keda

Release KEDA v2.20.2 :rocket:

⚠️⚠️⚠️⚠️ ⚠️ Please read upgrade notes if you are upgrading from version < 2.20.0: https://github.com/kedacore/keda/releases/tag/v2.20.0 ⚠️⚠️⚠️⚠️⚠️

Improvements

• General: Introduce a dedicated HPAActive condition on ScaledObject mirroring the HPA's own ScalingActive status, so transient HPA metric gaps no longer flip the Ready condition to False (#7914)

Fixes

• General: Fix concurrent map writes panic in the shared root CA CertPool (#7910)
• General: Fix nil pointer dereference in AWS Secret Manager TriggerAuthentication when awsSecretManager.credentials is omitted and no awsSecretManager.podIdentity is set (#7927)
• General: Fix nil pointer dereference in customScalingStrategy.GetEffectiveMaxScale when customScalingQueueLengthDeduction is omitted; the optional field is now treated as zero deduction instead of panicking (#7798)
• General: Fix nil pointer dereference in GetCurrentReplicas when a Deployment/StatefulSet/ReplicaSet is returned from the informer cache with an undefaulted spec.replicas; a nil value is now treated as the Kubernetes default of 1 instead of panicking (#7863)
• General: Fix ScaledJob CRD validation to include "default" as a valid value for scalingStrategy.strategy (#7855)
• General: Guard GetCurrentReplicas against nil Status.ScaleTargetGVKR to prevent operator panics under the cache race documented in (#4389) / (#4955)
• General: Restore core "" API group in events RBAC so that client-go's event broadcaster can write legacy events (#7922)
• General: Restore gRPC reconnect backoff in the metrics service client; an unset Backoff in WithConnectParams disabled backoff and caused a zero-delay reconnect loop that flooded logs when keda-operator was unreachable (#7856)
• General: Share HTTP transports across scalers to reuse connection pools and avoid re-dial storms at high ScaledObject counts (#7789)
• General: Treat negative external metric values as zero to prevent incorrect HPA scaling (#7880)
• Azure Blob Storage Scaler: Fix globPattern never matching when written in path-style with a leading /, since blob names never have one (#6492)
• MongoDB Scaler: Disconnect the client when the initial Ping fails so the background topology-monitoring connections opened by mongo.Connect are not leaked (#5612)

New Contributors

• @Goutham-Annem made their first contribution in https://github.com/kedacore/keda/pull/7858
• @simplyaduck made their first contribution in https://github.com/kedacore/keda/pull/7857
• @itxaiohanglover made their first contribution in https://github.com/kedacore/keda/pull/7871
• @orfeldman-evolinq made their first contribution in https://github.com/kedacore/keda/pull/7904
• @vishnu97770 made their first contribution in https://github.com/kedacore/keda/pull/7928
• @sobol-sudo made their first contribution in https://github.com/kedacore/keda/pull/7932

Full Changelog: https://github.com/kedacore/keda/compare/v2.20.1...v2.20.2

Release KEDA v2.20.1 :rocket:

⚠️⚠️⚠️⚠️ ⚠️ Please read upgrade notes if you are upgrading from version < 2.20.0: https://github.com/kedacore/keda/releases/tag/v2.20.0 ⚠️⚠️⚠️⚠️⚠️

Fixes

• General: Fix concurrent map read/write data race in fallback updateStatus that caused panics when multiple triggers were scaling simultaneously (#7838)
• General: Fix KEDAScalersStarted "Started scalers watch" event not being emitted for ScaledJobs because it shared an events.k8s.io aggregation key with the per-scaler "scaler is built" event (#7820)

New Contributors

• @jiyuchen-stripe made their first contribution in https://github.com/kedacore/keda/pull/7843

Full Changelog: https://github.com/kedacore/keda/compare/v2.20.0...v2.20.1

We are happy to release KEDA 2.20.0 🎉

⚠️ Upgrade note: events moved to events.k8s.io (#7781)

With the Kubernetes 0.35 dependency bump, KEDA now records Kubernetes events via the events.k8s.io API group instead of the legacy core events resource. If you deploy KEDA with custom or restricted RBAC, grant the operator create/patch on events.k8s.io/events before upgrading, otherwise event recording will fail. The bundled KEDA manifests and Helm chart already include the updated permissions.

Highlights:

• Introduce new OpenSearch Scaler
• Introduce Elastic Forecast Scaler
• Add scalingModifiers fallback behavior
• Add support for AWS External ID in TriggerAuthentication podIdentity for all AWS scalers
• Add scaler HTTP request metrics for outbound requests made during metric collection

Learn how to deploy KEDA by reading our documentation.

🗓️ The next KEDA release is currently being estimated for 2nd week of September 2026, learn more in our roadmap.

New

• General: Add scalingModifiers fallback behavior (#7366)
• General: Introduce Elastic Forecast Scaler (#7494)
• General: Introduce new OpenSearch Scaler (#7456)

Improvements

• General: Add cooldownPeriod and pollingInterval checks for ScaledObject (#7271)
• General: Add CRD-level validation markers (Minimum, MinLength, MinItems, Enum) for ScaledObject, ScaledJob, ScaleTriggers, and TriggerAuthentication API types (#7533)
• General: Add --leader-election-id flag to allow configuring the leader election Lease name (#7564)
• General: Add scaler HTTP request metrics (keda_scaler_http_requests_total, keda_scaler_http_request_duration_seconds) for outbound HTTP requests made during scaler metric collection (#6600)
• General: Allow more control of TLS versions & ciphers via KEDA_HTTP_TLS_CIPHER_LIST, KEDA_SERVICE_TLS_CIPHER_LIST and KEDA_SERVICE_MIN_TLS_VERSION env vars (#7617)
• General: Cap each scalers-cache reader at a per-reader budget derived from globalHTTPTimeout so ScalersCache.Close cannot block indefinitely (#7574)
• General: Make APIService cert injections optional (#7559)
• General: Remove unconditional json.MarshalIndent calls from admission webhook validation hot paths; replace spec-comparison MarshalIndent-and-string-compare in isRemovingFinalizer variants with reflect.DeepEqual. Prevents webhook OOM under sustained admission load at large scale (observed at ~60k ScaledObjects) (#7670)
• AWS Scalers: Add support for AWS External ID in TriggerAuthentication podIdentity for all AWS scalers (SQS, Kinesis, DynamoDB, CloudWatch, etc.) to enable cross-account access scenarios (#6921)
• Elasticsearch Scaler: Add HTTP status check for Elasticsearch errors (#7480)
• Github Runner Scaler: Handle rate limit errors by respecting X-RateLimit-Reset and Retry-After headers and returning cached queue length (#7683)
• Kubernetes Workload Scaler: Add groupByNode parameter (#7628)
• Metrics API Scaler: Add custom HTTP client timeout ([#7549](https://

We are happy to release KEDA 2.19.0 🎉

Highlights:

• Introducing new Kubernetes Resource Scaler
• Adding file-based authentication support for ClusterTriggerAuthentication

Learn how to deploy KEDA by reading our documentation.

🗓️ The next KEDA release is currently being estimated for 2nd week of May 2026 , learn more in our roadmap.

New

• General: Add file-based authentication support for ClusterTriggerAuthentication (#7083)
• General: Introduce new Kubernetes Resource Scaler (#7212)

Improvements

• General: Correct error message when awsSecretAccessKey is missing in credential-based authentication (#7265)
• General: Emit more events about what is happening with ScaledObject/ScaledJob (#7382)
• General: Raw metrics stream - include trigger activity status in response (#7369)
• AWS CloudWatch Scaler: Add cross-account observability support (#7189)
• Dynamodb Scaler: Add FilterExpression support (#7102)
• Dynatrace Scaler: Support DQL querying (#7377)
• MongoDB Scaler: Add TLS support (#6976)

Fixes

• General: Apply fallback in polling loop to enable scaling from zero (#7239)
• General: Fix accurateScalingStrategy ignoring pendingJobCount in maxReplicaCount check (#7329)
• General: Replace deprecated azure autorest dependency to azure sdk for go (#7073)
• Datadog Scaler: Return request in cluster agent proxy without bearer auth (#7341)
• Datadog Scaler: Use metricUnavailableValue for 422 errors in Datadog Cluster Agent (#7246)
• IBMMQ Scaler: Create new HTTP request for each queue query in IBMMQ scaler (#7202)
• Kafka Scaler: Improve check for missing partition information when calculating lag (#7414)
• Temporal Scaler: Fix TLS RootCAs initialization when using API key authentication with Temporal Cloud (#7367)

Breaking Changes

• NATS Streaming scaler: Remove NATS Streaming Server (aka Stan) (#6366)

Other

• ScaledObject/ScaledJob: Track activity for each trigger in the status (#7347)