Merge commit '82bb370' into fspiers/ENT-3334/incremental-sync-batch-2

Author: Frederic Spiers

.editorconfig

@@ -0,0 +1,19 @@
+# EditorConfig is awesome: https://editorconfig.org
+
+# top-most EditorConfig file
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+indent_size = 2
+indent_style = space
+insert_final_newline = true
+max_line_length = 150
+tab_width = 2
+
+[*.md]
+max_line_length = 0
+
+[values.schema.json]
+indent_size = 4

.github/workflows/auto-label.yaml

@@ -11,6 +11,7 @@ concurrency:
 
 jobs:
   label:
+    if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.fork == false }}
     runs-on: ubuntu-latest
     timeout-minutes: 5
     permissions:

.github/workflows/pull-request.yaml

@@ -46,7 +46,7 @@ jobs:
       - name: Set up Python
         uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
         with:
-          python-version: 3.x
+          python-version: 3.11
 
       - name: Set up chart-testing-action
         uses: helm/chart-testing-action@0d28d3144d3a25ea2cc349d6e59901c4ff469b3b # v2.7.0

README.md

@@ -35,6 +35,7 @@ This repository provides secure, well-documented, and configurable Helm charts f
 | [PostgreSQL](charts/postgres/)         | The World's Most Advanced Open Source Relational Database                                                                 | ![Version](https://img.shields.io/badge/dynamic/yaml?url=https://raw.githubusercontent.com/CloudPirates-io/helm-charts/main/charts/postgres/Chart.yaml&label=&query=version&prefix=v) |
 | [RabbitMQ](charts/rabbitmq/)           | A messaging broker that implements the Advanced Message Queuing Protocol (AMQP)                                           | ![Version](https://img.shields.io/badge/dynamic/yaml?url=https://raw.githubusercontent.com/CloudPirates-io/helm-charts/main/charts/rabbitmq/Chart.yaml&label=&query=version&prefix=v) |
 | [Redis](charts/redis/)                 | In-memory data structure store, used as a database, cache, and message broker                                             | ![Version](https://img.shields.io/badge/dynamic/yaml?url=https://raw.githubusercontent.com/CloudPirates-io/helm-charts/main/charts/redis/Chart.yaml&label=&query=version&prefix=v) |
+| [RustFS](charts/rustfs/)               | High-performance distributed object storage with S3-compatible API (MinIO alternative) [ALPHA]                            | ![Version](https://img.shields.io/badge/dynamic/yaml?url=https://raw.githubusercontent.com/CloudPirates-io/helm-charts/main/charts/rustfs/Chart.yaml&label=&query=version&prefix=v) |
 | [TimescaleDB](charts/timescaledb/)     | TimescaleDB is a PostgreSQL extension for high-performance real-time analytics on time-series and event data              | ![Version](https://img.shields.io/badge/dynamic/yaml?url=https://raw.githubusercontent.com/CloudPirates-io/helm-charts/main/charts/timescaledb/Chart.yaml&label=&query=version&prefix=v) |
 | [Valkey](charts/valkey/)               | High-performance in-memory data structure store, fork of Redis                                                            | ![Version](https://img.shields.io/badge/dynamic/yaml?url=https://raw.githubusercontent.com/CloudPirates-io/helm-charts/main/charts/valkey/Chart.yaml&label=&query=version&prefix=v) |
 | [Zookeeper](charts/zookeeper/)         | Centralized service for maintaining configuration information, naming, providing distributed synchronization, and group services | ![Version](https://img.shields.io/badge/dynamic/yaml?url=https://raw.githubusercontent.com/CloudPirates-io/helm-charts/main/charts/zookeeper/Chart.yaml&label=&query=version&prefix=v) |

charts/clusterpirate/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 2.0.0
 - name: valkey
   repository: oci://registry-1.docker.io/cloudpirates
-  version: 0.8.0
-digest: sha256:a25bfa4f54daade4d7568f0f53af85e81bcd2a917d3f53880a9cf499b187f961
-generated: "2025-10-28T10:48:53.403163344Z"
+  version: 0.9.0
+digest: sha256:a3f4525f54f0a090e3dcb04d33f901a498254c97cdf629580f4a80fb09d24f88
+generated: "2025-10-31T14:14:37.696139626Z"

charts/clusterpirate/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: clusterpirate
 description: Client agent for the CloudPirates Managed Observability Platform to connect your Kubernetes cluster to our infrastructure
 type: application
-version: 1.2.6
+version: 1.2.7
 appVersion: "1.0.1"
 keywords:
   - kubernetes
@@ -22,7 +22,7 @@ dependencies:
     version: "2.x.x"
     repository: oci://registry-1.docker.io/cloudpirates
   - name: valkey
-    version: "0.8.0"
+    version: "0.9.0"
     repository: oci://registry-1.docker.io/cloudpirates
     condition: valkey.enabled
 icon: https://a.storyblok.com/f/143071/512x512/88dc07809a/cluster-pirate-logo.svg

charts/ghost/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: ghost
 description: A simple, powerful publishing platform that allows you to share your stories with the world.
 type: application
-version: 0.4.0
+version: 0.4.1
 appVersion: "6.5.3"
 keywords:
   - ghost
@@ -45,4 +45,7 @@ annotations:
       url: https://www.cloudpirates.io
   artifacthub.io/changes: |2
         - kind: changed
-          description: "Chart updated"
+          description: "Update charts/ghost/values.yaml ghost (#502)"
+          links:
+            - name: "Commit 5767f7f"
+              url: "https://github.com/CloudPirates-io/helm-charts/commit/5767f7f"

charts/ghost/values.yaml

@@ -22,7 +22,7 @@ image:
   ## @param image.repository Nginx image repository
   repository: ghost
   ## @param image.tag Nginx image tag
-  tag: "6.5.3@sha256:dff945f694a9bf9d34b6557fd055e4309a272169c4306938b73edf93763da0fe"
+  tag: "6.5.3@sha256:0bad5cdb4a8797a7ae2e797b6ec55920b75fae679070e0c44ecfa92271e10907"
   ## @param image.pullPolicy Nginx image pull policy
   pullPolicy: Always
 

charts/keycloak/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: keycloak
 description: Open Source Identity and Access Management Solution
 type: application
-version: 0.7.1
+version: 0.8.0
 appVersion: "26.4.2"
 keywords:
   - keycloak
@@ -51,8 +51,8 @@ annotations:
     - name: Maintainer CloudPirates
       url: https://www.cloudpirates.io
   artifacthub.io/changes: |2
-        - kind: added
-          description: "[keycloak] fix: use metrics service targetPort configuration"
+        - kind: changed
+          description: "Provide empty mounts for themes and providers (#504)"
           links:
-            - name: "PR #493"
-              url: "https://github.com/CloudPirates-io/helm-charts/pull/493"
+            - name: "Commit 4d2f107"
+              url: "https://github.com/CloudPirates-io/helm-charts/commit/4d2f107"

charts/keycloak/README.md

@@ -528,6 +528,53 @@ realm:
     }
 ```
 
+### Using Custom Themes and Providers
+
+The Keycloak deployment automatically mounts empty directories at `/opt/keycloak/themes` and `/opt/keycloak/providers`. You can use initContainers to copy custom themes and providers into these directories.
+
+**Example: Adding custom themes and providers with an initContainer**
+
+```yaml
+# values-custom-themes.yaml
+extraInitContainers:
+  - name: add-custom-themes
+    image: your-registry/keycloak-themes:latest
+    imagePullPolicy: Always
+    command:
+      - sh
+      - -c
+      - |
+        cp -r /themes/* /opt/keycloak/themes/
+        cp -r /providers/* /opt/keycloak/providers/
+    volumeMounts:
+      - name: keycloak-themes
+        mountPath: /opt/keycloak/themes
+      - name: keycloak-providers
+        mountPath: /opt/keycloak/providers
+```
+
+In this example:
+- Create a Docker image containing your custom themes in `/themes` and providers in `/providers`
+- The initContainer copies these files to the mounted volumes
+- Keycloak will automatically detect and use them on startup
+
+You can also use this approach to download themes/providers from external sources:
+
+```yaml
+extraInitContainers:
+  - name: download-themes
+    image: curlimages/curl:latest
+    command:
+      - sh
+      - -c
+      - |
+        curl -L -o /tmp/theme.zip https://example.com/theme.zip
+        unzip /tmp/theme.zip -d /opt/keycloak/themes/
+    volumeMounts:
+      - name: keycloak-themes
+        mountPath: /opt/keycloak/themes
+```
+
 ### Using Custom TLS Certificates
 
 #### Option 1: Using cert-manager (Recommended)