Add release blog

Assisted-by: Claude Sonnet 4.5 <noreply@anthropic.com>
Signed-off-by: Robert Young <robertyoungnz@gmail.com>

Author: robobario

_posts/2026-04-01-release-0_20_0.md

@@ -0,0 +1,61 @@
+---
+layout: post
+title: "Kroxylicious release 0.20.0"
+date: 2026-04-01 00:00:00 +0000
+author: "Rob Young"
+author_url: "https://github.com/robobario"
+# noinspection YAMLSchemaValidation
+categories: blog kroxylicious-proxy releases
+tags: [ "releases", "kroxylicious-proxy" ]
+---
+
+We're excited to announce the release of [Kroxylicious 0.20.0](https://github.com/kroxylicious/kroxylicious/releases/tag/v0.20.0)! There's a lot to dig into — check out the full [Changelog](https://github.com/kroxylicious/kroxylicious/blob/main/CHANGELOG.md#0200) for everything including deprecations, changes, and removals.
+
+Here are the highlights:
+
+### Connection Expiration Filter
+
+Thanks to the work of [May-Abo](https://github.com/May-Abo), a new filter joins the family! The Connection Expiration filter closes client connections after a configurable maximum age. This is perfect for dynamic environments like Kubernetes where you want to rebalance connections across proxy instances as pods scale up or down.
+
+### Entity Isolation Filter
+
+Multi-tenancy gets even better with the Entity Isolation filter. Initially supporting `groupId` and `transactionalId` entity types, this filter helps you enforce isolation boundaries between tenants sharing a cluster.
+
+### Apicurio v3 Upgrade
+
+Record validation just got a major upgrade with Apicurio v3. The default schema identification has changed from `globalId` to `contentId` for better interoperability with Confluent-based Kafka clients. You can still use the old behavior by setting `wireFormatVersion` to `V2`, though this mode is deprecated and will be removed in a future release.
+
+### Kubernetes Operator Enhancements
+
+Two improvements for Kubernetes users:
+- **Server-Side Apply**: The operator now uses Server-Side Apply for all dependent resources. Existing deployments are unaffected, and externally-applied patches (like annotations from observability tooling) will now survive operator reconciles.
+- **OpenShift Route Support**: Enable external access to Virtual Clusters via OpenShift Routes using `KafkaProxyIngress.spec.openShiftRoute`. Off-cluster client access is now a breeze on OpenShift.
+
+### Schema Validation with Internal Certificates
+
+You can now use schema validation with a schema registry protected by internally signed TLS certificates. One less obstacle for air-gapped or enterprise environments.
+
+### Javadocs on the Website
+
+Public API Javadocs are now published alongside version-specific documentation on [kroxylicious.io](https://kroxylicious.io), making it easier to explore our APIs without leaving your browser.
+
+### Configuration Improvements
+
+- **Configurable Netty shutdown**: New `shutdownQuietPeriod` and `shutdownTimeout` fields give you fine-grained control over Netty shutdown behavior with Go-style durations.
+- **Duration serialization**: Filter Config classes can now use `Duration` types that automatically serialize to/from Go-style strings (e.g., "1h") without any annotations.
+
+### Artefacts
+
+Binaries are attached to the GitHub [release](https://github.com/kroxylicious/kroxylicious/releases/tag/v0.20.0) and available through [Maven Central](https://repo1.maven.org/maven2/io/kroxylicious/kroxylicious-app/0.20.0/).
+
+Container images are available on quay.io:
+
+| Image | Repository |
+|---|---|
+| Proxy | [quay.io/kroxylicious/kroxylicious:0.20.0](https://quay.io/repository/kroxylicious/kroxylicious?tab=tags) |
+| Operator | [quay.io/kroxylicious/operator:0.20.0](https://quay.io/repository/kroxylicious/operator?tab=tags) |
+
+### Feedback
+
+We'd love to hear from you! Whether you're kicking the tyres, running Kroxylicious in production, or just find the project interesting — drop by and say hello.
+You can reach us through [Slack](https://kroxylicious.slack.com), [GitHub](https://github.com/kroxylicious/kroxylicious/issues) or even [bsky](https://bsky.app/profile/kroxylicious.io)), or tell us in person on one of our upcoming [community calls]({% link join-us/community-call/index.md %}).