configStorageTopic, .spec.offsetStorageTopic, and .spec.statusStorageTopic fields instead.
  • The .spec.connectCluster, .spec.clusters, .spec.mirrors[].sourceCluster, .spec.mirrors[].targetCluster, and .spec.mirrors[].heartbeatConnector fields of the KafkaMirrorMaker2 resource are deprecated and will be removed in the v1 CRD API.
    Please use the new fields .spec.target and .spec.mirrors[].source instead to configure the source and target clusters.
    If you want to deploy and run the Heartbeat connector, you can use separate KafkaConnect and KafkaConnector custom resources.
  • The .spec.build.output.additionalKanikoOptions field in the KafkaConnect custom resource is deprecated and will be removed in the future.
    • Use .spec.build.output.additionalBuildOptions field instead.
  • The way the template properties in the Kafka and KafkaNodePool resources are handled has changed.
    See the 0.49.0 section or the Strimzi Proposal 120 for more details.
  • Kafka nodes are now configured with PEM certificates instead of P12/JKS for keystore and truststore.
  • Configuring connector.plugin.version under spec.config in the KafkaConnector custom resource, and under spec.mirrors[].sourceConnector.config, spec.mirrors[].checkpointConnector.config, and spec.mirrors[].heartbeatConnector.config in the KafkaMirrorMaker2 custom resource is deprecated and will be forbidden in Strimzi 0.50.0.
    Instead, please use spec.version in the KafkaConnecter custom resource, and the connector specific version fields in the KafkaMirrorMaker2 custom resource.

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions
Copy link

github-actions bot commented Nov 22, 2025

--- kubernetes/apps/solar0/strimzi/app Kustomization: flux-system/strimzi HelmRelease: solar0/strimzi

+++ kubernetes/apps/solar0/strimzi/app Kustomization: flux-system/strimzi HelmRelease: solar0/strimzi

@@ -13,13 +13,13 @@

     spec:
       chart: strimzi-kafka-operator
       sourceRef:
         kind: HelmRepository
         name: strimzi
         namespace: flux-system
-      version: 0.48.0
+      version: 0.50.1
   interval: 30m
   timeout: 15m
   values:
     dashboards:
       enabled: true
 
--- kubernetes/apps/solar0/strimzi/app Kustomization: flux-system/strimzi-cluster HelmRelease: solar0/strimzi

+++ kubernetes/apps/solar0/strimzi/app Kustomization: flux-system/strimzi-cluster HelmRelease: solar0/strimzi

@@ -13,13 +13,13 @@

     spec:
       chart: strimzi-kafka-operator
       sourceRef:
         kind: HelmRepository
         name: strimzi
         namespace: flux-system
-      version: 0.48.0
+      version: 0.50.1
   interval: 30m
   timeout: 15m
   values:
     dashboards:
       enabled: true
 

@github-actions
Copy link

github-actions bot commented Nov 22, 2025

--- HelmRelease: solar0/strimzi ConfigMap: solar0/strimzi-kafka-oauth

+++ HelmRelease: solar0/strimzi ConfigMap: solar0/strimzi-kafka-oauth

@@ -161,13 +161,13 @@

           },
           "pluginVersion": "7.4.5",
           "targets": [
             {
               "datasource": "${DS_PROMETHEUS}",
               "exemplar": true,
-              "expr": "irate(strimzi_oauth_http_requests_count{namespace=\"$kubernetes_namespace\",pod=~\"$strimzi_cluster_name-$kafka_broker\"}[$__rate_interval]) * 30",
+              "expr": "irate(strimzi_oauth_http_requests_count_total{namespace=\"$kubernetes_namespace\",pod=~\"$strimzi_cluster_name-$kafka_broker\"}[$__rate_interval]) * 30",
               "format": "time_series",
               "instant": false,
               "interval": "60s",
               "intervalFactor": 1,
               "legendFormat": "[{{context}}] {{host}} (Status: {{status}})",
               "refId": "A"
@@ -257,13 +257,13 @@

           },
           "pluginVersion": "7.4.5",
           "targets": [
             {
               "datasource": "${DS_PROMETHEUS}",
               "exemplar": true,
-              "expr": "irate(strimzi_oauth_validation_requests_count{namespace=\"$kubernetes_namespace\",pod=~\"$strimzi_cluster_name-$kafka_broker\"}[$__rate_interval]) * 30",
+              "expr": "irate(strimzi_oauth_validation_requests_count_total{namespace=\"$kubernetes_namespace\",pod=~\"$strimzi_cluster_name-$kafka_broker\"}[$__rate_interval]) * 30",
               "format": "time_series",
               "instant": false,
               "interval": "60s",
               "intervalFactor": 1,
               "legendFormat": "[{{context}}] {{host}} ({{outcome}})",
               "refId": "A"
@@ -352,13 +352,13 @@

           },
           "pluginVersion": "7.4.5",
           "targets": [
             {
               "datasource": "${DS_PROMETHEUS}",
               "exemplar": true,
-              "expr": "strimzi_oauth_http_requests_count{namespace=\"$kubernetes_namespace\",pod=~\"$strimzi_cluster_name-$kafka_broker\"}",
+              "expr": "strimzi_oauth_http_requests_count_total{namespace=\"$kubernetes_namespace\",pod=~\"$strimzi_cluster_name-$kafka_broker\"}",
               "format": "time_series",
               "instant": false,
               "interval": "60s",
               "intervalFactor": 1,
               "legendFormat": "[{{context}}] {{host}} (Status: {{status}})",
               "refId": "A"
@@ -447,13 +447,13 @@

           },
           "pluginVersion": "7.4.5",
           "targets": [
             {
               "datasource": "${DS_PROMETHEUS}",
               "exemplar": true,
-              "expr": "strimzi_oauth_validation_requests_count{namespace=\"$kubernetes_namespace\",pod=~\"$strimzi_cluster_name-$kafka_broker\"}",
+              "expr": "strimzi_oauth_validation_requests_count_total{namespace=\"$kubernetes_namespace\",pod=~\"$strimzi_cluster_name-$kafka_broker\"}",
               "format": "time_series",
               "instant": false,
               "interval": "60s",
               "intervalFactor": 1,
               "legendFormat": "[{{context}}] {{host}} ({{outcome}})",
               "refId": "A"
@@ -542,13 +542,13 @@

           },
           "pluginVersion": "7.4.5",
           "targets": [
             {
               "datasource": "${DS_PROMETHEUS}",
               "exemplar": true,
-              "expr": "irate(strimzi_oauth_http_requests_totaltimems{namespace=\"$kubernetes_namespace\",pod=~\"$strimzi_cluster_name-$kafka_broker\"}[$__rate_interval]) / irate(strimzi_oauth_http_requests_count{namespace=\"$kubernetes_namespace\",pod=~\"$strimzi_cluster_name-$kafka_broker\"}[$__rate_interval])",
+              "expr": "irate(strimzi_oauth_http_requests_totaltimems_total{namespace=\"$kubernetes_namespace\",pod=~\"$strimzi_cluster_name-$kafka_broker\"}[$__rate_interval]) / irate(strimzi_oauth_http_requests_count_total{namespace=\"$kubernetes_namespace\",pod=~\"$strimzi_cluster_name-$kafka_broker\"}[$__rate_interval])",
               "format": "time_series",
               "instant": false,
               "interval": "60s",
               "intervalFactor": 1,
               "legendFormat": "[{{context}}] {{host}} (Status: {{status}})",
               "refId": "A"
@@ -638,13 +638,13 @@

           },
           "pluginVersion": "7.4.5",
           "targets": [
             {
               "datasource": "${DS_PROMETHEUS}",
               "exemplar": true,
-              "expr": "irate(strimzi_oauth_validation_requests_totaltimems{namespace=\"$kubernetes_namespace\",pod=~\"$strimzi_cluster_name-$kafka_broker\"}[$__rate_interval]) / irate(strimzi_oauth_validation_requests_count{namespace=\"$kubernetes_namespace\",pod=~\"$strimzi_cluster_name-$kafka_broker\"}[$__rate_interval])\n",
+              "expr": "irate(strimzi_oauth_validation_requests_totaltimems_total{namespace=\"$kubernetes_namespace\",pod=~\"$strimzi_cluster_name-$kafka_broker\"}[$__rate_interval]) / irate(strimzi_oauth_validation_requests_count_total{namespace=\"$kubernetes_namespace\",pod=~\"$strimzi_cluster_name-$kafka_broker\"}[$__rate_interval])\n",
               "format": "time_series",
               "instant": false,
               "interval": "60s",
               "intervalFactor": 1,
               "legendFormat": "[{{context}}] {{host}} ({{outcome}})",
               "refId": "A"
--- HelmRelease: solar0/strimzi ClusterRole: solar0/strimzi-cluster-operator-watched

+++ HelmRelease: solar0/strimzi ClusterRole: solar0/strimzi-cluster-operator-watched

@@ -45,12 +45,24 @@

   - kafkarebalances/status
   verbs:
   - get
   - patch
   - update
 - apiGroups:
+  - kafka.strimzi.io
+  resources:
+  - kafkas/finalizers
+  - kafkanodepools/finalizers
+  - kafkaconnects/finalizers
+  - kafkaconnectors/finalizers
+  - kafkabridges/finalizers
+  - kafkamirrormaker2s/finalizers
+  - kafkarebalances/finalizers
+  verbs:
+  - update
+- apiGroups:
   - core.strimzi.io
   resources:
   - strimzipodsets
   verbs:
   - get
   - list
@@ -65,12 +77,18 @@

   - strimzipodsets/status
   verbs:
   - get
   - patch
   - update
 - apiGroups:
+  - core.strimzi.io
+  resources:
+  - strimzipodsets/finalizers
+  verbs:
+  - update
+- apiGroups:
   - kafka.strimzi.io
   resources:
   - kafkarebalances
   verbs:
   - delete
 
--- HelmRelease: solar0/strimzi ClusterRole: solar0/strimzi-entity-operator

+++ HelmRelease: solar0/strimzi ClusterRole: solar0/strimzi-entity-operator

@@ -39,12 +39,19 @@

   - kafkausers/status
   verbs:
   - get
   - patch
   - update
 - apiGroups:
+  - kafka.strimzi.io
+  resources:
+  - kafkatopics/finalizers
+  - kafkausers/finalizers
+  verbs:
+  - update
+- apiGroups:
   - ''
   resources:
   - secrets
   verbs:
   - get
   - list
--- HelmRelease: solar0/strimzi Deployment: solar0/strimzi-cluster-operator

+++ HelmRelease: solar0/strimzi Deployment: solar0/strimzi-cluster-operator

@@ -29,13 +29,13 @@

           sizeLimit: 1Mi
       - name: co-config-volume
         configMap:
           name: strimzi-cluster-operator
       containers:
       - name: strimzi-cluster-operator
-        image: quay.io/strimzi/operator:0.48.0
+        image: quay.io/strimzi/operator:0.50.1
         ports:
         - containerPort: 8080
           name: http
         args:
         - /opt/strimzi/bin/cluster_operator_run.sh
         volumeMounts:
@@ -50,39 +50,47 @@

               fieldPath: metadata.namespace
         - name: STRIMZI_FULL_RECONCILIATION_INTERVAL_MS
           value: '120000'
         - name: STRIMZI_OPERATION_TIMEOUT_MS
           value: '300000'
         - name: STRIMZI_DEFAULT_KAFKA_EXPORTER_IMAGE
-          value: quay.io/strimzi/kafka:0.48.0-kafka-4.1.0
+          value: quay.io/strimzi/kafka:0.50.1-kafka-4.1.1
         - name: STRIMZI_DEFAULT_CRUISE_CONTROL_IMAGE
-          value: quay.io/strimzi/kafka:0.48.0-kafka-4.1.0
+          value: quay.io/strimzi/kafka:0.50.1-kafka-4.1.1
         - name: STRIMZI_KAFKA_IMAGES
           value: |
-            4.0.0=quay.io/strimzi/kafka:0.48.0-kafka-4.0.0
-            4.1.0=quay.io/strimzi/kafka:0.48.0-kafka-4.1.0
+            4.0.0=quay.io/strimzi/kafka:0.50.1-kafka-4.0.0
+            4.0.1=quay.io/strimzi/kafka:0.50.1-kafka-4.0.1
+            4.1.0=quay.io/strimzi/kafka:0.50.1-kafka-4.1.0
+            4.1.1=quay.io/strimzi/kafka:0.50.1-kafka-4.1.1
         - name: STRIMZI_KAFKA_CONNECT_IMAGES
           value: |
-            4.0.0=quay.io/strimzi/kafka:0.48.0-kafka-4.0.0
-            4.1.0=quay.io/strimzi/kafka:0.48.0-kafka-4.1.0
+            4.0.0=quay.io/strimzi/kafka:0.50.1-kafka-4.0.0
+            4.0.1=quay.io/strimzi/kafka:0.50.1-kafka-4.0.1
+            4.1.0=quay.io/strimzi/kafka:0.50.1-kafka-4.1.0
+            4.1.1=quay.io/strimzi/kafka:0.50.1-kafka-4.1.1
         - name: STRIMZI_KAFKA_MIRROR_MAKER_2_IMAGES
           value: |
-            4.0.0=quay.io/strimzi/kafka:0.48.0-kafka-4.0.0
-            4.1.0=quay.io/strimzi/kafka:0.48.0-kafka-4.1.0
+            4.0.0=quay.io/strimzi/kafka:0.50.1-kafka-4.0.0
+            4.0.1=quay.io/strimzi/kafka:0.50.1-kafka-4.0.1
+            4.1.0=quay.io/strimzi/kafka:0.50.1-kafka-4.1.0
+            4.1.1=quay.io/strimzi/kafka:0.50.1-kafka-4.1.1
         - name: STRIMZI_DEFAULT_TOPIC_OPERATOR_IMAGE
-          value: quay.io/strimzi/operator:0.48.0
+          value: quay.io/strimzi/operator:0.50.1
         - name: STRIMZI_DEFAULT_USER_OPERATOR_IMAGE
-          value: quay.io/strimzi/operator:0.48.0
+          value: quay.io/strimzi/operator:0.50.1
         - name: STRIMZI_DEFAULT_KAFKA_INIT_IMAGE
-          value: quay.io/strimzi/operator:0.48.0
+          value: quay.io/strimzi/operator:0.50.1
         - name: STRIMZI_DEFAULT_KAFKA_BRIDGE_IMAGE
           value: quay.io/strimzi/kafka-bridge:0.33.1
         - name: STRIMZI_DEFAULT_KANIKO_EXECUTOR_IMAGE
-          value: quay.io/strimzi/kaniko-executor:0.48.0
+          value: quay.io/strimzi/kaniko-executor:0.50.1
+        - name: STRIMZI_DEFAULT_BUILDAH_IMAGE
+          value: quay.io/strimzi/buildah:0.50.1
         - name: STRIMZI_DEFAULT_MAVEN_BUILDER
-          value: quay.io/strimzi/maven-builder:0.48.0
+          value: quay.io/strimzi/maven-builder:0.50.1
         - name: STRIMZI_OPERATOR_NAMESPACE
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
         - name: STRIMZI_FEATURE_GATES
           value: ''

@renovate renovate bot changed the title feat(helm): update chart strimzi-kafka-operator to 0.49.0 feat(helm): update chart strimzi-kafka-operator to 0.49.1 Dec 5, 2025
@renovate renovate bot force-pushed the renovate/strimzi-kafka-operator-0.x branch from 6c6f12e to 4338e07 Compare December 5, 2025 13:52
@renovate renovate bot force-pushed the renovate/strimzi-kafka-operator-0.x branch from 4338e07 to 4c3b2c7 Compare January 8, 2026 17:44
@renovate renovate bot changed the title feat(helm): update chart strimzi-kafka-operator to 0.49.1 feat(helm): update chart strimzi-kafka-operator to 0.50.0 Jan 18, 2026
@renovate renovate bot force-pushed the renovate/strimzi-kafka-operator-0.x branch from 4c3b2c7 to 9acdc1a Compare January 18, 2026 20:49
@renovate renovate bot force-pushed the renovate/strimzi-kafka-operator-0.x branch from 9acdc1a to b0ca5e4 Compare February 2, 2026 19:41
@renovate renovate bot force-pushed the renovate/strimzi-kafka-operator-0.x branch from b0ca5e4 to 993f8e7 Compare February 12, 2026 15:54
@renovate renovate bot force-pushed the renovate/strimzi-kafka-operator-0.x branch from 993f8e7 to 7df350f Compare February 19, 2026 01:12
@renovate renovate bot changed the title feat(helm): update chart strimzi-kafka-operator to 0.50.0 feat(helm): update chart strimzi-kafka-operator to 0.50.1 Feb 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants