Merge pull request #68 from linuxfoundation/agaete/reloader

feat: annotate heimdall and openfga with reloader for pod restarts

Author: agaetep

.cspell.json

@@ -34,7 +34,8 @@
     "totp",
     "traefik",
     "webauthn",
-    "websecure"
+    "websecure",
+    "stakater"
   ],
   "flagWords": [
     "abort",

charts/lfx-platform/Chart.lock

@@ -43,7 +43,7 @@ dependencies:
   version: 0.2.3
 - name: lfx-v2-access-check
   repository: oci://ghcr.io/linuxfoundation/lfx-v2-access-check/chart
-  version: 0.2.3
+  version: 0.2.4
 - name: lfx-v2-indexer-service
   repository: oci://ghcr.io/linuxfoundation/lfx-v2-indexer-service/chart
   version: 0.4.4
@@ -56,5 +56,5 @@ dependencies:
 - name: lfx-v2-auth-service
   repository: oci://ghcr.io/linuxfoundation/lfx-v2-auth-service/chart
   version: 0.2.5
-digest: sha256:762d9c09282b2130f84066a2ba188317a88d3922c3befa86db83ca695345490f
-generated: "2025-10-07T14:43:56.084279178-07:00"
+digest: sha256:c2f9cd38a1bfa9f1b7eed4d7984617b78a066aa7c76b72b9c293162b446e0632
+generated: "2025-10-10T09:01:46.100319+01:00"

charts/lfx-platform/Chart.yaml

@@ -5,7 +5,7 @@ apiVersion: v2
 name: lfx-platform
 description: LFX Platform v2 Helm chart
 type: application
-version: 0.3.1
+version: 0.3.2
 icon: https://github.com/linuxfoundation/lfx-v2-helm/raw/main/img/lfx-logo-color.svg
 dependencies:
   - name: traefik
@@ -14,11 +14,11 @@ dependencies:
     condition: traefik.enabled
   - name: openfga
     repository: https://openfga.github.io/helm-charts
-    version: ~0.2.37
+    version: ~0.2.38
     condition: openfga.enabled
   - name: heimdall
     repository: oci://ghcr.io/dadrus/heimdall/chart
-    version: ~0.15.6
+    version: ~0.15.7
     condition: heimdall.enabled
   - name: nats
     repository: https://nats-io.github.io/k8s/helm/charts/

charts/lfx-platform/values.yaml

@@ -103,6 +103,10 @@ gateway:
 openfga:
   enabled: true
 
+  # Enable reloader to restart pods when ConfigMap or Secrets change
+  podAnnotations:
+    reloader.stakater.com/auto: "true"
+
   # Disable playground by default
   playground:
     enabled: false
@@ -146,6 +150,9 @@ heimdall:
     volumeMounts:
       - name: heimdall-signer-cert
         mountPath: "/heimdall/cert/"
+    # Enable reloader to restart pods when ConfigMap or Secrets change
+    annotations:
+      reloader.stakater.com/auto: "true"
 
   env:
     CLIENT_SECRET: