All changes to this chart will be documented in this file.
- Update Chart's version to 10.7.0
- Support Kubernetes v1.30
- Upgrade ingress-nginx dependency to 4.10.1
- Deprecate
jdbcOverwrite.enable
in favor ofjdbcOverwrite.enabled
- Fix regression on env valuesFrom in the new STS template
- Fix a typo in the new common STS template
- Enable the setup of ReadOnlyRootFilesystem in the security contexts
- Support basic chart installation on Openshift
- Include remaining Route settings
- Fix networkPolicy.additionalPolicys typo
- Update SonarQube to 10.6.0
- Update Chart's version to 10.6.0
- Fix the env-var templating when sourcing from secrets
- Fix the postgresql chart's repository link
- Add support for overriding liveness/readiness probe logic
- Use a common template for Deployment and StatefulSet
- Upgrade SonarQube to 10.5.0
- Update Chart's version to 10.5.0
- Update nginx-ingress-controller dependency to version 4.9.1
- Set
automountServiceAccountToken
to false in pod's specifications - Update default
resources
values matching better default Xmx and Xms of the SonarQube processes. - Make
ephemeral-storage
resource's limits and requests configurable for the SonarQube container - Set memory and cpu limits for the test container
- Deprecate nginx.enabled in favor of ingress-nginx.enabled, to match with subchart config block
- Deprecate
prometheusMonitoring.podMonitor.namespace
- Instantiate
monitoring-web
andmonitoring-ce
endpoints when theprometheusExporter
is enabled - Take
sonarWebContext
into account for thePodMonitor
path - Fix duplicated env_var in Pods causing deployment issue (
SONAR_WEB_CONTEXT
,SONAR_WEB_JAVAOPTS
,SONAR_CE_JAVAOPTS
)
- Upgrade SonarQube to 10.4.0
- Update Chart's version to 10.4.0
- Improve the description of deprecated
jvmOpts
andjvmCeOpts
values - Run the initSysctl init-container as root to prevent 'permission denied' issues
- Add revisionHistoryLimit configuration for SonarQube application Deployment ReplicaSets & StatefulSets
- Update the security contexts to use root as group ID
- Fix empty ingress annotations in values
- Add support for dual stack and IPv6 single stack clusters in readiness/liveness probes
- Upgrade SonarQube to 10.3.0
- Update Chart's version to 10.3.0
- Update default images to the latest versions
- Remove the nginx-proxy-body annotation when nginx is disabled
- Enable post-upgrade in the change-admin-password hook
- Update default ContainerSecurityContext, InitContainerSecurityContext and postgresql.securityContext to match restricted podSecurityStandard
- Update initFs defaut securityContext to match baseline podSecurityStandard
- Update Elasticsearch.configureNode to false by default after 3 year deprecation
- Fix wrong condition on initSysctl feature
- Update default image of initContainers to sonarqube image, allowing for faster loading time and less external images needed
- Support Kubernetes v1.28
- Avoid duplicate SONAR_WEB_SYSTEMPASSCODE secrets
- Deprecate embedded PostgreSQL
- Update nginx-ingress-controller dependency to version 4.8.3, please carefully read the changelog of this new major version.
- Update SonarQube to 10.2.0
- Update Chart's version to 10.2.0
- Update curl image to 8.2.0
readinessProbe.sonarWebContext
,startupProbe.sonarWebContext
,livenessProbe.sonarWebContext
, andaccount.sonarWebContext
are deprecated, please usesonarWebContext
at the value top level.- Updates ingress-nginx dependency to 4.7.1
- Fixes broken table on README
- Update SonarQube to 10.1.0
- Support Kubernetes v1.27 while dropping v1.23
- Changed default test process to wget, using sonarqube image as default
- Update Chart's version to 10.1.0
- Fix liveness probe to detect when a failure occurs.
- Update SonarQube to 10.0.0
- Helm chart versioning will now follow the SonarQube product versioning
- Make
jvmOpts
andjvmCeOpts
not override env vars and sonar properties
- Add helm-chart-sonarqube as chart source
- Fixed unsupported wget parameter
--proxy off
with--no-proxy
- Fix install_plugins.sh not deleting previously installed plugins
- Added support for
extraVolumes
andextraVolumeMounts
in sonar pod.
- Clarify doc for custom cacert secret
- Refactor Deployment manifest to match the Statefulset manifest
- Add a configurable Prometheus PodMonitor resource
- Refactor Prometheus exporter's documentation and bump to version 0.17.2
- Allow setting priorityClassName for StatefulSets
- Adds timeoutSeconds parameter to probes
- Update SonarQube logo
- Bootstrap chart version 9.x.x dedicated to the future SonarQube 10.0
- Update SonarQube to 9.9.0
- Bootstrap chart version 8.x.x dedicated to SonarQube 9.9 LTS
- Update the list of supported kubernetes versions
- Set a new default (maximum) allowed size of the client request body on the ingress
- Update SonarQube to 9.8.0
- Update the postgresql chart's repository
- Refactor Ingress to be compatible with static compatibitly test and 1.19 minimum requirement
- Updated SonarQube to 9.7.1
- Refactor templating of ConfigMap for sonar.properties
- Fix the bug where sonarSecretKey was not applied without sonar.properties set
- Fix the installation of plugins using the standard folder
extensions/plugins
instead ofextensions/downloads
andlib/common
- Remove
plugins.lib
and other small edits in the documentation
- Updated SonarQube to 9.7.0
- Fix the right-dash curly brace issue with the additional network policy parameter
- Allow
tests.image
to be configured and update README accordingly. - Allow
tests.initContainers.image
to be configured and update README accordingly.
- Use the networkPolicy.prometheusNamespace value for the network policy namespace selector
- Uncomment default value in values.yaml for backwards compatibility
- Add support for monitoringPasscode passed as a secret and removal of livenessprobe httpheader defined in clear text
- Bump apiVersion to v2
- Set the number of allowed replicas to 0 and 1
- Add documentation for ingress tls
- Add documentation for sonarProperties and sonarSecretProperties
- Add the possibility of using a secret for customizing the admin password
- Updated SonarQube to 9.6.1
- Updated SonarQube to 9.6.0
- Add support for Openshift Route labels and annotations
- Fix issue with Openshift route name to use use fullname instead of name
- Add documentation for ingress annotations
- updated SonarQube to 9.5.0
- Fix issue with additional network policy
- Add automount service account token flag
- Add documentation to setup web context via environment variable
- Fix for issue (#215)[https://github.com/SonarSource/helm-chart-sonarqube/issues/215], adding tolerations and affinity to change password hooks
- updated SonarQube to 9.4.0
- Specify location of .netrc file when downloading plugins that require auth
- Specify service account name in change admin password hook
- secure admin password in k8s secret
- no longer automount service account token
- changed description of dependency postgresql chart
- changed links to get a better overview of sources
- Updated all instances of the caCerts enabled check
- updated SonarQube to 9.3.0
- add securitycontext to wait-for-db and change-password hook
- properties are now correctly set
livenessProbe.failureThreshold
was never rendered
- added missing logic for
caCerts.enabled
- fix missing
SONAR_WEB_SYSTEMPASSCODE
environment variable causing failed liveness checks
- added possibility to define host of a route
- detached sonarqube edition from version
- added possibility to define the ingress pathType
- added network policies
- added possibility to define ressources for the change admin password hook
- default permissions for prometheus injector now align with pod fs permissions
- updated dependencies
- admin hook now honors web context
- added support for multiple image pull secrets
- added
image.pullSecrets
- added
- deprecated support for singular image pull secret
- deprecated
image.pullSecret
- deprecated
- fixed missing image pull secret in admin hook job
- updated SonarQube to 9.2.4
- updated SonarQube to 9.2.3
- updated SonarQube to 9.2.2
- fix hardcoded reference to port 9000
- updated SonarQube to 9.2.1
- updated SonarQube to 9.2.0
- fixed missing POD level security context for statefulset deployment
- added link to community support forum
- Use liveness endpoint instead of helth endpoint for liveness probe
- fixed wrong scc user reference if name was explicitly set
- fixed serviceaccount logic
- fixed wrong artifact hub images annotation
- updated sonarqube to 9.1.0
- added resources to ui-test pod template
- fixed artifacthub annotations
- fixed
invalid: metadata.labels: Invalid value
error on thechart
label of the pvc
- fixed condition check to add new certificates
- updated default application version to 9.0.1
- release to helm repository
- update jdbc overwrite values
- replace
jdbcUrlOverride
withjdbcOverwrite.jdbcUrl
- remove useless
jdbcDatabaseType
(was always postgres)
- replace
- deprecate
postgresql.postgresqlServer
,postgresql.existingSecret
andpostgresql.existingSecretPasswordKey
in favor of newjdbcOverwrite
values - update dependency Charts
bitnami/postgresql
from 8.6.4 to 10.4.8ingress-nginx/ingress-nginx
from 3.29.0 to 3.31.0
- Add optional ingress parameter
ingressClassName
- added route support for OpenShift deployments
- Add an additional configuration parameter
extraContainers
to allow an array of containers to run alongside the sonarqube container
- fixed usage of
sonarSecretProperties
- bump jmx_exporter to 0.16.0
- added hostAliases to deploymentType statefulset
- made prometheus exporter port configurable and support prometheus PodMonitor
- make sure SQ is restarted when the JMX Prometheus exporter agents configuration changes
- JMX Prometheus exporter agent is now also enabled on the CE process
prometheusExporter.ceConfig
allows specific config of the JMX Prometheus exporter agent for the CE process
- added prometheusExporter.noCheckCertificate option
- add missing imagePullSecrets in sts install type
- fix typo in initfs
- fix plugin installation init container permissions
- fix duplicated mount point for conf when sonar.properties are defined
- fix invalid yaml render in
secret.yaml
when using external postgresql
- added
prometheusExporter.downloadURL
(custom download URL for the agent jar)
- replace
rjkernick/alpine-wget
withcurlimages/curl
- update
install-plugins
script - fix possible issue with prometheus init container and
env
set in thevalues.yaml
- fix for missing
serviceAccountName
in STS deployment kind
- fixed prometheus config volume mount if disabled
- switched from wget to curl image per default for downloading agent
- added support for proxy envs
- added option to configure CE java opts separately
- fixed missing conditional that was introduced in 0.9.2.2 to sonarqube-sts.yaml
- updated default application version to 8.9
- changed default deployment from replica set to statefull set
- added default support for prometheus jmx exporter
- added init filesystem container
- added nginx-ingress as optional dependency
- updated application version to 8.8-community
- improved readiness/startup and liveness probes
- improved documentation
- Change order of env variables to better support 7.9-lts
- Add support for setting custom annotations in admin hook job.
- Add the possibility of definining the secret key name of the postgres password.
- Add Ingress default backend for GCE class
- Added namespace to port-foward command in notes.
- Added a condition to deployment.yaml so that
wait-for-db
initContainer is only created ifpostgresql.enabled=true
- Updated the configuration table to include the additional keys added in release 9.2.0.
- Added functionality for deployments to OpenShift clusters.
- .Values.OpenShift flag to signify if deploying to OpenShift.
- Ability to have chart generate an SCC allowing the init-sysctl container to run as privileged.
- Setting of a seperate securityContext section for the main SonarQube container to avoid running as root.
- Exposing additional
postreSQL
keys in values.yaml to support configuring postgres to run under standard "restricted" or "anyuid"/"nonroot" SCCs on OpenShift.
- Added initContainer
wait-for-db
to await postgreSQL successful startup before starting SonarQube, to avoid race conditions.
- Update SonarQube to 8.5.1.
- Fix: Purge plugins directory before download.
- Update SonarQube to 8.5.
- Breaking change: Rework init containers.
- Move global defaults from
plugins
section toinitContainers
. - Update container images.
- Move global defaults from
- Deprecation:
elasticsearch.configureNode
in favor ofinitSysctl.enabled
. - Rework sysctl with support for custom values.
- Rework plugins installation via
opt/sonarqube/extensions/downloads
folder that is handled by SonarQube itself.- Breaking change: remove
plugins.deleteDefaultPlugins
as SonarQube stores bundled plugins out ofopt/sonarqube/extensions
.
- Breaking change: remove
- Rename deprecated
SONARQUBE_
environment variables toSONAR_
ones. - Breaking change: Rename
enabledTests
totests.enabled
. - Add
terminationGracePeriodSeconds
.