Releases: passbolt/charts-passbolt
1.3.1
1.3.0
Announcing the immediate availability of passbolt's helm chart 1.3.0
This is a minor change release that adds support for running the non-root passbolt image using this helm chart.
1.2.0
Announcing the immediate availability of passbolt's helm chart 1.2.0
This is a minor change release that fixes bugs reported by the community when
using custom secrets and configmaps and also adds support to add extra containers
to the deployment.
1.1.2
1.1.1
1.1.0
1.0.0
Announcing the immediate availability of passbolt's helm chart 1.0.0.
This is a major release that introduces some breaking changes contributed
by the community.
Thanks to all the community members that helped us to improve this chart
and reach version 1.0.0!! 🎉
Following there is a list of breaking changes and possible migration paths
from previous chart versions. Please keep in mind that we can't cover all
possible scenarios.
If you are having issues upgrading from older chart versions please let us
known by opening an issue in Github
TL;DR
List of breaking changes:
- Global
tls
value has been removed in favour ofingress.tls
andapp.tls
ingress.tls[].secretName
has been removed in favour ofingress.tls[].existingSecret
extraVolumes
andextraVolumeMounts
values are now a list instead of a string.- Expose the HTTP port in the service.
service.port
,service.name
and
service.targetPort
have been removed in favour ofservice.ports
in order to expose configurable http and https ports.
Ingress and TLS related changes
Global tls
value has been removed to allow users to have different TLS
certificates injected on ingress objects and passbolt containers.
Ingress TLS is now managed with ingress.tls
value, while passbolt TLS
is managed with app.tls
field in the values file.
Migrate from old TLS configuration
ingress.tls[].secretName
has been removed in favour of
ingress.tls[].existingSecret
for clarity.
Inject same SSL certificate on ingress and service
Users that were injecting the same secret on Ingress objects and passbolt
container will have to migrate to a configuration similar to:
ingress.tls:
- autogenerate: false
existingSecret: mySSLSecret
hosts: [yourhost.com]
app.tls:
- autogenerate: false
existingSecret: mySSLSecret
Inject separate certificates on ingress and service
Users who want to inject different SSL certificates on ingress objects and passbolt
containers now they have a way to do it by setting:
ingress.tls:
- autogenerate: false
existingSecret: myIngressSSLSecret
hosts: [yourhost.com]
app.tls:
- autogenerate: false
existingSecret: mypassboltSSLSecret
Using new auto-generated TLS certificate function
Users coming from previous installations that use auto-generated certificates from
this chart will experience a renewal of such certificates when upgrading to version 1.0.0
0.7.2
0.7.1
Announcing the immediate availability of passbolt's official helm chart 0.7.1.
This release contains support for providing external secrets for JWT keys
as well as automatic support to download kubectl binaries based on host
cpu architecture.
Thanks to all the community members involved in this release!
0.7.0
Announcing the immediate availability of passbolt's official helm chart 0.7.0.
First of all, thanks to @Kuruyia for the contributions made to this new release.
One of them adds the ability to inject the GPG key pair from an existing secret
and another one to add some defaults values on the email configuration.
The release also brings a new field to toggle the initContainer that waits for
the database to be ready, so users that use service mesh or they have already a
running database can disable it.