+1, non-binding
On 2026/09/25 19:19:51 Ville Brofeldt wrote: > Hello, > > This is a vote to release Apache Superset Kubernetes Operator 0.3.0 based on > candidate rc1. > > Highlights: > > - Build: minimum Go toolchain moved from 1.26 to 1.27.1. > - Security hardening (breaking): ServiceAccount name mismatches now rejected > at admission; Valkey keyPrefix values now format-constrained; Celery Flower > no longer exposed on the Production ingress/gateway by default; a Production > instance can no longer be changed in place to a lower environment. > - Security hardening (non-breaking): hardened default securityContext on > every operator-created container; a pinned config-checksum annotation can no > longer freeze out config/SECRET_KEY rotations; seed values no longer subject > to shell expansion. > - Helm / HA: new podDisruptionBudget value; multi-replica installs now > require leader election. > - Kubernetes support: now covers the three newest kind-published minors > (1.35, 1.36, 1.37). > - New capability: metastore/Valkey/seed connection fields can now be sourced > individually from Secret keys. > - Bug fixes: default MySQL seed image corrected, Gateway API v1beta1-only > crash loop fixed, NodePort/LoadBalancer port churn fixed, OpenShift > finalizers RBAC gap closed, chart no longer rejects unknown top-level values. > > The release candidate artifacts are staged at: > > https://dist.apache.org/repos/dist/dev/superset/kubernetes-operator-0.3.0-rc1/ > > The git tag is: > > https://github.com/apache/superset-kubernetes-operator/releases/tag/v0.3.0-rc1 > > PGP keys used for signing are listed in: > https://dist.apache.org/repos/dist/release/superset/KEYS > > To verify the candidate (Go 1.26+, Helm, and Apache Rat must be installed > locally; make will fetch additional Go modules and tools on first use): > > curl --remote-name-all > https://dist.apache.org/repos/dist/dev/superset/kubernetes-operator-0.3.0-rc1/apache-superset-kubernetes-operator-0.3.0-rc1.tar.gz{,.asc,.sha512} > curl -O https://dist.apache.org/repos/dist/release/superset/KEYS > gpg --import KEYS > gpg --verify apache-superset-kubernetes-operator-0.3.0-rc1.tar.gz{.asc,} > shasum -a 512 -c apache-superset-kubernetes-operator-0.3.0-rc1.tar.gz.sha512 > tar -xzf apache-superset-kubernetes-operator-0.3.0-rc1.tar.gz > cd apache-superset-kubernetes-operator-0.3.0/ > make test-unit helm-lint check-license > > Notable changes are documented in: > > https://github.com/apache/superset-kubernetes-operator/blob/v0.3.0-rc1/docs/reference/releases.md > > The vote will be open for at least 72 hours. > > [ ] +1 release this package > [ ] 0 no opinion > [ ] -1 do not release this package because ... > > Thanks, > > Ville
