FIND-20260403-009 · 2026-04-03 · Innovation Veille
Redpanda v26.1.1 — OIDC Group-Based Authorization and Schema Registry Enhancements
release
HIGH
Redpanda v26.1.1 (March 31, 2026) introduces group-based authorization with OIDC token group claims processing, a critical feature for multi-tenant access control. Schema Registry gains protovalidate validation, metadata properties support, and context management commands. Iceberg integration improves JSON Schema conversion with $ref support and oneOf for nullable fields. Bug fixes address cache collision in spillover manifest, tiered storage manifest misalignment, and compaction race conditions. ODS currently tracks v26.1.1, confirming this is the current baseline.
Source
https://github.com/redpanda-data/redpanda/releases/tag/v26.1.1
ODS Impact
ODS uses Redpanda as the primary event bus for all inter-service communication. The OIDC group-based authorization aligns directly with ODS multi-tenant architecture — tenant isolation at the topic level can now be enforced via OIDC group claims, reducing the need for per-service authorization logic. Schema Registry protovalidate validation will benefit CloudEvents schema enforcement. This release warrants exploration for the P1/P2 Redpanda provisioning phase.
Security Review
N/A
Tags
redpanda
kafka
release
oidc
authorization
schema-registry
multi-tenancy