improvement(helm): helm chart updates with security, ESO, and docs overhaul - #4565

Merged

waleedlatif1 merged 26 commits into

stagingfrom

waleed/helm-chart-production-ready

May 12, 2026

Commits on May 12, 2026

improvement(helm): production-ready chart with security, ESO, and docs overhaul
waleedlatif1
committed
c7774fe
fix(helm): correct resource names in README (sim-sim-* → sim-*)
waleedlatif1
committed
80bfaf8
improvement(helm): split app/realtime env into Secret-bound + inline defaults
waleedlatif1
committed
7644ba4
fix(helm): address PR review — cronjob validation, ESO apiVersion, secret merge order, image guard
waleedlatif1
committed
c6a4478
fix(helm): require critical secrets to be mapped when ESO is enabled
waleedlatif1
committed
794e418
fix(helm): auto-enable PDB when HPA minReplicas > 1
waleedlatif1
committed
3340872
fix(helm): prevent realtime envDefaults from masking app.env Secret values; add StatefulSet upgrade NOTES
waleedlatif1
committed
c0bf587
feat(helm): add Claude Skill for chart deployment
waleedlatif1
committed
d1a5394
docs(helm): add CRON_SECRET to TL;DR, dry-run, and example install headers
waleedlatif1
committed
2fa9259
fix(helm): require INTERNAL_API_SECRET in inline secret mode
waleedlatif1
committed
9519a8f
docs(helm): surface INTERNAL_API_SECRET upgrade requirement in NOTES.txt
waleedlatif1
committed
2919ad6
fix(helm): NetworkPolicy egress to OTEL collector + external-db example format
waleedlatif1
committed
9a6b68b
fix(helm): NOTES.txt no longer prints false secret warning for ESO users
waleedlatif1
committed
5138b09
fix(helm): existingSecret mode no longer drops app.env / realtime.env values
waleedlatif1
committed
e05a8af
fix(helm): correct realtime env overlay + filter chart-computed keys in existingSecret mode
waleedlatif1
committed
bc50116
fix(helm): skip envDefaults in existingSecret mode + document egress rename
waleedlatif1
committed
17632aa
fix(helm): copy-pasteable install commands in copilot + ESO examples
waleedlatif1
committed
468dad1
polish(helm): configurable NetworkPolicy ingress peers + clearer API_ENCRYPTION_KEY comment
waleedlatif1
committed
33a45a0
test(helm): add helm-unittest suites + CI workflow + ci values matrix
waleedlatif1
committed
716a677
test(helm): add helm test hook + kind apiserver dry-run in CI
waleedlatif1
committed
4dc7966
chore(helm): remove pre-1.0.0 upgrade fluff + tighten .helmignore
waleedlatif1
committed
0de97f4
chore(helm): drop CI workflow + ci/ fixtures + CONTRIBUTING.md
waleedlatif1
committed
34b1b6e
feat(helm): pod rollout on Secret change + topologySpreadConstraints
waleedlatif1
committed
51cbb9e
fix(helm): drop empty-string shadowing in app/realtime env merge
waleedlatif1
committed
570e5f0
fix(helm): make topologySpreadConstraints per-component to match docstring
waleedlatif1
committed
a4837de
fix(helm): allow cron pods through app NetworkPolicy
waleedlatif1
committed
b9ceff9

Navigation Menu

Uh oh!

improvement(helm): helm chart updates with security, ESO, and docs overhaul - #4565

improvement(helm): helm chart updates with security, ESO, and docs overhaul#4565
waleedlatif1 merged 26 commits into
stagingfrom
waleed/helm-chart-production-ready

Commits on May 12, 2026

improvement(helm): production-ready chart with security, ESO, and docs overhaul

fix(helm): correct resource names in README (sim-sim-* → sim-*)

improvement(helm): split app/realtime env into Secret-bound + inline defaults

fix(helm): address PR review — cronjob validation, ESO apiVersion, secret merge order, image guard

fix(helm): require critical secrets to be mapped when ESO is enabled

fix(helm): auto-enable PDB when HPA minReplicas > 1

fix(helm): prevent realtime envDefaults from masking app.env Secret values; add StatefulSet upgrade NOTES

feat(helm): add Claude Skill for chart deployment

docs(helm): add CRON_SECRET to TL;DR, dry-run, and example install headers

fix(helm): require INTERNAL_API_SECRET in inline secret mode

docs(helm): surface INTERNAL_API_SECRET upgrade requirement in NOTES.txt

fix(helm): NetworkPolicy egress to OTEL collector + external-db example format

fix(helm): NOTES.txt no longer prints false secret warning for ESO users

fix(helm): existingSecret mode no longer drops app.env / realtime.env values

fix(helm): correct realtime env overlay + filter chart-computed keys in existingSecret mode

fix(helm): skip envDefaults in existingSecret mode + document egress rename

fix(helm): copy-pasteable install commands in copilot + ESO examples

polish(helm): configurable NetworkPolicy ingress peers + clearer API_ENCRYPTION_KEY comment

test(helm): add helm-unittest suites + CI workflow + ci values matrix

test(helm): add helm test hook + kind apiserver dry-run in CI

chore(helm): remove pre-1.0.0 upgrade fluff + tighten .helmignore

chore(helm): drop CI workflow + ci/ fixtures + CONTRIBUTING.md

feat(helm): pod rollout on Secret change + topologySpreadConstraints

fix(helm): drop empty-string shadowing in app/realtime env merge

fix(helm): make topologySpreadConstraints per-component to match docstring

fix(helm): allow cron pods through app NetworkPolicy