Ansible Playbooks for Confluent Platform Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) is continuously updated with new features and enhancements. This topic highlights the significant new and updated features, enhancements, bug fixes, and known limitations in each release.

Note

For the list of security and vulnerability issues fixed in any release, see Security Advisories and Security Release Notes.

June 23, 2026 Confluent Ansible 7.7.10 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.7.10 allows you to deploy Confluent Platform version 7.7.10.

Breaking changes

There are no breaking changes in this release.

New features

  • Adds support for rolling back a KRaft migration to ZooKeeper. See Migrate Confluent Platform from ZooKeeper to KRaft using Ansible Playbooks.

  • Adds a migration preflight utility. The kafka-migration-check preflight check now runs on the KRaft controller during the ZooKeeper-to-KRaft migration to validate readiness before the migration proceeds.

  • Adds the capability to generate a support bundle for Confluent Ansible playbook runs. See Support bundle.

Enhancements

  • Adds validation of Confluent Platform package availability before installation. The playbook now fails early if the requested package version is not available in the configured repositories, before removing the existing packages.

  • The all.yml playbook now fails fast when the kraft_migration flag is enabled, and directs you to the dedicated ZooKeeper-to-KRaft migration playbook.

  • The ZooKeeper-to-KRaft migration now validates broker and controller cluster health before the migration starts.

  • After the KRaft controller starts, the migration now asserts that the cluster ZkMigrationState is in the Pre-Migration state before the migration proceeds.

  • Introduces a Confluent CLI v3.0.0 preflight assertion.

Bug fixes

  • Fixed an issue that caused the Kafka broker and Kafka controller to restart twice.

  • Fixed the issue with the security.properties copy task that failed to copy the file to the Ansible host.

  • Fixed kafka-storage format failures on KRaft clusters with secrets protection enabled. The master key is now passed to the format step using the CONFLUENT_SECURITY_MASTER_KEY environment variable. See Generate and regenerate the master key with Ansible.

  • Fixed custom certificate chain building for multi-tier and partial-chain PKI setups. Chains now assemble correctly for root and intermediate bundles, and for DoD-style partial chains.

Known limitations

There are no known limitations in this release.

Deprecations

There are no deprecations in this release.

Ansible Playbooks for Confluent Platform 7.7.8 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.7.8 allows you to deploy Confluent Platform version 7.7.8. It supports Ansible versions 7.x to 9.x and Python versions 3.9+. The recommended Ansible version is 9.x.

Notable fixes

  • Fixed an issue where pipefail caused failures when extracting distinguished names from keystores in mTLS setups.

  • For the list of security and vulnerability issues fixed in this release, see Security Advisories and Security Release Notes.

Ansible Playbooks for Confluent Platform 7.7.7 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.7.7 allows you to deploy Confluent Platform version 7.7.7. It supports Ansible versions 7.x to 9.x and Python versions 3.9+. The recommended Ansible versions are 9.x.

Notable fixes

  • Enhanced security by masking potentially exposed sensitive secrets.

  • Fixed an issue related to ZooKeeper chroot creation.

  • Fixed idempotency on configuration files when using the secrets protection feature.

  • Added ability to override a list of loggers using the update_log4j task in the common role.

  • Made retries and delays in health checks configurable for users.

  • Introduced indexing and default rollover strategy for Log4j 2 file.

  • Fixed the failures in rolling deployments of connectors when mTLS was enabled and a key store and trust store were provided.

  • ZooKeeper-based Kafka cluster on Just a Bunch of Disks (JBOD) can now use the migration playbook to move to KRaft.

  • For the list of security and vulnerability issues fixed in this release, see Security Advisories and Security Release Notes.

Ansible Playbooks for Confluent Platform 7.7.6 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.7.6 allows you to deploy Confluent Platform version 7.7.6. It supports Ansible versions 7.x to 9.x and Python versions 3.9+. The recommended Ansible versions are 9.x.

Notable fixes

Ansible Playbooks for Confluent Platform 7.7.5 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.7.5 allows you to deploy Confluent Platform version 7.7.5. It supports Ansible versions 7.x to 9.x and Python versions 3.9+. The recommended Ansible versions are 9.x.

Notable enhancements

Notable fixes

Ansible Playbooks for Confluent Platform 7.7.4 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.7.4 allows you to deploy Confluent Platform version 7.7.4. It supports Ansible versions 7.x to 9.x and Python versions 3.9+. The recommended Ansible versions are 9.x.

Notable enhancements

  • JMX Exporter is upgraded to 0.20.0.

Notable fixes

  • Resolved an issue where component restart was not triggered after adding IdP certificates to the truststore.

  • For the list of security and vulnerability issues fixed in this release, see Security Advisories and Security Release Notes.

Ansible Playbooks for Confluent Platform 7.7.3 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.7.3 allows you to deploy Confluent Platform version 7.7.3. It supports Ansible versions 7.x to 9.x and Python versions 3.9+. The recommended Ansible versions are 9.x.

Notable enhancements

  • Introduced a new variable rbac_super_users to specify additional super users for the cluster.

  • Removed KRaft controller and Kafka broker dependency on each other for fetching certificate principals in RBAC-enabled clusters with mTLS.

Notable fixes

  • Fixed an issue in the Set Permissions on Data Dir files task to avoid a race condition.

  • Changed the systemd service override directory permissions from 640 to 750.

  • For the list of security and vulnerability issues fixed in this release, see Security Advisories and Security Release Notes.

Ansible Playbooks for Confluent Platform 7.7.2 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.7.2 allows you to deploy Confluent Platform version 7.7.2. It supports Ansible versions 7.x to 9.x and Python versions 3.9+. The recommended Ansible versions are 9.x.

Notable fixes

  • Fixed the ownership of data directory files in KRaft controllers and Kafka brokers.

  • Improved error handling in connector deployments.

  • A number of internal issues were resolved.

Ansible Playbooks for Confluent Platform 7.7.1 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.7.1 allows you to deploy Confluent Platform version 7.7.1. It supports Ansible versions 7.x to 9.x and Python versions 3.9+. The recommended Ansible versions are 9.x.

Notable fixes

  • A number of internal issues were resolved, including critical security and vulnerability issues.

Ansible Playbooks for Confluent Platform 7.7.0 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.7.0 allows you to deploy Confluent Platform version 7.7.0. It supports Ansible versions 7.x to 9.x and Python versions 3.9+. The recommended Ansible versions are 9.x.

New features and enhancements

OAuth 2.0 support

Support for OIDC (OpenID Connect) Authentication and Open Authorization (OAuth) 2.0 Authorization has been added for Apache Kafka®, KRaft, REST Proxy, Schema Registry, Kafka Connect, Confluent Control Center (Legacy), and Confluent CLI.

See OAuth for Confluent Platform.

OAuth migration

You can configure OAuth on existing LDAP Confluent Platform clusters, specifically, Kafka, MDS, KRaft, Control Center (Legacy), REST Proxy, Schema Registry, and Connect to migrate from using LDAP authentication/authorization to OIDC authentication and OAuth authorization.

See Migrate from LDAP to OAuth.

Amazon Linux 2023 support

Confluent Ansible supports deploying Confluent Platform on Amazon Linux 2023.

See Operating Systems requirements.

Debian 12 support

Confluent Ansible supports deploying Confluent Platform on Debian 12.

See Operating Systems requirements.

Ansible 8.x and 9.x

Confluent Ansible is supported with Ansible 8.x and 9.x (Ansible core 2.15 and 2.16).

See Prerequisites for Installing Confluent Platform with Ansible Playbooks.

Notable enhancements and updates

  • Confluent Ansible now has the capability to add identify provider’s self-signed certificate to the MDS truststore for SSO in Control Center (Legacy).

  • Confluent Ansible added a new tag, pip-package, for installing all pip packages.

Notable fixes

  • A number of internal issues were resolved, including critical security and vulnerability issues.

Upgrade consideration

You can use Confluent Ansible to upgrade Confluent Platform to 7.7 with Ansible versions 7.x - 9.x (ansible-core versions 2.14 - 2.16).

For more information, see Prerequisites for Installing Confluent Platform with Ansible Playbooks.