All changes to this chart will be documented in this file.
- Allow
tests.image
to be configured and update README accordingly. - Allow
tests.initContainers.image
to be configured and update README accordingly.
- Use the networkPolicy.prometheusNamespace value for the network policy namespace selector
- Uncomment default value in values.yaml for backwards compatibility
- Add support for monitoringPasscode passed as a secret and removal of livenessprobe httpheader defined in clear text
- Bump apiVersion to v2
- Set the number of allowed replicas to 0 and 1
- Add documentation for ingress tls
- Add documentation for sonarProperties and sonarSecretProperties
- Add the possibility of using a secret for customizing the admin password
- Updated SonarQube to 9.6.1
- Updated SonarQube to 9.6.0
- Add support for Openshift Route labels and annotations
- Fix issue with Openshift route name to use use fullname instead of name
- Add documentation for ingress annotations
- updated SonarQube to 9.5.0
- Fix issue with additional network policy
- Add automount service account token flag
- Add documentation to setup web context via environment variable
- Fix for issue (#215)[https://github.com/SonarSource/helm-chart-sonarqube/issues/215], adding tolerations and affinity to change password hooks
- updated SonarQube to 9.4.0
- Specify location of .netrc file when downloading plugins that require auth
- Specify service account name in change admin password hook
- secure admin password in k8s secret
- no longer automount service account token
- changed description of dependency postgresql chart
- changed links to get a better overview of sources
- Updated all instances of the caCerts enabled check
- updated SonarQube to 9.3.0
- add securitycontext to wait-for-db and change-password hook
- properties are now correctly set
livenessProbe.failureThreshold
was never rendered
- added missing logic for
caCerts.enabled
- fix missing
SONAR_WEB_SYSTEMPASSCODE
environment variable causing failed liveness checks
- added possibility to define host of a route
- detached sonarqube edition from version
- added possibility to define the ingress pathType
- added network policies
- added possibility to define ressources for the change admin password hook
- default permissions for prometheus injector now align with pod fs permissions
- updated dependencies
- admin hook now honors web context
- added support for multiple image pull secrets
- added
image.pullSecrets
- added
- deprecated support for singular image pull secret
- deprecated
image.pullSecret
- deprecated
- fixed missing image pull secret in admin hook job
- updated SonarQube to 9.2.4
- updated SonarQube to 9.2.3
- updated SonarQube to 9.2.2
- fix hardcoded reference to port 9000
- updated SonarQube to 9.2.1
- updated SonarQube to 9.2.0
- fixed missing POD level security context for statefulset deployment
- added link to community support forum
- Use liveness endpoint instead of helth endpoint for liveness probe
- fixed wrong scc user reference if name was explicitly set
- fixed serviceaccount logic
- fixed wrong artifact hub images annotation
- updated sonarqube to 9.1.0
- added resources to ui-test pod template
- fixed artifacthub annotations
- fixed
invalid: metadata.labels: Invalid value
error on thechart
label of the pvc
- fixed condition check to add new certificates
- updated default application version to 9.0.1
- release to helm repository
- update jdbc overwrite values
- replace
jdbcUrlOverride
withjdbcOverwrite.jdbcUrl
- remove useless
jdbcDatabaseType
(was always postgres)
- replace
- deprecate
postgresql.postgresqlServer
,postgresql.existingSecret
andpostgresql.existingSecretPasswordKey
in favor of newjdbcOverwrite
values - update dependency Charts
bitnami/postgresql
from 8.6.4 to 10.4.8ingress-nginx/ingress-nginx
from 3.29.0 to 3.31.0
- Add optional ingress parameter
ingressClassName
- added route support for OpenShift deployments
- Add an additional configuration parameter
extraContainers
to allow an array of containers to run alongside the sonarqube container
- fixed usage of
sonarSecretProperties
- bump jmx_exporter to 0.16.0
- added hostAliases to deploymentType statefulset
- made prometheus exporter port configurable and support prometheus PodMonitor
- make sure SQ is restarted when the JMX Prometheus exporter agents configuration changes
- JMX Prometheus exporter agent is now also enabled on the CE process
prometheusExporter.ceConfig
allows specific config of the JMX Prometheus exporter agent for the CE process
- added prometheusExporter.noCheckCertificate option
- add missing imagePullSecrets in sts install type
- fix typo in initfs
- fix plugin installation init container permissions
- fix duplicated mount point for conf when sonar.properties are defined
- fix invalid yaml render in
secret.yaml
when using external postgresql
- added
prometheusExporter.downloadURL
(custom download URL for the agent jar)
- replace
rjkernick/alpine-wget
withcurlimages/curl
- update
install-plugins
script - fix possible issue with prometheus init container and
env
set in thevalues.yaml
- fix for missing
serviceAccountName
in STS deployment kind
- fixed prometheus config volume mount if disabled
- switched from wget to curl image per default for downloading agent
- added support for proxy envs
- added option to configure CE java opts separately
- fixed missing conditional that was introduced in 0.9.2.2 to sonarqube-sts.yaml
- updated default application version to 8.9
- changed default deployment from replica set to statefull set
- added default support for prometheus jmx exporter
- added init filesystem container
- added nginx-ingress as optional dependency
- updated application version to 8.8-community
- improved readiness/startup and liveness probes
- improved documentation
- Change order of env variables to better support 7.9-lts
- Add support for setting custom annotations in admin hook job.
- Add the possibility of definining the secret key name of the postgres password.
- Add Ingress default backend for GCE class
- Added namespace to port-foward command in notes.
- Added a condition to deployment.yaml so that
wait-for-db
initContainer is only created ifpostgresql.enabled=true
- Updated the configuration table to include the additional keys added in release 9.2.0.
- Added functionality for deployments to OpenShift clusters.
- .Values.OpenShift flag to signify if deploying to OpenShift.
- Ability to have chart generate an SCC allowing the init-sysctl container to run as privileged.
- Setting of a seperate securityContext section for the main SonarQube container to avoid running as root.
- Exposing additional
postreSQL
keys in values.yaml to support configuring postgres to run under standard "restricted" or "anyuid"/"nonroot" SCCs on OpenShift.
- Added initContainer
wait-for-db
to await postgreSQL successful startup before starting SonarQube, to avoid race conditions.
- Update SonarQube to 8.5.1.
- Fix: Purge plugins directory before download.
- Update SonarQube to 8.5.
- Breaking change: Rework init containers.
- Move global defaults from
plugins
section toinitContainers
. - Update container images.
- Move global defaults from
- Deprecation:
elasticsearch.configureNode
in favor ofinitSysctl.enabled
. - Rework sysctl with support for custom values.
- Rework plugins installation via
opt/sonarqube/extensions/downloads
folder that is handled by SonarQube itself.- Breaking change: remove
plugins.deleteDefaultPlugins
as SonarQube stores bundled plugins out ofopt/sonarqube/extensions
.
- Breaking change: remove
- Rename deprecated
SONARQUBE_
environment variables toSONAR_
ones. - Breaking change: Rename
enabledTests
totests.enabled
. - Add
terminationGracePeriodSeconds
.