Ansible Playbooks for Confluent Platform Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) is continuously updated with new features and enhancements. This topic highlights the significant new and updated features, enhancements, bug fixes, and known limitations in each release.

For Confluent Platform and Confluent Ansible version compatibility, see Prerequisites for Installing Confluent Platform with Ansible Playbooks.
To learn how to install Confluent Ansible and deploy Confluent Platform, see Download Ansible Playbooks for Confluent Platform and Install Confluent Platform with Ansible Playbooks.

Note

For the list of security and vulnerability issues fixed in any release, see Security Advisories and Security Release Notes.

June 23, 2026 Confluent Ansible 7.9.8 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.9.8 allows you to deploy Confluent Platform version 7.9.8.

Breaking changes

There are no breaking changes in this release.

New features

Adds support for rolling back a KRaft migration to ZooKeeper. See Migrate Confluent Platform from ZooKeeper to KRaft using Ansible Playbooks.
Adds a migration preflight utility. The kafka-migration-check preflight check now runs on the KRaft controller during the ZooKeeper-to-KRaft migration to validate readiness before the migration proceeds.
Adds the capability to generate a support bundle for Confluent Ansible playbook runs. See Support bundle.

Enhancements

Adds validation of Confluent Platform package availability before installation. The playbook now fails early if the requested package version is not available in the configured repositories, before removing the existing packages.
The all.yml playbook now fails fast when the kraft_migration flag is enabled, and directs you to the dedicated ZooKeeper-to-KRaft migration playbook.
The ZooKeeper-to-KRaft migration now validates broker and controller cluster health before the migration starts.
After the KRaft controller starts, the migration now asserts that the cluster ZkMigrationState is in the Pre-Migration state before the migration proceeds.
Introduces a Confluent CLI v3.0.0 preflight assertion.

Bug fixes

Fixed an issue that caused the Kafka broker and Kafka controller to restart twice.
Fixed the issue with the security.properties copy task that failed to copy the file to the Ansible host.
Fixed kafka-storage format failures on KRaft clusters with secrets protection enabled. The master key is now passed to the format step using the CONFLUENT_SECURITY_MASTER_KEY environment variable. See Control master key regeneration.
Fixed custom certificate chain building for multi-tier and partial-chain PKI setups. Chains now assemble correctly for root and intermediate bundles, and for DoD-style partial chains.

Known limitations

There are no known limitations in this release.

Deprecations

There are no deprecations in this release.

Ansible Playbooks for Confluent Platform 7.9.6 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.9.6 allows you to deploy Confluent Platform version 7.9.6. It supports Ansible versions 7.x to 9.x and Python versions 3.9+. The recommended Ansible version is 9.x.

New features and enhancements

USM Agent now supports ZooKeeper and KRaft, enabling clusters to send metrics and metadata to Confluent Cloud using USM with all supported authentication modes such as no auth, basic, TLS, and mTLS.
Confluent Ansible now supports using AWS Systems Manager (SSM) to establish connections to managed nodes.

Notable fixes

Fixed an issue where pipefail caused failures when extracting distinguished names from keystores in mTLS setups.
For the list of security and vulnerability issues fixed in this release, see Security Advisories and Security Release Notes.

Ansible Playbooks for Confluent Platform 7.9.5 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.9.5 allows you to deploy Confluent Platform version 7.9.5.

This release supports Ansible versions 7.x to 9.x and Python versions 3.9+. The recommended Ansible versions are 9.x.

Notable fixes

Enhanced security by masking potentially exposed sensitive secrets.
Fixed an issue related to ZooKeeper chroot creation.
Fixed idempotency on configuration files when using the secrets protection feature.
Added ability to override a list of loggers using the update_log4j task in the common role.
Made retries and delays in health checks configurable for users.
Introduced indexing and default rollover strategy for Log4j 2 file.
Fixed the failures in rolling deployments of connectors when mTLS was enabled and a key store and trust store were provided.
ZooKeeper-based Kafka cluster on Just a Bunch of Disks (JBOD) can use the migration playbook to move to KRaft.
Added AWS Systems Manager (SSM) support for managing connection to virtual machines (VMs).
See Use AWS Systems Manager to connect to Confluent Platform hosts.
For the list of security and vulnerability issues fixed in this release, see Security Advisories and Security Release Notes.

Ansible Playbooks for Confluent Platform 7.9.4 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.9.4 allows you to deploy Confluent Platform version 7.9.4.

This release supports Ansible versions 7.x to 9.x and Python versions 3.9+. The recommended Ansible versions are 9.x.

Notable fixes

For the list of security and vulnerability issues fixed in this release, see Security Advisories and Security Release Notes.

Ansible Playbooks for Confluent Platform 7.9.3 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.9.3 allows you to deploy Confluent Platform version 7.9.3.

This release supports Ansible versions 7.x to 9.x and Python versions 3.9+. The recommended Ansible versions are 9.x.

Notable enhancements

Added configurations to enable Jolokia Access Control.
See Jolokia access control.

Notable fixes

Removed Confluent Metrics Reporter configuration from the Kafka broker and KRaft controller.
Fixed the Prometheus/Alertmanager health checks for Control Center.
Fixed an issue when enabling the systemd service for Control Center archive installations.
For the list of security and vulnerability issues fixed in this release, see Security Advisories and Security Release Notes.

Ansible Playbooks for Confluent Platform 7.9.2 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.9.2 allows you to deploy Confluent Platform version 7.9.2.

This release supports Ansible versions 7.x to 9.x and Python versions 3.9+. The recommended Ansible versions are 9.x.

Notable enhancements

Brownfield deployments for using mTLS identities with RBAC authorization is supported.

Notable fixes

Resolved issue where component restart was not triggered after adding Identity Provider (IdP) certificates to the truststore.
Fixed assignment of role binding to certificate principals which contain spaces in their names.
For the list of security and vulnerability issues fixed in this release, see Security Advisories and Security Release Notes.

Ansible Playbooks for Confluent Platform 7.9.1 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.9.1 allows you to deploy Confluent Platform version 7.9.1.

This release supports Ansible versions 7.x to 9.x and Python versions 3.9+. The recommended Ansible versions are 9.x.

New features and enhancements

Confluent Control Center integration

This release of Confluent Ansible supports the new generation of Control Center. To learn about the new Control Center, see Confluent Control Center Overview.

Use this version of Confluent Ansible to deploy Confluent Control Center (Legacy) and Control Center and validate the Control Center integration with Confluent Platform.

When you are able to use Control Center without major issues, you can start using Control Center and delete the Confluent Control Center (Legacy) instance.

Note that only Control Center will be supported in Confluent Platform 8.0. The Confluent Control Center (Legacy) image will be deprecated and removed in Confluent Platform 8.0.

Configure and install Control Center in the following order. For details, refer to each linked topic:

Control Center support is not available for IPv6 based clusters.

Internet protocol version 6 (IPv6) support

Confluent Ansible can now deploy Confluent Platform on machines in an IPv6 network or dual-stack with both IPv4 and IPv6 addresses.

IPv6 support is subject to the following constraints:

It can be enabled only on clusters using Java 11 or above.
It can be enabled only on clusters using KRaft.

For example host settings on IPv6, see Prepare Ansible Inventory File to Install Confluent Platform.

Ansible Playbooks for Confluent Platform 7.9.0 Release Notes

Ansible Playbooks for Confluent Platform (Confluent Ansible) 7.9.0 allows you to deploy Confluent Platform version 7.9.0.

This release supports Ansible versions 7.x to 9.x and Python versions 3.9+. The recommended Ansible versions are 9.x.

New features and enhancements

OAuth/OIDC authentication to ksqlDB

Support for OpenID Connect (OIDC) authentication and Open Authorization (OAuth) 2.0 authorization has been added for ksqlDB, specifically, ksqlDB as a server and Control Center (Legacy) as a client.

The support includes RBAC and non-RBAC configurations for both the new and existing clusters.

See Role-based access control using OAuth/OIDC.

Non-RBAC to RBAC migration

The workflow to enable RBAC in non-RBAC deployments is now tested and documented along with playbooks for various authentication scenarios.

See Enable RBAC in Running Confluent Platform Environment Using Ansible Playbooks.

Ansible 8.x and 9.x

Confluent Ansible is supported with Ansible 8.x and 9.x (Ansible core 2.15 and 2.16).

See Prerequisites for Installing Confluent Platform with Ansible Playbooks.

JMX exporter version upgrade

The JMX exporter version has been upgraded to the latest, 1.0.1, and the deprecated configurations have been removed.

Ubuntu 24.04

Confluent Ansible now supports Ubuntu 24.04.

See the Confluent Platform System Requirements.

Notable fixes

A number of internal issues were resolved.

Upgrade consideration

You can use Confluent Ansible to upgrade Confluent Platform to 7.9 with Ansible versions 8.x - 9.x (ansible-core versions 2.15 - 2.16).

For more information, see Prerequisites for Installing Confluent Platform with Ansible Playbooks.