3.1.0

3.1.0

• This is the 3.1.0 release. The Splunk Operator for Kubernetes is a supported platform for deploying Splunk Enterprise with the prerequisites and constraints laid out here
• See the ChangeLog for a full list of updates.

Splunk Operator 3.1.0 supports Kubernetes 1.25 through 1.34. However, Kubernetes 1.34 has additional Splunk Enterprise version requirements due to changed IRSA token format and older Splunkd versions are not compatible with. If you deploy on Kubernetes 1.34, use only the Splunk Enterprise versions listed for Kubernetes 1.34 below. Other supported Splunk Enterprise versions can still be used with Kubernetes 1.25 through 1.33.

Supported Kubernetes and Splunk versions

Kubernetes Version	Supported Splunk Enterprise Version	Notes
1.34	9.4.9+, 10.0.4+, 10.4+	Required for Kubernetes 1.34 deployments
1.25-1.33	10.2.0+, 10.4+	Required if indexing and ingestion separation is needed
1.25-1.33	9.4.3 - 10.0.4	Tested compatible without indexing and ingestion separation

3.0.0

Breaking change in 3.0.0

Splunk Operator 3.0.0 introduces a breaking change. Customers must accept the Splunk General Terms (EULA) before deploying or upgrading the Splunk Operator by updating the operator deployment. For detailed steps, read the installation guide: https://github.com/splunk/splunk-operator/blob/main/docs/Install.md#install-operator-to-accept-the-splunk-general-terms

• This is the 3.0.0 release. The Splunk Operator for Kubernetes is a supported platform for deploying Splunk Enterprise with the prerequisites and constraints laid out here.

• CSPL-3784: Update base image to latest ubi8-minimal version

• CSPL-3675: Update Operator SDK to v1.39

• CSPL-3783: Update App Framework docs with troubleshooting information

• CSPL-3851: Add documentation about session stickiness for ingress

• CSPL-3912: Allow custom probe scripts

• CSPL-3867: Improve SHC and CM error message visibility

• CSPL-3186: Upgrade Enterprise Security to version 8.0.2

• CSPL-3357: Add Splunk General Terms acceptance

• CSPL-4005: Remove CRDs from splunk/splunk-operator Helm chart

Splunk Operator 3.0.0 supports Kubernetes 1.25 through 1.34. However, Kubernetes 1.34 has additional Splunk Enterprise version requirements due to changed IRSA token format and older Splunkd versions are not compatible with. If you deploy on Kubernetes 1.34, use only the Splunk Enterprise versions listed for Kubernetes 1.34 below. Other supported Splunk Enterprise versions can still be used with Kubernetes 1.25 through 1.33.

Supported Kubernetes and Splunk versions

Kubernetes Version	Supported Splunk Enterprise Version	Notes
1.34	9.4.9+, 10.0.4+	Required for Kubernetes 1.34 deployments
1.25-1.33	9.3.7 - 10.2.0

2.8.1

• This is the 2.8.1 release. The Splunk Operator for Kubernetes is a supported platform for deploying Splunk Enterprise with the prerequisites and constraints laid out here

• Update olm.maxOpenShiftVersion version to 4.19 in operator's bundle

Supported Splunk Version

Splunk Version
9.4.3
9.4.2
9.3.5
9.2.7

Supported Kubernetes Version

Kubernetes Version
1.27+

2.8.0

• This is the 2.8.0 release. The Splunk Operator for Kubernetes is a supported platform for deploying Splunk Enterprise with the prerequisites and constraints laid out here

• CSPL-3586 - Certify FIPS 140-3 Compliance

• CSPL-3673 - Github Issue #1157: Failed to install the operator - CRD metadata.annotations too long

• CSPL-3590 - Vulnerability Fix: github.com/golang-jwt/jwt/v5, golang.org/x/net

• CSPL-3499 - Fix Segmentation Fault in Splunk Operator Due to App Volume Name Change

• CSPL-3547 - Support Appframework migration to manager-app

• CSPL-3426 - App Framework: Allow .tar.gz file extension

• CSPL-3518 - Task for Github Issue #1211 Splunk Operator: Why force ClusterIP and ignore k8s default field in service template

• CSPL-3460 - Container Scan: Upgrade google.golang.org/grpc from v1.49.0 to 1.58.3, 1.57.1, 1.56.3 for splunk/splunk-operator

