Releases: aiven/aiven-operator
Releases · aiven/aiven-operator
v0.18.1
- Fix user agent version
v0.18.0
- Add
KafkaSchemaRegistryACL
kind - Add
ClickhouseDatabase
kind - Fix secret creation for kinds with no secrets
- Include the Kubernetes version in the Go client's user agent
- Replace
Database
kind validations and default values with CRD validation rules - Perform upgrade tasks to check if PG service can be upgraded before updating the service
- Expose project CA certificate to service secrets:
REDIS_CA_CERT
,MYSQL_CA_CERT
, etc. - Add
KafkaTopic
fieldconfig.local_retention_bytes
, typeinteger
: local.retention.bytes value - Add
KafkaTopic
fieldconfig.local_retention_ms
, typeinteger
: local.retention.ms value - Add
KafkaTopic
fieldconfig.remote_storage_enable
, typeboolean
: remote_storage_enable - Change
Cassandra
fielduserConfig.cassandra_version
: pattern^[0-9]+(\.[0-9]+)?$
- Change
Cassandra
fielduserConfig.project_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Change
Cassandra
fielduserConfig.service_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Change
Cassandra
fielduserConfig.service_to_join_with
: pattern^[a-z][-a-z0-9]{0,63}$
- Change
Clickhouse
fielduserConfig.project_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Change
Clickhouse
fielduserConfig.service_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Change
Grafana
fielduserConfig.project_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Change
Grafana
fielduserConfig.service_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Change
Kafka
fielduserConfig.kafka.sasl_oauthbearer_expected_audience
: pattern^[^\r\n]*$
- Change
Kafka
fielduserConfig.kafka.sasl_oauthbearer_expected_issuer
: pattern^[^\r\n]*$
- Change
Kafka
fielduserConfig.kafka.sasl_oauthbearer_sub_claim_name
: pattern^[^\r\n]*$
- Change
MySQL
fielduserConfig.mysql.default_time_zone
: pattern^([-+][\d:]*|[\w/]*)$
- Change
MySQL
fielduserConfig.project_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Change
MySQL
fielduserConfig.service_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Change
OpenSearch
fielduserConfig.openid.client_id
: pattern^[^\r\n]*$
- Change
OpenSearch
fielduserConfig.openid.client_secret
: pattern^[^\r\n]*$
- Change
OpenSearch
fielduserConfig.openid.header
: pattern^[^\r\n]*$
- Change
OpenSearch
fielduserConfig.openid.jwt_header
: pattern^[^\r\n]*$
- Change
OpenSearch
fielduserConfig.openid.jwt_url_parameter
: pattern^[^\r\n]*$
- Change
OpenSearch
fielduserConfig.openid.roles_key
: pattern^[^\r\n]*$
- Change
OpenSearch
fielduserConfig.openid.scope
: pattern^[^\r\n]*$
- Change
OpenSearch
fielduserConfig.openid.subject_key
: pattern^[^\r\n]*$
- Change
OpenSearch
fielduserConfig.project_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Change
OpenSearch
fielduserConfig.saml.idp_entity_id
: pattern^[^\r\n]*$
- Change
OpenSearch
fielduserConfig.saml.roles_key
: pattern^[^\r\n]*$
- Change
OpenSearch
fielduserConfig.saml.sp_entity_id
: pattern^[^\r\n]*$
- Change
OpenSearch
fielduserConfig.saml.subject_key
: pattern^[^\r\n]*$
- Change
OpenSearch
fielduserConfig.service_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Change
PostgreSQL
fielduserConfig.pg.timezone
: pattern^[\w/]*$
- Change
PostgreSQL
fielduserConfig.pg_service_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Change
PostgreSQL
fielduserConfig.project_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Change
PostgreSQL
fielduserConfig.service_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Change
Redis
fielduserConfig.project_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Change
Redis
fielduserConfig.service_to_fork_from
: pattern^[a-z][-a-z0-9]{0,63}$|^$
- Add
OpenSearch
fielduserConfig.opensearch.plugins_alerting_filter_by_backend_roles
, typeboolean
:
Enable or disable filtering of alerting by backend roles. Requires Security plugin - Change
Redis
fielduserConfig.redis_notify_keyspace_events
: pattern→^[KEg\$lshzxeA]*$
^[KEg\$lshzxentdmA]*$
- Add
PostgreSQL
fielduserConfig.pgaudit
, typeobject
: System-wide settings for the pgaudit extension - Add
ServiceIntegration
fielddatadog.opensearch.cluster_stats_enabled
, typeboolean
: Enable Datadog
Opensearch Cluster Monitoring
v0.17.0
- Bump k8s deps to 1.26.13
- Add
OpenSearch
fielduserConfig.opensearch.enable_security_audit
, typeboolean
: Enable/Disable
security audit - Add
Kafka
fielduserConfig.kafka_rest_config.name_strategy
, typestring
: Name strategy to use
when selecting subject for storing schemas - Add
Redis
fielduserConfig.redis_version
, typestring
: Redis major version - Add
Grafana
fielduserConfig.auth_github.auto_login
, typeboolean
: Allow users to bypass the
login screen and automatically log in - Add
Grafana
fielduserConfig.auth_github.skip_org_role_sync
, typeboolean
: Stop automatically
syncing user roles - Change
Clickhouse
fielduserConfig.additional_backup_regions
: deprecated - Change
Grafana
fielduserConfig.additional_backup_regions
: deprecated - Change
KafkaConnect
fielduserConfig.additional_backup_regions
: deprecated - Change
Kafka
fielduserConfig.additional_backup_regions
: deprecated - Change
OpenSearch
fielduserConfig.additional_backup_regions
: deprecated - Change
Redis
fielduserConfig.additional_backup_regions
: deprecated - Change
Cassandra
fielduserConfig.cassandra_version
: enum→[3, 4, 4.1]
[4, 4.1]
- Change
Kafka
fielduserConfig.kafka_version
: enum→[3.1, 3.3, 3.4, 3.5, 3.6]
[3.4, 3.5, 3.6]
- Change
PostgreSQL
fielduserConfig.pg_version
: enum→[11, 12, 13, 14, 15, 16]
[12, 13, 14, 15, 16]
- Add
Cassandra
fieldtechnicalEmails
, typearray
: Defines the email addresses that will receive
alerts about upcoming maintenance updates or warnings about service instability - Add
Clickhouse
fieldtechnicalEmails
, typearray
: Defines the email addresses that will receive
alerts about upcoming maintenance updates or warnings about service instability - Add
Grafana
fieldtechnicalEmails
, typearray
: Defines the email addresses that will receive
alerts about upcoming maintenance updates or warnings about service instability - Add
KafkaConnect
fieldtechnicalEmails
, typearray
: Defines the email addresses that will receive
alerts about upcoming maintenance updates or warnings about service instability - Add
Kafka
fieldtechnicalEmails
, typearray
: Defines the email addresses that will receive alerts
about upcoming maintenance updates or warnings about service instability - Add
MySQL
fieldtechnicalEmails
, typearray
: Defines the email addresses that will receive alerts
about upcoming maintenance updates or warnings about service instability - Add
OpenSearch
fieldtechnicalEmails
, typearray
: Defines the email addresses that will receive
alerts about upcoming maintenance updates or warnings about service instability - Add
PostgreSQL
fieldtechnicalEmails
, typearray
: Defines the email addresses that will receive
alerts about upcoming maintenance updates or warnings about service instability - Add
Redis
fieldtechnicalEmails
, typearray
: Defines the email addresses that will receive alerts
about upcoming maintenance updates or warnings about service instability - Add
Cassandra
fieldconnInfoSecretTargetDisabled
, typeboolean
: When true, the secret containing
connection information will not be created, defaults to false - Add
Clickhouse
fieldconnInfoSecretTargetDisabled
, typeboolean
: When true, the secret containing
connection information will not be created, defaults to false - Add
ClickhouseUser
fieldconnInfoSecretTargetDisabled
, typeboolean
: When true, the secret containing
connection information will not be created, defaults to false - Add
ConnectionPool
fieldconnInfoSecretTargetDisabled
, typeboolean
: When true, the secret containing
connection information will not be created, defaults to false - Add
Grafana
fieldconnInfoSecretTargetDisabled
, typeboolean
: When true, the secret containing
connection information will not be created, defaults to false - Add
Kafka
fieldconnInfoSecretTargetDisabled
, typeboolean
: When true, the secret containing
connection information will not be created, defaults to false - Add
