feat(helm)!: Update chart mariadb-operator to 25.10.3 #363

25.08.4 is a patch release limited in scope and focusing on
bug fixes and optimizations, mostly related to VolumeSnapshots. Additionally, we have introduced support for managing resources in external MariaDBs, via the new ExternalMariaDB resource.

`VolumeSnapshots` locking optimization

When performing a VolumeSnapshot, the operator now locks until the snapshot is created by the storage system, rather than waiting for the data to be fully replicated. See #1420.

`ExternalMariaDB` support

This release introduces support for managing resources in external MariaDB instances through the new ExternalMariaDB CR. This feature allows to manage users, privileges, databases, run SQL jobs declaratively and taking backups using the same CRs that you use to manage internal MariaDB instances.

For doing so, the first step is defining an ExternalMariaDB, which contains the connection details to the external database:

apiVersion: k8s.mariadb.com/v1alpha1
kind: ExternalMariaDB
metadata:
  name: external-mariadb
spec:
  host: mariadb.example.com
  port: 3306
  username: root
  passwordSecretKeyRef:
    name: mariadb
    key: password
  tls:
    enabled: true
    clientCertSecretRef:
      name: client-cert-secret
    serverCASecretRef:
      name: ca-cert-secret
  connection:
    secretName: external-mariadb
    healthCheck:
      interval: 5s
      retryInterval: 10s

Once defined, you can reference the ExternalMariaDB in other resources, such as User, Database, Grant, SqlJob and Backup just like you would do with an internal MariaDB resource:

apiVersion: k8s.mariadb.com/v1alpha1
kind: User
metadata:
  name: user-external
spec:
  name: user
  mariaDbRef:
    name: external-mariadb
    kind: ExternalMariaDB
  passwordSecretKeyRef:
    name: mariadb
    key: password
  maxUserConnections: 20
  host: "%"
  cleanupPolicy: Delete
  requeueInterval: 10h
  retryInterval: 30s

Kudos to @wfelipew for contributing this feature! 🎖️

For more details, please refer to the ExternalMariaDB documentation.

Bump dependencies

This version includes updates to our dependencies, specifically Go 1.25 and Kubernetes 1.34. Thanks to @Michaelpalacce for helping with this update!

We value your feedback! If you encounter any issues or have suggestions, please open an issue on GitHub. Your input is crucial to improve mariadb-operator🦭.

Join us on Slack: MariaDB Community Slack.

What's Changed

Restore volume to be mutable by @mmontes11 in #1384
Add lvm-localpv error explanation to PhysicalBackup docs by @hedgieinsocks in #1401
Set storage mount subPath in PhysicalBackup by @mmontes11 in #1400
Bump actions/setup-python from 5 to 6 by @dependabot[bot] in #1405
Bump actions/stale from 9 to 10 by @dependabot[bot] in #1404
Bump actions/checkout from 4 to 5 by @dependabot[bot] in #1379
Bump github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.84.0 to 0.85.0 by @dependabot[bot] in #1390
Bump ghcr.io/devcontainers/features/docker-in-docker from 2.12.2 to 2.12.3 by @dependabot[bot] in #1395
Bump github.com/stretchr/testify from 1.10.0 to 1.11.1 by @dependabot[bot] in #1396
Bump actions/setup-go from 5 to 6 by @dependabot[bot] in #1403
Bump crate-ci/typos from 1.34.0 to 1.36.2 by @dependabot[bot] in #1402
Fix Grant finalizer when User has a custom name by @hedgieinsocks in #1373
Add appProtocol to mariadb service ports by @tmvfb in #1375
chore: Bump to Go 1.25 by @Michaelpalacce in #1416
Chore/kubernetes 1.34 support by @Michaelpalacce in #1418
fix: Install golangci-lint as recommended. by @Michaelpalacce in #1419
fix: Increased the max-recursion depth to 13 by @Michaelpalacce in #1421
Fix Grant finalizing logic to allow Grants that point to Users with custom name by @mmontes11 in #1422
Optimize locking for VolumeSnapshots by @mmontes11 in #1420
Release 25.8.4 by @mmontes11 in #1417
Fix panic in GetAutomaticFailoverDelay by @mmontes11 in #1424

New Contributors

@tmvfb made their first contribution in #1375
@Michaelpalacce made their first contribution in #1416

Full Changelog: mariadb-operator/mariadb-operator@25.8.3...25.8.4

`v25.8.3`

Compare Source

mariadb-operator 25.08.3 is here! 🦭

This patch release fixes regressions introduced in the previous release:

We value your feedback! If you encounter any issues or have suggestions, please open an issue on GitHub. Your input is crucial to improve mariadb-operator🦭.

Join us on Slack: MariaDB Community Slack.

What's Changed

Lower grant reconcile time by @hedgieinsocks in #1360
Fix PhysicalBackups based on VolumeSnapshots to be synchronous and consistent by @mmontes11 in #1363
Release 25.8.3 by @mmontes11 in #1365

Full Changelog: mariadb-operator/mariadb-operator@25.8.2...25.8.3

`v25.8.2`

Compare Source

mariadb-operator 25.08.2 is here! 🦭

This patch release fixes regressions introduced in the previous release:

We value your feedback! If you encounter any issues or have suggestions, please open an issue on GitHub. Your input is crucial to improve mariadb-operator🦭.

Join us on Slack: MariaDB Community Slack.

What's Changed

Fix v25 package transition by @hedgieinsocks in #1355
Bump github.com/go-sql-driver/mysql from 1.9.2 to 1.9.3 by @dependabot[bot] in #1353
Bump github.com/minio/minio-go/v7 from 7.0.94 to 7.0.95 by @dependabot[bot] in #1352
Fix Galera failover by @mmontes11 in #1358
Bump github.com/onsi/gomega from 1.37.0 to 1.38.0 by @dependabot[bot] in #1351
Release 25.8.2 by @mmontes11 in #1359

Full Changelog: mariadb-operator/mariadb-operator@25.8.1...25.8.2

`v25.8.1`

Compare Source

mariadb-operator 25.08.1 is here! 🦭

We're thrilled to announce this new release fully loaded with exciting new features and bug fixes. This version is a significant step forward, enhancing the disaster recovery capabilities of the operator.

If you're upgrading from previous versions, don't miss the UPGRADE GUIDE for a smooth transition.

[!IMPORTANT]
This is a patch version that fixes #1350.

`PhysicalBackups` based on `mariadb-backup`

This release introduces the new PhysicalBackup CR for managing backups at the physical level. This MariaDB-native backup strategy relies on the mariadb-backup CLI, available in the official MariaDB container images. It enables a more efficient and faster backup process, especially for larger databases, compared to logical backups.

In order to use this, you can define a PhysicalBackup in your cluster:

apiVersion: k8s.mariadb.com/v1alpha1
kind: PhysicalBackup
metadata:
  name: physicalbackup
spec:
  mariaDbRef:
    name: mariadb
  schedule:
    cron: "0 0 * * *"
    suspend: false
    immediate: true
  compression: bzip2
  maxRetention: 720h
  storage:
    s3:
      bucket: physicalbackups
      prefix: mariadb
      endpoint: minio.minio.svc.cluster.local:9000
      region:  us-east-1
      accessKeyIdSecretKeyRef:
        name: minio
        key: access-key-id
      secretAccessKeySecretKeyRef:
        name: minio
        key: secret-access-key
      tls:
        enabled: true
        caSecretKeyRef:
          name: minio-ca
          key: ca.crt

This CR allows you to schedule physical backups, manage its retention policy, compression and the storage backend to use. In order to restore a backup, you can spin up a new MariaDB cluster and reference the PhysicalBackup in the spec.bootstrapFrom field:

apiVersion: k8s.mariadb.com/v1alpha1
kind: MariaDB
metadata:
  name: mariadb-galera
spec:
  bootstrapFrom:
    backupRef:
      name: physicalbackup
      kind: PhysicalBackup
    targetRecoveryTime: 2025-06-17T08:07:00Z

This will fetch, uncompress and prepare the backup on each nodes of the cluster, in a more efficient and faster way than logical backups. For more details, check the physical backups documentation.

Kudos to @harunkucuk5 for raising the initial PR!

`PhysicalBackups` based on `VolumeSnapshots`

As an alternative to mariadb-backup, you can also use VolumeSnapshots to create physical backups. This Kubernetes-native backup strategy relies on the CSI driver capabilities to create snapshots of the underlying data volumes at the storage level.

To use this method, you can define a PhysicalBackup in your cluster as follows:

apiVersion: k8s.mariadb.com/v1alpha1
kind: PhysicalBackup
metadata:
  name: physicalbackup
spec:
  mariaDbRef:
    name: mariadb
  schedule:
    cron: "0 0 * * *"
    suspend: false
    immediate: true
  maxRetention: 720h
  storage:
    volumeSnapshot:
      volumeSnapshotClassName: csi-hostpath-snapclass

This will create a VolumeSnapshot of the data volume used by the MariaDB cluster. The VolumeSnapshot will be stored in the same namespace as the PhysicalBackup CR, and you can restore it by either referencing the parent PhysicalBackup in the spec.bootstrapFrom field of a new MariaDB cluster, or the VolumeSnapshot resource directly:

apiVersion: k8s.mariadb.com/v1alpha1
kind: MariaDB
metadata:
  name: mariadb-from-volumesnapshot
spec:
  storage:
    size: 10Gi
    storageClassName: csi-hostpath-sc
  bootstrapFrom:
    volumeSnapshotRef:
      name: physicalbackup-20250610165200

For more details, check the physical backups documentation.

MariaDB 11.8 and `VECTOR` support

MariaDB 11.8 is now supported and used as default version by this operator.

This version introduces the VECTOR data type, which allows you to store and operate with high-dimensional vectors natively in the database. This is particularly useful for AI applications, as they require to operate with vector embeddings.

If you are using LangChain for building RAG applications, you may now leverage our new MariaDB integration to use MariaDB as vector store in LangChain.

MariaDB cluster helm chart

We are introducing mariadb-cluster, a new helm chart that simplifies the deployment of a MariaDB cluster and its associated CRs managed by the operator. It allows you to manage all CRs in a single helm release, handling their relationships automatically so you don't need to configure the references manually.

Refer to the helm documentation for further details.

Kudos to @hedgieinsocks for this initiative!

Replication improvements

We have made some progress towards making our replication feature GA. Refer to the PRs below for more details:

[BREAKING CHANGE] Convert SyncBinlog to integer (#1324)
Add optional delay for automatic failover (#1287)
Do not trigger automatic failover when suspended (#1285)
Fix replication probe (#1253)
Add verbosity to skipped switchover steps (#1288)

Kudos to @hedgieinsocks for all these contributions!

Fixes and enhancements

We have fixed a number of bugs and made several enhancements in this release. Refer to the changelog for further detail.

New versioning scheme

We are adopting a new calendar-based versioning scheme, where the version number is based on the year and month of the release, followed by a patch number, similarly to the Ubuntu versioning scheme.

We value your feedback! If you encounter any issues or have suggestions, please open an issue on GitHub. Your input is crucial to improve mariadb-operator🦭.

Join us on Slack: MariaDB Community Slack.

What's Changed

Release 25.08.1 by @mmontes11 in #1348

Full Changelog: mariadb-operator/mariadb-operator@25.08.0...25.8.1

`v0.38.1`

Compare Source

Run and operate MariaDB in a cloud native way

`v0.38.0`

Compare Source

Run and operate MariaDB in a cloud native way

`v0.37.1`

Compare Source

Run and operate MariaDB in a cloud native way

`v0.37.0`

Compare Source

Run and operate MariaDB in a cloud native way

`v0.36.0`

Compare Source

Run and operate MariaDB in a cloud native way

`v0.35.1`

Compare Source

Run and operate MariaDB in a cloud native way

`v0.35.0`

Compare Source

Run and operate MariaDB in a cloud native way

`v0.34.0`

Compare Source

Run and operate MariaDB in a cloud native way

`v0.33.0`

Compare Source

Run and operate MariaDB in a cloud native way

`v0.32.0`

Run and operate MariaDB in a cloud native way

Configuration

📅 Schedule: Branch creation - "on saturday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2025-08-09T00:51:10Z

--- kubernetes/apps/database/mariadb/operator Kustomization: flux-system/cluster-apps-mariadb-operator HelmRelease: database/mariadb-operator

+++ kubernetes/apps/database/mariadb/operator Kustomization: flux-system/cluster-apps-mariadb-operator HelmRelease: database/mariadb-operator

@@ -12,13 +12,13 @@

     spec:
       chart: mariadb-operator
       sourceRef:
         kind: HelmRepository
         name: mariadb-operator
         namespace: flux-system
-      version: 0.24.0
+      version: 25.8.4
   install:
     remediation:
       retries: 3
   interval: 30m
   maxHistory: 2
   uninstall:

github-actions · 2025-08-09T00:51:15Z

--- HelmRelease: database/mariadb-operator ConfigMap: database/mariadb-operator-images

+++ HelmRelease: database/mariadb-operator ConfigMap: database/mariadb-operator-images

@@ -1,11 +0,0 @@

----
-apiVersion: v1
-data:
-  MARIADB_OPERATOR_IMAGE: ghcr.io/mariadb-operator/mariadb-operator:v0.0.24
-  RELATED_IMAGE_EXPORTER: prom/mysqld-exporter:v0.15.1
-  RELATED_IMAGE_MARIADB: mariadb:11.2.2
-kind: ConfigMap
-metadata:
-  creationTimestamp: null
-  name: mariadb-operator-images
-
--- HelmRelease: database/mariadb-operator ClusterRole: database/mariadb-operator-cert-controller

+++ HelmRelease: database/mariadb-operator ClusterRole: database/mariadb-operator-cert-controller

@@ -22,15 +22,15 @@

   verbs:
   - create
   - list
   - patch
   - watch
 - apiGroups:
-  - ''
+  - discovery.k8s.io
   resources:
-  - endpoints
-  - endpoints/restricted
+  - endpointslices
+  - endpointslices/restricted
   verbs:
   - get
   - list
   - watch
 
--- HelmRelease: database/mariadb-operator ClusterRole: database/mariadb-operator

+++ HelmRelease: database/mariadb-operator ClusterRole: database/mariadb-operator

@@ -7,81 +7,56 @@

 - apiGroups:
   - ''
   resources:
   - configmaps
   verbs:
   - create
-  - get
-  - list
-  - patch
-  - watch
-- apiGroups:
-  - ''
-  resources:
-  - endpoints
-  - endpoints/restricted
-  verbs:
-  - create
+  - delete
   - get
   - list
   - patch
   - watch
 - apiGroups:
   - ''
   resources:
   - events
+  - secrets
+  - serviceaccounts
+  - services
   verbs:
   - create
   - list
   - patch
   - watch
 - apiGroups:
   - ''
   resources:
   - persistentvolumeclaims
   verbs:
   - create
+  - delete
+  - deletecollection
   - list
   - patch
   - watch
 - apiGroups:
   - ''
   resources:
   - pods
   verbs:
   - delete
   - get
   - list
   - watch
-- apiGroups:
-  - ''
-  resources:
-  - secrets
-  verbs:
-  - create
-  - list
-  - patch
-  - watch
-- apiGroups:
-  - ''
-  resources:
-  - serviceaccounts
-  verbs:
-  - create
-  - list
-  - patch
-  - watch
-- apiGroups:
-  - ''
-  resources:
-  - services
-  verbs:
-  - create
-  - list
-  - patch
-  - watch
+  - patch
+- apiGroups:
+  - ''
+  resources:
+  - pods/log
+  verbs:
+  - get
 - apiGroups:
   - apps
   resources:
   - deployments
   verbs:
   - create
@@ -91,16 +66,29 @@

 - apiGroups:
   - apps
   resources:
   - statefulsets
   verbs:
   - create
-  - get
-  - list
-  - patch
-  - watch
+  - delete
+  - get
+  - list
+  - patch
+  - watch
+- apiGroups:
+  - authentication.k8s.io
+  resources:
+  - tokenreviews
+  verbs:
+  - create
+- apiGroups:
+  - authorization.k8s.io
+  resources:
+  - subjectaccessreviews
+  verbs:
+  - create
 - apiGroups:
   - batch
   resources:
   - cronjobs
   verbs:
   - create
@@ -110,233 +98,111 @@

 - apiGroups:
   - batch
   resources:
   - jobs
   verbs:
   - create
-  - list
-  - patch
-  - watch
-- apiGroups:
-  - mariadb.mmontes.io
+  - delete
+  - get
+  - list
+  - patch
+  - watch
+- apiGroups:
+  - cert-manager.io
+  resources:
+  - certificates
+  verbs:
+  - create
+  - list
+  - patch
+  - watch
+- apiGroups:
+  - discovery.k8s.io
+  resources:
+  - endpointslices
+  - endpointslices/restricted
+  verbs:
+  - create
+  - get
+  - list
+  - patch
+  - watch
+- apiGroups:
+  - k8s.mariadb.com
   resources:
   - backups
+  - connections
+  - databases
+  - grants
+  - mariadbs
+  - externalmariadbs
+  - maxscales
+  - physicalbackups
+  - restores
+  - sqljobs
+  - users
   verbs:
   - create
   - delete
   - get
   - list
   - patch
   - update
   - watch
 - apiGroups:
-  - mariadb.mmontes.io
+  - k8s.mariadb.com
   resources:
   - backups/finalizers
+  - connections/finalizers
+  - databases/finalizers
+  - grants/finalizers
+  - mariadbs/finalizers
+  - externalmariadbs/finalizers
+  - maxscales/finalizers
+  - physicalbackups/finalizers
+  - restores/finalizers
+  - sqljobs/finalizers
+  - users/finalizers
   verbs:
   - update
 - apiGroups:
-  - mariadb.mmontes.io
+  - k8s.mariadb.com
   resources:
   - backups/status
+  - connections/status
+  - databases/status
+  - grants/status
+  - mariadbs/status
+  - externalmariadbs/status
+  - maxscales/status
+  - physicalbackups/status
+  - restores/status
+  - sqljobs/status
+  - users/status
   verbs:
   - get
   - patch
   - update
 - apiGroups:
-  - mariadb.mmontes.io
-  resources:
-  - connections
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - mariadb.mmontes.io
-  resources:
-  - connections
-  - restores
-  verbs:
-  - create
-  - list
-  - patch
-  - watch
-- apiGroups:
-  - mariadb.mmontes.io
-  resources:
-  - connections/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - mariadb.mmontes.io
-  resources:
-  - connections/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - mariadb.mmontes.io
-  resources:
-  - databases
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - mariadb.mmontes.io
-  resources:
-  - databases/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - mariadb.mmontes.io
-  resources:
-  - databases/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - mariadb.mmontes.io
-  resources:
-  - grants
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - mariadb.mmontes.io
-  resources:
-  - grants/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - mariadb.mmontes.io
-  resources:
-  - grants/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - mariadb.mmontes.io
-  resources:
-  - mariadbs
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - mariadb.mmontes.io
-  resources:
-  - mariadbs/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - mariadb.mmontes.io
-  resources:
-  - mariadbs/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - mariadb.mmontes.io
-  resources:
-  - restores
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - mariadb.mmontes.io
-  resources:
-  - restores/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - mariadb.mmontes.io
-  resources:
-  - restores/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - mariadb.mmontes.io
-  resources:
-  - sqljobs
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - mariadb.mmontes.io
-  resources:
-  - sqljobs/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - mariadb.mmontes.io
-  resources:
-  - sqljobs/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - mariadb.mmontes.io
-  resources:
-  - users
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - mariadb.mmontes.io
-  resources:
-  - users/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - mariadb.mmontes.io
-  resources:
-  - users/status
-  verbs:
-  - get
-  - patch
-  - update
+  - k8s.mariadb.com
+  resources:
+  - maxscale
+  verbs:
+  - create
+  - list
+  - patch
+  - watch
+- apiGroups:
+  - monitoring.coreos.com
+  resources:
+  - servicemonitors
+  verbs:
+  - create
+  - list
+  - patch
+  - watch
 - apiGroups:
   - policy
   resources:
   - poddisruptionbudgets
   verbs:
   - create
@@ -352,15 +218,17 @@

   verbs:
   - create
   - list
   - patch
   - watch
 - apiGroups:
-  - monitoring.coreos.com
-  resources:
-  - servicemonitors
-  verbs:
-  - create
+  - snapshot.storage.k8s.io
+  resources:
+  - volumesnapshots
+  verbs:
+  - create
+  - delete
+  - get
   - list
   - patch
   - watch
 
--- HelmRelease: database/mariadb-operator Deployment: database/mariadb-operator-cert-controller

+++ HelmRelease: database/mariadb-operator Deployment: database/mariadb-operator-cert-controller

@@ -18,24 +18,24 @@

         app.kubernetes.io/name: mariadb-operator-cert-controller
         app.kubernetes.io/instance: mariadb-operator
     spec:
       serviceAccountName: mariadb-operator-cert-controller-cert-controller
       automountServiceAccountToken: true
       containers:
-      - image: ghcr.io/mariadb-operator/mariadb-operator:v0.0.24
+      - image: docker-registry3.mariadb.com/mariadb-operator/mariadb-operator:25.8.4
         imagePullPolicy: IfNotPresent
         name: cert-controller
         args:
         - cert-controller
         - --ca-secret-name=mariadb-operator-webhook-ca
         - --ca-secret-namespace=database
-        - --ca-validity=35064h
+        - --ca-lifetime=26280h
         - --cert-secret-name=mariadb-operator-webhook-cert
         - --cert-secret-namespace=database
-        - --cert-validity=8766h
-        - --lookahead-validity=2160h
+        - --cert-lifetime=2160h
+        - --renew-before-percentage=33
         - --service-name=mariadb-operator-webhook
         - --service-namespace=database
         - --requeue-duration=5m
         - --metrics-addr=:8080
         - --health-addr=:8081
         - --log-level=INFO
--- HelmRelease: database/mariadb-operator Deployment: database/mariadb-operator

+++ HelmRelease: database/mariadb-operator Deployment: database/mariadb-operator

@@ -19,25 +19,25 @@

         app.kubernetes.io/instance: mariadb-operator
     spec:
       serviceAccountName: mariadb-operator
       automountServiceAccountToken: true
       terminationGracePeriodSeconds: 10
       containers:
-      - image: ghcr.io/mariadb-operator/mariadb-operator:v0.0.24
+      - image: docker-registry3.mariadb.com/mariadb-operator/mariadb-operator:25.8.4
         imagePullPolicy: IfNotPresent
         name: controller
         args:
         - --metrics-addr=:8080
         - --log-level=INFO
         ports:
         - containerPort: 8080
           protocol: TCP
           name: metrics
         envFrom:
         - configMapRef:
-            name: mariadb-operator-images
+            name: mariadb-operator-env
         env:
         - name: CLUSTER_NAME
           value: cluster.local
         - name: MARIADB_OPERATOR_NAME
           valueFrom:
             fieldRef:
--- HelmRelease: database/mariadb-operator Deployment: database/mariadb-operator-webhook

+++ HelmRelease: database/mariadb-operator Deployment: database/mariadb-operator-webhook

@@ -19,13 +19,13 @@

         app.kubernetes.io/instance: mariadb-operator
     spec:
       serviceAccountName: mariadb-operator-webhook
       automountServiceAccountToken: true
       hostNetwork: false
       containers:
-      - image: ghcr.io/mariadb-operator/mariadb-operator:v0.0.24
+      - image: docker-registry3.mariadb.com/mariadb-operator/mariadb-operator:25.8.4
         imagePullPolicy: IfNotPresent
         name: webhook
         args:
         - webhook
         - --ca-cert-path=/tmp/k8s-webhook-server/certificate-authority/tls.crt
         - --cert-dir=/tmp/k8s-webhook-server/serving-certs
--- HelmRelease: database/mariadb-operator MutatingWebhookConfiguration: database/mariadb-operator-webhook

+++ HelmRelease: database/mariadb-operator MutatingWebhookConfiguration: database/mariadb-operator-webhook

@@ -5,26 +5,26 @@

   name: mariadb-operator-webhook
   labels:
     app.kubernetes.io/name: mariadb-operator-webhook
     app.kubernetes.io/instance: mariadb-operator
     app.kubernetes.io/managed-by: Helm
   annotations:
-    mariadb.mmontes.io/webhook: ''
+    k8s.mariadb.com/webhook: ''
 webhooks:
 - admissionReviewVersions:
   - v1
   clientConfig:
     service:
       name: mariadb-operator-webhook
       namespace: database
-      path: /mutate-mariadb-mmontes-io-v1alpha1-mariadb
+      path: /mutate-k8s-mariadb-com-v1alpha1-mariadb
   failurePolicy: Fail
-  name: mmariadb.kb.io
+  name: mmariadb-v1alpha1.kb.io
   rules:
   - apiGroups:
-    - mariadb.mmontes.io
+    - k8s.mariadb.com
     apiVersions:
     - v1alpha1
     operations:
     - CREATE
     - UPDATE
     resources:
--- HelmRelease: database/mariadb-operator ValidatingWebhookConfiguration: database/mariadb-operator-webhook

+++ HelmRelease: database/mariadb-operator ValidatingWebhookConfiguration: database/mariadb-operator-webhook

@@ -5,26 +5,26 @@

   name: mariadb-operator-webhook
   labels:
     app.kubernetes.io/name: mariadb-operator-webhook
     app.kubernetes.io/instance: mariadb-operator
     app.kubernetes.io/managed-by: Helm
   annotations:
-    mariadb.mmontes.io/webhook: ''
+    k8s.mariadb.com/webhook: ''
 webhooks:
 - admissionReviewVersions:
   - v1
   clientConfig:
     service:
       name: mariadb-operator-webhook
       namespace: database
-      path: /validate-mariadb-mmontes-io-v1alpha1-backup
-  failurePolicy: Fail
-  name: vbackup.kb.io
-  rules:
-  - apiGroups:
-    - mariadb.mmontes.io
+      path: /validate-k8s-mariadb-com-v1alpha1-backup
+  failurePolicy: Fail
+  name: vbackup-v1alpha1.kb.io
+  rules:
+  - apiGroups:
+    - k8s.mariadb.com
     apiVersions:
     - v1alpha1
     operations:
     - CREATE
     - UPDATE
     resources:
@@ -33,18 +33,38 @@

 - admissionReviewVersions:
   - v1
   clientConfig:
     service:
       name: mariadb-operator-webhook
       namespace: database
-      path: /validate-mariadb-mmontes-io-v1alpha1-connection
-  failurePolicy: Fail
-  name: vconnection.kb.io
-  rules:
-  - apiGroups:
-    - mariadb.mmontes.io
+      path: /validate-k8s-mariadb-com-v1alpha1-physicalbackup
+  failurePolicy: Fail
+  name: vphysicalbackup-v1alpha1.kb.io
+  rules:
+  - apiGroups:
+    - k8s.mariadb.com
+    apiVersions:
+    - v1alpha1
+    operations:
+    - CREATE
+    - UPDATE
+    resources:
+    - physicalbackups
+  sideEffects: None
+- admissionReviewVersions:
+  - v1
+  clientConfig:
+    service:
+      name: mariadb-operator-webhook
+      namespace: database
+      path: /validate-k8s-mariadb-com-v1alpha1-connection
+  failurePolicy: Fail
+  name: vconnection-v1alpha1.kb.io
+  rules:
+  - apiGroups:
+    - k8s.mariadb.com
     apiVersions:
     - v1alpha1
     operations:
     - CREATE
     - UPDATE
     resources:
@@ -53,18 +73,18 @@

 - admissionReviewVersions:
   - v1
   clientConfig:
     service:
       name: mariadb-operator-webhook
       namespace: database
-      path: /validate-mariadb-mmontes-io-v1alpha1-database
-  failurePolicy: Fail
-  name: vdatabase.kb.io
-  rules:
-  - apiGroups:
-    - mariadb.mmontes.io
+      path: /validate-k8s-mariadb-com-v1alpha1-database
+  failurePolicy: Fail
+  name: vdatabase-v1alpha1.kb.io
+  rules:
+  - apiGroups:
+    - k8s.mariadb.com
     apiVersions:
     - v1alpha1
     operations:
     - CREATE
     - UPDATE
     resources:
@@ -73,18 +93,18 @@

 - admissionReviewVersions:
   - v1
   clientConfig:
     service:
       name: mariadb-operator-webhook
       namespace: database
-      path: /validate-mariadb-mmontes-io-v1alpha1-grant
-  failurePolicy: Fail
-  name: vgrant.kb.io
-  rules:
-  - apiGroups:
-    - mariadb.mmontes.io
+      path: /validate-k8s-mariadb-com-v1alpha1-grant
+  failurePolicy: Fail
+  name: vgrant-v1alpha1.kb.io
+  rules:
+  - apiGroups:
+    - k8s.mariadb.com
     apiVersions:
     - v1alpha1
     operations:
     - CREATE
     - UPDATE
     resources:
@@ -93,18 +113,18 @@

 - admissionReviewVersions:
   - v1
   clientConfig:
     service:
       name: mariadb-operator-webhook
       namespace: database
-      path: /validate-mariadb-mmontes-io-v1alpha1-mariadb
-  failurePolicy: Fail
-  name: vmariadb.kb.io
-  rules:
-  - apiGroups:
-    - mariadb.mmontes.io
+      path: /validate-k8s-mariadb-com-v1alpha1-mariadb
+  failurePolicy: Fail
+  name: vmariadb-v1alpha1.kb.io
+  rules:
+  - apiGroups:
+    - k8s.mariadb.com
     apiVersions:
     - v1alpha1
     operations:
     - CREATE
     - UPDATE
     resources:
@@ -113,18 +133,38 @@

 - admissionReviewVersions:
   - v1
   clientConfig:
     service:
       name: mariadb-operator-webhook
       namespace: database
-      path: /validate-mariadb-mmontes-io-v1alpha1-restore
-  failurePolicy: Fail
-  name: vrestore.kb.io
-  rules:
-  - apiGroups:
-    - mariadb.mmontes.io
+      path: /validate-k8s-mariadb-com-v1alpha1-maxscale
+  failurePolicy: Fail
+  name: vmaxscale-v1alpha1.kb.io
+  rules:
+  - apiGroups:
+    - k8s.mariadb.com
+    apiVersions:
+    - v1alpha1
+    operations:
+    - CREATE
+    - UPDATE
+    resources:
+    - maxscales
+  sideEffects: None
+- admissionReviewVersions:
+  - v1
+  clientConfig:
+    service:
+      name: mariadb-operator-webhook
+      namespace: database
+      path: /validate-k8s-mariadb-com-v1alpha1-restore
+  failurePolicy: Fail
+  name: vrestore-v1alpha1.kb.io
+  rules:
+  - apiGroups:
+    - k8s.mariadb.com
     apiVersions:
     - v1alpha1
     operations:
     - CREATE
     - UPDATE
     resources:
@@ -133,18 +173,18 @@

 - admissionReviewVersions:
   - v1
   clientConfig:
     service:
       name: mariadb-operator-webhook
       namespace: database
-      path: /validate-mariadb-mmontes-io-v1alpha1-sqljob
-  failurePolicy: Fail
-  name: vsqljob.kb.io
-  rules:
-  - apiGroups:
-    - mariadb.mmontes.io
+      path: /validate-k8s-mariadb-com-v1alpha1-sqljob
+  failurePolicy: Fail
+  name: vsqljob-v1alpha1.kb.io
+  rules:
+  - apiGroups:
+    - k8s.mariadb.com
     apiVersions:
     - v1alpha1
     operations:
     - CREATE
     - UPDATE
     resources:
@@ -153,18 +193,18 @@

 - admissionReviewVersions:
   - v1
   clientConfig:
     service:
       name: mariadb-operator-webhook
       namespace: database
-      path: /validate-mariadb-mmontes-io-v1alpha1-user
-  failurePolicy: Fail
-  name: vuser.kb.io
-  rules:
-  - apiGroups:
-    - mariadb.mmontes.io
+      path: /validate-k8s-mariadb-com-v1alpha1-user
+  failurePolicy: Fail
+  name: vuser-v1alpha1.kb.io
+  rules:
+  - apiGroups:
+    - k8s.mariadb.com
     apiVersions:
     - v1alpha1
     operations:
     - CREATE
     - UPDATE
     resources:
--- HelmRelease: database/mariadb-operator ConfigMap: database/mariadb-operator-env

+++ HelmRelease: database/mariadb-operator ConfigMap: database/mariadb-operator-env

