chore(deps): update bitnami/postgresql docker tag to v15.8.0

.github/config/release-please/.release-please-manifest.json

@@ -3,5 +3,5 @@
   "charts/camunda-platform-8.3": "8.3.17",
   "charts/camunda-platform-8.4": "9.4.0",
   "charts/camunda-platform-8.5": "10.4.0",
-  "charts/camunda-platform-8.6": "11.0.0-alpha5"
+  "charts/camunda-platform-8.6": "11.0.0"
 }

.github/config/release-please/release-please-config.json

@@ -5,8 +5,8 @@
   "bump-minor-pre-major": false,
   "prerelease": false,
   "draft": false,
-  "bootstrap-sha": "6f4ebb54244dd23aa73fc6d31ff875dd1629c677",
-  "last-release-sha": "6f4ebb54244dd23aa73fc6d31ff875dd1629c677",
+  "bootstrap-sha": "5171418e4a5dafc94a42280bfa19b01e65eff304",
+  "last-release-sha": "5171418e4a5dafc94a42280bfa19b01e65eff304",
   "packages": {
     "charts/camunda-platform-8.6": {
       "release-type": "helm",

charts/camunda-platform-8.2/values-latest.yaml

@@ -65,7 +65,7 @@ identity:
       # https://hub.docker.com/r/bitnami/postgresql/tags?page=&page_size=&ordering=&name=8.2
       image:
         repository: bitnami/postgresql
-        tag: 15.4.0
+        tag: 15.8.0
 
 #
 # Elasticsearch

charts/camunda-platform-8.2/values.yaml

@@ -1406,7 +1406,7 @@ identity:
       # https://hub.docker.com/r/bitnami/postgresql/tags
       image:
         repository: bitnami/postgresql
-        tag: 15.4.0
+        tag: 15.8.0
 
     # Keycloak.enabled is used incorporate with "global.identity.keycloak" to use your own Keycloak instead of the one comes with Camunda Platform Helm chart.
     enabled: true

charts/camunda-platform-8.3/values-latest.yaml

@@ -65,7 +65,7 @@ identity:
       # https://hub.docker.com/r/bitnami/postgresql/tags
       image:
         repository: bitnami/postgresql
-        tag: 15.5.0
+        tag: 15.8.0
 
 #
 # Elasticsearch

charts/camunda-platform-8.3/values.yaml

@@ -1599,7 +1599,7 @@ identity:
     ##
     image:
       repository: bitnami/postgresql
-      tag: 15.5.0
+      tag: 15.8.0
     ## @param identity.postgresql.nameOverride the name used for Identity PostgreSQL.
     ##
     nameOverride: identity-postgresql
@@ -1657,7 +1657,7 @@ identity:
         ## @param identity.keycloak.postgresql.image.repository image repo
         repository: bitnami/postgresql
         ## @param identity.keycloak.postgresql.image.tag image tag
-        tag: 15.5.0
+        tag: 15.8.0
       primary:
         ## @skip identity.keycloak.postgresql.primary.extraVolumes[0].name
         ## @skip identity.keycloak.postgresql.primary.extraVolumes[0].emptyDir

charts/camunda-platform-8.4/values-latest.yaml

@@ -72,7 +72,7 @@ identity:
       # https://hub.docker.com/r/bitnami/postgresql/tags
       image:
         repository: bitnami/postgresql
-        tag: 15.5.0
+        tag: 15.8.0
 
 #
 # Elasticsearch

charts/camunda-platform-8.4/values.yaml

@@ -1949,7 +1949,7 @@ identity:
     ##
     image:
       repository: bitnami/postgresql
-      tag: 15.7.0
+      tag: 15.8.0
     ## @param identity.postgresql.nameOverride the name used for Identity PostgreSQL.
     ##
     nameOverride: identity-postgresql
@@ -2007,7 +2007,7 @@ identity:
         ## @param identity.keycloak.postgresql.image.repository image repo
         repository: bitnami/postgresql
         ## @param identity.keycloak.postgresql.image.tag image tag
-        tag: 15.7.0
+        tag: 15.8.0
       primary:
         ## @skip identity.keycloak.postgresql.primary.extraVolumes[0].name
         ## @skip identity.keycloak.postgresql.primary.extraVolumes[0].emptyDir

charts/camunda-platform-8.6/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v2
 name: camunda-platform
-version: 11.0.0-alpha5
+version: 11.0.0
 appVersion: 8.6.x
 description: |
   Camunda 8 Self-Managed Helm charts.
@@ -54,7 +54,7 @@ maintainers:
   - name: jessesimpson36
     email: [email protected]
 annotations:
-  camunda.io/helmCLIVersion: "3.15.3"
+  camunda.io/helmCLIVersion: "3.16.1"
   artifacthub.io/links: |
     - name: Camunda 8 docs
       url: https://docs.camunda.io/
@@ -64,14 +64,58 @@ annotations:
       url: https://github.com/camunda/camunda-platform-helm
   artifacthub.io/containsSecurityUpdates: "false"
   artifacthub.io/changes: |
+    - kind: added
+      description: "Configure Webapps with REST v2 Api"
+    - kind: added
+      description: "Support dnsPolicy and dnsConfig for all components"
+    - kind: added
+      description: "Configurable update strategy"
+    - kind: added
+      description: "Add camunda license config into all components"
+    - kind: added
+      description: "Use web-modeler public docker images"
     - kind: added
       description: "Add volumeClaimTemplates label selector in zeebe statefulSet"
     - kind: added
       description: "Support migration init container for operate"
     - kind: added
       description: "Configure camunda database to be used by v2 API"
+    - kind: added
+      description: "Adding `adaptSecurityContext` option in values.yaml for OpenShift SCC"
+    - kind: added
+      description: "Support Keycloak v25"
+    - kind: added
+      description: "Adding play env var to web-modeler"
+    - kind: added
+      description: "Support optional chart secrets auto-generation"
+    - kind: added
+      description: "Execution identity integration"
+    - kind: added
+      description: "Increase elasticsearch nodes to 3"
+    - kind: added
+      description: "Adding aws config in apps for OpenSearch"
+    - kind: changed
+      description: "Update Tasklist with monorepo configuration"
+    - kind: changed
+      description: "Configure Tasklist's management port"
+    - kind: changed
+      description: "Configure zeebe-gateway context path"
+    - kind: changed
+      description: "Configure operate management port"
+    - kind: changed
+      description: "Use gatewayAddress property instead of brokerContactPoint"
+    - kind: changed
+      description: "Remove the global image tag value and use it from the components"
     - kind: changed
       description: "Hardcoding strategy for all components and removing ability to configure strategy"
+    - kind: changed
+      description: "Using bitnami oci chart repository"
+    - kind: changed
+      description: "Default keycloak ingress pathType to Prefix"
+    - kind: changed
+      description: "Update console docker repository"
+    - kind: fixed
+      description: "Added recreate strategy to all Operate deployments"
     - kind: fixed
       description: "Changed restAddress in Tasklist with helper function"
     - kind: fixed
@@ -86,3 +130,37 @@ annotations:
       description: "Drop namespace from zeebe advertisedHost and initialContactPoints"
     - kind: fixed
       description: "ExistingSecret for OpenSearch password can be used without defining password literal"
+    - kind: fixed
+      description: "Remove openshift post-render script"
+    - kind: fixed
+      description: "Dynamically set advertisedHosts based on multiregion"
+    - kind: fixed
+      description: "AdvertisedHost relies on global.multiregion.regions and not global.multiregion.enabled"
+    - kind: fixed
+      description: "Enable secrets deprecation flag in alpha by default"
+    - kind: fixed
+      description: "Reload identity when its config changed"
+    - kind: fixed
+      description: "Correctly intend operate migration envs"
+    - kind: fixed
+      description: "Add zeebe opensearch retention to app config file"
+    - kind: fixed
+      description: "Gives port-forward hostnames to external urls when no ingress is…"
+    - kind: fixed
+      description: "Added helper function smtp auth for webmodeler"
+    - kind: fixed
+      description: "Correct ingress nginx annotation to activate proxy buffering by default"
+    - kind: fixed
+      description: "Double-slash issue in health check paths and constraints for Zeebe Gateway"
+    - kind: fixed
+      description: "Include opensearch env vars in operate initContainer"
+    - kind: fixed
+      description: "Warning added to NOTES about installationType"
+    - kind: fixed
+      description: "Rearranged env vars necessary for oidc to work with console"
+    - kind: fixed
+      description: "Identity baseUrl supplied regardless of multitenancy"
+    - kind: fixed
+      description: "Define Web Modeler Admin role in identity"
+    - kind: fixed
+      description: "Up tasklist timeoutSeconds to 5"

charts/camunda-platform-8.6/RELEASE-NOTES.md

@@ -1,65 +1,103 @@
 The changelog is automatically generated and it follows [Conventional Commits](https://www.conventionalcommits.org/en/v1.0.0/) format.
 
-## [camunda-platform-8.6.0-alpha4](https://github.com/camunda/camunda-platform-helm/releases/tag/camunda-platform-8.6.0-alpha4) (2024-08-07)
+## [camunda-platform-11.0.0](https://github.com/camunda/camunda-platform-helm/releases/tag/camunda-platform-11.0.0) (2024-10-07)
 
 ### Features
 
+- Configure Webapps with REST v2 Api (#1995)
+- Support dnsPolicy and dnsConfig for all components (#2009)
+- Configurable update strategy (#2036)
+- Add camunda license config into all components (#2053)
+- Use web-modeler public docker images (#1974)
 - Add volumeClaimTemplates label selector in zeebe statefulSet (#1773)
 - Support migration init container for operate (#2144)
 - Configure camunda database to be used by v2 API (#2040)
+- Adding `adaptSecurityContext` option in values.yaml for OpenShift SCC (#2212)
+- Support Keycloak v25 (#2255)
+- Adding play env var to web-modeler (#2269)
+- Support optional chart secrets auto-generation (#2257)
+- Execution identity integration (#2247)
+- Increase elasticsearch nodes to 3 (#2298)
+- Adding aws config in apps for OpenSearch (#2232)
 
 ### Refactor
 
+- Update Tasklist with monorepo configuration (#1718)
+- Configure Tasklist's management port (#1709)
+- Configure zeebe-gateway context path (#1672)
+- Configure operate management port (#1660)
+- Use gatewayAddress property instead of brokerContactPoint (#1647)
+- Remove the global image tag value and use it from the components (#2069)
 - Hardcoding strategy for all components and removing ability to configure strategy (#2155)
+- Using bitnami oci chart repository (#2356)
+- Default keycloak ingress pathType to Prefix (#2372)
+- Update console docker repository (#2379)
 
 ### Fixes
 
+- Added recreate strategy to all Operate deployments (#2143)
 - Changed restAddress in Tasklist with helper function (#2152)
 - Template grpc url in console config (#2165)
 - Set the network host and port to the zeebeGateway config (#1910)
 - Add constraint for contextPath and rest path to be the same for zeebe gateway (#2166)
 - Use correct operate image for version label (#2183)
 - Drop namespace from zeebe advertisedHost and initialContactPoints (#2170)
 - ExistingSecret for OpenSearch password can be used without defining password literal (#2168)
+- Remove openshift post-render script (#2188)
+- Dynamically set advertisedHosts based on multiregion (#2222)
+- AdvertisedHost relies on global.multiregion.regions and not global.multiregion.enabled (#2226)
+- Enable secrets deprecation flag in alpha by default (#2081)
+- Reload identity when its config changed (#2234)
+- Correctly intend operate migration envs (#2238)
+- Add zeebe opensearch retention to app config file (#2250)
+- Gives port-forward hostnames to external urls when no ingress is… (#1897)
+- Added helper function smtp auth for webmodeler (#2245)
+- Correct ingress nginx annotation to activate proxy buffering by default (#2304)
+- Double-slash issue in health check paths and constraints for Zeebe Gateway (#2355)
+- Include opensearch env vars in operate initContainer (alpha) (#2364)
+- Warning added to NOTES about installationType (#2328)
+- Rearranged env vars necessary for oidc to work with console (#2390)
+- Identity baseUrl supplied regardless of multitenancy (#2389)
+- Define Web Modeler Admin role in identity (#2395)
+- Up tasklist timeoutSeconds to 5 (#2417)
 
 <!-- generated by git-cliff -->
 ### Release Info
 
 Supported versions:
 
 - Camunda applications: [8.6](https://github.com/camunda/camunda-platform/releases?q=tag%3A8.6&expanded=true)
-- Helm values: [8.6.0-alpha4](https://artifacthub.io/packages/helm/camunda/camunda-platform/8.6.0-alpha4#parameters)
-- Helm CLI: [3.15.3](https://github.com/helm/helm/releases/tag/v3.15.3)
+- Helm values: [11.0.0](https://artifacthub.io/packages/helm/camunda/camunda-platform/11.0.0#parameters)
+- Helm CLI: [3.16.1](https://github.com/helm/helm/releases/tag/v3.16.1)
 
 Camunda images:
 
-- docker.io/camunda/connectors-bundle:8.6.0-alpha4
-- docker.io/camunda/identity:8.6.0-alpha4
-- docker.io/camunda/identity:latest
-- docker.io/camunda/operate:8.6.0-alpha4
-- docker.io/camunda/optimize:8.6.0-alpha4
-- docker.io/camunda/tasklist:8.6.0-alpha4
-- docker.io/camunda/web-modeler-restapi:8.6.0-alpha4
-- docker.io/camunda/web-modeler-webapp:8.6.0-alpha4
-- docker.io/camunda/web-modeler-websockets:8.6.0-alpha4
-- docker.io/camunda/zeebe:8.6.0-alpha4
-- registry.camunda.cloud/console/console-sm:latest
+- docker.io/camunda/connectors-bundle:8.6.2
+- docker.io/camunda/console:8.6.5
+- docker.io/camunda/identity:8.6.0
+- docker.io/camunda/keycloak:25.0.6
+- docker.io/camunda/operate:8.6.0
+- docker.io/camunda/optimize:8.6.0
+- docker.io/camunda/tasklist:8.6.0
+- docker.io/camunda/web-modeler-restapi:8.6.0
+- docker.io/camunda/web-modeler-webapp:8.6.0
+- docker.io/camunda/web-modeler-websockets:8.6.0
+- docker.io/camunda/zeebe:8.6.0
 
 Non-Camunda images:
 
-- docker.io/bitnami/elasticsearch:8.14.3
-- docker.io/bitnami/keycloak:23.0.7
-- docker.io/bitnami/os-shell:12-debian-12-r18
-- docker.io/bitnami/postgresql:14.12.0
-- docker.io/bitnami/postgresql:15.7.0
+- docker.io/bitnami/elasticsearch:8.15.2
+- docker.io/bitnami/os-shell:12-debian-12-r30
+- docker.io/bitnami/postgresql:14.13.0
+- docker.io/bitnami/postgresql:15.8.0
 
 ### Verification
 
 To verify the integrity of the Helm chart using [Cosign](https://docs.sigstore.dev/signing/quickstart/):
 
 ```shell
-cosign verify-blob camunda-platform-8.6.0-alpha4.tgz \
-  --bundle camunda-platform-8.6.0-alpha4.cosign.bundle \
+cosign verify-blob camunda-platform-11.0.0.tgz \
+  --bundle camunda-platform-11.0.0.cosign.bundle \
   --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
-  --certificate-identity "https://github.com/"
+  --certificate-identity "https://github.com/camunda/camunda-platform-helm/.github/workflows/chart-release-chores.yml@refs/pull/2392/merge"
 ```