All notable changes to this repository are documented in this file.
This changelog is chart-scoped to support multiple charts over time.
- No changes yet.
- Bumped Pangolin chart version to
0.1.0-alpha.1and app version to1.18.3. - Updated Artifact Hub image references to Pangolin
1.18.3(including PostgreSQL variant) for both Docker Hub and GHCR.
- Initial alpha release of the Pangolin Helm chart (
charts/pangolin).
- No changes yet.
- Bumped Newt chart version to
1.5.0and app version to1.12.5. - Updated Artifact Hub image references to Newt
1.12.5for both Docker Hub and GHCR.
- Added support for namespace creation and Pod Security Admission labels, including per-instance namespace overrides.
- Added per-instance ServiceAccount override support (create/name/automount) when global override is enabled.
- Added
tests.enabledcontrols (global and per-instance) to manage tester UDP port exposure. - Added helper logic for effective namespace, namespace labels, PSA labels, tests enablement, and metrics admin port resolution.
- Added
auth.createSecretandauth.envVarsDirectauthentication modes for inline/development workflows. - Added runtime NOTES warnings for insecure inline credential patterns.
- Added explicit namespace rendering for generated ConfigMaps, Services, Secrets, and ServiceAccounts in multi-namespace deployments.
- Added GHCR OCI publish step in release automation for packaged chart artifacts.
- Bumped Newt chart version to
1.4.0and app version to1.12.3. - Changed default RBAC behavior to least-privilege by setting
rbac.create=false. - Changed tester port behavior to disabled by default unless enabled via tests settings or legacy tester port config.
- Refactored Role/RoleBinding rendering to create one pair per unique effective namespace when
clusterRole=false. - Updated metrics defaults and behavior around
adminAddr(default:2112), including metrics Service default port alignment. - Increased default
revisionHistoryLimitfrom3to10. - Hardened release workflow for tag-driven releases, expanded permissions, and improved signing/publishing flow.
- Fixed metrics env var rendering to avoid YAML block sequence errors.
- Fixed OTLP protocol enum usage to
http/protobuf. - Fixed container ports and Prometheus annotations to follow
adminAddr-driven metrics exposure. - Fixed NetworkPolicy tester ingress generation to avoid opening tester UDP rules when tester exposure is disabled.
- Fixed secret generation in create-secret mode to include endpoint/id/secret credentials consistently.
- Fixed auth validation for partial inline credentials and conflicting auth mode combinations.
- Removed implicit default RBAC creation; RBAC is now opt-in.
- Removed the broad all-env deployment test from active execution and retained it as a disabled fixture.
- Added support for Newt 1.11 provisioning via
NEWT_PROVISIONING_KEYandNEWT_NAME(backward compatible with existing ID/secret installs). - Added provisioning blueprint support via
PROVISIONING_BLUEPRINT_FILE. - Automatically generates ConfigMaps for provisioning blueprints.
- Added deployment-level validation for provisioning blueprint configuration.
- Added writable config persistence support using either
emptyDiror an existing PVC. - Automatically wires
CONFIG_FILEfor persistent configuration setups. - Added optional pprof enablement via
NEWT_PPROF_ENABLED. - Added helm-unittest coverage for provisioning blueprint ConfigMap rendering.
- Updated documentation and examples for Newt 1.11.0, including upstream behavior notes.
- Updated helm-unittest assertions to current syntax (
exists/notExists). - Improved chart validation and cross-platform compatibility in CI workflows.
- Added development values file support for CI workflows.
- Added new configuration options:
portnoClouddisableClientsblueprintFileenforceHcCert
- Added enhanced metrics configuration options:
adminAddrasyncBytesregionotlpEnabled
- Added OpenTelemetry (OTEL) configuration support.
- Added split PEM mTLS support (
mode: pem) with:TLS_CLIENT_CERTTLS_CLIENT_KEYTLS_CLIENT_CAS
- Added Artifact Hub metadata annotations (support, documentation, links).
- Added Helm chart provenance signing support.
- Added resource requests and limits for test workloads.
- Reworked NetworkPolicy templates to consistently honor both:
global.networkPolicy.*- chart-local
networkPolicy.*
- Reworked PodDisruptionBudget templates to consistently honor both:
global.podDisruptionBudget.*- chart-local
podDisruptionBudget.*
- Improved test scripts for connection and readiness checks with better error handling.
- Updated documentation and examples for Newt 1.10.1.
- Fixed JSON Schema generation failures caused by malformed
# @schemaannotations invalues.yaml. - Fixed Helm template parsing/runtime errors caused by corrupted helper templates (PR #12).
- Fixed versioning inconsistencies introduced by a previously merged change set (PR #12).
- Fixed metrics Service rendering when
global.metrics.service.enabled=trueby preserving root context acrossrange. - Fixed Helm test
ImagePullBackOffby:- Updating default kubectl test image to
registry.k8s.io/kubectl - Honoring
global.tests.image.* - Resolving shell compatibility issues
- Updating default kubectl test image to
- Updated Kubernetes compatibility to
>=1.28.15-0. - Added and improved Artifact Hub metadata:
sourcehomepagedocumentation- screenshot annotations
- Initial stable release of the Newt Helm chart (
charts/newt).