+1 binding On Fri, Sep 25, 2026 at 2:47 PM Evan Rusackas <[email protected]> wrote:
> +1 binding! Go, Ville, go! > > -e- > > Evan Rusackas > On Sep 25, 2026 at 2:45 PM -0700, Kuznetsov Nikolay <[email protected]>, > wrote: > > +1, non-binding > > > > On 2026/09/25 19:19:51 Ville Brofeldt wrote: > > > Hello, > > > > > > This is a vote to release Apache Superset Kubernetes Operator 0.3.0 > based on candidate rc1. > > > > > > Highlights: > > > > > > - Build: minimum Go toolchain moved from 1.26 to 1.27.1. > > > - Security hardening (breaking): ServiceAccount name mismatches now > rejected at admission; Valkey keyPrefix values now format-constrained; > Celery Flower no longer exposed on the Production ingress/gateway by > default; a Production instance can no longer be changed in place to a lower > environment. > > > - Security hardening (non-breaking): hardened default securityContext > on every operator-created container; a pinned config-checksum annotation > can no longer freeze out config/SECRET_KEY rotations; seed values no longer > subject to shell expansion. > > > - Helm / HA: new podDisruptionBudget value; multi-replica installs now > require leader election. > > > - Kubernetes support: now covers the three newest kind-published > minors (1.35, 1.36, 1.37). > > > - New capability: metastore/Valkey/seed connection fields can now be > sourced individually from Secret keys. > > > - Bug fixes: default MySQL seed image corrected, Gateway API > v1beta1-only crash loop fixed, NodePort/LoadBalancer port churn fixed, > OpenShift finalizers RBAC gap closed, chart no longer rejects unknown > top-level values. > > > > > > The release candidate artifacts are staged at: > > > > https://dist.apache.org/repos/dist/dev/superset/kubernetes-operator-0.3.0-rc1/ > > > > > > The git tag is: > > > > https://github.com/apache/superset-kubernetes-operator/releases/tag/v0.3.0-rc1 > > > > > > PGP keys used for signing are listed in: > > > https://dist.apache.org/repos/dist/release/superset/KEYS > > > > > > To verify the candidate (Go 1.26+, Helm, and Apache Rat must be > installed > > > locally; make will fetch additional Go modules and tools on first use): > > > > > > curl --remote-name-all > https://dist.apache.org/repos/dist/dev/superset/kubernetes-operator-0.3.0-rc1/apache-superset-kubernetes-operator-0.3.0-rc1.tar.gz{,.asc,.sha512} > > > curl -O https://dist.apache.org/repos/dist/release/superset/KEYS > > > gpg --import KEYS > > > gpg --verify > apache-superset-kubernetes-operator-0.3.0-rc1.tar.gz{.asc,} > > > shasum -a 512 -c > apache-superset-kubernetes-operator-0.3.0-rc1.tar.gz.sha512 > > > tar -xzf apache-superset-kubernetes-operator-0.3.0-rc1.tar.gz > > > cd apache-superset-kubernetes-operator-0.3.0/ > > > make test-unit helm-lint check-license > > > > > > Notable changes are documented in: > > > > https://github.com/apache/superset-kubernetes-operator/blob/v0.3.0-rc1/docs/reference/releases.md > > > > > > The vote will be open for at least 72 hours. > > > > > > [ ] +1 release this package > > > [ ] 0 no opinion > > > [ ] -1 do not release this package because ... > > > > > > Thanks, > > > > > > Ville > -- -Tai Dupree
