Strimzi 1.0.1 focuses on hardening the platform by finalizing the transition to v1 CRDs and addressing critical security vulnerabilities. It also introduces a more restrictive default security posture for the Entity Operator.

Complete removal of legacy v1alpha1, v1beta1, and v1beta2 CRD APIs — You must convert all your Custom Resources to v1 and upgrade your CRDs to this version before updating the operator. Failure to do so will cause the operator to stop managing your Kafka clusters.

Entity Operator cross-namespace watching disabled by default — If you manage Kafka users or topics in a different namespace than the Kafka cluster itself, the Entity Operator will stop tracking them unless you manually enable this toggle in the Cluster Operator configuration.

Critical security patches for operator vulnerabilities — Fixes two critical vulnerabilities (CVE-2026-55225 and CVE-2026-55225) to protect your Kafka infrastructure from potential exploits.