All notable changes to this project will be documented in this file. This project adheres to Semantic Versioning.
- Added non-root image support
- #92 Fixes custom secret and configmap issues.
- #91 Add extra containers supports.
- #89 Installation stuck at "waiting on database connection"
- #83 Database hostname and port should be quoted when using external databases
- #81 Install passbolt with an existing Postgresql server.
- Integration tests for passbolt with postgresql were added.
- #76 Allow use of alternate postgresql port.
- Integration tests were added.
- #69 Introduce the ability to use different tls certificates on ingress and api.
- #68 Use static names for pod internal references (container and volumes)
- #61 feat: use list instead of string for extraVolumes and extraVolumeMounts values.
- #62 expose the HTTP port in the service.
- Passbolt postgresql secret not using DEFAULT_DATASOURCES_PORT and DEFAULT_DATASOURCES_HOST correctly when calculating DEFAULT_DATASOURCES_URL
- #67 feat: add value for supplying an existing secret containing the JWT server keypair
- #74 Per architecture kubectl download
- #71 fix: set JWT private key in the secret
- #60 feat: add value for supplying an existing secret containing the GPG server keypair
- #59 feat: add email from name and email transport timeout to the plain env
- #65 Passbolt server cannot start with Istio injection enabled
- Removed debug line from deployment.yaml that leaks pgpassword to stdout
- #33 Helm charts generating incorrect jwt key and pem
- #56 Cronjob "cron-proc-email" and few other resources doesn't take imageRegistry global parameter
- #55 Deploying with postgres db
- #52 pullPolicy incorrect rendering
- New values tls.existingSecret and tls.autogenerate to control injecting ssl certificates in passbolt containers and ingress
- Bump passbolt version 4.1.2-1-ce
This release adds the ability to inject extra pod labels on passbolt pods and bumps the redis chart version.
- #40 Added ability to inject extra pod labels
- #41 Update Redis chart to v17.15.2
This release includes breaking changes .Values.redisProxyResources now is .Values.app.cache.redis.sentinelProxy.resources
- #29 Missing redis resources field
- #30 Inject variables to pods from existing K8s secrets and inject extra env variables.
- Added capability of using specific client on init database container, fixes #26
- Allow mounting custom volumes #25
- Bumped passbolt docker version to 4.0.2-2-ce that comes with support for debian bookworm and php 8.2.
- #18 Allow setting annotations on service
- Passbolt v4 as default application deployment version. Please read: https://help.passbolt.com/releases/ce/get-up-stand-up
- Fix issue when disable sentinel proxy on api #17
- Added tests for disabled redis proxy
- Bumped bitnami mariadb dependency to 11.5.7, fixes #15
- Removed existingClaim from mariadb secondary in values, fixes #14
- Moved defaultsfile.cnf to /tmp/defaultsfile.cnf to allow non-root deployments, fixes #13
- Typo in JWT values #16
- Values.service.targetPort sync in deployment.yaml to allow changing container ports for non-root deployments
This release fixes a few issues reported by the community regarding the use of HPA. Using the autoscaling/v2 api would require you run a 1.23 or greater kubernetes cluster. It also merges some PR to add more control over the bitnami charts used by default.
Thanks to @plusiv and @cm3brian for their contributions!
- #10 feat: add mariadb persistence options
- #11 Incorrect/not guaranteed refs present
This release contains breaking changes!!!
In order to support rootless container images we have removed the installation of php-redis during the deployment and moved such dependency to passbolt debian packages. (Rootless container images do not allow to install packages for obvious reasons). By moving the php-redis dependency to our debian packages there is no need to install anything during the deployment of this chart.
The downside however is that now this chart requires passbolt-3.12.0-3 as minimal docker image.
We have also include a few contributions from the community, thanks to all of you who helped during this release!
- #6 make kubectl more flexible
- Support for rootless images in HA scenarios
- #9 set default value for EMAIL_TRANSPORT_DEFAULT_HOST
- Bump passbolt docker image tag to 3.11.1-1
- Bump passbolt docker image tag to 3.11.0-1
- Merged #3
- Added test for gpg volumes on cronjob
- Bump passbolt default version to 3.10.0-1-ce
- Bump passbolt-library default version to 0.2.7
- Readme images
- Automatic generation of server keys if not provided.
- Support for multiple Passbolt pods by using a redis proxy and storing the sessions in redis cache.
- Kubernetes cronjob to process emails.
- Unit test for multiple and not all resources.
- Support for rbac, ingress and network policies.