Release 2026.4.2

[xjerod]

Summary

Bump chart version to 2026.4.2 and image tag (appVersion) to 2026.4.5.

---

Helm Chart Changes (since 2026.4.1)

feat(operator): add support for new secrets watcher (#305)

Adds a new secretsWatcher feature to the union-operator that triggers rolling restarts of deployments when secrets change.

• values.yaml: new config.operator.secretsWatcher block (enabled: false, dryRun: true)
• configmap.yaml: renders the secretsWatcher config into the operator ConfigMap when set
• serviceaccount.yaml: conditionally adds RBAC (get/list/watch/update/patch on replicasets/deployments) when enabled

Configuration — add to your dataplane values override:

config:
  operator:
    secretsWatcher:
      enabled: true
      dryRun: false

No changes required for existing deployments. The secrets watcher is disabled by default.

Zone pod labels for all Union-owned workloads (#305)

Adds a platform.union.ai/zone pod label to all Union-owned deployments and daemonsets for improved observability and targeting.

• Controlplane workloads (authz, cacheservice, console) get zone: controlplane
• Dataplane workloads (clusterresourcesync, flyteconnector, imagebuilder, nodeexecutor, nodeobserver, propeller, propeller-webhook) get zone: dataplane

---

Image Changes (2026.4.3 → 2026.4.5)

feat(operator): add secrets watcher module (cloud #15061)

Adds a SecretsWatcher to the union-operator that detects Kubernetes secret content changes (via SHA-256 hashing) and triggers rolling restarts of affected
deployments.

• Feature-flagged via secretsWatcher.enabled (default: false), ships with dryRun: true
• Prometheus metrics: deployments_updated, secrets_processed, errors

---

Related PRs

• Cloud: #15061
• Helm charts: #305

[aviator-app]

Current Aviator status

Aviator will automatically update this comment as the status of the PR changes.
Comment /aviator refresh to force Aviator to re-examine your PR (or learn about other /aviator commands).

This PR was merged using Aviator.

---

See the real-time status of this PR on the Aviator webapp.

Use the Aviator Chrome Extension to see the status of your PR within GitHub.