Update to Zulip Server 9.4.

2025-11-22 15:31:20 +00:00 · 2025-01-16 17:46:12 +00:00
parent bde1d6bb31
commit b6ae16e640
8 changed files with 72 additions and 50 deletions
--- a/kubernetes/chart/zulip/CHANGELOG.md
+++ b/kubernetes/chart/zulip/CHANGELOG.md
@@ -1,3 +1,7 @@
+## [0.9.40] - 2025-01-16
+
+- Update to Zulip Server 9.4
+
 ## [0.9.30] - 2024-11-23

 - Update to Zulip Server 9.3
--- a/kubernetes/chart/zulip/Chart.yaml
+++ b/kubernetes/chart/zulip/Chart.yaml
@@ -7,14 +7,14 @@ icon: https://raw.githubusercontent.com/zulip/zulip/main/static/images/logo/zuli
 ## incremented each time you make changes to the chart and its
 ## templates, including the app version.  Versions are expected to
 ## follow Semantic Versioning (https://semver.org/)
-version: 0.9.30
+version: 0.9.40

 ## This is the version number of the application being deployed. This
 ## version number should be incremented each time you make changes to
 ## the application. Versions are not expected to follow Semantic
 ## Versioning. They should reflect the version the application is
 ## using.  It is recommended to use it with quotes.
-appVersion: "9.3-0"
+appVersion: "9.4-0"
 dependencies:
  - name: memcached
    repository: oci://registry-1.docker.io/bitnamicharts
--- a/kubernetes/chart/zulip/README.md
+++ b/kubernetes/chart/zulip/README.md
@@ -1,6 +1,6 @@
 # Zulip

-![Version: 0.9.30](https://img.shields.io/badge/Version-0.9.30-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 9.3-0](https://img.shields.io/badge/AppVersion-9.3--0-informational?style=flat-square)
+![Version: 0.9.40](https://img.shields.io/badge/Version-0.9.40-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 9.4-0](https://img.shields.io/badge/AppVersion-9.4--0-informational?style=flat-square)

 [Zulip](https://zulip.com/) is an open source threaded team chat that helps teams stay productive and focused.

@@ -68,52 +68,71 @@ Now you're ready to follow [the installation instructions above](#installation).

 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
-| affinity | object | `{}` | Affinity for pod assignment. Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity |
-| fullnameOverride | string | `""` | Fully override common.names.fullname template. |
-| image.pullPolicy | string | `"IfNotPresent"` | Pull policy for Zulip docker image. Ref: https://kubernetes.io/docs/user-guide/images/#pre-pulling-images |
-| image.repository | string | `"zulip/docker-zulip"` | Defaults to hub.docker.com/zulip/docker-zulip, but can be overwritten with a full HTTPS address. |
-| image.tag | string | `"9.3-0"` | Zulip image tag (immutable tags are recommended) |
-| imagePullSecrets | list | `[]` | Global Docker registry secret names as an array. |
-| ingress.annotations | object | `{}` | Can be used to add custom Ingress annotations. |
-| ingress.enabled | bool | `false` | Enable this to use an Ingress to reach the Zulip service. |
-| ingress.hosts[0] | object | `{"host":"zulip.example.com","paths":[{"path":"/"}]}` | Host for the Ingress. Should be the same as `zulip.environment.SETTING_EXTERNAL_HOST`. |
-| ingress.hosts[0].paths | list | `[{"path":"/"}]` | Serves Zulip root of the chosen host domain. |
-| ingress.tls | list | `[]` | Set a specific secret to read the TLS certificate from. If you use cert-manager, it will save the TLS secret here. If you do not, you need to manually create a secret with your TLS certificate. |
-| livenessProbe | object | `{"enabled":true,"failureThreshold":3,"initialDelaySeconds":10,"periodSeconds":10,"successThreshold":1,"timeoutSeconds":5}` | Liveness probe values. Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes |
-| memcached | object | `{"memcachedUsername":"zulip@localhost"}` | Memcached settings, see [Requirements](#Requirements). |
-| nameOverride | string | `""` | Partially override common.names.fullname template (will maintain the release name). |
-| nodeSelector | object | `{}` | Optionally add a nodeSelector to the Zulip pod, so it runs on a specific node. Ref: https://kubernetes.io/docs/user-guide/node-selection/ |
-| podAnnotations | object | `{}` | Custom annotations to add to the Zulip Pod. |
-| podLabels | object | `{}` | Custom labels to add to the Zulip Pod. |
-| podSecurityContext | object | `{}` | Can be used to override the default PodSecurityContext (fsGroup, runAsUser and runAsGroup) of the Zulip _Pod_. |
-| postSetup.scripts | object | `{}` | The Docker entrypoint script runs commands from `/data/post-setup.d` after the Zulip application's Setup phase has completed. Scripts can be added here as `script_filename: <script contents>` and they will be mounted in `/data/post-setup.d/script_filename`. |
-| postgresql | object | `{"auth":{"database":"zulip","username":"zulip"},"image":{"repository":"zulip/zulip-postgresql","tag":14},"primary":{"containerSecurityContext":{"runAsUser":0}}}` | PostgreSQL settings, see [Requirements](#Requirements). |
-| rabbitmq | object | `{"auth":{"username":"zulip"},"persistence":{"enabled":false}}` | Rabbitmq settings, see [Requirements](#Requirements). |
-| redis | object | `{"architecture":"standalone","master":{"persistence":{"enabled":false}}}` | Redis settings, see [Requirements](#Requirements). |
+| affinity | object | `{}` |  |
+| fullnameOverride | string | `""` |  |
+| image.pullPolicy | string | `"IfNotPresent"` |  |
+| image.repository | string | `"zulip/docker-zulip"` |  |
+| image.tag | string | `"9.4-0"` |  |
+| imagePullSecrets | list | `[]` |  |
+| ingress.annotations | object | `{}` |  |
+| ingress.enabled | bool | `false` |  |
+| ingress.hosts[0].host | string | `"zulip.example.com"` |  |
+| ingress.hosts[0].paths[0].path | string | `"/"` |  |
+| ingress.tls | list | `[]` |  |
+| livenessProbe.enabled | bool | `true` |  |
+| livenessProbe.failureThreshold | int | `3` |  |
+| livenessProbe.initialDelaySeconds | int | `10` |  |
+| livenessProbe.periodSeconds | int | `10` |  |
+| livenessProbe.successThreshold | int | `1` |  |
+| livenessProbe.timeoutSeconds | int | `5` |  |
+| memcached.memcachedUsername | string | `"zulip@localhost"` |  |
+| nameOverride | string | `""` |  |
+| nodeSelector | object | `{}` |  |
+| podAnnotations | object | `{}` |  |
+| podLabels | object | `{}` |  |
+| podSecurityContext | object | `{}` |  |
+| postSetup.scripts | object | `{}` |  |
+| postgresql.auth.database | string | `"zulip"` |  |
+| postgresql.auth.username | string | `"zulip"` |  |
+| postgresql.image.repository | string | `"zulip/zulip-postgresql"` |  |
+| postgresql.image.tag | int | `14` |  |
+| postgresql.primary.containerSecurityContext.runAsUser | int | `0` |  |
