+1 binding! Go, Ville, go! -e-
Evan Rusackas On Sep 25, 2026 at 2:45 PM -0700, Kuznetsov Nikolay <[email protected]>, wrote: > +1, non-binding > > On 2026/09/25 19:19:51 Ville Brofeldt wrote: > > Hello, > > > > This is a vote to release Apache Superset Kubernetes Operator 0.3.0 based > > on candidate rc1. > > > > Highlights: > > > > - Build: minimum Go toolchain moved from 1.26 to 1.27.1. > > - Security hardening (breaking): ServiceAccount name mismatches now > > rejected at admission; Valkey keyPrefix values now format-constrained; > > Celery Flower no longer exposed on the Production ingress/gateway by > > default; a Production instance can no longer be changed in place to a lower > > environment. > > - Security hardening (non-breaking): hardened default securityContext on > > every operator-created container; a pinned config-checksum annotation can > > no longer freeze out config/SECRET_KEY rotations; seed values no longer > > subject to shell expansion. > > - Helm / HA: new podDisruptionBudget value; multi-replica installs now > > require leader election. > > - Kubernetes support: now covers the three newest kind-published minors > > (1.35, 1.36, 1.37). > > - New capability: metastore/Valkey/seed connection fields can now be > > sourced individually from Secret keys. > > - Bug fixes: default MySQL seed image corrected, Gateway API v1beta1-only > > crash loop fixed, NodePort/LoadBalancer port churn fixed, OpenShift > > finalizers RBAC gap closed, chart no longer rejects unknown top-level > > values. > > > > The release candidate artifacts are staged at: > > https://dist.apache.org/repos/dist/dev/superset/kubernetes-operator-0.3.0-rc1/ > > > > The git tag is: > > https://github.com/apache/superset-kubernetes-operator/releases/tag/v0.3.0-rc1 > > > > PGP keys used for signing are listed in: > > https://dist.apache.org/repos/dist/release/superset/KEYS > > > > To verify the candidate (Go 1.26+, Helm, and Apache Rat must be installed > > locally; make will fetch additional Go modules and tools on first use): > > > > curl --remote-name-all > > https://dist.apache.org/repos/dist/dev/superset/kubernetes-operator-0.3.0-rc1/apache-superset-kubernetes-operator-0.3.0-rc1.tar.gz{,.asc,.sha512} > > curl -O https://dist.apache.org/repos/dist/release/superset/KEYS > > gpg --import KEYS > > gpg --verify apache-superset-kubernetes-operator-0.3.0-rc1.tar.gz{.asc,} > > shasum -a 512 -c apache-superset-kubernetes-operator-0.3.0-rc1.tar.gz.sha512 > > tar -xzf apache-superset-kubernetes-operator-0.3.0-rc1.tar.gz > > cd apache-superset-kubernetes-operator-0.3.0/ > > make test-unit helm-lint check-license > > > > Notable changes are documented in: > > https://github.com/apache/superset-kubernetes-operator/blob/v0.3.0-rc1/docs/reference/releases.md > > > > The vote will be open for at least 72 hours. > > > > [ ] +1 release this package > > [ ] 0 no opinion > > [ ] -1 do not release this package because ... > > > > Thanks, > > > > Ville
