CHANGELOG.md

Changelog

All notable changes to this chart will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[0.39.0] - 2026-07-27

Added

• global.trustStore for distributing a private/internal CA to Platform and its subcharts. Enable it when components must reach endpoints whose certificates are signed by a CA that is in no public trust store — an intranet-only deployment behind an enterprise PKI, or a corporate firewall performing HTTPS interception. Off by default.
  • Supply the CA inline with global.trustStore.certificate (the chart creates the ConfigMap), or reference one you manage with existingConfigMap or existingSecret.
  • JVM components (backend, cron, wave, and cron's migrate-db init container) get a Java trust store built by a build-trust-store init container and are pointed at it with JAVA_TOOL_OPTIONS. The store is seeded from the JRE's existing bundle, so public trust is preserved. Note that the JVM logs Picked up JAVA_TOOL_OPTIONS: ... to stderr at startup.
  • Python/Go/OpenSSL subcharts (agent-backend, mcp, pipeline-optimization) get a generated system-plus-private PEM bundle selected with SSL_CERT_FILE, REQUESTS_CA_BUNDLE, and CURL_CA_BUNDLE. portal-web uses Node.js's additive NODE_EXTRA_CA_CERTS.
  • The init container runs each component's own image by default, so every component's trust store is seeded from its own JDK. Override with global.trustStore.java.image only when a component image does not ship keytool, and match the vendor and major JDK version.
  • This is separate from database TLS, which is still configured through the driver's own option (platformDatabase.connectionOptions.mariadb serverSslCert, or a subchart's database.sslCa). Those cover the database connection only and do nothing for any other outbound call. Point them at global.trustStore.mountPath when the database certificate is signed by the same CA.
  • Does not cover the BuildKit pods Wave launches for builds. Those run outside this chart and need a BuildKit image with the CA in its system bundle, selected with wave.build.buildkit-image.

Changed

• Bumped the seqera-common library dependency to 3.1.0.

[0.38.0] - 2026-07-24

Changed

• Updated default platform images to v26.1.4.
• Bumped the agent-backend subchart dependency to 1.4.0
• Bumped the wave subchart dependency to 0.5.1 (bump wave image to v1.37.0).

[0.37.0] - 2026-07-20

Added

• ingress.extraHosts[].paths[].portName as an alternative to portNumber, for referencing ALB annotation-based actions (for example portName: use-annotation). Takes precedence over portNumber when both are set.
• Backend deployment now sets TOWER_AI_BASE_URL (to https://<global.portalWebDomain>) when the portal-web subchart is enabled, and TOWER_AGENT_BACKEND_URL (to https://<global.agentBackendDomain>) when the agent-backend subchart is enabled.

Fixed

• Bumped the wave subchart dependency to 0.6.x, which fixes WAVE_SERVER_URL to be derived from global.waveDomain instead of global.platformExternalDomain, so it points at the Wave subdomain used for container pulls.
• Picked up the wave subchart fix for the Redis password Secret key, which now defaults to REDIS_PASSWORD (matching the chart-managed Secret) instead of WAVE_REDIS_PASSWORD; previously setting redis.password inline caused the Wave pod to fail to start with CreateContainerConfigError.

Changed

• Bumped subchart dependency versions to pick up the same ingress.extraHosts portName support: agent-backend to 1.3.x, mcp to 0.7.x, portal-web to 0.6.x, studios to 1.7.x, and wave to 0.5.x.

[0.36.1] - 2026-07-17

Changed

• Allow image tag fields to be specified as either a string or a number in values.schema.json across the platform chart and every subchart, so an unquoted numeric tag (for example tag: 8.4) no longer fails schema validation.
• Bumped subchart dependency versions: mcp to 0.6.x, portal-web to 0.5.x, studios to 1.6.x, and wave to 0.4.x.

[0.36.0] - 2026-07-16

Added

• Added serviceAccount.create (default true) to the platform chart and every subchart (agent-backend, mcp, pipeline-optimization, portal-web, studios, wave) to control whether each chart creates its ServiceAccount. When true, the ServiceAccount named by serviceAccount.name is created (or a generated <release>-<chart>-sa name when unset), so a custom ServiceAccount name can now be created rather than only referenced.
• Added docs/service-accounts.md documenting every ServiceAccount created by the chart, how the names are generated per release, and the serviceAccount.create / serviceAccount.name controls.

Changed

• BREAKING: serviceAccount.name no longer suppresses ServiceAccount creation in the platform chart or any subchart. Previously, setting serviceAccount.name caused the chart to skip creating a ServiceAccount and reference an existing one instead. Creation is now gated solely on serviceAccount.create (default true). Migration: if you set serviceAccount.name to reference an externally-managed ServiceAccount, also set serviceAccount.create: false to preserve the previous behaviour.
• Downgrade the default waitForMySQL init container image tag from 9 to 8.4 in the platform chart and the agent-backend and pipeline-optimization subcharts, so all waitForMySQL init containers default to MySQL 8.4.

[0.35.1] - 2026-07-13

Changed

• Move TOWER_SMTP_HOST, TOWER_SMTP_PORT and TOWER_SMTP_USER from the <release>-platform-shared-backend-cron ConfigMap into the <release>-platform-cron ConfigMap, so SMTP configuration is only injected into the cron Deployment (which sends scheduled emails) and no longer leaks into the backend Deployment's environment.

Fixed

• Fix the default global.platformServiceAddress template so it resolves to the parent chart's fullname when tpl-evaluated inside a subchart context. Previously it used common.names.fullname ., which reads .Chart.Name from the current rendering context — when the value was consumed from subchart templates (e.g. the MCP wait-for-platform init container or the MCP ConfigMap's TOWER_API_ENDPOINT), it resolved to <release>-<subchart>-backend (e.g. enterprise-mcp-backend) rather than the actual backend Service name (enterprise-platform-backend), causing MCP pods to hang forever in init waiting on a host that never exists. Switched to common.names.dependency.fullname with an explicit chartName: platform, matching the pattern already used for mcp.oidcToken.existingSecretName and studios.proxy.oidcClientRegistrationTokenSecretName.

[0.35.0] - 2026-07-07

Added

• Added examples/standalone.yaml to each subchart with minimal values for deploying it independently of the parent platform chart.
• Added examples/platform-only.yaml and examples/complete.yaml for deploying the core platform and the full stack respectively. Ingress configuration is intentionally left generic across all examples; see examples/ingress-configurations/README.md for controller-specific examples (NGINX + cert-manager, AWS ALB, GKE managed certificates, Traefik, wildcard TLS, etc.).

Changed

• Revamp README documentation across platform and all subcharts (agent-backend, mcp, pipeline-optimization, portal-web, studios, wave): clarify prerequisites, image registry vendoring, credentials handling, sensitive value management, and link to full examples on GitHub.
• Bump agent-backend to 1.0.10, mcp to 0.4.6, pipeline-optimization to 2.0.13, portal-web to 0.3.8, studios to 1.4.6, wave to 0.2.8.
• Bumped Platform appVersion to v26.1.3.
• Refresh deployment snapshots after platformServiceAddress requirement (#131) and bump license-header year range on templates/extra-list.yaml / tests/extra-list_test.yaml.
• Annotated values.yaml with # @section markers and switched README.md.gotmpl to a per-section Markdown loop, grouping the generated values table by area instead of one flat list.
• BREAKING The mcp.oauth.issuerUrl value has been removed from the mcp subchart; the OAuth issuer URL is now always derived from global.platformExternalDomain. Remove any mcp.oauth.issuerUrl overrides before upgrading.
• BREAKING The mcp.oauth.audience value has been removed from the mcp subchart; the audience is now hardcoded to "platform". Remove any mcp.oauth.audience overrides before upgrading.
• Add more explanation around OIDC client registration token shared between Platform, Studios and MCP.
• Bumped agent-backend to 1.1.0, mcp to 0.5.0, pipeline-optimization to 2.1.0, portal-web to 0.4.0, studios to 1.5.0, wave to 0.3.0.

Fixed

• Fix TLS in platform examples: align agent-backend and pipeline-optimization sections in aws-tls-offline.yaml to use rds-ca-bundle//rds-ca naming consistent with the online example; make ConfigMap name region-agnostic (aws-rds-ca-bundle); add missing initContainerDependencies.waitForMySQL to agent-backend in offline example.
• Specify CA certificate to validate TLS for MySQL client connections (the MySQL client does not validate TLS by default).
• Fix default value for .platform.oidcClientRegistrationTokenSecretKey to OIDC_CLIENT_REGISTRATION_TOKEN.
• Improve "sensitive values in secrets" example.
• Align the default .global.platformServiceAddress, .studios.proxy.oidcClientRegistrationTokenSecretName, and .mcp.oidcToken.existingSecretName templates with the naming rule used by the backend Deployment and Secret (common.names.fullname + -backend). Previously these defaults were hard-coded to {{ .Release.Name }}-platform-backend, which produced a name like seqera-platform-platform-backend for releases whose name already contained platform — a resource that never exists in-cluster, because common.names.fullname collapses the repeated chart name. The subchart references now use common.names.dependency.fullname with an explicit chartName: platform so the correct parent name is produced from the subchart's render context. Resolved names are unchanged for releases whose name does not contain platform.
• ingress.contentPath now falls back to ingress.path (and then global.ingress.path) when left empty, consistent with how other path values are resolved.

Removed

• BREAKING: Removed support for overriding container images via global.azure.images (introduced in #68). All Platform, cron, frontend, and subchart deployments now resolve their images through common.images.image only. Users who relied on global.azure.images.* to override images per-cloud must switch to the standard per-component image.registry / image.repository / image.tag / image.digest values.
• Bumped seqera-common dependency to 3.x.x, which no longer exposes the seqera.images.image helper nor the cloudProviderImageKey parameter on seqera.initContainers.waitFor* helpers.
• Removed azure marketplace values from platform chart.

[0.34.4] - 2026-06-24

Added

• Add GPG provenance file to GitHub releases to enable ArtifactHub signature verification.

[0.34.3] - 2026-06-24

Added

• Add ArtifactHub annotations: license, links, and sign key to all charts.
• Bump agent-backend to 1.0.9, mcp to 0.4.5, pipeline-optimization to 2.0.12, portal-web to 0.3.7, studios to 1.4.5, wave to 0.2.7, seqera-common to 2.1.6.

[0.34.2] - 2026-06-11

Added

• Add chart icon to all subcharts: agent-backend to 1.0.8, mcp to 0.4.4, pipeline-optimization to 2.0.11, portal-web to 0.3.6, studios to 1.4.4, wave to 0.2.6, seqera-common to 2.1.5.
• Auto-infer types for JSON schema values file.

[0.34.1] - 2026-06-10

Added

• Include Helm values JSON schema.
• Bump agent-backend to 1.0.7, mcp to 0.4.3, pipeline-optimization to 2.0.10, portal-web to 0.3.5, studios to 1.4.3, wave to 0.2.5, seqera-common to 2.1.4 to include new schemas.

[0.34.0] - 2026-05-26

Changed

• Update Platform application version to v26.1.0.
• Update Studios template naming from RStudio to R-IDE.
• Update agent-backend to 1.0.4 (do not render ANTHROPIC_API_KEY in the Secret when anthropic.apiKey is empty and no existingSecretName is set).
• Bump bitnami/common to 2.40.0 on platform chart and across all subcharts: agent-backend to 1.0.6, mcp to 0.4.2, pipeline-optimization to 2.0.9, portal-web to 0.3.4, studios to 1.4.2, wave to 0.2.4, seqera-common to 2.1.3.

Fixed

• Update agent-backend to 1.0.6: do not inject ANTHROPIC_API_KEY env var in the Deployment when anthropic.apiKey is empty and no existingSecretName is set, preventing pod startup failures when using the bedrock provider.

[0.33.8] - 2026-05-22

Changed

• Update agent-backend to 1.0.3 (updating application version to 1.11.0).
• Update portal-web to 0.3.3 (updating application version to 1.6.0).

[0.33.7] - 2026-05-15

Changed

• Update agent-backend to 1.0.2 (rename redis.db to redis.database, with fallback).
• Update wave to 0.2.3 (rename redis.db to redis.database, was not referenced in templates yet).

[0.33.6] - 2026-05-14

Changed

• Update agent-backend to 1.0.1 (updating application version to 1.10.0).
• Update portal-web to 0.3.2 (updating application version to 1.5.0).

[0.33.5] - 2026-05-14

Fixed

• Use proper https:// schema in TOWER_SEQERA_AI_PORTAL_URL env var value.

[0.33.4] - 2026-05-14

Fixed

• Add wave to the cron pod's micronautEnvironments so cron can resolve wave-related configuration in enterprise deployments.

[0.33.3] - 2026-05-13

Changed

• Update studios to 1.4.1.
• Update wave to 0.2.2.

[0.33.2] - 2026-05-13

Changed

• Update pipeline-optimization to 2.0.8.
• Update studios to 1.4.0.

[0.33.1] - 2026-05-11

Changed

• mcp: Bump app version to 1.3.0.
• mcp: TOWER_API_ENDPOINT now uses the internal platform service address and port (global.platformServiceAddress/global.platformServicePort) instead of the external domain.
• Bump agent-backend to 1.0.0: provider configuration redesigned to support multiple LLM providers. See agent-backend CHANGELOG for the full migration guide.
• agent-backend: remove redundant Anthropic validation from NOTES.txt, add bedrock.sandbox.runtimeArn required validator, replace NEXTFLOW_DOCS_USE_REDIS_INDEX with NEXTFLOW_DOCS_TOOL.
• Update image paths in the README and values.yaml - the chart does not hardcode cr.seqera.io as the registry, customers are invited to vendor the images to their private registry as well as the charts.

[0.33.0] - 2026-04-30

Added

• Enhancement: allow global configuration of Ingress options. A new global.ingress block (enabled, path, defaultPathType, ingressClassName, annotations, extraLabels, tls) lets cluster-wide Ingress defaults be set once at the parent and propagate to every subchart, removing the need to repeat controller-wide config per subchart. enabled is OR-merged; scalar fields fall back to global when local is unset; annotations and extraLabels are merged with local winning on key collision; tls is concatenated (useful for a single wildcard certificate across all services).
• Add seqera.ingress.host template helper in each chart's _helpers.tpl returning that chart's primary domain. Lets users write external-dns.alpha.kubernetes.io/hostname: '{{ include "seqera.ingress.host" . }}' once in global.ingress.annotations and have it resolve to the correct host per chart at render time, without hard-coding hostnames.
• Add docs/conventions/ingress.md documenting the Ingress conventions used across charts.

Changed

• Update bitnami/common to 2.39.0
• BREAKING: Default ingress.defaultPathType is now Prefix (was ImplementationSpecific). With the previous default and the chart's default path: "/", routing behavior depended on the ingress controller — NGINX treated it as a prefix match, AWS ALB required /* for the same effect, GKE applied its own interpretation. The result was the same chart and values producing different routing across clusters. Prefix is part of the Kubernetes Ingress spec and produces consistent prefix-match semantics across NGINX, Traefik, AWS ALB, and most modern controllers, giving users a predictable out-of-the-box experience. Users whose controller still requires ImplementationSpecific (e.g. older GKE) can set global.ingress.defaultPathType: ImplementationSpecific once at the parent.
• Update examples/ingress-configurations/* to drop now-redundant defaultPathType: Prefix overrides and showcase global.ingress.ingressClassName in nginx-cert-manager.yaml.

[0.32.7] - 2026-04-30

Changed

• Bump seqera-common to 2.1.2, wave to 0.1.2, agent-backend to 0.4.11, mcp to 0.3.6, pipeline-optimization to 2.0.5, portal-web to 0.2.8, studios to 1.2.15 (Redis init container log message now reports auth set or auth not set)

[0.32.5] - 2026-04-30

Changed

• Bump seqera-common dependency to 2.1.1, wave subchart to 0.1.1, agent-backend to 0.4.9, mcp to 0.3.4, pipeline-optimization to 2.0.4, portal-web to 0.2.6, studios to 1.2.13 to pick up the Redis init container fix that no longer logs the password

[0.32.6] - 2026-04-30

Changed

• Clear default values for global.platformServiceAddress and global.platformServicePort in subcharts that require Seqera Platform (agent-backend, mcp, portal-web, studios). These values are still defined with defaults in the parent platform chart and inherited automatically by subcharts when deployed together. When deploying a subchart standalone, users must now explicitly set these values. Each subchart now validates that both values are set at install/upgrade time
• Bump agent-backend to 0.4.10, mcp to 0.3.5, portal-web to 0.2.7, studios to 1.2.14

[0.32.5] - 2026-04-30

Changed

• Bump seqera-common dependency to 2.1.1, wave subchart to 0.1.1, agent-backend to 0.4.9, mcp to 0.3.4, pipeline-optimization to 2.0.4, portal-web to 0.2.6, studios to 1.2.13 to pick up the Redis init container fix that no longer logs the password

[0.32.4] - 2026-04-29

Fixed

• Bump mcp subchart to 0.3.3 and studios subchart to 1.2.12 to fix default OIDC external secret key to match each chart's own managed secret key
• Bump agent-backend to 0.4.8 to point SEQERA_PLATFORM_API_URL to the internal Platform backend service instead of the external domain, and add SEQERA_PLATFORM_URL env var pointing to the external platform URL for use in links and callbacks from the agent backend

Changed

• Add TOWER_SEQERA_AI_PORTAL_URL env variable to platform backend configmap

[0.32.3] - 2026-04-28

Changed

• Bump studios subchart to 1.2.11 to write OIDC registration token to chart-managed secret and enforce it as a required value

[0.32.2] - 2026-04-28

Changed

• Bump mcp subchart to 0.3.2 to fix wrong oauth initial access token environment variable

[0.32.1] - 2026-04-20

Changed

• Bump agent-backend subchart to 0.4.7 to include explicit AgentCore runtime ARN requirement and embedding configuration validation

[0.32.0] - 2026-04-20

Added

• Add 'oauth-client' to the list of Micronaut environments to enable on Platform backend, required for tower cli and other clients from v25.3 onwards to work properly with OIDC authentication

[0.31.0] - 2026-04-09

Added

• Add first version of the wave subchart, which deploys the Wave server (https://seqera.io/wave/)
• Bump subcharts due to bump in seqera-common to 2.1.0: pipeline-optimization to 2.0.3, studios to 1.2.10, wave to 0.1.0, mcp to 0.3.1, agent-backend to 0.4.6, portal-web to 0.2.5.

[0.30.2] - 2026-04-16

Changed

• Portal web chart now uses the internal backend service (global.platformServiceAddress:global.platformServicePort) instead of the public external domain
• Add SEQERA_PLATFORM_APP_URL to the portal-web chart configmap using global.platformExternalDomain
• Bump portal-web subchart to 0.2.4

[0.30.1] - 2026-04-16

• oidc.pem and OIDC_CLIENT_REGISTRATION_TOKEN secrets are now always generated (previously only when studios.enabled=true); required from Platform v26.1 onwards

[0.30.0] - 2026-04-08

Added

• Mount OIDC private key secret (connect-cert-volume at /data/certs) on the cron deployment, matching the backend deployment

Changed

• TOWER_OIDC_PEM_PATH moved to the shared backend/cron configmap and is now always set (previously backend-only and only when studios.enabled=true); required from Platform v26.1 onwards
• connect-cert-volume and TOWER_OIDC_REGISTRATION_INITIAL_ACCESS_TOKEN are now always present on the backend deployment (previously only when studios.enabled=true); required from Platform v26.1 onwards
• Bump mcp subchart to 0.3.0: rename OAuth environment variables to use MCP_ prefix (MCP_OAUTH_INITIAL_ACCESS_TOKEN, MCP_OAUTH_JWT_SECRET, MCP_OAUTH_ISSUER_URL, MCP_OAUTH_AUDIENCE)

[0.29.8] - 2026-04-08

Added

• Add initContainerDependencies.waitForPlatform init container to the mcp subchart deployment, waiting for Seqera Platform to be ready before starting the MCP server

[0.29.7] - 2026-04-08

Changed

• Add example on how to set up TLS with custom CA certificates
• Fixed changelog

[0.29.6] - 2026-04-08

Added

• Add unit tests for REDISCLI_TLS env var on the wait-for-redis init container when redis.enableTls is enabled, covering backend, cron, and agent-backend deployments

[0.29.5] - 2026-04-07

Added

• Add TLS options to agent-backend subchart: database.enableTls, database.tlsCaVerify, and database.sslCa for configuring MySQL TLS connections

Changed

• BREAKING* Bump pipeline-optimization subchart to 2.0.0: renamed database.sslNoverify and platformDatabase.sslNoverify to tlsCaVerify with inverted boolean semantics

[0.29.4] - 2026-04-07

Added

• Add extraEnv and extraVolumeMounts to all initContainerDependencies.waitFor* values blocks, enabling CA certificate mounts and additional env vars in wait init containers
• Add MYSQL_EXTRA_ARGS env var support to waitForMySQL, enabling TLS flags such as --ssl-ca and --ssl-mode to be passed to the mysql client

Changed

• User-supplied initContainers now render before built-in waitFor* init containers in backend, cron, and all subchart deployments, enabling use cases such as fetching CA certificates before dependency checks run
• Bump seqera-common to 2.0.1
• Bump agent-backend subchart to 0.4.2
• Bump mcp subchart to 0.2.3
• Bump pipeline-optimization subchart to 1.1.4
• Bump portal-web subchart to 0.2.2
• Bump studios subchart to 1.2.7

[0.29.3] - 2026-04-07

Changed

• Bump agent-backend subchart to 0.4.0: renamed redis.tls to redis.enableTls
• Bumped bitnami/common dependency to 2.38.0 across all subcharts

[0.29.2] - 2026-04-02

Changed

• BREAKING - Updated portal-web subchart to 0.2.0: removed configurable OAuth values (oauth.endpoint, oauth.clientId, oauth.audience) from portal-web subchart. Auth domain is now derived from global.platformExternalDomain, and client ID and audience are hardcoded to fixed values.

[0.29.1] - 2026-03-31

Changed

• Update documentation warning about Helm-generated random values with Kustomize
• Update Studios, MCP and agent backend charts to include updates to documentation about Helm-generated random values with Kustomize.

[0.29.0] - 2026-03-31

Changed

• BREAKING Bump MCP subchart to 0.2.0: removed support for custom OAuth provider. MCP now exclusively uses Seqera Platform as the OAuth provider. Removed values: oauth.clientId, oauth.clientSecretString, oauth.clientSecretExistingSecretName, oauth.clientSecretExistingSecretKey
• Add Seqera Co-Scientist installation example
• Refine Seqera Co-Scientist and MCP wording in documentation

[0.28.3] - 2026-03-26

Added

• Add Redis support to agent-backend subchart (bump to 0.3.0)

[0.28.2] - 2026-03-25

Changed

• Update Studios template matrix to Studios 0.11
• Update agent backend Readme removing mention of deprecated variable
• Update portal web and studios default subdomains to ai. and studios.
• Update mcp default OIDC secret key to OIDC_CLIENT_REGISTRATION_TOKEN

[0.28.1] - 2026-03-23

Changed

• Bumped bitnami/common dependency to 2.37.0

[0.28.0] - 2026-03-16

Changed

• Updated platform chart version to 0.28.0
• Added new mcp subchart to install the Model Context Protocol server
• Restructured OIDC initial access token functions into Platform chart

