strimzi-user-operator Helm chart
spartanScored 14 Sept 2026
Strimzi User Operator (standalone mode) pointed at an external Kafka cluster (e.g. AWS MSK). Deploys only namespace-scoped resources — Namespace, KafkaUser CRD definition, and cluster-scoped RBAC are the consumer's responsibility to bootstrap (typically via Terraform). This keeps the chart deployable from an ArgoCD AppProject without cluster-scoped resource whitelist entries. Manages Kafka ACL declaratively via KafkaUser CRDs. KafkaUser CRD instances live in the sibling `kafka-users` chart.
Latest 0.4.0 4 months agoapp version 0.45.1 0Artifact Hub
strimzi-user-operator 0.4.0 deploys 1 container image: quay.io/strimzi/operator. Across them, 141 findings — 3 critical, 0 high. The highest contribution is RHSA-2026:1473 in openssl 1:3.2.2-6.el9_5.1, fixed in 1:3.5.1-7.el9_7.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| quay.io/ | 0.45.1 | 3022116 | 1,836 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | RHSA-2026:59956 | sqlite | 0:3.34.1-8.el9_6.1 |
| Low | RHSA-2025:22660 | systemd | 0:252-55.el9_7.7 |
| Low | GHSA-xmv7-r254-6q78 | netty-resolver-dns | 4.1.135.Final |
| Low | RHSA-2026:50147 | libgcrypt | 0:1.10.0-13.el9_8 |
| Low | GHSA-c69g-56f8-xwqj | netty-codec-http2 | 4.1.136.Final |
| Low | RHSA-2026:61247 | libxml2 | 0:2.9.13-14.el9_8.4 |
| Low | RHSA-2026:0719 | gnupg2 | 0:2.3.3-5.el9_7 |
| Low | GHSA-38f8-5428-x5cv | netty-codec-http | 4.1.133.Final |
| Low | GHSA-8c42-7qj2-3j46 | netty-codec-http | 4.1.137.Final |
| Low | GHSA-r7wm-3cxj-wff9 | jackson-core | 2.18.8 |
| Low | RHSA-2026:33226 | glibc | 0:2.34-272.el9_8 |
| Low | GHSA-4mp9-239f-g9hg | netty-codec-http | 4.1.136.Final |
| Low | RHSA-2026:12441 | libcap | 0:2.48-10.el9_7.1 |
| Low | RHSA-2026:64812 | expat | 0:2.5.0-6.el9_8.3 |
| Low | RHSA-2025:23342 | python3.9 | 0:3.9.25-2.el9_7 |
| Low | RHSA-2026:13677 | systemd | 0:252-55.el9_7.9 |
| Low | GHSA-hgj6-7826-r7m5 | jackson-databind | 2.18.8 |
| Low | RHSA-2026:42736 | acl | 0:2.4.0-1.el9_8 |
| Low | GHSA-5jmj-h7xm-6q6v | jackson-databind | 2.18.9 |
| Low | GHSA-mfg7-5gfp-c4w3 | netty-codec-dns | 4.1.136.Final |
| Low | GHSA-qh8g-58pp-2wxh | jetty-http | 12.0.12 |
| Low | GHSA-7p3p-8qv8-m2vh | jetty-server | no fix listed |
| Low | GHSA-gcjf-9mgh-3p7g | netty-codec-http | 4.1.136.Final |
| Low | GHSA-v8h7-rr48-vmmv | netty-codec-http | 4.1.133.Final |
| Low | GHSA-563q-j3cm-6jxm | netty-codec-http2 | 4.1.135.Final |
| Low | RHSA-2026:18693 | python3.9 | 0:3.9.25-5.el9_8 |
| Low | RHSA-2026:1913 | util-linux | 0:2.37.4-21.el9_7 |
| Low | GHSA-5x3r-wrvg-rp6q | netty-codec-http2 | 4.1.135.Final |
| Low | RHSA-2026:54662 | nghttp2 | 0:1.43.0-6.el9_8.2 |
| Low | RHSA-2025:22376 | libxml2 | 0:2.9.13-14.el9_7 |
| Low | RHSA-2026:60226 | attr | 0:2.6.0-1.el9_8 |
| Low | GHSA-3g76-f9xq-8vp6 | vertx-core | 4.5.27 |
| Low | RHSA-2026:49667 | p11-kit | 0:0.26.4-1.el9_8 |
| Low | GHSA-hvcg-qmg6-jm4c | netty-codec-http | 4.1.135.Final |
| Low | RHSA-2026:28911 | coreutils | 0:8.32-41.el9_8 |
| Low | RHSA-2025:20559 | shadow-utils | 2:4.9-15.el9 |
| Low | RHSA-2026:66403 | coreutils | 0:8.32-41.el9_8.1 |
| Low | GHSA-w573-9ffj-6ff9 | netty-transport-native-epoll | 4.1.135.Final |
| Low | GHSA-wjpw-4j6x-6rwh | jetty-http | no fix listed |
| Low | GHSA-fghv-69vj-qj49 | netty-codec-http | 4.1.125.Final |
| Low | RHSA-2026:39317 | libxml2 | 0:2.9.13-14.el9_8.2 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.