feat(plane-ce): opt-in Stakater Reloader annotation (1.8.0)

charts/plane-ce/Chart.yaml

@@ -5,7 +5,7 @@ description: Meet Plane. An open-source software development tool to manage issu
 
 type: application
 
-version: 1.7.0
+version: 1.8.0
 appVersion: "1.4.1"
 
 home: https://plane.so

charts/plane-ce/templates/workloads/admin.deployment.yaml

@@ -27,6 +27,10 @@ metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-admin-wl
   {{- include "plane.labelsAndAnnotations" (dict "context" $ "values" .Values.admin) }}
+  {{- if .Values.reloader.enabled }}
+  annotations:
+    reloader.stakater.com/auto: "true"
+  {{- end }}
 spec:
   replicas: {{ .Values.admin.replicas | default 1 }}
   selector:

charts/plane-ce/templates/workloads/api.deployment.yaml

@@ -27,6 +27,10 @@ metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-api-wl
   {{- include "plane.labelsAndAnnotations" (dict "context" $ "values" .Values.api) }}
+  {{- if .Values.reloader.enabled }}
+  annotations:
+    reloader.stakater.com/auto: "true"
+  {{- end }}
 spec:
   replicas: {{ .Values.api.replicas | default 1}}
   selector:

charts/plane-ce/templates/workloads/beat-worker.deployment.yaml

@@ -4,6 +4,10 @@ metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-beat-worker-wl
   {{- include "plane.labelsAndAnnotations" (dict "context" $ "values" .Values.beatworker) }}
+  {{- if .Values.reloader.enabled }}
+  annotations:
+    reloader.stakater.com/auto: "true"
+  {{- end }}
 spec:
   replicas: {{ .Values.beatworker.replicas | default 1 }}
   selector:

charts/plane-ce/templates/workloads/live.deployment.yaml

@@ -27,6 +27,10 @@ metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-live-wl
   {{- include "plane.labelsAndAnnotations" (dict "context" $ "values" .Values.live) }}
+  {{- if .Values.reloader.enabled }}
+  annotations:
+    reloader.stakater.com/auto: "true"
+  {{- end }}
 spec:
   replicas: {{ .Values.live.replicas | default 1 }}
   selector:

charts/plane-ce/templates/workloads/migrator.job.yaml

@@ -5,6 +5,10 @@ metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-api-migrate-{{ .Release.Revision }}
   {{- include "plane.labelsAndAnnotations" (dict "context" $ "values" .Values.api) }}
+  {{- if .Values.reloader.enabled }}
+  annotations:
+    reloader.stakater.com/auto: "true"
+  {{- end }}
 spec:
   backoffLimit: 3
   template:

charts/plane-ce/templates/workloads/minio.stateful.yaml

@@ -31,6 +31,10 @@ metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-minio-wl
   {{- include "plane.labelsAndAnnotations" (dict "context" $ "values" .Values.minio) }}
+  {{- if .Values.reloader.enabled }}
+  annotations:
+    reloader.stakater.com/auto: "true"
+  {{- end }}
 spec:
   selector:
     matchLabels:
@@ -90,6 +94,10 @@ metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-minio-bucket-{{ .Release.Revision }}
   {{- include "plane.labelsAndAnnotations" (dict "context" $ "values" .Values.minio) }}
+  {{- if .Values.reloader.enabled }}
+  annotations:
+    reloader.stakater.com/auto: "true"
+  {{- end }}
 spec:
   backoffLimit: 6
   completionMode: NonIndexed

charts/plane-ce/templates/workloads/postgres.stateful.yaml

@@ -27,6 +27,10 @@ metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-pgdb-wl
   {{- include "plane.labelsAndAnnotations" (dict "context" $ "values" .Values.postgres) }}
+  {{- if .Values.reloader.enabled }}
+  annotations:
+    reloader.stakater.com/auto: "true"
+  {{- end }}
 spec:
   selector:
     matchLabels:

charts/plane-ce/templates/workloads/rabbitmq.stateful.yaml

@@ -31,6 +31,10 @@ metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-rabbitmq-wl
   {{- include "plane.labelsAndAnnotations" (dict "context" $ "values" .Values.rabbitmq) }}
+  {{- if .Values.reloader.enabled }}
+  annotations:
+    reloader.stakater.com/auto: "true"
+  {{- end }}
 spec:
   selector:
     matchLabels:

charts/plane-ce/templates/workloads/redis.stateful.yaml

@@ -29,6 +29,10 @@ metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-redis-wl
   {{- include "plane.labelsAndAnnotations" (dict "context" $ "values" .Values.redis) }}
+  {{- if .Values.reloader.enabled }}
+  annotations:
+    reloader.stakater.com/auto: "true"
+  {{- end }}
 spec:
   selector:
     matchLabels:

charts/plane-ce/templates/workloads/space.deployment.yaml

@@ -27,6 +27,10 @@ metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-space-wl
   {{- include "plane.labelsAndAnnotations" (dict "context" $ "values" .Values.space) }}
+  {{- if .Values.reloader.enabled }}
+  annotations:
+    reloader.stakater.com/auto: "true"
+  {{- end }}
 spec:
   replicas: {{ .Values.space.replicas | default 1 }}
   selector:

charts/plane-ce/templates/workloads/web.deployment.yaml

@@ -27,6 +27,10 @@ metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-web-wl
   {{- include "plane.labelsAndAnnotations" (dict "context" $ "values" .Values.web) }}
+  {{- if .Values.reloader.enabled }}
+  annotations:
+    reloader.stakater.com/auto: "true"
+  {{- end }}
 spec:
   replicas: {{ .Values.web.replicas | default 1 }}
   selector:

charts/plane-ce/templates/workloads/worker.deployment.yaml

@@ -4,6 +4,10 @@ metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-worker-wl
   {{- include "plane.labelsAndAnnotations" (dict "context" $ "values" .Values.worker) }}
+  {{- if .Values.reloader.enabled }}
+  annotations:
+    reloader.stakater.com/auto: "true"
+  {{- end }}
 spec:
   replicas: {{ .Values.worker.replicas | default 1 }}
   selector:

charts/plane-ce/values.yaml

@@ -347,3 +347,17 @@ env:
   default_cluster_domain: cluster.local
 
   api_key_rate_limit: "60/minute"
+
+# ------------------------------------------------------------------
+# Stakater Reloader
+# ------------------------------------------------------------------
+# Adds reloader.stakater.com/auto to every workload, so a rolling restart happens
+# when a Secret or ConfigMap it references changes -- including the Secrets named
+# in external_secrets, which is how a rotated credential reaches a running pod.
+# Without it, whatever manages those Secrets refreshes them on its own schedule and
+# the pods keep the values they started with.
+#
+# Requires Reloader to be installed in the cluster; the chart does not install it.
+reloader:
+  enabled: false
+