Releases: aiven/aiven-operator
Releases · aiven/aiven-operator
v0.25.0
- Fix
KafkaTopic
: fails to create a topic with the replication factor set more than running Kafka nodes - Fix
ServiceIntegration
: sends empty source and destination projects - Fix
KafkaSchema
: poll resource availability - Add
KafkaSchema
fieldschemaType
, typestring
: Schema type - Add
Kafka
fielduserConfig.follower_fetching
, typeobject
: Enable follower fetching - Add
Kafka
fielduserConfig.kafka_sasl_mechanisms
, typeobject
: Kafka SASL mechanisms - Change
Kafka
fielduserConfig.kafka.sasl_oauthbearer_sub_claim_name
: pattern→^[^\r\n]*$
^[^\r\n]*\S[^\r\n]*$
- Add
MySQL
fielduserConfig.migration.ignore_roles
, typestring
: Comma-separated list of database
roles, which should be ignored during migration (supported by PostgreSQL only at the moment) - Add
PostgreSQL
fielduserConfig.migration.ignore_roles
, typestring
: Comma-separated list of
database roles, which should be ignored during migration (supported by PostgreSQL only at the moment) - Add
PostgreSQL
fielduserConfig.pgbouncer.max_prepared_statements
, typeinteger
: PgBouncer tracks
protocol-level named prepared statements related commands sent by the client in transaction and
statement pooling modes when max_prepared_statements is set to a non-zero value - Add
Redis
fielduserConfig.migration.ignore_roles
, typestring
: Comma-separated list of database
roles, which should be ignored during migration (supported by PostgreSQL only at the moment) - Add
Redis
fielduserConfig.backup_hour
, typeinteger
: The hour of day (in UTC) when backup for
the service is started - Add
Redis
fielduserConfig.backup_minute
, typeinteger
: The minute of an hour when backup for
the service is started - Add
Grafana
fielduserConfig.wal
, typeboolean
: Setting to enable/disable Write-Ahead Logging.
The default value is false (disabled) - Add
OpenSearch
fielduserConfig.azure_migration
, typeobject
: Azure migration settings - Add
OpenSearch
fielduserConfig.gcs_migration
, typeobject
: Google Cloud Storage migration settings - Add
OpenSearch
fielduserConfig.index_rollup
, typeobject
: Index rollup settings - Add
OpenSearch
fielduserConfig.s3_migration
, typeobject
: AWS S3 / AWS S3 compatible migration settings - Change
OpenSearch
fielduserConfig.openid.connect_url
: pattern^[^\r\n]*$
- Change
OpenSearch
fielduserConfig.opensearch.script_max_compilations_rate
: pattern^[^\r\n]*$
- Change
OpenSearch
fielduserConfig.saml.idp_metadata_url
: pattern^[^\r\n]*$
v0.24.0
- Fix
PostgreSQL
: wait for a valid backup to create read replica - Fix
ClickhouseGrant
: grant privileges for an unknown table (Clickhouse can do that) - Fix
ClickhouseGrant
: track the state to revoke only known privileges. It is recommended to remove existingClickhouseGrant
instances before upgrade to revoke existing privileges. - Add
Cassandra
fielduserConfig.cassandra.read_request_timeout_in_ms
, typeinteger
: How long the
coordinator waits for read operations to complete before timing it out - Add
Cassandra
fielduserConfig.cassandra.write_request_timeout_in_ms
, typeinteger
: How long
the coordinator waits for write requests to complete with at least one node in the local datacenter - Add
OpenSearch
fielduserConfig.opensearch.knn_memory_circuit_breaker_enabled
, typeboolean
:
Enable or disable KNN memory circuit breaker. Defaults to true - Add
OpenSearch
fielduserConfig.opensearch.knn_memory_circuit_breaker_limit
, typeinteger
: Maximum
amount of memory that can be used for KNN index. Defaults to 50% of the JVM heap size - Change
PostgreSQL
fielduserConfig.pg.log_line_prefix
: enum['%m [%p] %q[user=%u,db=%d,app=%a] ', '%t [%p]: [%l-1] user=%u,db=%d,app=%a,client=%h ', 'pid=%p,user=%u,db=%d,app=%a,client=%h ']
→['%m [%p] %q[user=%u,db=%d,app=%a] ', '%t [%p]: [%l-1] user=%u,db=%d,app=%a,client=%h ', 'pid=%p,user=%u,db=%d,app=%a,client=%h ', 'pid=%p,user=%u,db=%d,app=%a,client=%h,txid=%x,qid=%Q ']
v0.23.0
- Ignore
http.StatusBadRequest
onClickhouseGrant
deletion - Retry conflict error when k8s object saved to the storage
- Fix
ClickhouseGrant
invalid remote and local privileges comparison - Fix
ClickhouseGrant
: doesn't escape role name to grant - Fix
ClickhouseUser
: password was reset due to an incorrect processing cycle
v0.22.0
- Ignore
ClickhouseRole
deletion error (missing database) - Ignore
ClickhouseGrant
deletion errors (missing database, service, role) - Do not block service operations in
REBALANCING
state
v0.21.0
- Add kind:
ClickhouseGrant
- Add
KafkaConnect
fielduserConfig.secret_providers
, typearray
: Configure external secret providers
in order to reference external secrets in connector configuration - Add
Kafka
fielduserConfig.kafka_connect_secret_providers
, typearray
: Configure external secret
providers in order to reference external secrets in connector configuration - Add
Kafka
fielduserConfig.letsencrypt_sasl_privatelink
, typeboolean
: Use Letsencrypt CA for
Kafka SASL via Privatelink - Add
ServiceIntegration
fielddatadog.mirrormaker_custom_metrics
, typearray
: List of custom metrics - Add
ServiceIntegration
fieldkafkaMirrormaker.kafka_mirrormaker.consumer_auto_offset_reset
, type
string
: Set where consumer starts to consume data - Add
ServiceIntegration
fieldkafkaMirrormaker.kafka_mirrormaker.consumer_max_poll_records
, type
integer
: Set consumer max.poll.records. The default is 500 - Change
PostgreSQL
fielduserConfig.pgaudit
: deprecated - Breaking change
ServiceIntegrationEndpoint
fieldexternalPostgresql.ssl_mode
: enum→[allow, disable, prefer, require, verify-ca, verify-full]
[require, verify-ca, verify-full]
v0.20.0
- Add kind:
ServiceIntegrationEndpoint
- Add
ServiceIntegration
flink_external_postgresql
type - Add
ServiceIntegration
fielddatadog.datadog_pgbouncer_enabled
, typeboolean
: Enable Datadog
PgBouncer Metric Tracking - Fix
ServiceIntegration
deletion when instance has no id set - Fix service types
disk_space
field validation - Fix resources
project
,serviceName
fields validation - Fix
ConnectionPool
doesn't check service user precondition - Remove
CA_CERT
secret key forGrafana
,OpenSearch
,Redis
, andClickhouse
. Can't be used with these service types
ddog-gov.com, us3.datadoghq.com, us5.datadoghq.com]` - Change
ServiceIntegrationEndpoint
fieldexternalKafka.ssl_endpoint_identification_algorithm
: enum
→[, https]
[https]
- Remove
ClickhouseUser
webhook. Doesn't do any validation or mutation - Change
Kafka
fielduserConfig.kafka_version
: enum→[3.4, 3.5, 3.6]
[3.4, 3.5, 3.6, 3.7]
- Change
ServiceIntegrationEndpoint
fielddatadog.site
: enum→ `[ap1.datadoghq.com, datadoghq.com, datadoghq.eu,[datadoghq.com, datadoghq.eu, ddog-gov.com, us3.datadoghq.com, us5.datadoghq.com]
- Move immutable fields validation from webhooks to CRD validation rules
v0.19.0
- Add kind:
ClickhouseRole
- Unified User-Agent format with the Terraform Provider
- Unify cluster role permissions
- Add missing role permissions to
KafkaACL
v0.18.1
- Fix user agent version
v0.18.0
- Add
KafkaSchemaRegistryACL
kind - Add
ClickhouseDatabase
kind - Fix secret creation for kinds with no secrets
- Include the Kubernetes version in the Go client's user agent
- Replace
Database
kind validations and default values with CRD validation rules - Perform upgrade tasks to check if PG service can be upgraded before updating the service
- Expose project CA certificate to service secrets:
REDIS_CA_CERT
,MYSQL_CA_CERT
, etc. - Add
KafkaTopic
fieldconfig.local_retention_bytes
, typeinteger
: local.retention.bytes value - Add
KafkaTopic
fieldconfig.local_retention_ms
, typeinteger
: local.retention.ms value - Add
KafkaTopic
fieldconfig.remote_storage_enable
, typeboolean
: remote_storage_enable - Change
Cassandra
fielduserConfig.cassandra_version
: pattern^[0-9]+(\.[0-9]+)?$
- Change
Cassandra
fielduserConfig.project_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Change
Cassandra
fielduserConfig.service_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Change
Cassandra
fielduserConfig.service_to_join_with
: pattern^[a-z][-a-z0-9]{0,63}$
- Change
Clickhouse
fielduserConfig.project_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Change
Clickhouse
fielduserConfig.service_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Change
Grafana
fielduserConfig.project_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Change
Grafana
fielduserConfig.service_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Change
Kafka
fielduserConfig.kafka.sasl_oauthbearer_expected_audience
: pattern^[^\r\n]*$
- Change
Kafka
fielduserConfig.kafka.sasl_oauthbearer_expected_issuer
: pattern^[^\r\n]*$
- Change
Kafka
fielduserConfig.kafka.sasl_oauthbearer_sub_claim_name
: pattern^[^\r\n]*$
- Change
MySQL
fielduserConfig.mysql.default_time_zone
: pattern^([-+][\d:]*|[\w/]*)$
- Change
MySQL
fielduserConfig.project_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Change
MySQL
fielduserConfig.service_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Change
OpenSearch
fielduserConfig.openid.client_id
: pattern^[^\r\n]*$
- Change
OpenSearch
fielduserConfig.openid.client_secret
: pattern^[^\r\n]*$
- Change
OpenSearch
fielduserConfig.openid.header
: pattern^[^\r\n]*$
- Change
OpenSearch
fielduserConfig.openid.jwt_header
: pattern^[^\r\n]*$
- Change
OpenSearch
fielduserConfig.openid.jwt_url_parameter
: pattern^[^\r\n]*$
- Change
OpenSearch
fielduserConfig.openid.roles_key
: pattern^[^\r\n]*$
- Change
OpenSearch
fielduserConfig.openid.scope
: pattern^[^\r\n]*$
- Change
OpenSearch
fielduserConfig.openid.subject_key
: pattern^[^\r\n]*$
- Change
OpenSearch
fielduserConfig.project_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Change
OpenSearch
fielduserConfig.saml.idp_entity_id
: pattern^[^\r\n]*$
- Change
OpenSearch
fielduserConfig.saml.roles_key
: pattern^[^\r\n]*$
- Change
OpenSearch
fielduserConfig.saml.sp_entity_id
: pattern^[^\r\n]*$
- Change
OpenSearch
fielduserConfig.saml.subject_key
: pattern^[^\r\n]*$
- Change
OpenSearch
fielduserConfig.service_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Change
PostgreSQL
fielduserConfig.pg.timezone
: pattern^[\w/]*$
- Change
PostgreSQL
fielduserConfig.pg_service_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Change
PostgreSQL
fielduserConfig.project_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Change
PostgreSQL
fielduserConfig.service_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Change
Redis
fielduserConfig.project_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Change
Redis
fielduserConfig.service_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Add
OpenSearch
fielduserConfig.opensearch.plugins_alerting_filter_by_backend_roles
, typeboolean
:
Enable or disable filtering of alerting by backend roles. Requires Security plugin - Change
Redis
fielduserConfig.redis_notify_keyspace_events
: pattern→^[KEg\$lshzxeA]*$
^[KEg\$lshzxentdmA]*$
- Add
PostgreSQL
fielduserConfig.pgaudit
, typeobject
: System-wide settings for the pgaudit extension - Add
ServiceIntegration
fielddatadog.opensearch.cluster_stats_enabled
, typeboolean
: Enable Datadog
Opensearch Cluster Monitoring
v0.17.0
- Bump k8s deps to 1.26.13
- Add
OpenSearch
fielduserConfig.opensearch.enable_security_audit
, typeboolean
: Enable/Disable
security audit - Add
Kafka
fielduserConfig.kafka_rest_config.name_strategy
, typestring
: Name strategy to use
when selecting subject for storing schemas - Add
Redis
fielduserConfig.redis_version
, typestring
: Redis major version - Add
Grafana
fielduserConfig.auth_github.auto_login
, typeboolean
: Allow users to bypass the
login screen and automatically log in - Add
Grafana
fielduserConfig.auth_github.skip_org_role_sync
, typeboolean
: Stop automatically
syncing user roles - Change
Clickhouse
fielduserConfig.additional_backup_regions
: deprecated - Change
Grafana
fielduserConfig.additional_backup_regions
: deprecated - Change
KafkaConnect
fielduserConfig.additional_backup_regions
: deprecated - Change
Kafka
fielduserConfig.additional_backup_regions
: deprecated - Change
OpenSearch
fielduserConfig.additional_backup_regions
: deprecated - Change
Redis
fielduserConfig.additional_backup_regions
: deprecated - Change
Cassandra
fielduserConfig.cassandra_version
: enum→[3, 4, 4.1]
[4, 4.1]
- Change
Kafka
fielduserConfig.kafka_version
: enum→[3.1, 3.3, 3.4, 3.5, 3.6]
[3.4, 3.5, 3.6]
- Change
PostgreSQL
fielduserConfig.pg_version
: enum→[11, 12, 13, 14, 15, 16]
[12, 13, 14, 15, 16]
- Add
Cassandra
fieldtechnicalEmails
, typearray
: Defines the email addresses that will receive
alerts about upcoming maintenance updates or warnings about service instability - Add
Clickhouse
fieldtechnicalEmails
, typearray
: Defines the email addresses that will receive
alerts about upcoming maintenance updates or warnings about service instability - Add
Grafana
fieldtechnicalEmails
, typearray
: Defines the email addresses that will receive
alerts about upcoming maintenance updates or warnings about service instability - Add
KafkaConnect
fieldtechnicalEmails
, typearray
: Defines the email addresses that will receive
alerts about upcoming maintenance updates or warnings about service instability - Add
Kafka
fieldtechnicalEmails
, typearray
: Defines the email addresses that will receive alerts
about upcoming maintenance updates or warnings about service instability - Add
MySQL
fieldtechnicalEmails
, typearray
: Defines the email addresses that will receive alerts
about upcoming maintenance updates or warnings about service instability - Add
OpenSearch
fieldtechnicalEmails
, typearray
: Defines the email addresses that will receive
alerts about upcoming maintenance updates or warnings about service instability - Add
PostgreSQL
fieldtechnicalEmails
, typearray
: Defines the email addresses that will receive
alerts about upcoming maintenance updates or warnings about service instability - Add
Redis
fieldtechnicalEmails
, typearray
: Defines the email addresses that will receive alerts
about upcoming maintenance updates or warnings about service instability - Add
Cassandra
fieldconnInfoSecretTargetDisabled
, typeboolean
: When true, the secret containing
connection information will not be created, defaults to false - Add
Clickhouse
fieldconnInfoSecretTargetDisabled
, typeboolean
: When true, the secret containing
connection information will not be created, defaults to false - Add
ClickhouseUser
fieldconnInfoSecretTargetDisabled
, typeboolean
: When true, the secret containing
connection information will not be created, defaults to false - Add
ConnectionPool
fieldconnInfoSecretTargetDisabled
, typeboolean
: When true, the secret containing
connection information will not be created, defaults to false - Add
Grafana
fieldconnInfoSecretTargetDisabled
, typeboolean
: When true, the secret containing
connection information will not be created, defaults to false - Add
Kafka
fieldconnInfoSecretTargetDisabled
, typeboolean
: When true, the secret containing
connection information will not be created, defaults to false - Add
MySQL
fieldconnInfoSecretTargetDisabled
, typeboolean
: When true, the secret containing
connection information will not be created, defaults to false - Add
OpenSearch
fieldconnInfoSecretTargetDisabled
, typeboolean
: When true, the secret containing
connection information will not be created, defaults to false - Add
PostgreSQL
fieldconnInfoSecretTargetDisabled
, typeboolean
: When true, the secret containing
connection information will not be created, defaults to false - Add
Project
fieldconnInfoSecretTargetDisabled
, typeboolean
: When true, the secret containing
connection information will not be created, defaults to false - Add
Redis
fieldconnInfoSecretTargetDisabled
, typeboolean
: When true, the secret containing
connection information will not be created, defaults to false - Add
ServiceUser
fieldconnInfoSecretTargetDisabled
, typeboolean
: When true, the secret containing
connection information will not be created, defaults to false