RATATOSKRATATOSK
Sign in

Strimzi

1.3.0Networking & Messaging
Oct 12, 2026

ACTION 4CHECK 1PLAN 1OTHER 7

A behavior-changing release tightens Kubernetes and CRD requirements, changes feature-gate defaults, and removes Kaniko from Connect image builds. It also adds early-access cluster security and cert-manager integrations, newer Kafka and HTTP Bridge support, service-account token mounts, and dashboard updates; no security fixes are disclosed.

Action needed (4)

  • breakingThe Kaniko build tool, removed

    Kaniko is removed, and Buildah is the only tool used for building Connect images.

  • breakingThe UseConnectBuildWithBuildah feature gate, enforced by default

    The UseConnectBuildWithBuildah feature gate moves to GA and is enabled by default without an option to disable it.

  • breakingThe UseBackgroundPodDeletion feature gate, enabled by default

    The UseBackgroundPodDeletion feature gate moves to beta and is enabled by default. It can still be disabled in the Cluster Operator feature-gates configuration.

  • breakingKubernetes version support, limited to 1.32 and newer

    From Strimzi 1.3.0, only Kubernetes 1.32 and newer are supported. Kubernetes 1.30 and 1.31 are no longer supported.

Check if affected (1)

  • breakingOlder CRD APIs removed

    Applies if you use v1beta2, v1beta1, or v1alpha1 for custom resources or CRDs.

    From Strimzi 1.0.0 onward, only the v1 CRD API is supported. The v1beta2, v1beta1, and v1alpha1 APIs are no longer supported, so custom resources and CRDs using them must be converted before upgrading.

    convert all custom resources and upgrade the CRDs

Plan ahead (1)

  • deprecatedPKCS12 certificate generation, deprecatedremoval date not announced

    Applies if you use PKCS12 format certificates.

    PKCS12 format certificates are deprecated. The STRIMZI_PKCS12_KEYSTORE_GENERATION environment variable will default to false in a future release and will eventually be removed, after which CA certificate Secrets and User Secrets will contain certificates only in PEM format.

All 7 other recorded changesvalue changes 3 · additions 2 · constraints 2

value changes (3)

  • * Update Kafka Exporter to [1.10.0](https://github.com/danielqsj/kafka_exporter/releases/tag/v1.10.0)
  • * Updated HTTP Bridge to 1.2.0
  • * Add fenced brokers, offline replicas and ISR shrink/expand/failed update panels to the example Kafka Grafana dashboards

additions (2)

  • * (Early Access) Configurable internal cluster security allows users to configure encryption and authentication on the internal connections within the Apache Kafka cluster.
  • * (Early Access) Integration with cert-manager for issuing certificates. While the cert-manager feature is in Early Access it is not recommended for use in production.

constraints (2)

  • * Add support for Kafka 4.2.2
  • * Support for mounting projected service account tokens into Strimzi-managed Pods
Add Strimzi to your stack

A weekly email arrives when a release needs action. Like the breaking changes in this release.

Add to stack →
Official release note ↗All Strimzi releases →