diff --git a/.yamllint.yaml b/.yamllint.yaml
index a944498c..ac4941c4 100644
--- a/.yamllint.yaml
+++ b/.yamllint.yaml
@@ -7,3 +7,4 @@ rules:
     check-keys: false
   comments:
     min-spaces-from-content: 1  # Needed due to https://github.com/adrienverge/yamllint/issues/443
+  braces: disable # because the yaml files are templates which can have {{ ... }}
diff --git a/stacks/keycloak-opa-poc/druid.yaml b/stacks/keycloak-opa-poc/druid.yaml
index 514761ae..12cc47a4 100644
--- a/stacks/keycloak-opa-poc/druid.yaml
+++ b/stacks/keycloak-opa-poc/druid.yaml
@@ -5,7 +5,7 @@ metadata:
   name: druid
 spec:
   image:
-    productVersion: 28.0.1
+    productVersion: 30.0.0
   clusterConfig:
     listenerClass: external-unstable
     deepStorage:
@@ -67,7 +67,7 @@ spec:
           "druid-pac4j"]
 
         # basic authenticator needed for internal authentication among Druid processes
-        # Trying to use the pac4j authenticator in the escalator below leads to 302 errors, 
+        # Trying to use the pac4j authenticator in the escalator below leads to 302 errors,
         # it seems like the Druid processes cannot handle the OIDC authentication flow.
         druid.auth.authenticator.MyBasicMetadataAuthenticator.type: basic
         druid.auth.authenticator.MyBasicMetadataAuthenticator.initialInternalClientPassword: '${env:DRUID_SYSTEM_USER_PASSWORD}' # Default password for internal 'druid_system' user
diff --git a/stacks/nifi-kafka-druid-superset-s3/druid.yaml b/stacks/nifi-kafka-druid-superset-s3/druid.yaml
index 5407d200..dae6d10a 100644
--- a/stacks/nifi-kafka-druid-superset-s3/druid.yaml
+++ b/stacks/nifi-kafka-druid-superset-s3/druid.yaml
@@ -5,7 +5,7 @@ metadata:
   name: druid
 spec:
   image:
-    productVersion: 28.0.1
+    productVersion: 30.0.0
   clusterConfig:
     listenerClass: external-unstable
     zookeeperConfigMapName: druid-znode
@@ -101,4 +101,4 @@ metadata:
   name: druid-db-credentials
 stringData:
   username: druid
-  password: druid
\ No newline at end of file
+  password: druid