From 8b907277984a8195f312c288a0b199625022e1b1 Mon Sep 17 00:00:00 2001 From: vbotbuildovich <62446873+vbotbuildovich@users.noreply.github.com> Date: Fri, 8 May 2026 12:54:31 +0000 Subject: [PATCH 1/4] auto-docs: Update property docs for v26.1.7 --- antora.yml | 4 +- docs-data/property-overrides.json | 10 ++++- ...-property-changes-v26.1.6-to-v26.1.7.json} | 17 +++++--- ....json => redpanda-properties-v26.1.7.json} | 18 ++++++++ .../properties/cluster-properties.adoc | 41 +++++++++++++++++++ 5 files changed, 81 insertions(+), 9 deletions(-) rename docs-data/{redpanda-property-changes-v26.1.5-to-v26.1.6.json => redpanda-property-changes-v26.1.6-to-v26.1.7.json} (55%) rename modules/reference/attachments/{redpanda-properties-v26.1.6.json => redpanda-properties-v26.1.7.json} (99%) diff --git a/antora.yml b/antora.yml index fa9fb82423..0092837d68 100644 --- a/antora.yml +++ b/antora.yml @@ -17,8 +17,8 @@ asciidoc: # Fallback versions # We try to fetch the latest versions from GitHub at build time # -- - full-version: 26.1.6 - latest-redpanda-tag: 'v26.1.6' + full-version: 26.1.7 + latest-redpanda-tag: 'v26.1.7' latest-console-tag: 'v3.3.1' latest-release-commit: '35a825c9c1880ebeedf4c18bb8c6cceaa63566c1' latest-operator-version: 'v2.3.8-24.3.6' diff --git a/docs-data/property-overrides.json b/docs-data/property-overrides.json index 4283174d17..f1de2cedf9 100644 --- a/docs-data/property-overrides.json +++ b/docs-data/property-overrides.json @@ -1300,7 +1300,10 @@ "leader_balancer_mode": { "_comment": "greedy mode excluded from docs - internal use only (added in v26.1.2)", "description": "Mode of the leader balancer optimization strategy.\n\nAccepted values:\n\n* `calibrated` (default): An adaptive strategy that samples potential moves and prioritizes high-impact transfers. Minimizes unnecessary leader movement while achieving balance over time. Best for most production workloads.\n* `random`: Accepts the first random move that improves balance. Less efficient than `calibrated` because it doesn't prioritize high-impact moves. Available as a fallback if `calibrated` causes unexpected behavior.\n\nLegacy values `greedy_balanced_shards` and `random_hill_climbing` are treated as `calibrated`.", - "accepted_values": ["calibrated", "random"], + "accepted_values": [ + "calibrated", + "random" + ], "config_scope": "cluster" }, "leader_balancer_mute_timeout": { @@ -1540,6 +1543,9 @@ "oidc_group_claim_path": { "version": "v26.1.1" }, + "oidc_http_proxy_url": { + "version": "v26.1.7" + }, "oidc_principal_mapping": { "description": "Rule for mapping JWT payload claim to a Redpanda user principal.", "related_topics": [ @@ -2269,4 +2275,4 @@ "description": "The default write caching mode to apply to user topics. Write caching acknowledges a message as soon as it is received and acknowledged on a majority of brokers, without waiting for it to be written to disk. With `acks=all`, this provides lower latency while still ensuring that a majority of brokers acknowledge the write. \n\nFsyncs follow <> and <>, whichever is reached first.\n\nThe `write_caching_default` cluster property can be overridden with the xref:reference:properties/topic-properties.adoc#writecaching[`write.caching`] topic property." } } -} \ No newline at end of file +} diff --git a/docs-data/redpanda-property-changes-v26.1.5-to-v26.1.6.json b/docs-data/redpanda-property-changes-v26.1.6-to-v26.1.7.json similarity index 55% rename from docs-data/redpanda-property-changes-v26.1.5-to-v26.1.6.json rename to docs-data/redpanda-property-changes-v26.1.6-to-v26.1.7.json index 20eb364dce..0890e09ac1 100644 --- a/docs-data/redpanda-property-changes-v26.1.5-to-v26.1.6.json +++ b/docs-data/redpanda-property-changes-v26.1.6-to-v26.1.7.json @@ -1,11 +1,11 @@ { "comparison": { - "oldVersion": "v26.1.5", - "newVersion": "v26.1.6", - "timestamp": "2026-04-22T01:41:17.013Z" + "oldVersion": "v26.1.6", + "newVersion": "v26.1.7", + "timestamp": "2026-05-08T12:54:30.491Z" }, "summary": { - "newProperties": 0, + "newProperties": 1, "changedDefaults": 0, "changedDescriptions": 0, "changedTypes": 0, @@ -15,7 +15,14 @@ "emptyDescriptions": 2 }, "details": { - "newProperties": [], + "newProperties": [ + { + "name": "oidc_http_proxy_url", + "type": "string", + "default": null, + "description": "URL of the HTTP forward proxy used for OIDC discovery and JWKS fetches. Accepts http://host:port or https://host:port. When set, oidc_discovery_url must use https:// — plaintext OIDC origins cannot be routed through a forward proxy." + } + ], "changedDefaults": [], "changedDescriptions": [], "changedTypes": [], diff --git a/modules/reference/attachments/redpanda-properties-v26.1.6.json b/modules/reference/attachments/redpanda-properties-v26.1.7.json similarity index 99% rename from modules/reference/attachments/redpanda-properties-v26.1.6.json rename to modules/reference/attachments/redpanda-properties-v26.1.7.json index 0e6fdb8d64..09a6100063 100644 --- a/modules/reference/attachments/redpanda-properties-v26.1.6.json +++ b/modules/reference/attachments/redpanda-properties-v26.1.7.json @@ -10103,6 +10103,24 @@ "version": "v26.1.1", "visibility": "user" }, + "oidc_http_proxy_url": { + "c_type": "ss::sstring", + "cloud_byoc_only": false, + "cloud_editable": false, + "cloud_readonly": false, + "cloud_supported": false, + "config_scope": "cluster", + "default": null, + "defined_in": "src/v/config/configuration.cc", + "description": "URL of the HTTP forward proxy used for OIDC discovery and JWKS fetches. Accepts http://host:port or https://host:port. When set, oidc_discovery_url must use https:// \u2014 plaintext OIDC origins cannot be routed through a forward proxy.", + "is_deprecated": false, + "is_enterprise": false, + "name": "oidc_http_proxy_url", + "needs_restart": false, + "nullable": true, + "type": "string", + "visibility": "user" + }, "oidc_keys_refresh_interval": { "c_type": "std::chrono::seconds", "cloud_byoc_only": false, diff --git a/modules/reference/partials/properties/cluster-properties.adoc b/modules/reference/partials/properties/cluster-properties.adoc index 411f007ef9..acd8f09cf5 100644 --- a/modules/reference/partials/properties/cluster-properties.adoc +++ b/modules/reference/partials/properties/cluster-properties.adoc @@ -14083,6 +14083,47 @@ endif::[] |=== +=== oidc_http_proxy_url + +URL of the HTTP forward proxy used for OIDC discovery and JWKS fetches. Accepts http://host:port or https://host:port. When set, oidc_discovery_url must use https:// — plaintext OIDC origins cannot be routed through a forward proxy. + +[cols="1s,2a"] +|=== +| Property | Value + +| Type +| `string` + + + +| Default +| +ifdef::env-cloud[] +Available in the Redpanda Cloud Console +endif::[] +ifndef::env-cloud[] +`null` +endif::[] + +| Nullable +| Yes + +| Requires restart +| No + +ifndef::env-cloud[] +| Restored on xref:manage:whole-cluster-restore.adoc[Whole Cluster Restore] +| Yes +endif::[] + +ifndef::env-cloud[] +| Visibility +| User +endif::[] + +|=== + + === oidc_keys_refresh_interval The frequency of refreshing the JSON Web Keys (JWKS) used to validate access tokens. From 5ecc9aaeb20cb82a7b20cd3977a8de13f5c44d4c Mon Sep 17 00:00:00 2001 From: Joyce Fee <102751339+Feediver1@users.noreply.github.com> Date: Thu, 14 May 2026 10:46:27 -0500 Subject: [PATCH 2/4] Apply suggestion from @Feediver1 --- docs-data/redpanda-property-changes-v26.1.6-to-v26.1.7.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs-data/redpanda-property-changes-v26.1.6-to-v26.1.7.json b/docs-data/redpanda-property-changes-v26.1.6-to-v26.1.7.json index 0890e09ac1..704c3df48b 100644 --- a/docs-data/redpanda-property-changes-v26.1.6-to-v26.1.7.json +++ b/docs-data/redpanda-property-changes-v26.1.6-to-v26.1.7.json @@ -20,7 +20,7 @@ "name": "oidc_http_proxy_url", "type": "string", "default": null, - "description": "URL of the HTTP forward proxy used for OIDC discovery and JWKS fetches. Accepts http://host:port or https://host:port. When set, oidc_discovery_url must use https:// — plaintext OIDC origins cannot be routed through a forward proxy." + "description": "URL of the HTTP forward proxy used for OIDC discovery and JWKS fetches. Accepts http://host:port or https://host:port. When set, `oidc_discovery_url` must use https://. Plain text OIDC origins cannot be routed through a forward proxy." } ], "changedDefaults": [], From 73cc19f499638daffcbbd2611de31309272bd4f2 Mon Sep 17 00:00:00 2001 From: Joyce Fee Date: Thu, 14 May 2026 11:54:48 -0400 Subject: [PATCH 3/4] Fix latest-release-commit SHA for v26.1.7 The previous value (35a825c9) was v26.1.1's commit SHA and had gone stale across v26.1.2/v26.1.4/v26.1.6 auto-doc PRs. Update to ebee215f, the commit SHA that the v26.1.7 tag points to. Co-Authored-By: Claude Opus 4.7 (1M context) --- antora.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/antora.yml b/antora.yml index 0092837d68..b7729b1dbf 100644 --- a/antora.yml +++ b/antora.yml @@ -20,7 +20,7 @@ asciidoc: full-version: 26.1.7 latest-redpanda-tag: 'v26.1.7' latest-console-tag: 'v3.3.1' - latest-release-commit: '35a825c9c1880ebeedf4c18bb8c6cceaa63566c1' + latest-release-commit: 'ebee215fdb2b8004735c6f800e532564cdcc05e1' latest-operator-version: 'v2.3.8-24.3.6' operator-beta-tag: '' helm-beta-tag: '' From 60aa23a56f2bdc43868625f2bdf0bb5fe726d0cf Mon Sep 17 00:00:00 2001 From: Joyce Fee <102751339+Feediver1@users.noreply.github.com> Date: Thu, 14 May 2026 10:55:43 -0500 Subject: [PATCH 4/4] Apply suggestions from code review Co-authored-by: Joyce Fee <102751339+Feediver1@users.noreply.github.com> --- modules/reference/attachments/redpanda-properties-v26.1.7.json | 2 +- modules/reference/partials/properties/cluster-properties.adoc | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/modules/reference/attachments/redpanda-properties-v26.1.7.json b/modules/reference/attachments/redpanda-properties-v26.1.7.json index 09a6100063..b82d245153 100644 --- a/modules/reference/attachments/redpanda-properties-v26.1.7.json +++ b/modules/reference/attachments/redpanda-properties-v26.1.7.json @@ -10112,7 +10112,7 @@ "config_scope": "cluster", "default": null, "defined_in": "src/v/config/configuration.cc", - "description": "URL of the HTTP forward proxy used for OIDC discovery and JWKS fetches. Accepts http://host:port or https://host:port. When set, oidc_discovery_url must use https:// \u2014 plaintext OIDC origins cannot be routed through a forward proxy.", + "description": "URL of the HTTP forward proxy used for OIDC discovery and JWKS fetches. Accepts `http://host:port` or `https://host:port`. When set, `oidc_discovery_url` must use `https:// \u2014`. Plain text OIDC origins cannot be routed through a forward proxy.", "is_deprecated": false, "is_enterprise": false, "name": "oidc_http_proxy_url", diff --git a/modules/reference/partials/properties/cluster-properties.adoc b/modules/reference/partials/properties/cluster-properties.adoc index acd8f09cf5..0785166457 100644 --- a/modules/reference/partials/properties/cluster-properties.adoc +++ b/modules/reference/partials/properties/cluster-properties.adoc @@ -14085,7 +14085,7 @@ endif::[] === oidc_http_proxy_url -URL of the HTTP forward proxy used for OIDC discovery and JWKS fetches. Accepts http://host:port or https://host:port. When set, oidc_discovery_url must use https:// — plaintext OIDC origins cannot be routed through a forward proxy. +URL of the HTTP forward proxy used for OIDC discovery and JWKS fetches. Accepts `http://host:port` or `https://host:port`. When set, `oidc_discovery_url` must use `https://`. Plain text OIDC origins cannot be routed through a forward proxy. [cols="1s,2a"] |===