Hello, This is a vote to release Apache Superset Kubernetes Operator 0.3.0 based on candidate rc1.
Highlights: - Build: minimum Go toolchain moved from 1.26 to 1.27.1. - Security hardening (breaking): ServiceAccount name mismatches now rejected at admission; Valkey keyPrefix values now format-constrained; Celery Flower no longer exposed on the Production ingress/gateway by default; a Production instance can no longer be changed in place to a lower environment. - Security hardening (non-breaking): hardened default securityContext on every operator-created container; a pinned config-checksum annotation can no longer freeze out config/SECRET_KEY rotations; seed values no longer subject to shell expansion. - Helm / HA: new podDisruptionBudget value; multi-replica installs now require leader election. - Kubernetes support: now covers the three newest kind-published minors (1.35, 1.36, 1.37). - New capability: metastore/Valkey/seed connection fields can now be sourced individually from Secret keys. - Bug fixes: default MySQL seed image corrected, Gateway API v1beta1-only crash loop fixed, NodePort/LoadBalancer port churn fixed, OpenShift finalizers RBAC gap closed, chart no longer rejects unknown top-level values. The release candidate artifacts are staged at: https://dist.apache.org/repos/dist/dev/superset/kubernetes-operator-0.3.0-rc1/ The git tag is: https://github.com/apache/superset-kubernetes-operator/releases/tag/v0.3.0-rc1 PGP keys used for signing are listed in: https://dist.apache.org/repos/dist/release/superset/KEYS To verify the candidate (Go 1.26+, Helm, and Apache Rat must be installed locally; make will fetch additional Go modules and tools on first use): curl --remote-name-all https://dist.apache.org/repos/dist/dev/superset/kubernetes-operator-0.3.0-rc1/apache-superset-kubernetes-operator-0.3.0-rc1.tar.gz{,.asc,.sha512} curl -O https://dist.apache.org/repos/dist/release/superset/KEYS gpg --import KEYS gpg --verify apache-superset-kubernetes-operator-0.3.0-rc1.tar.gz{.asc,} shasum -a 512 -c apache-superset-kubernetes-operator-0.3.0-rc1.tar.gz.sha512 tar -xzf apache-superset-kubernetes-operator-0.3.0-rc1.tar.gz cd apache-superset-kubernetes-operator-0.3.0/ make test-unit helm-lint check-license Notable changes are documented in: https://github.com/apache/superset-kubernetes-operator/blob/v0.3.0-rc1/docs/reference/releases.md The vote will be open for at least 72 hours. [ ] +1 release this package [ ] 0 no opinion [ ] -1 do not release this package because ... Thanks, Ville
