From 4ea3e31825fd17be7c0e05ec25b20fbead68b2ef Mon Sep 17 00:00:00 2001 From: Sam Barker Date: Wed, 4 Mar 2026 11:29:45 +1300 Subject: [PATCH 1/4] Add blog post for the 0.19.0 release Signed-off-by: Sam Barker --- _posts/2026-03-04-release-0_19_0.md | 43 +++++++++++++++++++++++++++++ 1 file changed, 43 insertions(+) create mode 100644 _posts/2026-03-04-release-0_19_0.md diff --git a/_posts/2026-03-04-release-0_19_0.md b/_posts/2026-03-04-release-0_19_0.md new file mode 100644 index 00000000..08e4656a --- /dev/null +++ b/_posts/2026-03-04-release-0_19_0.md @@ -0,0 +1,43 @@ +--- +layout: post +title: "Kroxylicious release 0.19.0" +date: 2026-03-04 00:00:00 +0000 +author: "Sam Barker" +author_url: "https://github.com/SamBarker" +# noinspection YAMLSchemaValidation +categories: blog kroxylicious-proxy releases +tags: [ "releases", "kroxylicious-proxy" ] +--- + +We're excited to announce the release of [Kroxylicious 0.19.0](https://github.com/kroxylicious/kroxylicious/releases/tag/v0.19.0)! There's a lot to dig into — check out the full [Changelog](https://github.com/kroxylicious/kroxylicious/blob/main/CHANGELOG.md#0190) for everything including deprecations, changes, and removals. + +Here are the highlights: + +### Kafka 4.2 Support + +Hot off the press — Kroxylicious now supports Kafka 4.2! We're keeping pace with the upstream Kafka releases so you don't have to worry about being left behind. + +### Authorizer Filter: Transactional ID Support + +The Authorizer Filter just got more powerful. It now covers transactional ID authorization, so you can enforce `WRITE` and `DESCRIBE` operations with full parity to Apache Kafka's own ACL authorization. + +### Kubernetes Secrets as Trust Anchors + +Good news for Kubernetes users: you can now use Kubernetes Secrets in the `trustAnchorRef` field of `KafkaService` and `VirtualKafkaCluster` custom resources. One less thing to manage outside of your cluster. + +### Filter API: API Version in `onResponse` + +`ResponseFilter#onResponse` now receives API version information via a new five-argument form. The previous four-argument form is deprecated. + +### Kicking Out Idle Connections + +Ever wanted to clean up connections that have outstayed their welcome? Kroxylicious can now be configured with idle timeouts for client connections: +- `unauthenticatedIdleTimeout` — for connections that haven't authenticated yet +- `authenticatedIdleTimeout` — for authenticated connections + +Both use Go-style duration formats. And to help you keep an eye on things, a new metric `kroxylicious_client_to_proxy_disconnects_total` tracks why connections are closing — idle timeout, client-initiated, or server-initiated. + +### Feedback + +We'd love to hear from you! Whether you're kicking the tyres, running Kroxylicious in production, or just find the project interesting — drop by and say hello. +You can reach us through [Slack](https://kroxylicious.slack.com), [GitHub](https://github.com/kroxylicious/kroxylicious/issues) or even [bsky](https://bsky.app/profile/kroxylicious.io)). From 929a9585f18855023b63aff128908518fa59c404 Mon Sep 17 00:00:00 2001 From: Sam Barker Date: Wed, 4 Mar 2026 11:33:32 +1300 Subject: [PATCH 2/4] add release artifacts Signed-off-by: Sam Barker --- _posts/2026-03-04-release-0_19_0.md | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/_posts/2026-03-04-release-0_19_0.md b/_posts/2026-03-04-release-0_19_0.md index 08e4656a..f77fb32f 100644 --- a/_posts/2026-03-04-release-0_19_0.md +++ b/_posts/2026-03-04-release-0_19_0.md @@ -37,6 +37,17 @@ Ever wanted to clean up connections that have outstayed their welcome? Kroxylici Both use Go-style duration formats. And to help you keep an eye on things, a new metric `kroxylicious_client_to_proxy_disconnects_total` tracks why connections are closing — idle timeout, client-initiated, or server-initiated. +### Artefacts + +Binaries are attached to the GitHub [release](https://github.com/kroxylicious/kroxylicious/releases/tag/v0.19.0) and available through [Maven Central](https://repo1.maven.org/maven2/io/kroxylicious/kroxylicious-app/0.19.0/). + +Container images are available on quay.io: + +| Image | Repository | +|---|---| +| Proxy | [quay.io/kroxylicious/kroxylicious:0.19.0](https://quay.io/repository/kroxylicious/kroxylicious?tab=tags) (`sha256:f9cd83454ed1d6507be7876fb6a712c8c1d611fb26db47675e55777c10f46228`) | +| Operator | [quay.io/kroxylicious/operator:0.19.0](https://quay.io/repository/kroxylicious/operator?tab=tags) (`sha256:a531ec14e555d5df719cb5c64d751d10d515fa791044fe8b059106d25bcbc39a`) | + ### Feedback We'd love to hear from you! Whether you're kicking the tyres, running Kroxylicious in production, or just find the project interesting — drop by and say hello. From 1e1967e5ced0a399a9aabf01836130e8f170f124 Mon Sep 17 00:00:00 2001 From: Sam Barker Date: Wed, 4 Mar 2026 11:46:12 +1300 Subject: [PATCH 3/4] leaning into the crocodile life :D Signed-off-by: Sam Barker --- _posts/2026-03-04-release-0_19_0.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/_posts/2026-03-04-release-0_19_0.md b/_posts/2026-03-04-release-0_19_0.md index f77fb32f..f7bdb01f 100644 --- a/_posts/2026-03-04-release-0_19_0.md +++ b/_posts/2026-03-04-release-0_19_0.md @@ -15,7 +15,7 @@ Here are the highlights: ### Kafka 4.2 Support -Hot off the press — Kroxylicious now supports Kafka 4.2! We're keeping pace with the upstream Kafka releases so you don't have to worry about being left behind. +Hot off the press — Kroxylicious now bites into Kafka 4.2! We are keeping pace with upstream Kafka releases so your filters can take advantage of new RPCs as they land. All versions of Kroxylicious can be deployed in front of any supported version of Apache Kafka. ### Authorizer Filter: Transactional ID Support @@ -29,7 +29,7 @@ Good news for Kubernetes users: you can now use Kubernetes Secrets in the `trust `ResponseFilter#onResponse` now receives API version information via a new five-argument form. The previous four-argument form is deprecated. -### Kicking Out Idle Connections +### Munching on Idle Connections Ever wanted to clean up connections that have outstayed their welcome? Kroxylicious can now be configured with idle timeouts for client connections: - `unauthenticatedIdleTimeout` — for connections that haven't authenticated yet From 05e28b1f5e741e7543f7b794475d473c675cbbb3 Mon Sep 17 00:00:00 2001 From: Sam Barker Date: Wed, 4 Mar 2026 11:50:50 +1300 Subject: [PATCH 4/4] add a call to action to join the community call Signed-off-by: Sam Barker --- _posts/2026-03-04-release-0_19_0.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_posts/2026-03-04-release-0_19_0.md b/_posts/2026-03-04-release-0_19_0.md index f7bdb01f..e8765685 100644 --- a/_posts/2026-03-04-release-0_19_0.md +++ b/_posts/2026-03-04-release-0_19_0.md @@ -51,4 +51,4 @@ Container images are available on quay.io: ### Feedback We'd love to hear from you! Whether you're kicking the tyres, running Kroxylicious in production, or just find the project interesting — drop by and say hello. -You can reach us through [Slack](https://kroxylicious.slack.com), [GitHub](https://github.com/kroxylicious/kroxylicious/issues) or even [bsky](https://bsky.app/profile/kroxylicious.io)). +You can reach us through [Slack](https://kroxylicious.slack.com), [GitHub](https://github.com/kroxylicious/kroxylicious/issues) or even [bsky](https://bsky.app/profile/kroxylicious.io)), or tell us in person on one of our upcoming [community calls]({% link join-us/community-call/index.md %}).