[0.27.9] - 2026-03-19

Changed

• Updated agent-backend subchart to version 0.2.6

[0.27.8] - 2026-03-12

Changed

• Updated agent-backend subchart to version 0.2.5

[0.27.7] - 2026-03-11

Changed

• Updated agent-backend subchart to version 0.2.4

[0.27.6] - 2026-03-11

Changed

• Updated agent-backend subchart to version 0.2.3

[0.27.5] - 2026-03-09

Changed

• Updated agent-backend subchart to version 0.2.2

[0.27.4] - 2026-03-04

Changed

• Updated pipeline-optimization subchart to version 1.1.0

[0.27.3] - 2026-03-03

Changed

• Updated platform chart version to 0.27.3
• Updated platform app version to v25.3.3
• Updated studios subchart to version 1.2.1
• Updated pipeline-optimization subchart to version 1.0.1

[0.27.0] - 2026-02-20

Added

• Support for cloud-provider-specific image overrides via global.azure.images for all container images across platform and subcharts
• Added global.azure.images documentation to values.yaml for all charts

Changed

• Updated all image references to use seqera.images.image instead of common.images.image
• Updated platform.frontend.image to support cloud-provider overrides
• Updated seqera-common to version 2.0.0
• Updated agent-backend subchart to version 0.2.0
• Updated pipeline-optimization subchart to version 0.3.0
• Updated studios subchart to version 1.2.0

[0.26.1] - 2026-02-10

Changed

• Bump platform chart version to 0.26.1 after GH failure

[0.26.0] - 2026-02-10

Changed

• Re-release to trigger build after GitHub Actions outage, bump minor since we added agent-backend
• Updated agent-backend subchart to version 0.1.1
• Updated pipeline-optimization subchart to version 0.2.6
• Updated studios subchart to version 1.1.5
• Bump bitnami/common to 2.36.0

[0.25.8] - 2026-02-09

Fixed

• Fixed ingress template to properly handle frontend.service.http.port and extraHosts[].paths[].portNumber when provided as integers, string integers, or template expressions by adding tpl (toString ...) conversion
• Fixed service template to properly handle port and targetPort values for cron and frontend services when provided as integers, string integers, or template expressions

Added

• Added comprehensive unit tests for ingress port number handling with different input types (integer, string integer, template string)

Changed

• Updated agent-backend subchart to version 0.1.1
• Updated studios subchart to version 1.1.4

[0.25.7] - 2026-01-30

Changed

• Updated environment variable rendering to use seqera.envVars.render helper function instead of seqera.tplvalues.render for correct templating behavior
• Updated pipeline-optimization subchart to version 0.2.4
• Updated studios subchart to version 1.1.3

[0.25.6] - 2026-01-30

Changed

• Optimized unit tests for faster execution

[0.25.4] - 2026-01-29

Added

• Added uge-platform and removed local-platform from default list of execution backends in platform.executionBackends

[0.25.3] - 2026-01-29

Added

• Added Studios Wave custom image configuration environment variables
  • New TOWER_DATA_STUDIO_WAVE_CUSTOM_IMAGE_REGISTRY environment variable for specifying custom registry where Wave pushes Studios images
  • New TOWER_DATA_STUDIO_WAVE_CUSTOM_IMAGE_REPOSITORY environment variable for specifying custom repository where Wave pushes Studios images
  • Both variables are set from platform.studios.customImageRegistry and platform.studios.customImageRepository values respectively
  • Variables are only included when Studios is enabled

Changed

• Data Explorer is now automatically enabled when the Studios subchart is enabled
  • Added platform.dataExplorer.enabled helper function to handle automatic enablement logic
  • TOWER_DATA_EXPLORER_ENABLED environment variable is set to true when either platform.dataExplorer.enabled or studios.enabled is true

[0.25.2] - 2026-01-23

Changed

• Added warnings in values.yaml about Kustomize incompatibility with Helm auto-generated random values
• Simplified and improved Kustomize example documentation with prominent warning banner about explicit configuration requirements when using Kustomize
• Updated Studios subchart to version 1.1.1

[0.25.1] - 2026-01-23

Added

• Added validation to ensure either platformDatabase.password or platformDatabase.existingSecretName is provided during chart installation

[0.25.0] - 2026-01-23

Changed

• Updated Studios subchart to version 1.1.0 (Studios application version 0.9.0)

[0.24.1] - 2026-01-15

Added

• Added global.imageCredentialsSecrets configuration to support multiple pre-existing image pull secrets
  • Allows referencing existing Kubernetes secrets of type kubernetes.io/dockerconfigjson for private registry authentication
  • Secrets are automatically added to the ServiceAccount's imagePullSecrets list
  • Complements existing global.imageCredentials for inline secret creation
• Added Studios template environment variables generator in tower.yml configuration
  • New studiosTemplates configuration section for defining interactive analysis tools (e.g., R-IDE, Jupyter, VSCode, etc.)
  • Supports tool customization with image, labels, icon, and resource requirements
  • Includes studiosTemplatesExperimental for experimental tool configurations
• Added dataExplorer.enabled toggle flag to control Data Explorer feature in Platform UI

Changed

• Split Helm-controlled tower.yml content from user-provided content for better configuration management

Fixed

• Fixed secretKey helper functions to ignore custom existingSecretKey when using chart-managed secrets, ensuring consistency with external secret handling pattern
  • Fixed platform.database.secretKey helper
  • Fixed platform.redis.secretKey helper
  • Fixed platform.jwt.secretKey helper
  • Fixed platform.crypto.secretKey helper
  • Fixed platform.license.secretKey helper
  • Fixed platform.smtp.secretKey helper
• Fixed cron deployment to include TOWER_DB_PASSWORD environment variable for database migrations

[0.24.0] - 2026-01-13

Added

• Added Studios subchart as a new dependency
  • Studios provides interactive analysis capabilities for Seqera Platform
  • Chart version 1.0.0, application version 0.8.0
  • Integrated as a conditional subchart (enabled via studios.enabled)
  • Deploys Studios server (StatefulSet) and proxy (Deployment) components
  • Includes init container to wait for Platform readiness
• Added platform URL integration test (tests/studios_platform_url_test.yaml)
  • Validates Platform URL configuration is accessible by Studios subchart

Changed

• Reorganized values.yaml structure
  • Moved extraDeploy, commonAnnotations, and commonLabels after ingress section
  • Improved logical grouping of configuration sections
• Updated dependencies to include Studios chart (version 1.x.x)
  • Repository: file://charts/studios
  • Condition: studios.enabled

[0.23.0] - 2026-01-09

Added

• Added seqera-common library chart as a dependency
  • Provides shared template helpers used across Seqera charts

Changed

• Refactored init container templates to use seqera-common library helpers
  • seqera.initContainerWaitForMySQL - For MySQL readiness checks in backend and cron pods
  • seqera.initContainerWaitForRedis - For Redis readiness checks in backend and cron pods
• Updated Makefile with improved dependency management
  • make test now automatically rebuilds all dependencies before running tests

Fixed

• Fixed init container template that was not using database password from secret correctly

[0.22.0] - 2025-12-24

Changed

• BREAKING: Moved platformDatabase configuration from global.platformDatabase to top-level platformDatabase
  • This change improves chart structure and makes database configuration more consistent with other top-level settings
  • Migration Required: If you are upgrading from a previous version, you must update your values files:
    • Change global.platformDatabase.* to platformDatabase.*
    • Update global.platformDatabase.database to platformDatabase.name (field renamed for clarity)
  • Example migration:

    # Before (v0.21.x and earlier)
    global:
      platformDatabase:
        host: mysql.example.com
        database: platform_db
        username: platform_user
        password: secret
    
    # After (v0.22.0+)
    platformDatabase:
      host: mysql.example.com
      name: platform_db
      username: platform_user
      password: secret

Earlier Versions

Changes prior to version 0.22.0 were not tracked in this changelog.