Update documentation (Strimzi CI build )

Signed-off-by: Strimzi CI <ci@strimzi.io>

Author: Strimzi CI

contributing/guide/contributing.html

@@ -1472,7 +1472,7 @@ <h3 id="access_another_writers_unmerged_commits"><a class="link" href="#access_a
 </ol>
 </div>
 <div class="paragraph">
-<p><em>Revised on 2026-09-05 14:20:11 UTC</em></p>
+<p><em>Revised on 2026-09-07 09:11:23 UTC</em></p>
 </div>
 </div>
 </div>

contributing/guide/full.html

@@ -1914,15 +1914,15 @@ <h3 id="access_another_writers_unmerged_commits"><a class="link" href="#access_a
 </ol>
 </div>
 <div class="paragraph">
-<p><em>Revised on 2026-09-05 14:20:09 UTC</em></p>
+<p><em>Revised on 2026-09-07 09:11:21 UTC</em></p>
 </div>
 </div>
 </div>
 </div>
 </div>
 <div id="footer">
 <div id="footer-text">
-Last updated 2026-09-05 14:20:02 UTC
+Last updated 2026-09-07 09:11:14 UTC
 </div>
 </div>
 <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.18.3/highlight.min.js"></script>

docs/operators/in-development/configuring-book.html

@@ -3464,34 +3464,34 @@ <h3 id="configuring_service_account_based_authentication"><a class="link" href="
 <div class="ulist">
 <ul>
 <li>
-<p><code>oauth.jwks.endpoint.uri</code> points to the JWKS endpoint of the Kubernetes API server, which publishes the keys used to sign the Service Account tokens.
-Tokens are validated locally by the Kafka nodes using these keys.</p>
+<p><code>principal.builder.class</code> maps the validated tokens to Kafka principals.
+For more information on the requirements that apply to principal builders, see the description of setting a custom principal builder that follows.</p>
 </li>
 <li>
-<p><code>oauth.valid.issuer.uri</code> is the token issuer of your Kubernetes cluster and is checked against the <code>iss</code> claim of the token.</p>
+<p><code>unsecuredLoginStringClaim_sub</code> satisfies the parameter validation of the <code>OAuthBearerLoginModule</code> and isn&#8217;t used for authentication.</p>
 </li>
 <li>
-<p><code>oauth.server.bearer.token.location</code> and <code>oauth.ssl.truststore.location</code> point to the Service Account token and the Kubernetes CA certificate mounted by Strimzi into the Kafka containers.
-The token is used to authenticate against the JWKS endpoint, which is not available to unauthenticated users by default.</p>
+<p><code>oauth.check.access.token.type</code> is disabled because Service Account tokens don&#8217;t contain the <code>typ</code> claim expected by the OAuth standard.</p>
 </li>
 <li>
-<p><code>oauth.username.claim</code> uses the <code>sub</code> claim of the token as the name of the Kafka principal.</p>
+<p><code>oauth.custom.claim.check</code> restricts the listener to tokens issued for a specific audience.</p>
 </li>
 <li>
-<p><code>oauth.check.access.token.type</code> is disabled because Service Account tokens don&#8217;t contain the <code>typ</code> claim expected by the OAuth standard.</p>
+<p><code>oauth.valid.issuer.uri</code> is the token issuer of your Kubernetes cluster and is checked against the <code>iss</code> claim of the token.</p>
 </li>
 <li>
-<p><code>oauth.include.accept.header</code> is disabled because the Kubernetes API server rejects requests that set the <code>Accept</code> header.</p>
+<p><code>oauth.jwks.endpoint.uri</code> points to the JWKS endpoint of the Kubernetes API server, which publishes the keys used to sign the Service Account tokens.
+Tokens are validated locally by the Kafka nodes using these keys.</p>
 </li>
 <li>
-<p><code>unsecuredLoginStringClaim_sub</code> satisfies the parameter validation of the <code>OAuthBearerLoginModule</code> and isn&#8217;t used for authentication.</p>
+<p><code>oauth.username.claim</code> uses the <code>sub</code> claim of the token as the name of the Kafka principal.</p>
 </li>
 <li>
-<p><code>oauth.custom.claim.check</code> restricts the listener to tokens issued for a specific audience.</p>
+<p><code>oauth.server.bearer.token.location</code> and <code>oauth.ssl.truststore.location</code> point to the Service Account token and the Kubernetes CA certificate mounted by Strimzi into the Kafka containers.
+The token is used to authenticate against the JWKS endpoint, which is not available to unauthenticated users by default.</p>
 </li>
 <li>
-<p><code>principal.builder.class</code> maps the validated tokens to Kafka principals.
-For more information on the requirements that apply to principal builders, see the description of setting a custom principal builder that follows.</p>
+<p><code>oauth.include.accept.header</code> is disabled because the Kubernetes API server rejects requests that set the <code>Accept</code> header.</p>
 </li>
 </ul>
 </div>
@@ -6189,7 +6189,7 @@ <h2 id="type-ProjectedVolumeSource-reference"><a class="link" href="#type-Projec
 <td class="tableblock halign-left valign-top"><p class="tableblock">serviceAccountToken</p></td>
 <td class="tableblock halign-left valign-top"><p class="tableblock"><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.32/#serviceaccounttokenprojection-v1-core">ServiceAccountTokenProjection</a></p></td>
 <td class="tableblock halign-left valign-top"><div class="content"><div class="paragraph">
-<p>information about the serviceAccountToken data to project.</p>
+<p>Information about the serviceAccountToken data to project.</p>
 </div></div></td>
 </tr>
 </tbody>
@@ -10607,18 +10607,18 @@ <h3 id="using_kubernetes_service_account_tokens_for_authentication"><a class="li
 <div class="ulist">
 <ul>
 <li>
-<p>The <code>projected</code> volume asks Kubernetes to issue a token for the Service Account of the operand pod with the <code>my-internal-listener</code> audience and to store it in a file named <code>token</code>.</p>
+<p><code>sasl.login.callback.handler.class</code> sets the Strimzi callback handler that passes the token to the Kafka cluster.</p>
 </li>
 <li>
-<p>The volume is mounted at <code>/mnt/auth-token</code>, so the token is available in the <code>/mnt/auth-token/token</code> file.
-Additional volumes can be mounted only into paths that start with <code>/mnt</code>.
-For more information about additional volumes, see <a href="./configuring.html#con-common-configuration-volumes-reference" target="_blank" rel="noopener">Additional Volumes</a>.</p>
+<p><code>oauth.access.token.location</code> tells the Kafka client where to find the token file.</p>
 </li>
 <li>
-<p><code>oauth.access.token.location</code> tells the Kafka client where to find the token file.</p>
+<p>The <code>projected</code> volume asks Kubernetes to issue a token for the Service Account of the operand pod with the <code>my-internal-listener</code> audience and to store it in a file named <code>token</code>.</p>
 </li>
 <li>
-<p><code>sasl.login.callback.handler.class</code> sets the Strimzi callback handler that passes the token to the Kafka cluster.</p>
+<p>The volume is mounted at <code>/mnt/auth-token</code>, so the token is available in the <code>/mnt/auth-token/token</code> file.
+Additional volumes can be mounted only into paths that start with <code>/mnt</code>.
+For more information about additional volumes, see <a href="./configuring.html#con-common-configuration-volumes-reference" target="_blank" rel="noopener">Additional Volumes</a>.</p>
 </li>
 </ul>
 </div>

docs/operators/in-development/contributing-book.html

@@ -1472,7 +1472,7 @@ <h3 id="access_another_writers_unmerged_commits"><a class="link" href="#access_a
 </ol>
 </div>
 <div class="paragraph">
-<p><em>Revised on 2026-09-05 14:20:11 UTC</em></p>
+<p><em>Revised on 2026-09-07 09:11:23 UTC</em></p>
 </div>
 </div>
 </div>

docs/operators/in-development/full/configuring.html

@@ -3906,34 +3906,34 @@ <h3 id="configuring_service_account_based_authentication"><a class="link" href="
 <div class="ulist">
 <ul>
 <li>
-<p><code>oauth.jwks.endpoint.uri</code> points to the JWKS endpoint of the Kubernetes API server, which publishes the keys used to sign the Service Account tokens.
-Tokens are validated locally by the Kafka nodes using these keys.</p>
+<p><code>principal.builder.class</code> maps the validated tokens to Kafka principals.
+For more information on the requirements that apply to principal builders, see the description of setting a custom principal builder that follows.</p>
 </li>
 <li>
-<p><code>oauth.valid.issuer.uri</code> is the token issuer of your Kubernetes cluster and is checked against the <code>iss</code> claim of the token.</p>
+<p><code>unsecuredLoginStringClaim_sub</code> satisfies the parameter validation of the <code>OAuthBearerLoginModule</code> and isn&#8217;t used for authentication.</p>
 </li>
 <li>
-<p><code>oauth.server.bearer.token.location</code> and <code>oauth.ssl.truststore.location</code> point to the Service Account token and the Kubernetes CA certificate mounted by Strimzi into the Kafka containers.
-The token is used to authenticate against the JWKS endpoint, which is not available to unauthenticated users by default.</p>
+<p><code>oauth.check.access.token.type</code> is disabled because Service Account tokens don&#8217;t contain the <code>typ</code> claim expected by the OAuth standard.</p>
 </li>
 <li>
-<p><code>oauth.username.claim</code> uses the <code>sub</code> claim of the token as the name of the Kafka principal.</p>
+<p><code>oauth.custom.claim.check</code> restricts the listener to tokens issued for a specific audience.</p>
 </li>
 <li>
-<p><code>oauth.check.access.token.type</code> is disabled because Service Account tokens don&#8217;t contain the <code>typ</code> claim expected by the OAuth standard.</p>
+<p><code>oauth.valid.issuer.uri</code> is the token issuer of your Kubernetes cluster and is checked against the <code>iss</code> claim of the token.</p>
 </li>
 <li>
-<p><code>oauth.include.accept.header</code> is disabled because the Kubernetes API server rejects requests that set the <code>Accept</code> header.</p>
+<p><code>oauth.jwks.endpoint.uri</code> points to the JWKS endpoint of the Kubernetes API server, which publishes the keys used to sign the Service Account tokens.
+Tokens are validated locally by the Kafka nodes using these keys.</p>
 </li>
 <li>
-<p><code>unsecuredLoginStringClaim_sub</code> satisfies the parameter validation of the <code>OAuthBearerLoginModule</code> and isn&#8217;t used for authentication.</p>
+<p><code>oauth.username.claim</code> uses the <code>sub</code> claim of the token as the name of the Kafka principal.</p>
 </li>
 <li>
-<p><code>oauth.custom.claim.check</code> restricts the listener to tokens issued for a specific audience.</p>
+<p><code>oauth.server.bearer.token.location</code> and <code>oauth.ssl.truststore.location</code> point to the Service Account token and the Kubernetes CA certificate mounted by Strimzi into the Kafka containers.
+The token is used to authenticate against the JWKS endpoint, which is not available to unauthenticated users by default.</p>
 </li>
 <li>
-<p><code>principal.builder.class</code> maps the validated tokens to Kafka principals.
-For more information on the requirements that apply to principal builders, see the description of setting a custom principal builder that follows.</p>
+<p><code>oauth.include.accept.header</code> is disabled because the Kubernetes API server rejects requests that set the <code>Accept</code> header.</p>
 </li>
 </ul>
 </div>
@@ -6631,7 +6631,7 @@ <h2 id="type-ProjectedVolumeSource-reference"><a class="link" href="#type-Projec
 <td class="tableblock halign-left valign-top"><p class="tableblock">serviceAccountToken</p></td>
 <td class="tableblock halign-left valign-top"><p class="tableblock"><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.32/#serviceaccounttokenprojection-v1-core">ServiceAccountTokenProjection</a></p></td>
 <td class="tableblock halign-left valign-top"><div class="content"><div class="paragraph">
-<p>information about the serviceAccountToken data to project.</p>
+<p>Information about the serviceAccountToken data to project.</p>
 </div></div></td>
 </tr>
 </tbody>
@@ -11049,18 +11049,18 @@ <h3 id="using_kubernetes_service_account_tokens_for_authentication"><a class="li
 <div class="ulist">
 <ul>
 <li>
-<p>The <code>projected</code> volume asks Kubernetes to issue a token for the Service Account of the operand pod with the <code>my-internal-listener</code> audience and to store it in a file named <code>token</code>.</p>
+<p><code>sasl.login.callback.handler.class</code> sets the Strimzi callback handler that passes the token to the Kafka cluster.</p>
 </li>
 <li>
-<p>The volume is mounted at <code>/mnt/auth-token</code>, so the token is available in the <code>/mnt/auth-token/token</code> file.
-Additional volumes can be mounted only into paths that start with <code>/mnt</code>.
-For more information about additional volumes, see <a href="./configuring.html#con-common-configuration-volumes-reference" target="_blank" rel="noopener">Additional Volumes</a>.</p>
+<p><code>oauth.access.token.location</code> tells the Kafka client where to find the token file.</p>
 </li>
 <li>
-<p><code>oauth.access.token.location</code> tells the Kafka client where to find the token file.</p>
+<p>The <code>projected</code> volume asks Kubernetes to issue a token for the Service Account of the operand pod with the <code>my-internal-listener</code> audience and to store it in a file named <code>token</code>.</p>
 </li>
 <li>
-<p><code>sasl.login.callback.handler.class</code> sets the Strimzi callback handler that passes the token to the Kafka cluster.</p>
+<p>The volume is mounted at <code>/mnt/auth-token</code>, so the token is available in the <code>/mnt/auth-token/token</code> file.
+Additional volumes can be mounted only into paths that start with <code>/mnt</code>.
+For more information about additional volumes, see <a href="./configuring.html#con-common-configuration-volumes-reference" target="_blank" rel="noopener">Additional Volumes</a>.</p>
 </li>
 </ul>
 </div>
@@ -16447,7 +16447,7 @@ <h2 id="type-StrimziPodSetStatus-reference"><a class="link" href="#type-StrimziP
 </div>
 <div id="footer">
 <div id="footer-text">
-Last updated 2026-09-05 14:20:02 UTC
+Last updated 2026-09-07 09:11:14 UTC
 </div>
 </div>
 <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.18.3/highlight.min.js"></script>

