The Apache Superset team is pleased to announce the release of Apache Superset Kubernetes Operator 0.3.0.
The signed source release is available at: https://downloads.apache.org/superset/kubernetes-operator-0.3.0/ Downloads and verification instructions are available at: https://apache.github.io/superset-kubernetes-operator/reference/downloads/ Release notes are available at: https://apache.github.io/superset-kubernetes-operator/reference/releases/ Thanks to everyone who contributed to this release. The Apache Superset team > On Sep 30, 2026, at 10:50 AM, Ville Brofeldt <[email protected]> > wrote: > > Hello, > > The vote to release Apache Superset Kubernetes Operator 0.3.0 based on > candidate rc1 has passed. > > The vote tally is: > > Binding +1: > - Sam > - Evan > - Tai > > Non-binding +1: > - Nikolay > > 0: > - None > > -1: > - None > > The release will now be finalized. > > Thanks, > Ville > > >> On Sep 25, 2026, at 12:19 PM, Ville Brofeldt <[email protected]> >> wrote: >> >> Hello, >> >> This is a vote to release Apache Superset Kubernetes Operator 0.3.0 based on >> candidate rc1. >> >> Highlights: >> >> - Build: minimum Go toolchain moved from 1.26 to 1.27.1. >> - Security hardening (breaking): ServiceAccount name mismatches now rejected >> at admission; Valkey keyPrefix values now format-constrained; Celery Flower >> no longer exposed on the Production ingress/gateway by default; a Production >> instance can no longer be changed in place to a lower environment. >> - Security hardening (non-breaking): hardened default securityContext on >> every operator-created container; a pinned config-checksum annotation can no >> longer freeze out config/SECRET_KEY rotations; seed values no longer subject >> to shell expansion. >> - Helm / HA: new podDisruptionBudget value; multi-replica installs now >> require leader election. >> - Kubernetes support: now covers the three newest kind-published minors >> (1.35, 1.36, 1.37). >> - New capability: metastore/Valkey/seed connection fields can now be sourced >> individually from Secret keys. >> - Bug fixes: default MySQL seed image corrected, Gateway API v1beta1-only >> crash loop fixed, NodePort/LoadBalancer port churn fixed, OpenShift >> finalizers RBAC gap closed, chart no longer rejects unknown top-level values. >> >> The release candidate artifacts are staged at: >> >> https://dist.apache.org/repos/dist/dev/superset/kubernetes-operator-0.3.0-rc1/ >> >> The git tag is: >> >> https://github.com/apache/superset-kubernetes-operator/releases/tag/v0.3.0-rc1 >> >> PGP keys used for signing are listed in: >> https://dist.apache.org/repos/dist/release/superset/KEYS >> >> To verify the candidate (Go 1.26+, Helm, and Apache Rat must be installed >> locally; make will fetch additional Go modules and tools on first use): >> >> curl --remote-name-all >> https://dist.apache.org/repos/dist/dev/superset/kubernetes-operator-0.3.0-rc1/apache-superset-kubernetes-operator-0.3.0-rc1.tar.gz{,.asc,.sha512} >> curl -O https://dist.apache.org/repos/dist/release/superset/KEYS >> gpg --import KEYS >> gpg --verify apache-superset-kubernetes-operator-0.3.0-rc1.tar.gz{.asc,} >> shasum -a 512 -c >> apache-superset-kubernetes-operator-0.3.0-rc1.tar.gz.sha512 >> tar -xzf apache-superset-kubernetes-operator-0.3.0-rc1.tar.gz >> cd apache-superset-kubernetes-operator-0.3.0/ >> make test-unit helm-lint check-license >> >> Notable changes are documented in: >> >> https://github.com/apache/superset-kubernetes-operator/blob/v0.3.0-rc1/docs/reference/releases.md >> >> The vote will be open for at least 72 hours. >> >> [ ] +1 release this package >> [ ] 0 no opinion >> [ ] -1 do not release this package because ... >> >> Thanks, >> >> Ville >
