changelog, restored test defs, added comment

Author: adwk67

CHANGELOG.md

@@ -25,7 +25,7 @@ All notable changes to this project will be documented in this file.
 
 ### Fixed
 
-- Readiness probe fixed if Kerberos is enabled
+- Readiness probe fixed if Kerberos is enabled ([#833]).
 
 [#796]: https://github.com/stackabletech/kafka-operator/pull/796
 [#803]: https://github.com/stackabletech/kafka-operator/pull/803
@@ -34,6 +34,7 @@ All notable changes to this project will be documented in this file.
 [#813]: https://github.com/stackabletech/kafka-operator/pull/813
 [#819]: https://github.com/stackabletech/kafka-operator/pull/819
 [#822]: https://github.com/stackabletech/kafka-operator/pull/822
+[#833]: https://github.com/stackabletech/kafka-operator/pull/833
 
 ## [24.11.1] - 2025-01-10
 

rust/operator-binary/src/crd/security.rs

@@ -304,6 +304,8 @@ impl KafkaTlsSecurity {
             args.push("pipefail".to_string());
             args.push("-c".to_string());
 
+            // the entire command needs to be subject to the -euo directive
+            // to prevent short-circuiting
             let mut bash_args = vec![];
             bash_args.push(
                 format!(

tests/test-definition.yaml

@@ -6,6 +6,9 @@
 dimensions:
   - name: kafka
     values:
+      - 3.7.1
+      - 3.7.2
+      - 3.8.1
       - 3.9.0
       # Alternatively, if you want to use a custom image, append a comma and the full image name to the product version
       # as in the example below.
@@ -31,6 +34,7 @@ dimensions:
   - name: use-client-tls
     values:
       - "true"
+      - "false"
   - name: use-client-auth-tls
     values:
       - "true"
@@ -42,6 +46,7 @@ dimensions:
       - 1.21.1
   - name: kerberos-realm
     values:
+      - "CLUSTER.LOCAL"
       - "PROD.MYCORP"
   - name: kerberos-backend
     values: