Skip to content

GDB-15135: GraphDB Helm chart v12.6.0 - #242

Merged
mihailradkov merged 11 commits into
mainfrom
develop/12.6.0
Sep 28, 2026
Merged

mihailradkov merged 11 commits into
mainfrom
develop/12.6.0

Conversation

rdstn and others added 11 commits September 28, 2026 17:39
- Removed the deprecated `default.min.distinct.threshold` property
  from `configuration.defaultJavaArguments` (since GraphDB 11.0)
- Removed unnecessary Java arguments from `configuration.defaultJavaArguments`
  - `-XX:+UseContainerSupport` is enabled by default
  - `-XX:-UseCompressedOops` is disabled automatically for large heap sizes
Added support for rendering list items declared as strings. This allows you to
use templates with conditional expressions and other function calls directly in
the list items. Affected configuration properties:

  - `global.imagePullSecrets` and `image.pullSecrets`
  - `ingress.extraHosts` and `ingress.extraTLS`
  - `backup.extraEnvFrom` and `backup.extraEnv`
  - `tolerations` and `proxy.tolerations`
  - `topologySpreadConstraints` and `proxy.topologySpreadConstraints`
  - `extraEnvFrom` and `proxy.extraEnvFrom`
  - `extraEnv` and `proxy.extraEnv`
  - `extraVolumes` and `proxy.extraVolumes`
  - `extraVolumeMounts` and `proxy.extraVolumeMounts`
  - `extraVolumeClaimTemplates` and `proxy.extraVolumeClaimTemplates`
  - `extraInitContainers` and `proxy.extraInitContainers`
  - `extraContainers` and `proxy.extraContainers`
  - `jobs.tolerations` and `jobs.tolerations`
  - `jobs.topologySpreadConstraints` and `jobs.topologySpreadConstraints`
Added `podAntiAffinity.avoidProxies` and `proxy.podAntiAffinity.avoidCluster` that
render additional pod anti-affinity rules that will try to keep GraphDB cluster pods
and GraphDB proxy pods on different topologies.
Updated the rendering of the initial users.js to be more consistent and to allow
hashes with or without the bcrypt prefix. Updated the password hash properties to
be consistently named as well.

- Ensured consistent rendering of bcrypt hashes in user.js by automatically appending `{bcrypt}` if missing
- Added `security.admin.initialPasswordHash` replacing the now deprecated `security.admin.initialPassword`
- Added `security.provisioner.initialPasswordHash` replacing the now deprecated `security.provisioner.passwordHash`
- Added `ingress.servicePort` that can override the automatically assigned
  backend service port of the default http path rule
- Added `ingress.extraPaths` for adding additional http path rules to the
  default host rule
Added `service.trafficDistribution` and `proxy.service.trafficDistribution`
for overriding the traffic distribution policy for the Service endpoints.
Updated the GraphDB StatefulSet to mount existing volumes for additional
plugins and data import from existing persistence volume claims.

- Added `import.mountPath` to customize the location where the import volume is mounted
- Added `import.existingVolumeClaim` to use an existing volume claim for the import volume
- Added `plugins.mountPath` to customize the location where additinal plugins are mounted
- Added `plugins.existingVolumeClaim` configurations for loading additional plugins
  from an existing persistence volume
- Updated the chart version to 12.6.0
- Updated security.oauth2 to security.jobs.oauth2 for better disambiguity
- Updated security.jobs.oauth2 and related configs to use proper oauth2 terminology
@mihailradkov mihailradkov self-assigned this Sep 28, 2026
@mihailradkov
mihailradkov merged commit c1af52c into main Sep 28, 2026
3 checks passed
@mihailradkov
mihailradkov deleted the develop/12.6.0 branch September 28, 2026 14:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants