charts/redpanda: v5.9.30

Changed

• Bump Redpanda operator sidecar container tag to v2.3.15-24.3.18.

Deprecated

• • statefulset.sideCars.controllers.createRBAC is deprecated and no longer respected. In most cases, setting this field to false would result in a broken deployment. RBAC may be controlled via rbac.enabled or per controller via statefulset.sideCars.controllers.{pvcUnbinder,brokerDecommissioner}.enabled.
• statefulset.sideCars.controllers.run has been unused for many releases and is now deprecated. Individual controllers may be enabled/disabled by setting their enabled field: statefulset.sideCars.pvcUnbinder.enabled, statefulset.sideCars.brokerDecommissioner.enabled.

operator: v2.3.15-24.3.18

Changed

• Bump Redpanda helm chart dependency to 5.9.29

Fixed

• ClusterRoles for the PVCUnbinder and BrokerDecommissioner are now enabled / disabled when their respective controller is enabled / disabled.

  Previously ClusterRoles were always generated and could only be disabled by setting statefulset.sideCars.controllers.createRBAC to false which rendered the sidecar inoperable.

charts/redpanda: v5.9.29

Changed

• Bump Redpanda operator sidecar container tag to v2.3.14-24.3.17.

charts/redpanda: v5.10.6

Changed

• Bump Redpanda operator sidecar container tag to 2.4.5

Deprecated

• • statefulset.sideCars.controllers.createRBAC is deprecated and no longer respected. In most cases, setting this field to false would result in a broken deployment. RBAC may be controlled via rbac.enabled or per controller via statefulset.sideCars.controllers.{pvcUnbinder,brokerDecommissioner}.enabled.
• statefulset.sideCars.controllers.run has been unused for many releases and is now deprecated. Individual controllers may be enabled/disabled by setting their enabled field: statefulset.sideCars.pvcUnbinder.enabled, statefulset.sideCars.brokerDecommissioner.enabled.

operator: v2.4.6

Changed

• Client certificates are now named $FULLNAME-$CERT-client-cert.
• Bump Redpanda helm chart dependency to 5.10.5

Fixed

• ClusterRoles for the PVCUnbinder and BrokerDecommissioner are now enabled / disabled when their respective controller is enabled / disabled.

  Previously ClusterRoles were always generated and could only be disabled by setting statefulset.sideCars.controllers.createRBAC to false which rendered the sidecar inoperable.

• Fix a bug with the way the config-watcher sidecar syncs users. The Kubernetes mechanism for writing out a changed secret is involves re-creating a symlink in the secrets directory that points to the mounted secret. Previously the config-watcher only detected changes to the entire directory and could potentially miss syncs, this resyncs everything anytime the symlink is recreated.

• mTLS client certificates are now generated per certificate, as required, instead of using a single and potentially invalid certificate.

operator: v25.1.4

Changed

• Client certificates are now named $FULLNAME-$CERT-client-cert.
• Bump Redapnda helm chart go dependency to 5.10.5

Fixed

• Scaling down a cluster when the controller leader is one of the Brokers to be decommissioned now works as expected.
• Fix a bug with the way the config-watcher sidecar syncs users. The Kubernetes mechanism for writing out a changed secret is involves re-creating a symlink in the secrets directory that points to the mounted secret. Previously the config-watcher only detected changes to the entire directory and could potentially miss syncs, this resyncs everything anytime the symlink is recreated.
• spec.clusterSpec.initContainerImage is not longer incorrectly set to the redpanda image.
• mTLS client certificates are now generated per certificate, as required, instead of using a single and potentially invalid certificate.

charts/redpanda: v5.10.5

Changed

• Client certificates are now named $FULLNAME-$CERT-client-cert.
• Bump Redpanda version in helm chart metadata and appVersion to v25.1.12.
• Bump Redpanda operator sidecar container tag to 2.4.5

Fixed

• ClusterRoles for the PVCUnbinder and BrokerDecommissioner are now enabled / disabled when their respective controller is enabled / disabled.

  Previously ClusterRoles were always generated and could only be disabled by setting .statefulset.sideCars.controllers.createRBAC=false which rendered the sidecar inoperable.

• statefulset.podTemplate.spec.volumes can now be used to override chart generated volumes.

• Fix a bug with the way the config-watcher sidecar syncs users. The Kubernetes mechanism for writing out a changed secret is involves re-creating a symlink in the secrets directory that points to the mounted secret. Previously the config-watcher only detected changes to the entire directory and could potentially miss syncs, this resyncs everything anytime the symlink is recreated.

• mTLS client certificates are now generated per certificate, as required, instead of using a single and potentially invalid certificate.

charts/redpanda: v25.1.2

Changed

• Client certificates are now named $FULLNAME-$CERT-client-cert.
• Bump Redpanda operator side car container tag to v25.1.3.
• Bump Redpanda default version to v25.1.12.

Fixed

• statefulset.podTemplate.spec.volumes can now be used to override chart generated volumes.
• Fix a bug with the way the config-watcher sidecar syncs users. The Kubernetes mechanism for writing out a changed secret is involves re-creating a symlink in the secrets directory that points to the mounted secret. Previously the config-watcher only detected changes to the entire directory and could potentially miss syncs, this resyncs everything anytime the symlink is recreated.
• mTLS client certificates are now generated per certificate, as required, instead of using a single and potentially invalid certificate.

charts/console: v3.2.0

Added

• Added the ability to specify additional container ports on the Deployment via extraContainerPorts.

Changed

• Bumped appVersion to v3.2.2.

operator: v25.2.1-beta1

Changed

• By default, the operator now reconciles resources (Redpanda, Topic, etc) across all namespaces.

  The --namespace flag may be used to scope the operator's watches to a single namespace.