docs/operators/in-development/full/contributing.html

@@ -1914,15 +1914,15 @@ <h3 id="access_another_writers_unmerged_commits"><a class="link" href="#access_a
 </ol>
 </div>
 <div class="paragraph">
-<p><em>Revised on 2026-09-05 14:20:09 UTC</em></p>
+<p><em>Revised on 2026-09-07 09:11:21 UTC</em></p>
 </div>
 </div>
 </div>
 </div>
 </div>
 <div id="footer">
 <div id="footer-text">
-Last updated 2026-09-05 14:20:02 UTC
+Last updated 2026-09-07 09:11:14 UTC
 </div>
 </div>
 <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.18.3/highlight.min.js"></script>

docs/operators/in-development/full/deploying.html

@@ -39182,7 +39182,7 @@ <h4 id="reference_based_messaging_flow"><a class="link" href="#reference_based_m
 </div>
 <div id="footer">
 <div id="footer-text">
-Last updated 2026-09-05 14:20:02 UTC
+Last updated 2026-09-07 09:11:14 UTC
 </div>
 </div>
 <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.18.3/highlight.min.js"></script>

docs/operators/in-development/full/glossary.html

@@ -1127,7 +1127,7 @@ <h3 id="user_operator"><a class="link" href="#user_operator">User Operator</a></
 </div>
 <div id="footer">
 <div id="footer-text">
-Last updated 2026-09-05 14:20:02 UTC
+Last updated 2026-09-07 09:11:14 UTC
 </div>
 </div>
 <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.18.3/highlight.min.js"></script>

docs/operators/in-development/full/overview.html

@@ -1790,7 +1790,7 @@ <h2 id="metrics-overview_str"><a class="link" href="#metrics-overview_str">10. M
 </div>
 <div id="footer">
 <div id="footer-text">
-Last updated 2026-09-05 14:20:02 UTC
+Last updated 2026-09-07 09:11:14 UTC
 </div>
 </div>
 <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.18.3/highlight.min.js"></script>

glossary/guide/full.html

@@ -1127,7 +1127,7 @@ <h3 id="user_operator"><a class="link" href="#user_operator">User Operator</a></
 </div>
 <div id="footer">
 <div id="footer-text">
-Last updated 2026-09-05 14:20:02 UTC
+Last updated 2026-09-07 09:11:14 UTC
 </div>
 </div>
 <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.18.3/highlight.min.js"></script>