The module lifecycle stagePreview

The module has requirements for installation

Release notes

v0.0.2

Date 2026-08-25
Module managed-starrocks
Version 0.0.2

Summary

Module releases now publish a bilingual changelog and portal release notes. Deckhouse user-authz adds User and Editor roles for Starrocks and StarrocksClass.

Highlights

  • Structured changelog and bilingual release notes ship with the module
  • User can read Starrocks; Editor can manage Starrocks and StarrocksClass
  • Security updates in cel-go, x/net, x/text, grpc, and x/sys

New features

  • Module releases now publish a structured changelog and portal bilingual release notes
  • Deckhouse user-authz roles can read Starrocks (User) and manage Starrocks and StarrocksClass (Editor)

Security updates

  • Fixed GHSA-gcjh-h69q-9w9g (cel-go); CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-46600, CVE-2026-25680, CVE-2026-42502, CVE-2026-42506 (x/net); CVE-2026-56852 (x/text); GHSA-hrxh-6v49-42gf (grpc); CVE-2026-39824 (x/sys, dlv)

v0.0.1

Date 2026-07-31
Module managed-starrocks
Version 0.0.1

Summary

First release of the Managed StarRocks module. This version provides the basics for deploying and managing StarRocks instances — an OLAP DBMS for real-time analytics — in a DKP cluster.

Highlights

  • Standalone StarRocks instances via the Starrocks resource
  • StarrocksClass templates for sizing, configuration, and placement
  • Admission webhooks and custom CEL validation rules
  • TLS for the FE HTTP proxy and live FE/BE configuration updates
  • Distroless operator and agent images

New features

  • Deploy standalone StarRocks instances with the Starrocks resource
  • Administrators define sizing, default FE/BE settings, and placement in StarrocksClass
  • Create and update operations are validated by admission webhooks
  • Custom CEL rules can be set on StarrocksClass
  • Overridable FE/BE settings apply without a pod restart
  • The agent sidecar applies configuration and reports certificate status
  • TLS for the FE HTTP proxy (CertManager or a custom certificate)
  • Root credentials are created automatically
  • Status conditions and pod placement (nodeSelector, nodeAffinity, tolerations)
  • Distroless operator and agent images