feat: Add graceful shutdown (#1004)

* feat: Add graceful shutdown

* chore: Update CRD documentation

* chore: Bump bytes crate to 1.11.1

Fixes RUSTSEC-2026-0007.

* chore: Bump git2 crate to 0.20.4

Fixes RUSTSEC-2026-0008.

* chore: Add changelog entry

Author: Techassi

CHANGELOG.md

@@ -11,6 +11,10 @@ All notable changes to this project will be documented in this file.
   See [objectOverrides concepts page](https://docs.stackable.tech/home/nightly/concepts/overrides/#object-overrides) for details ([#987]).
 - Enable the [restart-controller](https://docs.stackable.tech/home/nightly/commons-operator/restarter/), so that the Pods are automatically restarted on config changes ([#999]).
 
+### Changed
+
+- Gracefully shutdown all concurrent tasks by forwarding the SIGTERM signal ([#1004]).
+
 ### Removed
 
 - Remove support for ZooKeeper 3.9.3 ([#1001]).
@@ -19,6 +23,7 @@ All notable changes to this project will be documented in this file.
 [#988]: https://github.com/stackabletech/zookeeper-operator/pull/988
 [#999]: https://github.com/stackabletech/zookeeper-operator/pull/999
 [#1001]: https://github.com/stackabletech/zookeeper-operator/pull/1001
+[#1004]: https://github.com/stackabletech/zookeeper-operator/pull/1004
 
 ## [25.11.0] - 2025-11-07
 

Cargo.lock

@@ -11,7 +11,7 @@ repository = "https://github.com/stackabletech/zookeeper-operator"
 
 [workspace.dependencies]
 product-config = { git = "https://github.com/stackabletech/product-config.git", tag = "0.8.0" }
-stackable-operator = { git = "https://github.com/stackabletech/operator-rs.git", tag = "stackable-operator-0.102.0", features = ["telemetry", "versioned"] }
+stackable-operator = { git = "https://github.com/stackabletech/operator-rs.git", tag = "stackable-operator-0.105.0", features = ["telemetry", "versioned"] }
 
 anyhow = "1.0"
 built = { version = "0.8", features = ["chrono", "git2"] }

Cargo.nix

@@ -531,7 +531,7 @@ spec:
                       default: {}
                       description: |-
                         In the `podOverrides` property you can define a
-                        [PodTemplateSpec](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.27/#podtemplatespec-v1-core)
+                        [PodTemplateSpec](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.34/#podtemplatespec-v1-core)
                         to override any property that can be set on a Kubernetes Pod.
                         Read the
                         [Pod overrides documentation](https://docs.stackable.tech/home/nightly/concepts/overrides#pod-overrides)
@@ -905,7 +905,7 @@ spec:
                             default: {}
                             description: |-
                               In the `podOverrides` property you can define a
-                              [PodTemplateSpec](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.27/#podtemplatespec-v1-core)
+                              [PodTemplateSpec](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.34/#podtemplatespec-v1-core)
                               to override any property that can be set on a Kubernetes Pod.
                               Read the
                               [Pod overrides documentation](https://docs.stackable.tech/home/nightly/concepts/overrides#pod-overrides)

Cargo.toml

@@ -30,6 +30,7 @@ use stackable_operator::{
     logging::controller::report_controller_reconciled,
     shared::yaml::SerializeOptions,
     telemetry::Tracing,
+    utils::signal::SignalWatcher,
 };
 
 use crate::{zk_controller::ZK_FULL_CONTROLLER_NAME, znode_controller::ZNODE_FULL_CONTROLLER_NAME};
@@ -91,9 +92,13 @@ async fn main() -> anyhow::Result<()> {
                 description = built_info::PKG_DESCRIPTION
             );
 
+            // Watches for the SIGTERM signal and sends a signal to all receivers, which gracefully
+            // shuts down all concurrent tasks below (EoS checker, controller).
+            let sigterm_watcher = SignalWatcher::sigterm()?;
+
             let eos_checker =
                 EndOfSupportChecker::new(built_info::BUILT_TIME_UTC, maintenance.end_of_support)?
-                    .run()
+                    .run(sigterm_watcher.handle())
                     .map(anyhow::Ok);
 
             let product_config = product_config.load(&[
@@ -132,7 +137,7 @@ async fn main() -> anyhow::Result<()> {
                     watch_namespace.get_api::<DeserializeGuard<ConfigMap>>(&client),
                     watcher::Config::default(),
                 )
-                .shutdown_on_signal()
+                .graceful_shutdown_on(sigterm_watcher.handle())
                 .run(
                     zk_controller::reconcile_zk,
                     zk_controller::error_policy,
@@ -197,7 +202,7 @@ async fn main() -> anyhow::Result<()> {
                             .map(|znode| ObjectRef::from_obj(&*znode))
                     },
                 )
-                .shutdown_on_signal()
+                .graceful_shutdown_on(sigterm_watcher.handle())
                 .run(
                     znode_controller::reconcile_znode,
                     znode_controller::error_policy,