• CSPL-3435 - Support with Bias language migration

• CSPL-3434 - Update base image to ubi-minimal

• CSPL-3269 - Github Issue #1309: App Framework: 2.5.2 can't install packages from splunkbase, placed in s3 bucket

Supported Splunk Version

Splunk Version
9.4.2
9.4.1
9.4.0
9.3.4
9.3.3

Supported Kubernetes Version

Kubernetes Version
1.27+

2.7.1

• This is the 2.7.1 release. The Splunk Operator for Kubernetes is a supported platform for deploying Splunk Enterprise with the prerequisites and constraints laid out here

• CSPL-3064 - Support for Distroless Image Creation in Splunk Operator for Kubernetes

• CSPL-2966 - Manual App Updates per Custom Resource (CR) in Splunk Operator

• CSPL-3156 - Add kubectl-splunk Plugin for Executing Splunk Commands within Kubernetes Pods

• CSPL-3256 - Support to configure deployer spec in SHC CRD

• CSPL-3253 - Change default storageClassName value in PVC

• CSPL-2920 - Add support for ARM64 pipelines

Supported Splunk Version

Splunk Version
9.4.1
9.4.0
9.3
9.2

Supported Kubernetes Version

Kubernetes Version
1.27+

2.7.0

• This is the 2.7.0 release. The Splunk Operator for Kubernetes is a supported platform for deploying Splunk Enterprise with the prerequisites and constraints laid out here

• CPSL-2699 - Add Azure and GCP SDK support for AppFramework

• CSPL-3149 - Address openshift documentation for 4.14 or later

• CSPL-3060 - Avoid upgrade path during deployment creation

• CSPL-3058 - Build docker image using SHA instead of tag for redhat UBI

• CSPL-3063 - Add an option to test SVA testing only via helm

• CSPL-2496 - Cleanup AWS resources during cluster cleanup

• CSPL-2887 - Update eksctl, K8s versions, default storage class

• CSPL-2756 - Add documentation for PDB with SOK deployments

• CSPL-2820 - Add Support for Configuring Custom Cluster Domain in Helm Chart

Supported Splunk Version

Splunk Version
9.4.0
9.3.2
9.2.4
9.1.7

Supported Kubernetes Version

Kubernetes Version
1.27+

2.6.1

• This is the 2.6.1 release. The Splunk Operator for Kubernetes is a supported platform for deploying Splunk Enterprise with the prerequisites and constraints laid out here

• CSPL-2655 - Add default.meta in the telemetry addressing vulnerability

• CSPL-2652 - Add TLS config to minio client

• CSPL-2721 - Update MC upgrade path

• CSPL-2747 - Upgrade go(to 1.23.0), go-restful versions to address vulnerabilities

Supported Splunk Version

Splunk Version
9.3.0
9.3.2
9.2.4
9.3

Supported Kubernetes Version

Kubernetes Version
1.27+

2.6.0

• This is the 2.6.0 release. The Splunk Operator for Kubernetes is a supported platform for deploying Splunk Enterprise with the prerequisites and constraints laid out here

• CSPL-2721 - Modified Splunk Enterprise deployments upgrade path to speed up the process, updated ubi base image.

• CSPL-2662 - Added troubleshooting documentation.

• CSPL-2626 - Fixed bug in phase initialization, new CR status field, updated aws-sdk-go.

• CSPL-2710: Replace clair with trivy for security scanning.

• CSPL_2598: Fix app package name extraction logic.

• CSPL_2574: Fix bug in appFramework validation.

• CSPL_2532: Change fsGroupChangePolicy to OnRootMismatch for Splunk Enterprise and Splunk operator.

Supported Splunk Version

Splunk Version
9.2.2

Supported Kubernetes Version

Kubernetes Version
1.27+

2.5.2

CSPL-2535 security context for init container not set (#1290)

Supported Splunk Version

Splunk Version
9.1.3
9.0.8

Supported Kubernetes Version

Kubernetes Version
1.26+

2.5.1

This is the 2.5.1 release. The Splunk Operator for Kubernetes is a supported platform for deploying Splunk Enterprise with the prerequisites and constraints laid out here

CSPL-2532: fix for leader election lost issue (#1281)

Supported Splunk Version

Splunk Version
9.1.3
9.0.8

Supported Kubernetes Version

Kubernetes Version
1.26+