Dapr open source version support
D3E maintains full compatibility with Dapr open source while adding additional enterprise features. It maintains 100% compatibility with the open-source Dapr APIs and SDKs and can serve as a drop-in replacement in your existing systems. Two versions are supported at a time: the current stable version and the previous minor version.
Support Policy
It's your operational responsibility to stay current with supported versions. Upgrading from older versions may require intermediate (off-by-one) upgrades. See Dapr's version support policy for more information.
Supported D3E versions
The following table showcases which versions are currently supported in D3E mapping to the equivalent open-source version with additional custom features per patch. It uses the format: <open-source-version>-d3e.<D3E-patch-version> and the associated open source version is detailed on the Dapr Release Notes.
| D3E version | ARM64 features | AMD64 features | Operating system | Notes |
|---|---|---|---|---|
| 1.14.5-d3e.1 | Multi-tenant control plane, namespace isolation, reduced permission set, and configurable automount for sentry service account tokens. | Multi-tenant control plane, namespace isolation, reduced permission set, and configurable automount for sentry service account tokens. | Linux | Replaces D3E 1.14.7, which included RBAC flags (global.rbac.crds.enabled, global.rbac.sentry.createServiceAccount, global.rbac.operator.enabled). The flag createServiceAccount was replaced with serviceAccount.create. This version introduces serviceAccount.automount and serviceAccount.name, and backports Oracle state store features to the 1.14 release, including a custom BulkGet method and support for Oracle connect descriptors. |
| 1.14.5-d3e.2 | Multi-tenant control plane, namespace isolation, reduced permission set, and configurable automount for sentry service account tokens. | Multi-tenant control plane, namespace isolation, reduced permission set, and configurable automount for sentry service account tokens. | Linux | Adds new OIDC auth type oidc_private_key_jwt for Kafka components, allowing authentication using certificates instead of client secrets. |
| 1.14.5-d3e.3 | Multi-tenant control plane, namespace isolation, reduced permission set, and configurable automount for sentry service account tokens. | Multi-tenant control plane, namespace isolation, reduced permission set, and configurable automount for sentry service account tokens. | Linux | Added support for PKCS8 private keys. This feature allows users to use PKCS8 private keys for authentication. |
| 1.14.5-d3e.4 | Multi-tenant control plane, namespace isolation, reduced permission set, and configurable automount for sentry service account tokens. | Multi-tenant control plane, namespace isolation, reduced permission set, and configurable automount for sentry service account tokens. | Linux | Possibility to configure the optional kid header for the JWT authentication flow in the kafka components. |
| 1.14.5-d3e.6 | Multi-tenant control plane, namespace isolation, reduced permission set, and configurable automount for sentry service account tokens. | Multi-tenant control plane, namespace isolation, reduced permission set, and configurable automount for sentry service account tokens. | Linux | Changes the configuration of theaud claim to be a string instead of an array. |
| 1.15.6-d3e.1 | Multi-tenant control plane, namespace isolation and reduced permission set, and configurable automount for sentry service account tokens. | Multi-tenant control plane, namespace isolation, reduced permission set, and configurable automount for sentry service account tokens. | Linux | createServiceAccount replaced with serviceAccount.create, introduced serviceAccount.automount and serviceAccount.name |
| 1.15.6-d3e.2 | Multi-tenant control plane, namespace isolation and reduced permission set, configurable automount for sentry service account tokens, and improved scheduler reliability. | Multi-tenant control plane, namespace isolation, reduced permission set, configurable automount for sentry service account tokens, and improved scheduler reliability. | Linux | Fixes sidecar injector crash when scheduler is disabled |
| 1.15.6-d3e.3 | Multi-tenant control plane, namespace isolation and reduced permission set, configurable automount for sentry service account tokens, and improved scheduler reliability. | Multi-tenant control plane, namespace isolation, reduced permission set, configurable automount for sentry service account tokens, and improved scheduler reliability. | Linux | Adds new OIDC auth type oidc_private_key_jwt for Kafka components, allowing authentication using certificates instead of client secrets. |
| 1.15.13-d3e.1 | Multi-tenant control plane, namespace isolation and reduced permission set, configurable automount for sentry service account tokens, and improved scheduler reliability. | Multi-tenant control plane, namespace isolation, reduced permission set, configurable automount for sentry service account tokens, and improved scheduler reliability. | Linux | Fixes APP_API_TOKEN not being passed in gRPC metadata for app callbacks; fixes Pulsar OAuth token renewal |
| 1.16.0-d3e.1 | Multi-tenant control plane, namespace isolation and reduced permission set, configurable automount for sentry service account tokens, and improved scheduler reliability. | Multi-tenant control plane, namespace isolation, reduced permission set, configurable automount for sentry service account tokens, and improved scheduler reliability. | Linux | |
| 1.16.3-d3e.1 | Multi-tenant control plane, namespace isolation and reduced permission set, configurable automount for sentry service account tokens, and improved scheduler reliability. | Multi-tenant control plane, namespace isolation, reduced permission set, configurable automount for sentry service account tokens, and improved scheduler reliability. | Linux | Sftp binding not handling reconnections |