@@ -0,0 +1,16 @@

+---
+apiVersion: v1
+data:
+  MARIADB_OPERATOR_IMAGE: docker-registry3.mariadb.com/mariadb-operator/mariadb-operator:25.8.4
+  MARIADB_GALERA_LIB_PATH: /usr/lib/galera/libgalera_smm.so
+  MARIADB_DEFAULT_VERSION: '11.8'
+  RELATED_IMAGE_MARIADB: docker-registry1.mariadb.com/library/mariadb:11.8.2
+  RELATED_IMAGE_MARIADB_NAME: docker-registry1.mariadb.com/library/mariadb
+  RELATED_IMAGE_MAXSCALE: docker-registry2.mariadb.com/mariadb/maxscale:23.08.5
+  RELATED_IMAGE_EXPORTER: prom/mysqld-exporter:v0.15.1
+  RELATED_IMAGE_EXPORTER_MAXSCALE: docker-registry2.mariadb.com/mariadb/maxscale-prometheus-exporter-ubi:v0.0.1
+kind: ConfigMap
+metadata:
+  creationTimestamp: null
+  name: mariadb-operator-env
+
--- HelmRelease: database/mariadb-operator ClusterRole: database/mariadb-operator-view

+++ HelmRelease: database/mariadb-operator ClusterRole: database/mariadb-operator-view

@@ -0,0 +1,17 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: mariadb-operator-view
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-view: 'true'
+rules:
+- apiGroups:
+  - k8s.mariadb.com
+  resources:
+  - '*'
+  verbs:
+  - get
+  - list
+  - watch
+
--- HelmRelease: database/mariadb-operator ClusterRole: database/mariadb-operator-edit

+++ HelmRelease: database/mariadb-operator ClusterRole: database/mariadb-operator-edit

@@ -0,0 +1,18 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: mariadb-operator-edit
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-edit: 'true'
+rules:
+- apiGroups:
+  - k8s.mariadb.com
+  resources:
+  - '*'
+  verbs:
+  - create
+  - update
+  - patch
+  - delete
+

renovate bot added renovate/helm type/major labels Aug 9, 2025

renovate bot force-pushed the renovate/mariadb-operator-25.x branch from 13233ea to fe80cbf Compare September 21, 2025 10:51

renovate bot changed the title ~~feat(helm)!: Update chart mariadb-operator to 25.8.3~~ feat(helm)!: Update chart mariadb-operator to 25.8.4 Sep 21, 2025

renovate bot force-pushed the renovate/mariadb-operator-25.x branch from fe80cbf to d192517 Compare October 23, 2025 16:51

renovate bot changed the title ~~feat(helm)!: Update chart mariadb-operator to 25.8.4~~ feat(helm)!: Update chart mariadb-operator to 25.10.1 Oct 23, 2025

renovate bot force-pushed the renovate/mariadb-operator-25.x branch from d192517 to 8b5b1e5 Compare October 28, 2025 17:44

renovate bot changed the title ~~feat(helm)!: Update chart mariadb-operator to 25.10.1~~ feat(helm)!: Update chart mariadb-operator to 25.10.2 Oct 28, 2025

feat(helm)!: Update chart mariadb-operator to 25.10.3

d7de135

renovate bot force-pushed the renovate/mariadb-operator-25.x branch from 8b5b1e5 to d7de135 Compare December 24, 2025 12:45

renovate bot changed the title ~~feat(helm)!: Update chart mariadb-operator to 25.10.2~~ feat(helm)!: Update chart mariadb-operator to 25.10.3 Dec 24, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat(helm)!: Update chart mariadb-operator to 25.10.3 #363

feat(helm)!: Update chart mariadb-operator to 25.10.3 #363

Uh oh!

renovate bot commented Aug 9, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Aug 9, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Aug 9, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

feat(helm)!: Update chart mariadb-operator to 25.10.3 #363

Are you sure you want to change the base?

feat(helm)!: Update chart mariadb-operator to 25.10.3 #363

Uh oh!

Conversation

renovate bot commented Aug 9, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

VolumeSnapshots locking optimization

ExternalMariaDB support

Bump dependencies

What's Changed

New Contributors

What's Changed

What's Changed

PhysicalBackups based on mariadb-backup

PhysicalBackups based on VolumeSnapshots

MariaDB 11.8 and VECTOR support

MariaDB cluster helm chart

Replication improvements

Fixes and enhancements

New versioning scheme

What's Changed

Configuration

Uh oh!

github-actions bot commented Aug 9, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Aug 9, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate bot commented Aug 9, 2025 •

edited

Loading

`VolumeSnapshots` locking optimization

`ExternalMariaDB` support

`PhysicalBackups` based on `mariadb-backup`

`PhysicalBackups` based on `VolumeSnapshots`

MariaDB 11.8 and `VECTOR` support

github-actions bot commented Aug 9, 2025 •

edited

Loading

github-actions bot commented Aug 9, 2025 •

edited

Loading