MySQL
fieldconnInfoSecretTargetDisabled
, typeboolean
: When true, the secret containing
connection information will not be created, defaults to false - Add
OpenSearch
fieldconnInfoSecretTargetDisabled
, typeboolean
: When true, the secret containing
connection information will not be created, defaults to false - Add
PostgreSQL
fieldconnInfoSecretTargetDisabled
, typeboolean
: When true, the secret containing
connection information will not be created, defaults to false - Add
Project
fieldconnInfoSecretTargetDisabled
, typeboolean
: When true, the secret containing
connection information will not be created, defaults to false - Add
Redis
fieldconnInfoSecretTargetDisabled
, typeboolean
: When true, the secret containing
connection information will not be created, defaults to false - Add
ServiceUser
fieldconnInfoSecretTargetDisabled
, typeboolean
: When true, the secret containing
connection information will not be created, defaults to false
v0.16.1
- Check VPC for running services before deletion. Prevents VPC from hanging in the
DELETING
state - Expose
KAFKA_SCHEMA_REGISTRY_URI
andKAFKA_REST_URI
toKafka
secret - Expose
CONNECTIONPOOL_NAME
inConnectionPool
secret - Fix
CONNECTIONPOOL_PORT
exposes service port instead of pool port - Fix
SERVICEUSER_PORT
whensasl
is the only authentication method - Change
PostgreSQL
fielduserConfig.pg_qualstats.enabled
: deprecated - Change
PostgreSQL
fielduserConfig.pg_qualstats.min_err_estimate_num
: deprecated - Change
PostgreSQL
fielduserConfig.pg_qualstats.min_err_estimate_ratio
: deprecated - Change
PostgreSQL
fielduserConfig.pg_qualstats.track_constants
: deprecated - Change
PostgreSQL
fielduserConfig.pg_qualstats.track_pg_catalog
: deprecated
v0.16.0
- Set conditions on errors:
Preconditions
,CreateOrUpdate
,Delete
. Thanks to @atarax - Fix object updates lost when reconciler exits before the object is committed
- Add
Kafka
fielduserConfig.kafka.transaction_partition_verification_enable
, typeboolean
: Enable
verification that checks that the partition has been added to the transaction before writing transactional
records to the partition - Add
Cassandra
fielduserConfig.service_log
, typeboolean
: Store logs for the service so that
they are available in the HTTP API and console - Add
Clickhouse
fielduserConfig.service_log
, typeboolean
: Store logs for the service so that
they are available in the HTTP API and console - Add
Grafana
fielduserConfig.service_log
, typeboolean
: Store logs for the service so that they
are available in the HTTP API and console - Add
KafkaConnect
fielduserConfig.service_log
, typeboolean
: Store logs for the service so that
they are available in the HTTP API and console - Add
Kafka
fielduserConfig.kafka_rest_config.name_strategy_validation
, typeboolean
: If true,
validate that given schema is registered under expected subject name by the used name strategy when
producing messages - Add
Kafka
fielduserConfig.service_log
, typeboolean
: Store logs for the service so that they
are available in the HTTP API and console - Add
MySQL
fielduserConfig.service_log
, typeboolean
: Store logs for the service so that they
are available in the HTTP API and console - Add
OpenSearch
fielduserConfig.service_log
, typeboolean
: Store logs for the service so that
they are available in the HTTP API and console - Add
PostgreSQL
fielduserConfig.pg_qualstats
, typeobject
: System-wide settings for the pg_qualstats
extension - Add
PostgreSQL
fielduserConfig.service_log
, typeboolean
: Store logs for the service so that
they are available in the HTTP API and console - Add
Redis
fielduserConfig.service_log
, typeboolean
: Store logs for the service so that they
are available in the HTTP API and console
v0.15.0
- Upgrade to Go 1.21
- Add option to orphan resources. Thanks to @atarax
- Fix
ServiceIntegration
: do not send empty user config to the API - Add a format for
string
type fields to the documentation - Generate CRDs changelog
- Add
Clickhouse
fielduserConfig.private_access.clickhouse_mysql
, typeboolean
: Allow clients
to connect to clickhouse_mysql with a DNS name that always resolves to the service's private IP addresses - Add
Clickhouse
fielduserConfig.privatelink_access.clickhouse_mysql
, typeboolean
: Enable clickhouse_mysql - Add
Clickhouse
fielduserConfig.public_access.clickhouse_mysql
, typeboolean
: Allow clients to
connect to clickhouse_mysql from the public internet for service nodes that are in a project VPC
or another type of private network - Add
Grafana
fielduserConfig.unified_alerting_enabled
, typeboolean
: Enable or disable Grafana
unified alerting functionality - Add
Kafka
fielduserConfig.aiven_kafka_topic_messages
, typeboolean
: Allow access to read Kafka
topic messages in the Aiven Console and REST API - Add
Kafka
fielduserConfig.kafka.sasl_oauthbearer_expected_audience
, typestring
: The (optional)
comma-delimited setting for the broker to use to verify that the JWT was issued for one of the
expected audiences - Add
Kafka
fielduserConfig.kafka.sasl_oauthbearer_expected_issuer
, typestring
: Optional setting
for the broker to use to verify that the JWT was created by the expected issuer - Add
Kafka
fielduserConfig.kafka.sasl_oauthbearer_jwks_endpoint_url
, typestring
: OIDC JWKS endpoint
URL. By setting this the SASL SSL OAuth2/OIDC authentication is enabled - Add
Kafka
fielduserConfig.kafka.sasl_oauthbearer_sub_claim_name
, typestring
: Name of the scope
from which to extract the subject claim from the JWT. Defaults to sub - Change
Kafka
fielduserConfig.kafka_version
: enum→[3.1, 3.3, 3.4, 3.5]
[3.1, 3.3, 3.4, 3.5, 3.6]
- Change
Kafka
fielduserConfig.tiered_storage.local_cache.size
: deprecated - Add
OpenSearch
fielduserConfig.opensearch.indices_memory_max_index_buffer_size
, typeinteger
:
Absolute value. Default is unbound. Doesn't work without indices.memory.index_buffer_size - Add
OpenSearch
fielduserConfig.opensearch.indices_memory_min_index_buffer_size
, typeinteger
:
Absolute value. Default is 48mb. Doesn't work without indices.memory.index_buffer_size - Change
OpenSearch
fielduserConfig.opensearch.auth_failure_listeners.internal_authentication_backend_limiting.authentication_backend
:
enum[internal]
- Change
OpenSearch
fielduserConfig.opensearch.auth_failure_listeners.internal_authentication_backend_limiting.type
:
enum[username]
- Change
OpenSearch
fielduserConfig.opensearch.auth_failure_listeners.ip_rate_limiting.type
: enum[ip]
- Change
OpenSearch
fielduserConfig.opensearch.search_max_buckets
: maximum→65536
1000000
- Change
ServiceIntegration
fieldkafkaMirrormaker.kafka_mirrormaker.producer_max_request_size
: maximum
→67108864
268435456
v0.14.0
- Make
projectVpcId
andprojectVPCRef
mutable - Fix panic on
nil
user config conversion - Use aiven-go-client with context support
- Deprecate
Cassandra
kind optionadditional_backup_regions
- Add
Grafana
kind optionauto_login
- Add
Kafka
kind propertieslog_local_retention_bytes
,log_local_retention_ms
- Remove
Kafka
kind optionremote_log_storage_system_enable
- Add
OpenSearch
kind optionauth_failure_listeners
- Add
OpenSearch
kind Index State Management options
v0.13.0
- Add TieredStorage support to
Kafka
- Add
Kafka
version3.5
- Add
Kafka
spec propertyscheduled_rebalance_max_delay_ms
- Mark deprecated
Kafka
spec propertyremote_log_storage_system_enable
- Add
KafkaConnect
spec propertyscheduled_rebalance_max_delay_ms
- Add
OpenSearch
spec propertyopenid
- Use updated go client with enhanced retries
v0.12.3
- Expose
KAFKA_SCHEMA_REGISTRY_HOST
andKAFKA_SCHEMA_REGISTRY_PORT
forKafka
- Expose
KAFKA_CONNECT_HOST
,KAFKA_CONNECT_PORT
,KAFKA_REST_HOST
andKAFKA_REST_PORT
forKafka
v0.12.2
- Make conditions and state optional attributes of service status. Thanks to @mortenlj
- Remove deprecated
unclean_leader_election_enable
fromKafkaTopic
kind config - Expose
KAFKA_SASL_PORT
forKafka
kind ifSASL
authentication method is enabled - Add
redis
options to datadogServiceIntegration
- Add
Cassandra
version3
- Add
Kafka
versions3.1
and3.4
- Add
kafka_rest_config.producer_max_request_size
option - Add
kafka_mirrormaker.producer_compression_type
option