From e76311872e6dba65e862cba7e4549327bc41fcca Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?C=C3=A9dric=20Verstraeten?= Date: Tue, 11 Aug 2026 12:06:27 +0000 Subject: [PATCH] feat(hub): update chart version to 0.127.0 and add MongoDB TLS configuration options --- charts/hub/Chart.yaml | 2 +- charts/hub/README.md | 5 +++++ charts/hub/values.yaml | 3 ++- 3 files changed, 8 insertions(+), 2 deletions(-) diff --git a/charts/hub/Chart.yaml b/charts/hub/Chart.yaml index 13b41f0..8ec42f4 100644 --- a/charts/hub/Chart.yaml +++ b/charts/hub/Chart.yaml @@ -16,7 +16,7 @@ type: application # This is the chart version. This version number should be incremented each time you make changes # to the chart and its templates, including the app version. # Versions are expected to follow Semantic Versioning (https://semver.org/) -version: 0.126.2 +version: 0.127.0 # This is the version number of the application being deployed. This version number should be # incremented each time you make changes to the application. Versions are not expected to diff --git a/charts/hub/README.md b/charts/hub/README.md index f9cef15..19f5f78 100644 --- a/charts/hub/README.md +++ b/charts/hub/README.md @@ -53,6 +53,11 @@ Below all configuration options and parameters are listed. | `mongodb.password` | MongoDB user password, by default `'yourmongodbpassword'` | `"yourpassword"` | | `mongodb.retryWrites` | Enable or disable MongoDB retryable writes. | `"true"` | | `mongodb.flavor` | Backend engine flavor: `"mongodb"` (native MongoDB / Atlas) or `"documentdb"` (AWS DocumentDB). The `documentdb` flavor disables features DocumentDB does not support (geospatial queries/indexes, complex `$lookup` pipelines). When set to `documentdb`, also set `mongodb.retryWrites: "false"`. | `"mongodb"` | +| `mongodb.tls.enabled` | Enable TLS for MongoDB connections. When `mongodb.uri` is set, the chart appends missing `tls=true` and `tlsCAFile` query parameters. | `false` | +| `mongodb.tls.existingSecret` | Existing Kubernetes Secret containing the MongoDB CA bundle. The Secret is mounted into every workload that consumes `mongodb-config`. | `""` | +| `mongodb.tls.caFileName` | Key and filename of the CA bundle in `mongodb.tls.existingSecret` (for AWS DocumentDB, typically `global-bundle.pem`). | `""` | +| `mongodb.tls.mountPath` | Read-only directory where the MongoDB CA Secret is mounted. | `"/etc/mongodb/tls"` | +| `mongodb.tls.insecureSkipVerify` | Skip MongoDB certificate and hostname verification. This is insecure and intended only for local testing. | `false` | | `mqtt.host` | MQTT (Vernemq) hostname. | `"mqtt.yourdomain.com"` | | `mqtt.port` | MQTT (Vernemq) port for WSS (secure sockets), by default `'8443'`. | `"8443"` | | `mqtt.protocol` | MQTT (Vernemq) protocol, by default `'wss'`. | `"wss"` | diff --git a/charts/hub/values.yaml b/charts/hub/values.yaml index abea01c..e9e99a5 100644 --- a/charts/hub/values.yaml +++ b/charts/hub/values.yaml @@ -60,7 +60,8 @@ mongodb: # and indexes, complex $lookup pipelines, etc.). When using DocumentDB you # should also set retryWrites: "false". flavor: "mongodb" - # TLS for MongoDB-compatible backends. AWS DocumentDB requires TLS and a + # TLS for MongoDB-compatible backends. When uri is set, missing TLS query + # parameters are appended automatically. AWS DocumentDB requires TLS and a # trusted RDS CA bundle, typically stored in an existing Kubernetes Secret. tls: enabled: false