Merge pull request #42 from opf/changeset-release/main

Release Tracking

.github/workflows/lint-test.yml

@@ -32,9 +32,14 @@ jobs:
             echo "changed=true" >> $GITHUB_OUTPUT
           fi
 
-      - name: Run chart-testing (lint)
+      - name: Run chart-testing (lint) WITHOUT version check
+        if: github.event.pull_request.title != 'Release Tracking'
         run: ct lint --target-branch ${{ github.event.repository.default_branch }} --check-version-increment=false
 
+      - name: Run chart-testing (lint) WITH version check
+        if: github.event.pull_request.title == 'Release Tracking'
+        run: ct lint --target-branch ${{ github.event.repository.default_branch }} --check-version-increment=true
+
       - name: Create kind cluster
         uses: helm/[email protected]
         if: steps.list-changed.outputs.changed == 'true'

CHANGELOG.md

@@ -1,7 +1,16 @@
 # @openproject/helm-charts
 
+## 3.0.0
+
+### Major Changes
+
+- 0a1c9a9: 
+  - rename `securityContext` to `containerSecurityContext` in `values.yaml`
+  - mount volumes for tmp directories to make containers work in accordance with best practices, that is with read-only file systems
+  - use secure defaults for container security policy
+
 ## 2.7.0
 
 ### Minor Changes
 
-- acf0e41: Allow OIDC attribute mapping in values
+- acf0e41: Allow OIDC attribute mapping in values

charts/openproject/Chart.yaml

@@ -1,25 +1,24 @@
 ---
-apiVersion: "v2"
-name: "openproject"
-description: "A Helm chart for running OpenProject via Kubernetes"
-home: "https://www.openproject.org/"
-icon: "https://www.openproject.org/assets/images/press/openproject-icon-original-color-41055eb6.png"
-type: "application"
-appVersion: "13"
-version: "2.7.0"
+apiVersion: v2
+name: openproject
+description: A Helm chart for running OpenProject via Kubernetes
+home: https://www.openproject.org/
+icon: https://www.openproject.org/assets/images/press/openproject-icon-original-color-41055eb6.png
+type: application
+appVersion: '13'
+version: 3.0.0
 maintainers:
-  - name: OpenProject
-    url: https://github.com/opf/helm-charts
+- name: OpenProject
+  url: https://github.com/opf/helm-charts
 dependencies:
-  - name: "postgresql"
-    repository: "https://charts.bitnami.com/bitnami"
-    version: "^12.1.6"
-    condition: "postgresql.bundled"
-  - name: "memcached"
-    repository: "https://charts.bitnami.com/bitnami"
-    condition: "memcached.bundled"
-    version: "^6.3.2"
-  - name: "common"
-    repository: "https://charts.bitnami.com/bitnami"
-    version: "^2.2.2"
-...
+- name: postgresql
+  repository: https://charts.bitnami.com/bitnami
+  version: "^12.1.6"
+  condition: postgresql.bundled
+- name: memcached
+  repository: https://charts.bitnami.com/bitnami
+  condition: memcached.bundled
+  version: "^6.3.2"
+- name: common
+  repository: https://charts.bitnami.com/bitnami
+  version: "^2.2.2"

package.json

@@ -2,7 +2,7 @@
     "name": "@openproject/helm-charts",
     "private": true,
     "author": "OpenProject GmbH",
-    "version": "2.7.2",
+    "version": "3.0.0",
     "license": "",
     "scripts": {
         "changeset:version": "./node_modules/.bin/changeset version && script/version"