diff --git a/.infisicalignore b/.infisicalignore index 638a799e2..8072078d4 100644 --- a/.infisicalignore +++ b/.infisicalignore @@ -8,3 +8,7 @@ frontend/src/views/Project/MembersPage/components/MemberListTab/MemberRoleForm/S docs/mint.json:generic-api-key:651 backend/src/ee/services/hsm/hsm-service.ts:generic-api-key:134 docs/documentation/platform/audit-log-streams/audit-log-streams.mdx:generic-api-key:104 +docs/cli/commands/bootstrap.mdx:jwt:86 +docs/documentation/platform/audit-log-streams/audit-log-streams.mdx:generic-api-key:102 +docs/self-hosting/guides/automated-bootstrapping.mdx:jwt:74 +frontend/src/pages/secret-manager/SecretDashboardPage/components/SecretListView/SecretDetailSidebar.tsx:generic-api-key:72 diff --git a/helm-charts/infisical-standalone-postgres/CHANGELOG.md b/helm-charts/infisical-standalone-postgres/CHANGELOG.md index 342510a5c..ee80eb6b5 100644 --- a/helm-charts/infisical-standalone-postgres/CHANGELOG.md +++ b/helm-charts/infisical-standalone-postgres/CHANGELOG.md @@ -1,3 +1,12 @@ +## 1.5.0 (March 26, 2025) + +Changes: +* Added support for Kubernetes pod scheduling customization via `nodeSelector` and `tolerations` + +Features: +* `nodeSelector`: Configure pod placement on nodes with specific labels +* `tolerations`: Enable pods to schedule on tainted nodes + ## 1.4.1 (March 19, 2025) Changes: diff --git a/helm-charts/infisical-standalone-postgres/Chart.yaml b/helm-charts/infisical-standalone-postgres/Chart.yaml index 6c042e841..1f7efa8da 100644 --- a/helm-charts/infisical-standalone-postgres/Chart.yaml +++ b/helm-charts/infisical-standalone-postgres/Chart.yaml @@ -7,7 +7,7 @@ type: application # This is the chart version. This version number should be incremented each time you make changes # to the chart and its templates, including the app version. # Versions are expected to follow Semantic Versioning (https://semver.org/) -version: 1.4.1 +version: 1.5.0 # This is the version number of the application being deployed. This version number should be # incremented each time you make changes to the application. Versions are not expected to diff --git a/helm-charts/infisical-standalone-postgres/templates/infisical.yaml b/helm-charts/infisical-standalone-postgres/templates/infisical.yaml index 8684014d6..52321a9d6 100644 --- a/helm-charts/infisical-standalone-postgres/templates/infisical.yaml +++ b/helm-charts/infisical-standalone-postgres/templates/infisical.yaml @@ -29,6 +29,14 @@ spec: affinity: {{- toYaml . | nindent 8 }} {{- end }} + {{- with $infisicalValues.tolerations }} + tolerations: + {{- toYaml . | nindent 8 }} + {{- end }} + {{- with $infisicalValues.nodeSelector }} + nodeSelector: + {{- toYaml . | nindent 8 }} + {{- end }} {{- if $infisicalValues.image.imagePullSecrets }} imagePullSecrets: {{- toYaml $infisicalValues.image.imagePullSecrets | nindent 6 }} diff --git a/helm-charts/infisical-standalone-postgres/values.yaml b/helm-charts/infisical-standalone-postgres/values.yaml index e4c1d51b5..2bcd0e283 100644 --- a/helm-charts/infisical-standalone-postgres/values.yaml +++ b/helm-charts/infisical-standalone-postgres/values.yaml @@ -49,6 +49,10 @@ infisical: # -- Node affinity settings for pod placement affinity: {} + # -- Tolerations definitions + tolerations: [] + # -- Node selector for pod placement + nodeSelector: {} # -- Kubernetes Secret reference containing Infisical root credentials kubeSecretRef: "infisical-secrets" @@ -127,7 +131,7 @@ redis: cluster: # -- Clustered Redis deployment enabled: false - + # -- Requires a password for Redis authentication usePassword: true