+1 binding Verified 4.9.0-candidate-1 on macOS (helm v4.3.1): - Downloaded all artifacts from dist.apache.org - GPG signatures valid for both the source tarball and the packaged chart, signed by Lari Hotari (key C663D2F64DA2CA09DB28D9ABD3FA67D522C55256, found in the ASF KEYS file) - sha512 checksums OK; helm provenance (.prov) verified; index.yaml digest matches the packaged chart's sha256 - Source tarball is byte-identical to the git tag pulsar-4.9.0-candidate-1 - LICENSE/NOTICE present (Apache-2.0), no binaries in the source release - helm lint passes; helm template renders cleanly for all 19 CI cluster configs (TLS/JWT/Oxia incl. new Oxia TLS/function-worker/standalone/ dekaf/victoria-metrics) plus templates-all-values - Chart versioning (chart 4.9.0 / appVersion 5.0.1) follows the established decoupled versioning; default image apachepulsar/pulsar:5.0.1
Minor (non-blocking): NOTICE copyright years still read 2017-2022. Did not run a local cluster install; relied on upstream CI install tests. Lari Hotari <[email protected]> 于2026年10月27日周二 01:50写道： > Hello Apache Pulsar Community, > > This is a call for the vote to release the Apache Pulsar Helm Chart > version 4.9.0. > > Release notes for 4.9.0-candidate-1: > > https://github.com/apache/pulsar-helm-chart/releases/tag/pulsar-4.9.0-candidate-1 > > The release candidate is available at: > https://dist.apache.org/repos/dist/dev/pulsar/helm-chart/4.9.0-candidate-1/ > > pulsar-chart-4.9.0-source.tar.gz - is the "main source release". > pulsar-4.9.0.tgz - is the binary Helm Chart release. > > Public keys are available at: https://www.apache.org/dist/pulsar/KEYS > > For convenience "index.yaml" has been uploaded (though excluded from > voting), so you can also run the below commands. > > helm repo add --force-update apache-pulsar-dist-dev \ > > https://dist.apache.org/repos/dist/dev/pulsar/helm-chart/4.9.0-candidate-1/ > helm repo update > helm install pulsar apache-pulsar-dist-dev/pulsar \ > --version 4.9.0 --set affinity.anti_affinity=false \ > --wait --timeout 10m --debug > > For observing the deployment progress, you can use the k9s tool to > view the cluster state changes in a different terminal window. > The k9s tool is available at https://k9scli.io/topics/install/. > > pulsar-4.9.0.tgz.prov - is also uploaded for verifying Chart > Integrity, though it is not strictly required for releasing the > artifact based on ASF Guidelines. > > You can optionally verify this file using this helm plugin > https://github.com/technosophos/helm-gpg, or by using helm --verify > (https://helm.sh/docs/helm/helm_verify/). > > helm fetch --prov apache-pulsar-dist-dev/pulsar > helm plugin install https://github.com/technosophos/helm-gpg > helm gpg verify pulsar-4.9.0.tgz > > The vote will be open for at least 72 hours. > > Only votes from PMC members are binding, but members of the community are > encouraged to test the release and vote with "(non-binding)". > > For license checks, the .rat-excludes files is included, so you can > run the following to verify licenses (just update ): > > tar -xvf pulsar-chart-4.9.0-source.tar.gz > cd pulsar-chart-4.9.0 > java -jar /apache-rat-0.15/apache-rat-0.15.jar . -E .rat-excludes > > Please note that the version number excludes the `-candidate-X` > string, so it's now > simply 4.9.0. This will allow us to rename the artifact without modifying > the artifact checksums when we actually release it. > > Thanks, > Lari >
