What’s Changed
🎉 Major New Features
Multi-Cloud UniLink Support (Major Enhancement)
- Azure Integration: Full Azure support for UniLink with Azure identity labels
- GCP Support: Complete Google Cloud Platform integration for UniLink
- Cloud Identity Management: Automatic Azure workload identity configuration
- Cross-Cloud Migration: Seamless data migration across AWS, Azure, and GCP
- Cloud-Specific Configurations: Optimized configurations for each cloud provider
Advanced RocksDB Configuration (Brand New Feature)
- Custom RocksDB Options: Support for configuring RocksDB options through custom configurations
- DBOptions Configuration: Fine-grained control over RocksDB database options
- CFOptions Support: Column family options configuration for optimized performance
- BlockBasedTable Options: Advanced table options for better storage efficiency
- Memory Optimization: Intelligent memory allocation based on available resources
- Performance Tuning: Pre-configured optimizations for different workload patterns
Enhanced Networking and DNS (Major Improvement)
- Wildcard DNS Support: Improved wildcard DNS support for better service discovery
- Topology-Aware Gateway: Enhanced additional selector configuration for topology-aware gateways
- Network Auto-Scaling: Support for auto-scaling based on networking metrics
- HTTP Request Timeout: Configurable HTTP request timeout settings
- Service Account Permissions: Added “read” permissions for service accounts to brokers
Advanced Storage Management (New Feature)
- PVC Label Management: Automatic PVC label updates for BookKeeper
- PVC Annotations: Support for adding custom annotations on PVCs
- Storage Optimization: Better storage configuration and management
- Dynamic Label Updates: Automatic label updates for storage resources
🔧 Feature Improvements
PFSQL Enhancements
- Version Upgrade: Bumped PFSQL to version 0.22.2
- Image Configuration: Support for custom PFSQL image configuration
- Replica Configuration: Support for configuring PFSQL replicas
- Auth Provider Fix: Fixed PFSQL auth provider to support AuthenticationProviderApiKeys
- Istio Integration: Fixed PFSQL cluster Istio hostname with gateways defined
BookKeeper Optimizations
- Memory Configuration: Improved memory configuration for BookKeeper
- MinReadySeconds: Added minReadySeconds configuration for BookKeeper
- Resource Management: Better resource allocation and management
- Auto-Recovery: Enhanced auto-recovery configuration
Kafka Connect Improvements
- Replica Control: Use replicas to control “tasks.max” in Kafka Connect
- Task Management: Better task management and scaling
- Resource Optimization: Improved resource utilization
Ursa Cluster Enhancements
- Protocol Management: Disabled Pulsar protocol for Ursa clusters
- Serverless Profile: Fixed CPU compute for serverless profile
- Storage Configuration: Enhanced storage configuration options
🐛 Bug Fixes
Security and CVE Fixes
- Golang Toolchain: Upgraded to Go 1.23.8 for CVE-2025-22871
- Golang x/net: Upgraded golang x/net version for CVE-2025-22872
- CVE 2025-30204: Fixed CVE 2025-30204 security vulnerability
- Multiple CVE Patches: Applied various CVE patches across dependencies
Load Manager Fixes
- Shadow Namespace: Fixed load manager error configuration for shadow namespace load balancer
- Load Balancing: Improved load balancing configuration
- Auto Scaling: Set auto scaling policy at coordinator to false by default
Metadata and Job Fixes
- Clear Metadata Job: Fixed clear metadata job by using MaybeAddIstioLabels directly
- Geo-Cluster: Fixed geo-cluster clear metadata job by adding Istio labels
- Istio Labels: Moved clear meta job Istio labels to pod template spec
- Metadata Init Job: Fixed PulsarBroker affinity and nodeSelector for metadata init job
Configuration and Deployment Fixes
- FunctionMesh Config: Set FunctionMeshConfigName based on cluster name
- Detector Resources: Added detector resources configuration
- S3 Backend Storage: Added check for S3 backend storage
- Manifest Fixes: Fixed manifests for master branch
🚀 Performance Optimizations
Memory Management
- BookKeeper Memory: Improved memory configuration for BookKeeper
- RocksDB Memory: Optimized RocksDB memory allocation
- Serverless Profile: Fixed CPU compute for serverless profile
- Resource Allocation: Better resource allocation across components
Storage Performance
- RocksDB Optimization: Advanced RocksDB configuration for better performance
- PVC Management: Automatic PVC label updates for better resource tracking
- Storage Efficiency: Improved storage configuration and management
Network Performance
- Wildcard DNS: Improved wildcard DNS support for better service discovery
- Network Auto-Scaling: Auto-scaling based on networking metrics
- HTTP Optimization: Configurable HTTP request timeout for better performance
🔄 Dependencies and Infrastructure
Security Updates
- Go 1.23.8: Upgraded Golang toolchain to 1.23.8
- Golang x/net: Upgraded golang x/net version
- CVE Patches: Multiple CVE fixes across dependencies
CI/CD Improvements
- OperatorHub: Disabled operatorhub auto release CI
- Release Process: Improved release process and automation
Cloud Integration
- Azure Identity: Azure workload identity integration
- GCP Support: Complete GCP integration
- Multi-Cloud: Enhanced multi-cloud support
📋 Configuration Changes
New Configuration Options
- RocksDB Options: New RocksDB configuration options with prefixes:
- rocksDB.dbOptions.* for database options
- rocksDB.cfOptions.default.* for column family options
- rocksDB.tableOptions.blockBasedTable.default.* for table options
- Wildcard DNS: Enhanced wildcard DNS support
- PVC Annotations: Support for PVC annotations
- Network Auto-Scaling: Auto-scaling based on networking metrics
Enhanced Configuration
- PFSQL Configuration: Image and replica configuration support
- BookKeeper Memory: Improved memory configuration options
- Service Account Permissions: Enhanced service account permissions
- HTTP Timeout: Configurable HTTP request timeout
⚠️ Breaking Changes
- PFSQL Auth Provider: PFSQL auth provider now supports AuthenticationProviderApiKeys
- Ursa Protocol: Pulsar protocol is disabled for Ursa clusters
- Auto Scaling: Auto scaling policy at coordinator is set to false by default
- RocksDB Configuration: New RocksDB configuration format with prefixes
📚 Documentation and Examples
- Multi-cloud UniLink configuration examples
- RocksDB configuration guides
- Wildcard DNS setup documentation
- PVC management configuration examples
- Network auto-scaling configuration guides