release: Plane-EE v3.1.0

charts/plane-enterprise/Chart.yaml

@@ -5,8 +5,8 @@ description: Meet Plane. An Enterprise software development tool to manage issue
 
 type: application
 
-version: 3.1.0
-appVersion: "3.0.1"
+version: 3.2.0
+appVersion: "3.1.0"
 
 home: https://plane.so/
 icon: https://plane.so/favicon/favicon-32x32.png

charts/plane-enterprise/questions.yml

@@ -27,7 +27,7 @@ questions:
 - variable: planeVersion
   label: Plane Version (Docker Image Tag)
   type: string
-  default: v3.0.1
+  default: v3.1.0
   required: true
   group: "Docker Registry"
   subquestions:
@@ -267,6 +267,52 @@ questions:
     label: "Live Server Secret Key"
     type: string
     default: "htbqvBJAgpm9bzvf3r4urJer0ENReatceh"
+  - variable: env.export_queue_name
+    label: "Export Queue Name"
+    description: "RabbitMQ queue name for background PDF/DOCX export jobs consumed by the live-exporter service."
+    type: string
+    default: "plane-exports"
+  - variable: env.export_download_base_url
+    label: "Export Download Base URL"
+    description: "Base URL for export download redirects. Defaults to licenseDomain with protocol inferred from SSL settings."
+    type: string
+    default: ""
+
+- variable: services.live_exporter.enabled
+  label: "Install Live Exporter Service"
+  type: boolean
+  default: true
+  group: "Live Exporter Setup"
+  show_subquestion_if: true
+  subquestions:
+  - variable: services.live_exporter.replicas
+    label: "Default Replica Count"
+    type: int
+    default: 1
+  - variable: services.live_exporter.pullPolicy
+    label: "Live Exporter Pull Policy"
+    type: enum
+    options:
+    - "Always"
+    - "IfNotPresent"
+    - "Never"
+    default: "Always"
+  - variable: services.live_exporter.memoryLimit
+    label: "Memory Limit"
+    type: string
+    default: 2000Mi
+  - variable: services.live_exporter.cpuLimit
+    label: "CPU Limit"
+    type: string
+    default: 1000m
+  - variable: services.live_exporter.memoryRequest
+    label: "Memory Request"
+    type: string
+    default: 50Mi
+  - variable: services.live_exporter.cpuRequest
+    label: "CPU Request"
+    type: string
+    default: 50m
 
 - variable: services.silo.enabled
   label: "Install Silo Service"
@@ -351,7 +397,6 @@ questions:
     label: "Cursor Webhook Secret"
     type: string
     default: "TTqazTcoBajYKzIAeIKFZeTX9czAoUsG"
-
 - variable: services.silo.connectors.slack.enabled
   label: "Slack Integration"
   type: boolean
@@ -371,6 +416,10 @@ questions:
     label: "Slack Base URL"
     type: string
     default: ""
+  - variable: services.silo.connectors.slack.signing_secret
+    label: "Slack Signing Secret"
+    type: string
+    default: ""
 
 - variable: services.silo.connectors.github.enabled
   label: "Github App Integration"
@@ -399,6 +448,10 @@ questions:
     label: "Github Private Key"
     type: string
     default: ""
+  - variable: services.silo.connectors.github.webhook_secret
+    label: "Github Webhook Secret"
+    type: string
+    default: ""
 
 - variable: services.silo.connectors.gitlab.enabled
   label: "Gitlab App Integration"
@@ -440,6 +493,42 @@ questions:
     type: string
     default: ""
 
+- variable: services.silo.connectors.bitbucket.enabled
+  label: "Bitbucket Integration"
+  type: boolean
+  default: false
+  group: "Silo Connectors"
+  show_subquestion_if: true
+  subquestions:
+  - variable: services.silo.connectors.bitbucket.client_id
+    label: "Bitbucket Client ID"
+    type: string
+    default: ""
+  - variable: services.silo.connectors.bitbucket.client_secret
+    label: "Bitbucket Client Secret"
+    type: string
+    default: ""
+  - variable: services.silo.connectors.bitbucket.webhook_secret
+    label: "Bitbucket Webhook Secret"
+    type: string
+    default: ""
+
+- variable: services.silo.connectors.hubspot.enabled
+  label: "HubSpot Integration"
+  type: boolean
+  default: false
+  group: "Silo Connectors"
+  show_subquestion_if: true
+  subquestions:
+  - variable: services.silo.connectors.hubspot.client_id
+    label: "HubSpot Client ID"
+    type: string
+    default: ""
+  - variable: services.silo.connectors.hubspot.client_secret
+    label: "HubSpot Client Secret"
+    type: string
+    default: ""
+
 - variable: services.monitor.pullPolicy
   label: "Monitor Pull Policy"
   type: enum
@@ -550,6 +639,26 @@ questions:
     label: "Webhook Allowed Hosts"
     type: string
     default: ""
+  - variable: env.gunicorn_max_requests
+    label: "Gunicorn Max Requests"
+    description: "Maximum number of requests a gunicorn worker handles before being restarted. Set to 0 to disable rotation."
+    type: int
+    default: 1000
+  - variable: env.gunicorn_max_requests_jitter
+    label: "Gunicorn Max Requests Jitter"
+    description: "Random jitter added to GUNICORN_MAX_REQUESTS to stagger worker restarts. Set to 0 when rotation is disabled."
+    type: int
+    default: 150
+  - variable: env.celery_task_publish_retry
+    label: "Celery Task Publish Retry"
+    description: "Retry task publishing on transient AMQP failures instead of silently dropping tasks."
+    type: boolean
+    default: true
+  - variable: env.celery_broker_pool_limit
+    label: "Celery Broker Pool Limit"
+    description: "Maximum number of connections in the Celery broker connection pool. Limits stale connection accumulation."
+    type: int
+    default: 10
 - variable: services.external_api.enabled
   label: "Enable External API"
   type: boolean
@@ -1010,6 +1119,14 @@ questions:
     label: "CORS Allowed Origins"
     type: string
     default: ""
+  - variable: env.pi_envs.ai_usage_agent_max_tokens_budget
+    label: "AI Usage Agent Max Tokens Budget"
+    type: string
+    default: ""
+  - variable: env.pi_envs.ai_usage_enforcement_enabled
+    label: "AI Usage Enforcement Enabled"
+    type: boolean
+    default: true
   - variable: env.pi_envs.celery.vector_sync_enabled
     label: "Vector Sync Enabled"
     type: boolean

charts/plane-enterprise/templates/config-secrets/app-env.yaml

@@ -76,6 +76,10 @@ data:
   DEBUG: "0"
   DOCKERIZED: "1"
   GUNICORN_WORKERS: "1"
+  GUNICORN_MAX_REQUESTS: {{ .Values.env.gunicorn_max_requests | quote }}
+  GUNICORN_MAX_REQUESTS_JITTER: {{ .Values.env.gunicorn_max_requests_jitter | quote }}
+  CELERY_TASK_PUBLISH_RETRY: {{ .Values.env.celery_task_publish_retry | ternary "1" "0" | quote }}
+  CELERY_BROKER_POOL_LIMIT: {{ .Values.env.celery_broker_pool_limit | quote }}
   {{- if .Values.env.web_url}}
   WEB_URL: {{ .Values.env.web_url | default "" | quote }}
   {{- else if or .Values.ssl.tls_secret_name (and .Values.ssl.createIssuer .Values.ssl.generateCerts) }}
@@ -111,3 +115,4 @@ data:
 
   WEBHOOK_ALLOWED_IPS: {{ .Values.env.webhook_allowed_ips | default "" | quote }}
   WEBHOOK_ALLOWED_HOSTS: {{ .Values.env.webhook_allowed_hosts | default "" | quote }}
+  AI_USAGE_AGENT_MAX_TOKENS_BUDGET: {{ .Values.env.pi_envs.ai_usage_agent_max_tokens_budget | default "" | quote }}

charts/plane-enterprise/templates/config-secrets/live-env.yaml

@@ -14,6 +14,13 @@ stringData:
   {{- else }}
   REDIS_URL: {{ .Values.env.remote_redis_url | default "" | quote }}
   {{- end }}
+  {{- if .Values.services.rabbitmq.local_setup }}
+  AMQP_URL: "amqp://{{ .Values.services.rabbitmq.default_user }}:{{ .Values.services.rabbitmq.default_password }}@{{ .Release.Name }}-rabbitmq.{{ .Release.Namespace }}.svc.{{ .Values.env.default_cluster_domain | default "cluster.local" }}/"
+  {{- else if .Values.services.rabbitmq.external_rabbitmq_url }}
+  AMQP_URL: {{ .Values.services.rabbitmq.external_rabbitmq_url | quote }}
+  {{- else }}
+  AMQP_URL: ""
+  {{- end }}
 {{- end }}
 ---
 apiVersion: v1
@@ -41,4 +48,13 @@ data:
   {{- else }}
   IFRAMELY_URL: http://{{ .Release.Name }}-iframely.{{ .Release.Namespace }}.svc.{{ .Values.env.default_cluster_domain | default "cluster.local" }}:8061/
   {{- end }}
+
+  {{- if or .Values.ssl.tls_secret_name (and .Values.ssl.createIssuer .Values.ssl.generateCerts) }}
+  EXPORT_DOWNLOAD_BASE_URL: {{ .Values.env.export_download_base_url | default (printf "https://%s" .Values.license.licenseDomain) | quote }}
+  {{- else }}
+  EXPORT_DOWNLOAD_BASE_URL: {{ .Values.env.export_download_base_url | default (printf "http://%s" .Values.license.licenseDomain) | quote }}
+  {{- end }}
+
+  EXPORT_QUEUE_NAME: {{ .Values.env.export_queue_name | default "plane-exports" | quote }}
+
 ---

charts/plane-enterprise/templates/config-secrets/pi-api-env.yaml

@@ -109,6 +109,7 @@ data:
 
   FEATURE_FLAG_SERVER_BASE_URL: "http://{{ .Release.Name }}-monitor.{{ .Release.Namespace }}.svc.{{ .Values.env.default_cluster_domain | default "cluster.local" }}:8080"
   PI_BASE_PATH: "/pi"
+  PLANE_INTERNAL_API_HOST: "http://{{ .Release.Name }}-api.{{ .Release.Namespace }}.svc.{{ .Values.env.default_cluster_domain | default "cluster.local" }}:8000"
 
 
   {{- if eq .Values.env.pi_envs.cors_allowed_origins "*"}}
@@ -157,6 +158,9 @@ data:
   BR_AWS_REGION: {{ .Values.services.pi.ai_providers.embedding_model.aws_region | default "us-east-1" | quote }}
   {{- end }}
 
+  AI_USAGE_AGENT_MAX_TOKENS_BUDGET: {{ .Values.env.pi_envs.ai_usage_agent_max_tokens_budget | default "" | quote }}
+  AI_USAGE_ENFORCEMENT_ENABLED: {{ .Values.env.pi_envs.ai_usage_enforcement_enabled | ternary "1" "0" | quote }}
+
   CELERY_VECTOR_SYNC_ENABLED: {{ .Values.env.pi_envs.celery.vector_sync_enabled | ternary "1" "0" | quote }}
   CELERY_VECTOR_SYNC_INTERVAL: {{ .Values.env.pi_envs.celery.vector_sync_interval | default 3 | quote }}
   CELERY_WORKSPACE_PLAN_SYNC_ENABLED: {{ .Values.env.pi_envs.celery.workspace_plan_sync_enabled | ternary "1" "0" | quote }}

charts/plane-enterprise/templates/config-secrets/silo.yaml

@@ -39,13 +39,15 @@ stringData:
   SLACK_CLIENT_SECRET: {{ .Values.services.silo.connectors.slack.client_secret | default "" | quote }}
   SLACK_CLIENT_ID: {{ .Values.services.silo.connectors.slack.client_id | default "" | quote }}
   SLACK_BASE_URL: {{ .Values.services.silo.connectors.slack.base_url | default "" | quote }}
+  SLACK_SIGNING_SECRET: {{ .Values.services.silo.connectors.slack.signing_secret | default "" | quote }}
   {{- end }}
   {{- if .Values.services.silo.connectors.github.enabled }}
   GITHUB_CLIENT_SECRET: {{ .Values.services.silo.connectors.github.client_secret | default "" | quote }}
   GITHUB_PRIVATE_KEY: {{ .Values.services.silo.connectors.github.private_key | default "" | quote }}
   GITHUB_CLIENT_ID: {{ .Values.services.silo.connectors.github.client_id | default "" | quote }}
   GITHUB_APP_NAME: {{ .Values.services.silo.connectors.github.app_name | default "" | quote }}
   GITHUB_APP_ID: {{ .Values.services.silo.connectors.github.app_id | default "" | quote }}
+  GITHUB_WEBHOOK_SECRET: {{ .Values.services.silo.connectors.github.webhook_secret | default "" | quote }}
   {{- end }}
   {{- if .Values.services.silo.connectors.gitlab.enabled }}
   GITLAB_CLIENT_SECRET: {{ .Values.services.silo.connectors.gitlab.client_secret | default "" | quote }}
@@ -57,6 +59,16 @@ stringData:
   SENTRY_CLIENT_SECRET: {{ .Values.services.silo.connectors.sentry.client_secret | default "" | quote }}
   SENTRY_INTEGRATION_SLUG: {{ .Values.services.silo.connectors.sentry.integration_slug | default "" | quote }}
   {{- end }}
+  {{- if .Values.services.silo.connectors.bitbucket.enabled }}
+  BITBUCKET_CLIENT_ID: {{ .Values.services.silo.connectors.bitbucket.client_id | default "" | quote }}
+  BITBUCKET_CLIENT_SECRET: {{ .Values.services.silo.connectors.bitbucket.client_secret | default "" | quote }}
+  BITBUCKET_WEBHOOK_SECRET: {{ .Values.services.silo.connectors.bitbucket.webhook_secret | default "" | quote }}
+  {{- end }}
+
+  {{- if .Values.services.silo.connectors.hubspot.enabled }}
+  HUBSPOT_CLIENT_ID: {{ .Values.services.silo.connectors.hubspot.client_id | default "" | quote }}
+  HUBSPOT_CLIENT_SECRET: {{ .Values.services.silo.connectors.hubspot.client_secret | default "" | quote }}
+  {{- end }}
 {{- end }}
 ---
 {{- if .Values.services.silo.enabled }}
@@ -90,6 +102,7 @@ data:
   {{- end }}
 
   API_BASE_URL: "http://{{ .Release.Name }}-api.{{ .Release.Namespace }}.svc.{{ .Values.env.default_cluster_domain | default "cluster.local" }}:8000/"
+  API_INTERNAL_BASE_URL: "http://{{ .Release.Name }}-api.{{ .Release.Namespace }}.svc.{{ .Values.env.default_cluster_domain | default "cluster.local" }}:8000/"
 
   {{- if or .Values.ssl.tls_secret_name (and .Values.ssl.createIssuer .Values.ssl.generateCerts) }}
   SILO_API_BASE_URL: "https://{{ .Values.license.licenseDomain }}"
@@ -109,5 +122,6 @@ data:
   SENTRY_ENVIRONMENT: {{ .Values.env.silo_envs.sentry_environment | default "development" | quote }}
   SENTRY_TRACES_SAMPLE_RATE: {{ .Values.env.silo_envs.sentry_traces_sample_rate | default "0.1" | quote }}
 
+
 {{- end }}
 ---

charts/plane-enterprise/templates/workloads/live-exporter.deployment.yaml

@@ -0,0 +1,54 @@
+
+{{- if .Values.services.live_exporter.enabled }}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  namespace: {{ .Release.Namespace }}
+  name: {{ .Release.Name }}-live-exporter-wl
+  {{- include "plane.labelsAndAnnotations" (dict "context" $ "values" .Values.services.live_exporter) }}
+spec:
+  replicas: {{ .Values.services.live_exporter.replicas | default 1 }}
+  selector:
+    matchLabels:
+      app.name: {{ .Release.Namespace }}-{{ .Release.Name }}-live-exporter
+  template:
+    metadata:
+      namespace: {{ .Release.Namespace }}
+      labels:
+        app.name: {{ .Release.Namespace }}-{{ .Release.Name }}-live-exporter
+        {{- include "plane.commonLabels" $ | nindent 8 }}
+      annotations:
+        timestamp: {{ now | quote }}
+    spec:
+      {{- include "plane.podScheduling" .Values.services.live_exporter }}
+      {{- include "plane.podSecurityContext" . }}
+      containers:
+      - name: {{ .Release.Name }}-live-exporter
+        {{- include "plane.containerSecurityContext" . }}
+        imagePullPolicy: {{ .Values.services.live_exporter.pullPolicy | default "Always" }}
+        image: {{ .Values.services.live_exporter.image | default "makeplane/live-commercial" }}:{{ .Values.planeVersion }}
+        stdin: true
+        tty: true
+        resources:
+          requests:
+            memory: {{ .Values.services.live_exporter.memoryRequest | default "50Mi" | quote }}
+            cpu: {{ .Values.services.live_exporter.cpuRequest | default "50m" | quote }}
+          limits:
+            memory: {{ .Values.services.live_exporter.memoryLimit | default "2000Mi" | quote }}
+            cpu: {{ .Values.services.live_exporter.cpuLimit | default "1000m" | quote }}
+        envFrom:
+          - configMapRef:
+              name: {{ .Release.Name }}-live-vars
+              optional: false
+          - secretRef:
+              name: {{ if not (empty .Values.external_secrets.live_env_existingSecret) }}{{ .Values.external_secrets.live_env_existingSecret }}{{ else }}{{ .Release.Name }}-live-secrets{{ end }}
+              optional: false
+        env:
+          - name: LIVE_MODE
+            value: "exporter"
+          {{- if .Values.extraEnv }}
+          {{- toYaml .Values.extraEnv | nindent 10 }}
+          {{- end }}
+      serviceAccount: {{ .Release.Name }}-srv-account
+      serviceAccountName: {{ .Release.Name }}-srv-account
+{{- end }}