Fspiers/ /manual sync 1

.github/workflows/check-signed-commits.yaml

@@ -15,7 +15,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 0

.github/workflows/generate-schema.yaml

@@ -36,13 +36,13 @@ jobs:
       pull-requests: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           fetch-depth: 0
           token: ${{ secrets.CHANGELOG_PAT }}
 
       - name: Set up Python
-        uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
+        uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
         with:
           python-version: '3.11'
 

.github/workflows/post-merge.yaml

@@ -35,7 +35,7 @@ jobs:
       contents: write
     steps:
       - name: Checkout main branch
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           fetch-depth: 0
           token: ${{ secrets.CHANGELOG_PAT || secrets.GITHUB_TOKEN }}

.github/workflows/pull-request.yaml

@@ -26,7 +26,7 @@ jobs:
         uses: Azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4.3.1
 
       - name: Checkout pull request branch
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           ref: ${{ github.head_ref }}
           repository: ${{github.event.pull_request.head.repo.full_name}}
@@ -44,7 +44,7 @@ jobs:
       # Python is required because `ct lint` runs Yamale (https://github.com/23andMe/Yamale) and
       # yamllint (https://github.com/adrienverge/yamllint) which require Python
       - name: Set up Python
-        uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
+        uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
         with:
           python-version: 3.11
 
@@ -98,7 +98,7 @@ jobs:
     if: needs.lint-test.outputs.changed == 'true'
     steps:
       - name: Checkout pull request branch
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           ref: ${{ github.head_ref }}
           repository: ${{github.event.pull_request.head.repo.full_name}}

.github/workflows/release.yaml

@@ -29,7 +29,7 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Checkout
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           fetch-depth: 0
 

.github/workflows/stale.yaml

@@ -16,7 +16,7 @@ jobs:
     timeout-minutes: 10
     steps:
       - name: Close stale issues and PRs
-        uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008 # v10.1.0
+        uses: actions/stale@997185467fa4f803885201cee163a9f38240193d # v10.1.1
         with:
           # Issue settings
           stale-issue-message: |

charts/clusterpirate/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 2.1.0
 - name: valkey
   repository: oci://registry-1.docker.io/cloudpirates
-  version: 0.10.3
-digest: sha256:7378e07c9a5677166209c63fce1403282231618f7b2ffdcc133144bb990f3139
-generated: "2025-12-01T18:55:48.672091578Z"
+  version: 0.11.1
+digest: sha256:1b32998fc7be14ee8883ecabc977591912891a2255ddb97005da2c8aa1a121bf
+generated: "2025-12-06T22:05:41.279081961Z"

charts/clusterpirate/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: clusterpirate
 description: Client agent for the CloudPirates Managed Observability Platform to connect your Kubernetes cluster to our infrastructure
 type: application
-version: 1.2.9
+version: 1.2.10
 appVersion: "1.0.1"
 keywords:
   - kubernetes
@@ -22,7 +22,7 @@ dependencies:
     version: "2.x.x"
     repository: oci://registry-1.docker.io/cloudpirates
   - name: valkey
-    version: "0.10.3"
+    version: "0.11.1"
     repository: oci://registry-1.docker.io/cloudpirates
     condition: valkey.enabled
 icon: https://a.storyblok.com/f/143071/512x512/88dc07809a/cluster-pirate-logo.svg

charts/ghost/Chart.yaml

@@ -2,8 +2,8 @@ apiVersion: v2
 name: ghost
 description: A simple, powerful publishing platform that allows you to share your stories with the world.
 type: application
-version: 0.6.2
-appVersion: "6.10.0"
+version: 0.6.3
+appVersion: "6.10.1"
 keywords:
   - ghost
   - blogging
@@ -45,7 +45,7 @@ annotations:
       url: https://www.cloudpirates.io
   artifacthub.io/changes: |2
         - kind: changed
-          description: "Update charts/ghost/values.yaml ghost to v6.9.3 (patch) (#684)"
+          description: "Update charts/ghost/values.yaml ghost to v6.10.0 (minor) (#702)"
           links:
-            - name: "Commit 41682af"
-              url: "https://github.com/CloudPirates-io/helm-charts/commit/41682af"
+            - name: "Commit 7652333"
+              url: "https://github.com/CloudPirates-io/helm-charts/commit/7652333"

charts/ghost/values.yaml

@@ -24,7 +24,7 @@ image:
   ## @param image.repository Nginx image repository
   repository: ghost
   ## @param image.tag Nginx image tag
-  tag: "6.10.0@sha256:7e3a906905a7893c20d60d5e1dd04f57fb8666972dcb8e2f817725dfc1814208"
+  tag: "6.10.1@sha256:9ab5c2aa45b3df9845cb0f8578dff76857be0d98ef93b88f58186508c8f2c610"
   ## @param image.pullPolicy Nginx image pull policy
   pullPolicy: Always
 

charts/memcached/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: memcached
 description: Memcached is an in-memory key-value store for small chunks of arbitrary data (strings, objects) from results of database calls, API calls, or page rendering.
 type: application
-version: 0.7.1
+version: 0.7.2
 appVersion: "1.6.39"
 keywords:
   - memcached
@@ -39,7 +39,7 @@ annotations:
       url: https://www.cloudpirates.io
   artifacthub.io/changes: |2
         - kind: changed
-          description: "add serviceMonitor joblabel attribute to values (#610)"
+          description: "Update charts/memcached/values.yaml memcached (#632)"
           links:
-            - name: "Commit 098caf4"
-              url: "https://github.com/CloudPirates-io/helm-charts/commit/098caf4"
+            - name: "Commit 9a83039"
+              url: "https://github.com/CloudPirates-io/helm-charts/commit/9a83039"

charts/memcached/values.yaml

@@ -28,7 +28,7 @@ image:
   ## @param image.repository Memcached image repository
   repository: memcached
   ## @param image.tag Memcached image tag
-  tag: "1.6.39@sha256:4737e17016e4d65ad8007408ec1816096c4ebec04cfa89a5265a3edd3f4ca552"
+  tag: "1.6.39@sha256:462fa779babc9b64a235a69dd843cb79fb3591f229ee1f3ff6cb2ca058d8a759"
   ## @param image.pullPolicy Memcached image pull policy
   pullPolicy: Always
 

charts/minio/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: minio
 description: High Performance Object Storage compatible with Amazon S3 APIs
 type: application
-version: 0.5.6
+version: 0.5.7
 appVersion: "2025.09.07"
 keywords:
   - minio

charts/minio/README.md

@@ -183,6 +183,18 @@ The following table lists the configurable parameters of the MinIO chart and the
 | ----------- | ------------------------------------------- | ------- |
 | `resources` | The resources to allocate for the container | `{}`    |
 
+### Bucket provisioning
+
+| Parameter        | Description                                                                    | Default |
+| ---------------- | ------------------------------------------------------------------------------ | ------- |
+| `defaultBuckets` | Comma, semi-colon or space separated list of buckets to create at installation | `""`    |
+
+### Configuration for the Job '{{ .Release.Name }}-post-job'
+
+| Parameter             | Description                        | Default                                   |
+| --------------------- | ---------------------------------- | ----------------------------------------- |
+| `postJob.annotations` | Additional annotations for the Job | `helm.sh/hook: post-install,post-upgrade` |
+
 ### Persistence
 
 | Parameter                   | Description                                        | Default             |

charts/minio/templates/bucket-init-job.yaml

@@ -6,9 +6,10 @@ metadata:
   namespace: {{ .Release.Namespace }}
   labels:
     {{- include "minio.labels" . | nindent 4 }}
-  {{- with (include "minio.annotations" .) }}
+  {{- $annotations := merge (include "minio.annotations" . | fromYaml) .Values.postJob.annotations }}
+  {{- with $annotations }}
   annotations: 
-{{- . | indent 4 }}
+{{ toYaml . | indent 4 }}
   {{- end }}
 spec:
   ttlSecondsAfterFinished: {{ .Values.bucketInitJob.ttlSecondsAfterFinished }}

charts/minio/values.schema.json

@@ -337,6 +337,19 @@
                 }
             }
         },
+        "postJob": {
+            "type": "object",
+            "properties": {
+                "annotations": {
+                    "type": "object",
+                    "properties": {
+                        "helm.sh/hook": {
+                            "type": "string"
+                        }
+                    }
+                }
+            }
+        },
         "readinessProbe": {
             "type": "object",
             "properties": {

charts/minio/values.yaml

@@ -76,7 +76,13 @@ config:
 ## @param defaultBuckets Comma, semi-colon or space separated list of buckets to create at initialization
 ## Format: "bucket-name" or "bucket-name:policy" where policy can be: none, download, upload, or public
 ## e.g: "my-bucket, my-second-bucket:download, my-public-bucket:public"
-defaultBuckets: ""
+defaultBuckets: "test"
+
+## @section postJob Configuration for the Job '{{ .Release.Name }}-post-job'
+postJob:
+  ## postJob.annotations Additional annotations for the Job
+  annotations:
+    helm.sh/hook: post-install,post-upgrade
 
 ## @section Bucket Initialization Job
 bucketInitJob:

charts/postgres/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: postgres
 description: The World's Most Advanced Open Source Relational Database
 type: application
-version: 0.13.0
+version: 0.13.2
 appVersion: "18.1.0"
 keywords:
   - postgres
@@ -43,4 +43,7 @@ annotations:
       url: https://www.cloudpirates.io
   artifacthub.io/changes: |2
         - kind: changed
-          description: "Chart updated"
+          description: "Update charts/postgres/values.yaml postgres (#712)"
+          links:
+            - name: "Commit a266333"
+              url: "https://github.com/CloudPirates-io/helm-charts/commit/a266333"

charts/postgres/templates/initialization-configmap.yaml

@@ -12,11 +12,11 @@ metadata:
   annotations:
     {{- include "postgres.annotations" . | nindent 4 }}
   {{- end }}
-data: 
+data:
   {{- if $createCustomUser }}
   00-init-custom-user.sh: |
     #!/bin/sh
-    
+
     if [ -z "$CUSTOM_DB" ] && [ -z "$CUSTOM_USER" ] && [ -z "$CUSTOM_PASSWORD" ]; then
       echo "No custom user configuration found, skipping..."
       exit 0
@@ -31,10 +31,18 @@ data:
       GRANT ALL PRIVILEGES ON DATABASE :DATABASENAME TO :USERNAME;
       ALTER DATABASE :DATABASENAME OWNER TO :USERNAME;
     EOSQL
-    
+
     echo "✅ Custom user and database created successfully!"
   {{- end }}
   {{- if $appendInitdbScripts }}
   {{- include "cloudpirates.tplvalues.render" (dict "value" .Values.initdb.scripts "context" .) | nindent 2 }}
   {{- end }}
+  zz-mark-init-complete.sh: |
+    #!/bin/sh
+    # This script runs last (zz prefix ensures it runs after all other init scripts)
+    # It creates a semaphore file to indicate that all init scripts completed successfully
+    set -e
+    echo "✅ All initialization scripts completed successfully"
+    touch {{ include "postgres.dataDir" . }}/.init-scripts-completed
+    echo "Created semaphore file: {{ include "postgres.dataDir" . }}/.init-scripts-completed"
 {{- end }}

charts/postgres/templates/statefulset.yaml

@@ -47,7 +47,13 @@ spec:
           securityContext: {{ include "cloudpirates.renderContainerSecurityContext" . | nindent 12 }}
           image: {{ include "postgres.image" . }}
           imagePullPolicy: {{ .Values.image.imagePullPolicy }}
+          {{- if or .Values.initdb.scriptsConfigMap .Values.initdb.scripts (and .Values.customUser (or .Values.customUser.name .Values.customUser.existingSecret)) }}
+          command:
+            - /bin/bash
+            - /scripts/postgres-wrapper.sh
+          {{- end }}
           args:
+            - postgres
             - -c
             - 'config_file={{ include "postgres.configDir" . }}/postgresql.conf'
           env:
@@ -196,6 +202,8 @@ spec:
             {{- if or .Values.initdb.scriptsConfigMap .Values.initdb.scripts (and .Values.customUser (or .Values.customUser.name .Values.customUser.existingSecret)) }}
             - name: custom-init-scripts
               mountPath: {{ .Values.initdb.directory }}
+            - name: wrapper-script
+              mountPath: /scripts
             {{- end }}
             {{- if .Values.extraVolumeMounts }}
             {{- toYaml .Values.extraVolumeMounts | nindent 12 }}
@@ -268,6 +276,10 @@ spec:
           configMap:
             name: {{ include "postgres.initdb.scriptsCM" . }}
             defaultMode: 0755
+        - name: wrapper-script
+          configMap:
+            name: {{ printf "%s-wrapper" (include "postgres.fullname" .) }}
+            defaultMode: 0755
         {{- end }}
         {{- if .Values.extraVolumes }}
         {{- toYaml .Values.extraVolumes | nindent 8 }}

charts/postgres/templates/wrapper-configmap.yaml

@@ -0,0 +1,41 @@
+{{- if or .Values.initdb.scriptsConfigMap .Values.initdb.scripts (and .Values.customUser (or .Values.customUser.name .Values.customUser.existingSecret)) }}
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: {{ printf "%s-wrapper" (include "postgres.fullname" .) }}
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "postgres.labels" . | nindent 4 }}
+  {{- if .Values.commonAnnotations }}
+  annotations:
+    {{- include "postgres.annotations" . | nindent 4 }}
+  {{- end }}
+data:
+  postgres-wrapper.sh: |
+    #!/bin/bash
+    set -e
+
+    SEMAPHORE_FILE="{{ include "postgres.dataDir" . }}/.init-scripts-completed"
+    PGDATA_PATH="{{ include "postgres.pgdataPath" . }}"
+
+    echo "PostgreSQL wrapper: Checking initialization status..."
+    echo "Semaphore file: $SEMAPHORE_FILE"
+    echo "PGDATA path: $PGDATA_PATH"
+
+    # Check if PGDATA exists and semaphore doesn't
+    if [ -d "$PGDATA_PATH" ] && [ ! -f "$SEMAPHORE_FILE" ]; then
+      echo "❌ ERROR: Database directory exists but initialization scripts did not complete successfully"
+      echo "❌ This indicates that initialization scripts failed during the previous run"
+      echo "❌ Removing PGDATA to force re-initialization..."
+      rm -rf "$PGDATA_PATH"
+      echo "✅ PGDATA removed. Database will be re-initialized with init scripts"
+    elif [ -f "$SEMAPHORE_FILE" ]; then
+      echo "✅ Semaphore file found - initialization scripts completed successfully in a previous run"
+    else
+      echo "ℹ️  First run - database will be initialized with init scripts"
+    fi
+
+    echo "Starting PostgreSQL..."
+    # Execute the original docker-entrypoint.sh with all arguments
+    exec docker-entrypoint.sh "$@"
+{{- end }}

charts/postgres/values.yaml

@@ -24,7 +24,7 @@ image:
   ## @param image.repository PostgreSQL image repository
   repository: postgres
   ## @param image.tag PostgreSQL image tag (immutable tags are recommended)
-  tag: "18.1@sha256:5ec39c188013123927f30a006987c6b0e20f3ef2b54b140dfa96dac6844d883f"
+  tag: "18.1@sha256:0033c194dc640cc4dcc62ef7c3117e5791365cca5fc1a2998e5c1693254784bc"
   ## @param image.imagePullPolicy PostgreSQL image pull policy
   imagePullPolicy: Always
 

charts/rabbitmq/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: rabbitmq
 description: A messaging broker that implements the Advanced Message Queuing Protocol (AMQP)
 type: application
-version: 0.8.0
+version: 0.8.1
 appVersion: "4.2.0"
 keywords:
   - rabbitmq

charts/rabbitmq/values.yaml

@@ -138,7 +138,7 @@ initContainer:
     ## @param initContainer.image.registry Init container image repository
     repository: busybox
     ## @param initContainer.image.tag Init container image tag
-    tag: "1.37.0@sha256:e3652a00a2fabd16ce889f0aa32c38eec347b997e73bd09e69c962ec7f8732ee"
+    tag: "1.37.0@sha256:d80cd694d3e9467884fcb94b8ca1e20437d8a501096cdf367a5a1918a34fc2fd"
     ## @param initContainer.image.pullPolicy Init container image pull policy
     pullPolicy: IfNotPresent