Repository files navigation

Strimzi provides a way to run anApache Kafka® cluster onKubernetes orOpenShift in various deployment configurations.See ourwebsite for more details about the project.

To get up and running quickly, check ourQuick Start for Minikube, OKD (OpenShift Origin) and Kubernetes Kind.

Documentation for the currentmain branch as well as all releases can be found on ourwebsite.

The roadmap of the Strimzi Operator project is maintained asGitHub Project.

If you encounter any issues while using Strimzi, you can get help using:

• #strimzi channel on CNCF Slack
• Strimzi Users mailing list
• GitHub Discussions

You can join our regular community meetings:

• Thursday 9:00 AM UTC (every 4 weeks) -convert to your timezone
• Thursday 4:00 PM UTC (every 4 weeks, offset by 2 weeks from above meeting) -convert to your timezone

Resources:

• Meeting minutes, agenda and Zoom link
• Recordings
• Calendar (Subscribe to the calendar)

You can contribute by:

• Raising issues you find while using Strimzi
• Fixing issues by opening Pull Requests
• Improving Strimzi documentation
• Talking about Strimzi

All bugs, tasks or enhancements are tracked asGitHub issues. Issues whichmight be a good start for new contributors are marked with"good-start"label.

TheDev guide describes how to build Strimzi.Before submitting a patch, please make sure to understand, how to test your changes before opening a PRTest guide.

TheDocumentation Contributor Guide describes how to contribute to Strimzi documentation.

If you want to get in touch with us first before contributing, you can use:

• #strimzi channel on CNCF Slack
• Strimzi Dev mailing list

Strimzi is licensed under theApache License, Version 2.0

Note: This badge represents a community-led initiative and is not officially endorsed by the Strimzi project maintainers.

From the 0.38.0 release, Strimzi containers are signed using thecosign tool.Strimzi currently does not use the keyless signing and the transparency log.To verify the container, you can copy the following public key into a file:

-----BEGIN PUBLIC KEY-----MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAET3OleLR7h0JqatY2KkECXhA9ZAkCTRnbE23Wb5AzJPnpevvQ1QUEQQ5h/I4GobB7/jkGfqYkt6Ct5WOU2cc6HQ==-----END PUBLIC KEY-----

And use it to verify the signature:

cosign verify --key strimzi.pub quay.io/strimzi/operator:latest --insecure-ignore-tlog=true

From the 0.38.0 release, Strimzi publishes the software bill of materials (SBOM) of our containers.The SBOMs are published as an archive withSPDX-JSON andSyft-Table formats signed using cosign.For releases, they are also pushed into the container registry.To verify the SBOM signatures, please use the Strimzi public key:

-----BEGIN PUBLIC KEY-----MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAET3OleLR7h0JqatY2KkECXhA9ZAkCTRnbE23Wb5AzJPnpevvQ1QUEQQ5h/I4GobB7/jkGfqYkt6Ct5WOU2cc6HQ==-----END PUBLIC KEY-----

You can use it to verify the signature of the SBOM files with the following command:

cosign verify-blob --key cosign.pub --bundle <SBOM-file>.bundle --insecure-ignore-tlog=true <SBOM-file>

Strimzi is aCloud Native Computing Foundation incubating project.