Merge branch 'main' into chore/bump-hive-version-for-26.3

Author: xeniape

CHANGELOG.md

@@ -9,6 +9,7 @@ All notable changes to this project will be documented in this file.
 - Add OPA authorization using the operator-rs `OpaConfig` ([#652]).
 - Support objectOverrides using `.spec.objectOverrides`.
   See [objectOverrides concepts page](https://docs.stackable.tech/home/nightly/concepts/overrides/#object-overrides) for details ([#665]).
+- Enable the [restart-controller](https://docs.stackable.tech/home/nightly/commons-operator/restarter/), so that the Pods are automatically restarted on config changes ([#666]).
 - Add support for `4.2.0` ([#668]).
 
 ### Changed
@@ -19,6 +20,7 @@ All notable changes to this project will be documented in this file.
 [#652]: https://github.com/stackabletech/hive-operator/pull/652
 [#664]: https://github.com/stackabletech/hive-operator/pull/664
 [#665]: https://github.com/stackabletech/hive-operator/pull/665
+[#666]: https://github.com/stackabletech/hive-operator/pull/666
 [#668]: https://github.com/stackabletech/hive-operator/pull/668
 
 ## [25.11.0] - 2025-11-07

Cargo.lock

@@ -11,7 +11,7 @@ repository = "https://github.com/stackabletech/hive-operator"
 
 [workspace.dependencies]
 product-config = { git = "https://github.com/stackabletech/product-config.git", tag = "0.8.0" }
-stackable-operator = { git = "https://github.com/stackabletech/operator-rs.git", tag = "stackable-operator-0.101.2", features = ["telemetry", "versioned"] }
+stackable-operator = { git = "https://github.com/stackabletech/operator-rs.git", tag = "stackable-operator-0.102.0", features = ["telemetry", "versioned"] }
 
 anyhow = "1.0"
 built = { version = "0.8", features = ["chrono", "git2"] }

Cargo.nix

@@ -61,7 +61,7 @@ metadata:
   name: opa
 spec:
   image:
-    productVersion: 1.8.0
+    productVersion: 1.12.2
   servers:
     config:
       logging:

Cargo.toml

@@ -37,6 +37,7 @@ use stackable_operator::{
         product_image_selection::{self, ResolvedProductImage},
         rbac::build_rbac_resources,
     },
+    constants::RESTART_CONTROLLER_ENABLED_LABEL,
     crd::{listener::v1alpha1::Listener, s3},
     k8s_openapi::{
         DeepMerge,
@@ -502,6 +503,9 @@ pub async fn reconcile_hive(
                 rolegroup: rolegroup.clone(),
             })?;
 
+        // Note: The StatefulSet needs to be applied after all ConfigMaps and Secrets it mounts
+        // to prevent unnecessary Pod restarts.
+        // See https://github.com/stackabletech/commons-operator/issues/111 for details.
         ss_cond_builder.add(
             cluster_resources
                 .add(client, rg_statefulset)
@@ -1099,6 +1103,7 @@ fn build_metastore_rolegroup_statefulset(
             .context(ObjectMissingMetadataForOwnerRefSnafu)?
             .with_recommended_labels(recommended_object_labels)
             .context(MetadataBuildSnafu)?
+            .with_label(RESTART_CONTROLLER_ENABLED_LABEL.to_owned())
             .build(),
         spec: Some(StatefulSetSpec {
             pod_management_policy: Some("Parallel".to_string()),

crate-hashes.json

@@ -5,7 +5,7 @@ commands:
   - script: >-
       helm install hive-vector-aggregator vector
       --namespace "$NAMESPACE"
-      --version 0.45.0
+      --version 0.49.0
       --repo https://helm.vector.dev
       --values hive-vector-aggregator-values.yaml
 ---

examples/hive-opa-cluster.yaml

@@ -7,6 +7,7 @@ apiVersion: apps/v1
 kind: StatefulSet
 metadata:
   name: hive-metastore-default
+  generation: 1 # There should be no unneeded Pod restarts
 spec:
   template:
     spec:

rust/operator-binary/src/controller.rs

@@ -44,7 +44,7 @@ dimensions:
       - 3.9.4
   - name: opa-latest
     values:
-      - 1.8.0
+      - 1.12.2
   - name: krb5
     values:
       - 1.21.1