feat: Add graceful shutdown (#110)

* feat: Add graceful shutdown

* chore: Update CRD documentation

* chore: Bump bytes crate to 1.11.1

Fixes RUSTSEC-2026-0007.

* chore: Add changelog entry

Author: Techassi

CHANGELOG.md

@@ -29,6 +29,7 @@ All notable changes to this project will be documented in this file.
 
 ### Changed
 
+- Gracefully shutdown all concurrent tasks by forwarding the SIGTERM signal ([#110]).
 - Bump testing-tools to `0.3.0-stackable0.0.0-dev` ([#91]).
 
 ### Fixed
@@ -45,6 +46,7 @@ All notable changes to this project will be documented in this file.
 [#100]: https://github.com/stackabletech/opensearch-operator/pull/100
 [#107]: https://github.com/stackabletech/opensearch-operator/pull/107
 [#108]: https://github.com/stackabletech/opensearch-operator/pull/108
+[#110]: https://github.com/stackabletech/opensearch-operator/pull/110
 
 ## [25.11.0] - 2025-11-07
 

Cargo.lock

@@ -10,7 +10,7 @@ edition = "2024"
 repository = "https://github.com/stackabletech/opensearch-operator"
 
 [workspace.dependencies]
-stackable-operator = { git = "https://github.com/stackabletech/operator-rs.git", tag = "stackable-operator-0.102.0", features = ["telemetry", "versioned"] }
+stackable-operator = { git = "https://github.com/stackabletech/operator-rs.git", tag = "stackable-operator-0.105.0", features = ["telemetry", "versioned"] }
 
 built = { version = "0.8.0", features = ["chrono", "git2"] }
 clap = "4.5"

Cargo.nix

@@ -512,7 +512,7 @@ spec:
                       default: {}
                       description: |-
                         In the `podOverrides` property you can define a
-                        [PodTemplateSpec](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.27/#podtemplatespec-v1-core)
+                        [PodTemplateSpec](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.34/#podtemplatespec-v1-core)
                         to override any property that can be set on a Kubernetes Pod.
                         Read the
                         [Pod overrides documentation](https://docs.stackable.tech/home/nightly/concepts/overrides#pod-overrides)
@@ -878,7 +878,7 @@ spec:
                             default: {}
                             description: |-
                               In the `podOverrides` property you can define a
-                              [PodTemplateSpec](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.27/#podtemplatespec-v1-core)
+                              [PodTemplateSpec](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.34/#podtemplatespec-v1-core)
                               to override any property that can be set on a Kubernetes Pod.
                               Read the
                               [Pod overrides documentation](https://docs.stackable.tech/home/nightly/concepts/overrides#pod-overrides)

Cargo.toml

@@ -27,6 +27,7 @@ use stackable_operator::{
     logging::controller::report_controller_reconciled,
     shared::yaml::SerializeOptions,
     telemetry::Tracing,
+    utils::signal::SignalWatcher,
 };
 use strum::{EnumDiscriminants, IntoStaticStr};
 
@@ -68,6 +69,11 @@ pub enum Error {
     CreateClient {
         source: stackable_operator::client::Error,
     },
+
+    #[snafu(display("failed to create SIGTERM signal watcher"))]
+    CreateSignalWatcher {
+        source: stackable_operator::utils::signal::SignalError,
+    },
 }
 
 #[derive(clap::Parser)]
@@ -109,10 +115,14 @@ async fn main() -> Result<()> {
                 description = built_info::PKG_DESCRIPTION
             );
 
+            // Watches for the SIGTERM signal and sends a signal to all receivers, which gracefully
+            // shuts down all concurrent tasks below (EoS checker, controller).
+            let sigterm_watcher = SignalWatcher::sigterm().context(CreateSignalWatcherSnafu)?;
+
             let eos_checker =
                 EndOfSupportChecker::new(built_info::BUILT_TIME_UTC, maintenance.end_of_support)
                     .context(InitEndOfSupportCheckerSnafu)?
-                    .run()
+                    .run(sigterm_watcher.handle())
                     .map(Ok);
 
             let operator_name = OperatorName::from_str("opensearch.stackable.tech")
@@ -168,7 +178,7 @@ async fn main() -> Result<()> {
                 watch_namespace.get_api::<DeserializeGuard<StatefulSet>>(&client),
                 watcher::Config::default(),
             )
-            .shutdown_on_signal()
+            .graceful_shutdown_on(sigterm_watcher.handle())
             .run(
                 controller::reconcile,
                 controller::error_policy,