Ansible Playbooks for Confluent Platform Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) is continuously updated with new features and enhancements. This topic highlights the significant new and updated features, enhancements, bug fixes, and known limitations in each release.

Note

For the list of security and vulnerability issues fixed in any release, see Security Advisories and Security Release Notes.

June 23, 2026 Confluent Ansible 7.6.12 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.6.12 allows you to deploy Confluent Platform version 7.6.12.

Breaking changes

There are no breaking changes in this release.

New features

Enhancements

  • Adds validation of Confluent Platform package availability before installation. The playbook now fails early if the requested package version is not available in the configured repositories, before removing the existing packages.

  • The all.yml playbook now fails fast when the kraft_migration flag is enabled, and directs you to the dedicated ZooKeeper-to-KRaft migration playbook.

  • The ZooKeeper-to-KRaft migration now validates broker and controller cluster health before the migration starts.

  • After the KRaft controller starts, the migration now asserts that the cluster ZkMigrationState is in the Pre-Migration state before the migration proceeds.

  • Introduces a Confluent CLI v3.0.0 preflight assertion.

Bug fixes

  • Fixed an issue that caused the Kafka broker and Kafka controller to restart twice.

  • Fixed the issue with the security.properties copy task that failed to copy the file to the Ansible host.

  • Fixed kafka-storage format failures on KRaft clusters with secrets protection enabled. The master key is now passed to the format step using the CONFLUENT_SECURITY_MASTER_KEY environment variable. See Control master key regeneration.

  • Fixed custom certificate chain building for multi-tier and partial-chain PKI setups. Chains now assemble correctly for root and intermediate bundles, and for DoD-style partial chains.

Known limitations

There are no known limitations in this release.

Deprecations

There are no deprecations in this release.

Ansible Playbooks for Confluent Platform 7.6.10 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.6.10 allows you to deploy Confluent Platform version 7.6.10. It supports Ansible versions 4.x to 9.x and Python versions 3.6+. The recommended Ansible version is 7.x.

Notable fixes

  • Fixed an issue where pipefail caused failures when extracting distinguished names from keystores in mTLS setups.

  • For the list of security and vulnerability issues fixed in this release, see Security Advisories and Security Release Notes.

Ansible Playbooks for Confluent Platform 7.6.9 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.6.9 allows you to deploy Confluent Platform version 7.6.9. It supports Ansible versions 4.x to 9.x and Python versions 3.6+. The recommended Ansible versions are 7.x.

Notable fixes

  • Enhanced security by masking potentially exposed sensitive secrets.

  • Fixed an issue related to ZooKeeper chroot creation.

  • Fixed idempotency on configuration files when using the secrets protection feature.

  • Added ability to override a list of loggers using the update_log4j task in the common role.

  • Made retries and delays in health checks configurable for users.

  • Introduced indexing and default rollover strategy for Log4j 2 file.

  • Fixed the failures in rolling deployments of connectors when mTLS was enabled and a key store and trust store were provided.

  • For the list of security and vulnerability issues fixed in this release, see Security Advisories and Security Release Notes.

Ansible Playbooks for Confluent Platform 7.6.8 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.6.9 allows you to deploy Confluent Platform version 7.6.9. It supports Ansible versions 4.x to 9.x and Python versions 3.6+. The recommended Ansible versions are 7.x.

Notable fixes

Ansible Playbooks for Confluent Platform 7.6.7 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.6.7 allows you to deploy Confluent Platform version 7.6.7. It supports Ansible versions 4.x to 9.x and Python versions 3.6+. The recommended Ansible versions are 7.x.

Notable enhancements

Notable fixes

Ansible Playbooks for Confluent Platform 7.6.6 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.6.6 allows you to deploy Confluent Platform version 7.6.6. It supports Ansible versions 4.x to 9.x and Python versions 3.6+. The recommended Ansible versions are 7.x.

Notable enhancements

  • Ansible 9.x is now supported.

Notable fixes

Ansible Playbooks for Confluent Platform 7.6.5 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.6.5 allows you to deploy Confluent Platform version 7.6.5. It supports Ansible versions 4.x to 7.x and Python versions 3.6+. The recommended Ansible versions are 7.x.

Notable enhancements

  • Introduced a new variable rbac_super_users to specify additional super users for the cluster.

  • Removed KRaft controller and Kafka broker dependency on each other for fetching certificate principals in RBAC-enabled clusters with mTLS.

Notable fixes

  • Fixed an issue in the Set Permissions on Data Dir files task to avoid a race condition.

  • Changed the systemd service override directory permissions from 640 to 750.

  • For the list of security and vulnerability issues fixed in this release, see Security Advisories and Security Release Notes.

Ansible Playbooks for Confluent Platform 7.6.4 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.6.4 allows you to deploy Confluent Platform version 7.6.4. It supports Ansible versions 4.x to 7.x and Python versions 3.6+. The recommended Ansible versions are 7.x.

Notable fixes

  • Fixed the ownership of data directory files in KRaft controllers and Kafka brokers.

  • Improved error handling in connector deployments.

  • A number of internal issues were resolved.

Ansible Playbooks for Confluent Platform 7.6.3 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.6.3 allows you to deploy Confluent Platform version 7.6.3. It supports Ansible versions 4.x to 7.x and Python versions 3.6+. The recommended Ansible versions are 7.x.

Notable fixes

  • A number of internal issues were resolved, including critical security and vulnerability issues.

Ansible Playbooks for Confluent Platform 7.6.2 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.6.2 allows you to deploy Confluent Platform version 7.6.2. It supports Ansible versions 4.x to 7.x and Python versions 3.6+. The recommended Ansible versions are 7.x.

Notable fixes

  • Confluent Ansible uses the archived Debian10 repository since Debian 10 reached the end of life.

  • Identity provider (IDP) certificate for SSO to Confluent Control Center (Legacy) can be added to MDS truststore.

  • A number of internal issues were resolved, including critical security and vulnerability issues.

Ansible Playbooks for Confluent Platform 7.6.1 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.6.1 allows you to deploy Confluent Platform version 7.6.1. It supports Ansible versions 4.x to 7.x and Python versions 3.6+. The recommended Ansible versions are 7.x.

Notable fixes

  • Connect and ksqlDB clusters are now correctly registered in MDS even when Confluent Platform components are co-located.

  • 3.55.0 is the default Confluent CLI version that is installed with Confluent Ansible.

  • Critical security and vulnerability issues were fixed.

Ansible Playbooks for Confluent Platform 7.6.0 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.6.0 allows you to deploy Confluent Platform version 7.6.0. It supports Ansible versions 4.x to 7.x and Python versions 3.6+. The recommended Ansible versions are 7.x.

New features and enhancements

Migration from ZooKeeper to KRaft

You can use Confluent Ansible to perform an in-place upgrade from ZooKeeper to KRaft.

Currently, migration is not recommended for production Confluent clusters.

See Migrate a Zookeeper-based cluster to KRaft.

ARM 64 for production deployments

Confluent Ansible supports deploying Confluent Platform on ARM 64 architecture in production.

See Hardware requirements.

Rocky Linux support

Confluent Ansible supports deploying Confluent Platform on Rocky Linux 8 and Rocky Linux 9.

See Operating Systems requirements.

Confluent Ansible Discovery GitHub repository change

The Confluent Ansible Discovery tool was moved to its own GitHub repository at https://github.com/confluentinc/cp-discovery and is no longer in the Confluent Ansible repository at https://github.com/confluentinc/cp-ansible.

See Migrate Standalone Confluent Platform to Ansible Environment.

Confluent connectors with RBAC and mTLS

Confluent Ansible supports deploying connectors on clusters with RBAC or mTLS configured.

See Configure Kafka connectors on an RBAC-enabled cluster.

Notable fixes

  • Confluent Ansible now supports configuring a custom port for the KRaft controllers.

    For setting up a custom port for KRaft, a new variable, kafka_controller_port, was introduced. 9093 is the default value.

Upgrade consideration

You can use Confluent Ansible to upgrade Confluent Platform to 7.6 with Ansible versions 4 - 7 (ansible-core versions 2.11 - 2.14).

For more information, see Prerequisites for Installing Confluent Platform with Ansible Playbooks.