+| rabbitmq.auth.username | string | `"zulip"` |  |
+| rabbitmq.persistence.enabled | bool | `false` |  |
+| redis.architecture | string | `"standalone"` |  |
+| redis.master.persistence.enabled | bool | `false` |  |
 | resources | object | `{}` |  |
-| securityContext | object | `{}` | Can be used to override the default SecurityContext of the Zulip _container_. |
-| service | object | `{"port":80,"type":"ClusterIP"}` | Service type and port for the Kubernetes service that connects to Zulip. Default: ClusterIP, needs an Ingress to be used. |
-| serviceAccount.annotations | object | `{}` | Annotations to add to the service account. |
-| serviceAccount.create | bool | `true` | Specifies whether a service account should be created. |
-| serviceAccount.name | string | `""` | The name of the service account to use. If not set and create is true, a name is generated using the fullname template |
+| securityContext | object | `{}` |  |
+| service.port | int | `80` |  |
+| service.type | string | `"ClusterIP"` |  |
+| serviceAccount.annotations | object | `{}` |  |
+| serviceAccount.create | bool | `true` |  |
+| serviceAccount.name | string | `""` |  |
 | sidecars | list | `[]` |  |
-| startupProbe | object | `{"enabled":true,"failureThreshold":30,"initialDelaySeconds":10,"periodSeconds":10,"successThreshold":1,"timeoutSeconds":5}` | Startup probe values. Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes |
-| statefulSetAnnotations | object | `{}` | Custom annotations to add to the Zulip StatefulSet. |
-| statefulSetLabels | object | `{}` | Custom labels to add to the Zulip StatefulSet. |
-| tolerations | list | `[]` | Tolerations for pod assignment. Ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/ |
-| zulip.environment.DISABLE_HTTPS | bool | `true` | Disables HTTPS if set to "true". HTTPS and certificates are managed by the Kubernetes cluster, so by default it's disabled inside the container |
-| zulip.environment.SECRETS_email_password | string | `"123456789"` | SMTP email password. |
+| startupProbe.enabled | bool | `true` |  |
+| startupProbe.failureThreshold | int | `30` |  |
+| startupProbe.initialDelaySeconds | int | `10` |  |
+| startupProbe.periodSeconds | int | `10` |  |
+| startupProbe.successThreshold | int | `1` |  |
+| startupProbe.timeoutSeconds | int | `5` |  |
+| statefulSetAnnotations | object | `{}` |  |
+| statefulSetLabels | object | `{}` |  |
+| tolerations | list | `[]` |  |
+| zulip.environment.DISABLE_HTTPS | bool | `true` |  |
+| zulip.environment.SECRETS_email_password | string | `"123456789"` |  |
 | zulip.environment.SETTING_EMAIL_HOST | string | `""` |  |
 | zulip.environment.SETTING_EMAIL_HOST_USER | string | `"noreply@example.com"` |  |
 | zulip.environment.SETTING_EMAIL_PORT | string | `"587"` |  |
 | zulip.environment.SETTING_EMAIL_USE_SSL | string | `"False"` |  |
 | zulip.environment.SETTING_EMAIL_USE_TLS | string | `"True"` |  |
-| zulip.environment.SETTING_EXTERNAL_HOST | string | `"zulip.example.com"` | Domain Zulip is hosted on. |
+| zulip.environment.SETTING_EXTERNAL_HOST | string | `"zulip.example.com"` |  |
 | zulip.environment.SETTING_ZULIP_ADMINISTRATOR | string | `"admin@example.com"` |  |
-| zulip.environment.SSL_CERTIFICATE_GENERATION | string | `"self-signed"` | Set SSL certificate generation to self-signed because Kubernetes manages the client-facing SSL certs. |
+| zulip.environment.SSL_CERTIFICATE_GENERATION | string | `"self-signed"` |  |
 | zulip.environment.ZULIP_AUTH_BACKENDS | string | `"EmailAuthBackend"` |  |
-| zulip.persistence | object | `{"accessMode":"ReadWriteOnce","enabled":true,"size":"10Gi","storageClass":null}` | If `persistence.existingClaim` is not set, a PVC is generated with these specifications. |
-| zulip.persistence.storageClass | string | `nil` | Set storageClass to use. |
+| zulip.persistence.accessMode | string | `"ReadWriteOnce"` |  |
+| zulip.persistence.enabled | bool | `true` |  |
+| zulip.persistence.size | string | `"10Gi"` |  |
+| zulip.persistence.storageClass | string | `nil` |  |

 ## About this helm chart

--- a/kubernetes/chart/zulip/values.yaml
+++ b/kubernetes/chart/zulip/values.yaml
@@ -17,7 +17,7 @@ image:
  ## Ref: https://kubernetes.io/docs/user-guide/images/#pre-pulling-images
  pullPolicy: IfNotPresent
  ## Zulip image tag (immutable tags are recommended)
-  tag: "9.3-0"
+  tag: "9.4-0"

 ## Global Docker registry secret names as an array.
 imagePullSecrets: []
@@ -194,8 +194,7 @@ postSetup:
  #     volumeMounts:
  #       - name: zulip-data
  #         mountPath: /data
-sidecars:
-  []
+sidecars: []

 ## PostgreSQL settings, see [Requirements](#Requirements).
 postgresql: