GitGuardian · github-actions · Dec 5, 2025 · Dec 5, 2025 · Dec 5, 2025 · Dec 5, 2025
diff --git a/charts/clusterpirate/Chart.lock b/charts/clusterpirate/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
   version: 2.1.0
 - name: valkey
   repository: oci://registry-1.docker.io/cloudpirates
-  version: 0.10.2
-digest: sha256:a03991d31e746a1ca832aa9a16e2e237cb66635abc4ab6a07a94faea076c6a7b
-generated: "2025-11-25T13:11:09.044378374Z"
+  version: 0.10.3
+digest: sha256:7378e07c9a5677166209c63fce1403282231618f7b2ffdcc133144bb990f3139
+generated: "2025-12-01T18:55:48.672091578Z"
diff --git a/charts/clusterpirate/Chart.yaml b/charts/clusterpirate/Chart.yaml
@@ -22,7 +22,7 @@ dependencies:
     version: "2.x.x"
     repository: oci://registry-1.docker.io/cloudpirates
   - name: valkey
-    version: "0.10.2"
+    version: "0.10.3"
     repository: oci://registry-1.docker.io/cloudpirates
     condition: valkey.enabled
 icon: https://a.storyblok.com/f/143071/512x512/88dc07809a/cluster-pirate-logo.svg

diff --git a/charts/etcd/Chart.yaml b/charts/etcd/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: etcd
 description: etcd is a distributed reliable key-value store for the most critical data of a distributed system
 type: application
-version: 0.3.4
+version: 0.4.0
 appVersion: "3.6.5"
 keywords:
   - etcd
@@ -41,7 +41,4 @@ annotations:
       url: https://www.cloudpirates.io
   artifacthub.io/changes: |2
         - kind: changed
-          description: " [etcd] Use http for probes (#622)"
-          links:
-            - name: "Commit c9d2054"
-              url: "https://github.com/CloudPirates-io/helm-charts/commit/c9d2054"
+          description: "Chart updated"
diff --git a/charts/etcd/README.md b/charts/etcd/README.md
@@ -84,19 +84,19 @@ cosign verify --key cosign.pub registry-1.docker.io/cloudpirates/etcd:<version>
 ## Configuration
 
 ### Global Parameters
-| Parameter                 | Description                           | Default                 |
-| ------------------------- | ------------------------------------- | ----------------------- |
-| `global.imageRegistry`    | Global Docker image registry override | `""`                    |
-| `global.imagePullSecrets` | Global Docker registry secret names   | `[]`                    |
+| Parameter                 | Description                           | Default |
+| ------------------------- | ------------------------------------- | ------- |
+| `global.imageRegistry`    | Global Docker image registry override | `""`    |
+| `global.imagePullSecrets` | Global Docker registry secret names   | `[]`    |
 
 ### Image Configuration
 
-| Parameter                 | Description                           | Default                 |
-| ------------------------- | ------------------------------------- | ----------------------- |
-| `image.registry`          | etcd image registry                   | `gcr.io`                |
-| `image.repository`        | etcd image repository                 | `etcd-development/etcd` |
-| `image.tag`               | etcd image tag                        | `v3.6.5@sha256:3397341272b9e0a6f44d7e3fc7c321c6efe6cbe82ce866b9b01d0c704bfc5bf3`        |
-| `image.pullPolicy`        | Image pull policy                     | `IfNotPresent`          |
+| Parameter          | Description           | Default                                                                          |
+| ------------------ | --------------------- | -------------------------------------------------------------------------------- |
+| `image.registry`   | etcd image registry   | `gcr.io`                                                                         |
+| `image.repository` | etcd image repository | `etcd-development/etcd`                                                          |
+| `image.tag`        | etcd image tag        | `v3.6.5@sha256:3397341272b9e0a6f44d7e3fc7c321c6efe6cbe82ce866b9b01d0c704bfc5bf3` |
+| `image.pullPolicy` | Image pull policy     | `IfNotPresent`                                                                   |
 
 ### Common Parameters
 
@@ -150,14 +150,15 @@ cosign verify --key cosign.pub registry-1.docker.io/cloudpirates/etcd:<version>
 
 ### Persistence
 
-| Parameter                  | Description                    | Default           |
-| -------------------------- | ------------------------------ | ----------------- |
-| `persistence.enabled`      | Enable persistence using PVC   | `true`            |
-| `persistence.storageClass` | Storage class of backing PVC   | `""`              |
-| `persistence.annotations`  | Annotations for the PVC        | `{}`              |
-| `persistence.size`         | Size of data volume            | `8Gi`             |
-| `persistence.accessModes`  | Persistent Volume Access Modes | `[ReadWriteOnce]` |
-| `persistence.mountPath`    | Mount path for data volume     | `/var/run/etcd`   |
+| Parameter                  | Description                         | Default           |
+| -------------------------- | ----------------------------------- | ----------------- |
+| `persistence.enabled`      | Enable persistence using PVC        | `true`            |
+| `persistence.storageClass` | Storage class of backing PVC        | `""`              |
+| `persistence.annotations`  | Annotations for the PVC             | `{}`              |
+| `persistence.labels`       | Labels for persistent volume claims | `{}`              |
+| `persistence.size`         | Size of data volume                 | `8Gi`             |
+| `persistence.accessModes`  | Persistent Volume Access Modes      | `[ReadWriteOnce]` |
+| `persistence.mountPath`    | Mount path for data volume          | `/var/run/etcd`   |
 
 ### Resources
 

diff --git a/charts/etcd/templates/statefulset.yaml b/charts/etcd/templates/statefulset.yaml
@@ -209,8 +209,10 @@ spec:
   volumeClaimTemplates:
     - metadata:
         name: data
+        {{- with $labels := merge (include "etcd.selectorLabels" . | fromYaml) .Values.persistence.labels .Values.podLabels }}
         labels:
-          {{- include "etcd.labels" . | nindent 10 }}
+          {{- toYaml $labels | nindent 10 }}
+        {{- end }}
         {{- with .Values.persistence.annotations }}
         annotations:
           {{- toYaml . | nindent 10 }}

diff --git a/charts/etcd/values.yaml b/charts/etcd/values.yaml
@@ -98,6 +98,8 @@ persistence:
   storageClass: ""
   ## @param persistence.annotations Persistent Volume Claim annotations
   annotations: {}
+  ## @param persistence.labels Labels for persistent volume claims
+  labels: {}
   ## @param persistence.size Persistent Volume size
   size: 8Gi
   ## @param persistence.accessModes Persistent Volume access modes

diff --git a/charts/ghost/Chart.yaml b/charts/ghost/Chart.yaml
@@ -2,8 +2,8 @@ apiVersion: v2
 name: ghost
 description: A simple, powerful publishing platform that allows you to share your stories with the world.
 type: application
-version: 0.6.0
-appVersion: "6.9.1"
+version: 0.6.2
+appVersion: "6.10.0"
 keywords:
   - ghost
   - blogging
@@ -45,7 +45,7 @@ annotations:
       url: https://www.cloudpirates.io
   artifacthub.io/changes: |2
         - kind: changed
-          description: "Update charts/ghost/values.yaml ghost to v6.8.1 (patch) (#621)"
+          description: "Update charts/ghost/values.yaml ghost to v6.9.3 (patch) (#684)"
           links:
-            - name: "Commit a20f994"
-              url: "https://github.com/CloudPirates-io/helm-charts/commit/a20f994"
+            - name: "Commit 41682af"
+              url: "https://github.com/CloudPirates-io/helm-charts/commit/41682af"
diff --git a/charts/ghost/values.yaml b/charts/ghost/values.yaml
@@ -24,7 +24,7 @@ image:
   ## @param image.repository Nginx image repository
   repository: ghost
   ## @param image.tag Nginx image tag
-  tag: "6.9.1@sha256:8a30cacb126262887f4db101e438271ade0b51437917b8165d26b0fede72ccf2"
+  tag: "6.10.0@sha256:7e3a906905a7893c20d60d5e1dd04f57fb8666972dcb8e2f817725dfc1814208"
   ## @param image.pullPolicy Nginx image pull policy
   pullPolicy: Always
 

diff --git a/charts/mariadb/Chart.yaml b/charts/mariadb/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: mariadb
 description: MariaDB is a high-performance, open-source relational database server that is a drop-in replacement for MySQL. Supports both single-node and Galera Cluster deployments.
 type: application
-version: 0.8.0
+version: 0.9.0
 appVersion: "12.1.2"
 keywords:
   - mariadb
@@ -52,7 +52,4 @@ annotations:
       url: https://www.cloudpirates.io
   artifacthub.io/changes: |2
         - kind: changed
-          description: "add support for serviceaccounts (#609)"
-          links:
-            - name: "Commit 1e6d04f"
-              url: "https://github.com/CloudPirates-io/helm-charts/commit/1e6d04f"
+          description: "Chart updated"
diff --git a/charts/mariadb/README.md b/charts/mariadb/README.md
@@ -188,6 +188,7 @@ For a detailed explanation of Galera parameters and usage, see [README_GALERA.md
 | `persistence.accessModes`  | PVC Access modes                            | `["ReadWriteOnce"]` |
 | `persistence.size`         | PVC Storage Request for MariaDB data volume | `8Gi`               |
 | `persistence.annotations`  | Additional custom annotations for the PVC   | `{}`                |
+| `persistence.labels`       | Labels for persistent volume claims         | `{}`                |
 | `persistence.selector`     | Additional labels for the PVC               | `{}`                |
 
 ### Security Context Parameters

diff --git a/charts/mariadb/templates/_helpers.tpl b/charts/mariadb/templates/_helpers.tpl
@@ -66,6 +66,18 @@ Validate values of MariaDB - Authentication
 {{/* No validation needed - empty rootPassword will trigger auto-generation */}}
 {{- end }}
 
+{{/*
+Return the MariaDB initdb scripts ConfigMap Name
+*/}}
+{{- define "mariadb.initdbScriptsConfigMap" -}}
+{{- if .Values.initdbScriptsConfigMap }}
+{{- printf "%s" (tpl .Values.initdbScriptsConfigMap $) -}}
+{{- else }}
+{{- printf "" }}
+{{- end }}
+{{- end }}
+
+
 {{/*
 Return the MariaDB ConfigMap Name
 */}}

diff --git a/charts/mariadb/templates/statefulset.yaml b/charts/mariadb/templates/statefulset.yaml
@@ -264,7 +264,7 @@ spec:
         {{- if .Values.initdbScriptsConfigMap }}
         - name: custom-init-scripts
           configMap:
-            name: {{ .Values.initdbScriptsConfigMap }}
+            name: {{ include "mariadb.initdbScriptsConfigMap" . }}
         {{- end }}
         {{- range $secret := .Values.extraSecrets }}
         - name: {{ $secret.name }}
@@ -301,9 +301,9 @@ spec:
       kind: PersistentVolumeClaim
       metadata:
         name: data
-        {{- with .Values.commonLabels }}
-        labels: 
-{{ toYaml . | indent 10}}
+        {{- with $labels := merge (include "mariadb.selectorLabels" . | fromYaml) .Values.persistence.labels .Values.podLabels }}
+        labels:
+          {{- toYaml $labels | nindent 10 }}
         {{- end }}
         {{- with .Values.persistence.annotations }}
         annotations:

diff --git a/charts/mariadb/tests/common-parameters_test.yaml b/charts/mariadb/tests/common-parameters_test.yaml
@@ -171,4 +171,19 @@ tests:
           value: Never
       - equal:
           path: spec.template.spec.imagePullSecrets[0].name
-          value: global-secret
+          value: global-secret
+  - it: initdbScriptsConfigMap should evaluate template strings
+    set:
+      initdbScriptsConfigMap: "{{ .Release.Name }}-init-db-script"
+    template: statefulset.yaml
+    asserts:
+      - equal:
+          path: spec.template.spec.volumes[?(@.name=="custom-init-scripts")].configMap.name
+          value: RELEASE-NAME-init-db-script
+  - it: initdbScriptsConfigMap is optional
+    template: statefulset.yaml
+    asserts:
+      - notExists:
+          path: spec.template.spec.volumes[?(@.name=="custom-init-scripts")]
+      - notExists:
+          path: spec.template.spec.containers[?(@.name=="mariadb")].volumeMounts[?(@.name=="custom-init-scripts")]          
diff --git a/charts/mariadb/values.yaml b/charts/mariadb/values.yaml
@@ -142,6 +142,8 @@ persistence:
   size: 8Gi
   ## @param persistence.annotations Additional custom annotations for the PVC
   annotations: {}
+  ## @param persistence.labels Labels for persistent volume claims
+  labels: {}
   ## @param persistence.selector Additional labels for the PVC
   selector: {}
 

diff --git a/charts/mongodb/Chart.yaml b/charts/mongodb/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: mongodb
 description: MongoDB a flexible NoSQL database for scalable, real-time data management
 type: application
-version: 0.6.6
+version: 0.7.0
 appVersion: "8.2.2"
 keywords:
   - mongodb
@@ -39,7 +39,4 @@ annotations:
       url: https://www.cloudpirates.io
   artifacthub.io/changes: |2
         - kind: changed
-          description: "[percona/mongodb_exporter] Update image to v0.47.2 (#656)"
-          links:
-            - name: "Commit e3cebb5"
-              url: "https://github.com/CloudPirates-io/helm-charts/commit/e3cebb5"
+          description: "Chart updated"
diff --git a/charts/mongodb/README.md b/charts/mongodb/README.md
@@ -148,6 +148,7 @@ The following table lists the configurable parameters of the MongoDB chart and t
 | `persistence.size`          | Size of persistent volume                          | `8Gi`           |
 | `persistence.mountPath`     | Mount path for MongoDB data                        | `/data/db`      |
 | `persistence.annotations`   | Annotations for persistent volume claims           | `{}`            |
+| `persistence.labels`        | Labels for persistent volume claims                | `{}`            |
 | `persistence.existingClaim` | The name of an existing PVC to use for persistence | `""`            |
 | `persistence.subPath`       | The subdirectory of the volume to mount to         | `""`            |
 

diff --git a/charts/mongodb/templates/statefulset.yaml b/charts/mongodb/templates/statefulset.yaml
@@ -264,8 +264,10 @@ spec:
   volumeClaimTemplates:
     - metadata:
         name: data
+        {{- with $labels := merge (include "mongodb.selectorLabels" . | fromYaml) .Values.persistence.labels .Values.podLabels }}
         labels:
-          {{- include "mongodb.labels" . | nindent 10 }}
+          {{- toYaml $labels | nindent 10 }}
+        {{- end }}
         {{- with .Values.persistence.annotations }}
         annotations:
           {{- toYaml . | nindent 10 }}

diff --git a/charts/mongodb/values.yaml b/charts/mongodb/values.yaml
@@ -103,6 +103,8 @@ persistence:
   mountPath: /data/db
   ## @param persistence.annotations Annotations for persistent volume claims
   annotations: {}
+  ## @param persistence.labels Labels for persistent volume claim
+  labels: {}
   ## @param persistence.existingClaim The name of an existing PVC to use for persistence
   existingClaim: ""
   ## @param persistence.subPath The subdirectory of the volume to mount to

diff --git a/charts/postgres/Chart.yaml b/charts/postgres/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: postgres
 description: The World's Most Advanced Open Source Relational Database
 type: application
-version: 0.12.4
+version: 0.13.0
 appVersion: "18.1.0"
 keywords:
   - postgres
@@ -43,7 +43,4 @@ annotations:
       url: https://www.cloudpirates.io
   artifacthub.io/changes: |2
         - kind: changed
-          description: "fix nesting of auth.secretKeys.adminPasswordKey (#674)"
-          links:
-            - name: "Commit ed4f3e3"
-              url: "https://github.com/CloudPirates-io/helm-charts/commit/ed4f3e3"
+          description: "Chart updated"
diff --git a/charts/postgres/README.md b/charts/postgres/README.md
@@ -198,6 +198,7 @@ The following table lists the configurable parameters of the PostgreSQL chart an
 | `persistence.enabled`       | Enable persistence using Persistent Volume Claims  | `true`              |
 | `persistence.storageClass`  | Persistent Volume storage class                    | `""`                |
 | `persistence.annotations`   | Persistent Volume Claim annotations                | `{}`                |
+| `persistence.labels`        | Labels for persistent volume claims                | `{}`                |
 | `persistence.size`          | Persistent Volume size                             | `8Gi`               |
 | `persistence.accessModes`   | Persistent Volume access modes                     | `["ReadWriteOnce"]` |
 | `persistence.existingClaim` | The name of an existing PVC to use for persistence | `""`                |

diff --git a/charts/postgres/templates/statefulset.yaml b/charts/postgres/templates/statefulset.yaml
@@ -294,8 +294,10 @@ spec:
   volumeClaimTemplates:
   - metadata:
       name: data
+      {{- with $labels := merge (include "postgres.selectorLabels" . | fromYaml) .Values.persistence.labels .Values.podLabels }}
       labels:
-        {{- include "postgres.labels" . | nindent 8 }}
+        {{- toYaml $labels | nindent 8 }}
+      {{- end }}
       {{- with .Values.persistence.annotations }}
       annotations:
         {{- toYaml . | nindent 8 }}

diff --git a/charts/postgres/values.yaml b/charts/postgres/values.yaml
@@ -203,6 +203,8 @@ persistence:
   ## @param persistence.subPath The subdirectory of the volume to mount to
   ## Useful in dev environments and one PV for multiple services
   subPath: ""
+  ## @param persistence.labels Labels for persistent volume claims
+  labels: {}
 
 ## @section Persistent Volume Claim Retention Policy
 persistentVolumeClaimRetentionPolicy:

diff --git a/charts/rabbitmq/Chart.yaml b/charts/rabbitmq/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: rabbitmq
 description: A messaging broker that implements the Advanced Message Queuing Protocol (AMQP)
 type: application
-version: 0.7.10
+version: 0.8.0
 appVersion: "4.2.0"
 keywords:
   - rabbitmq

diff --git a/charts/rabbitmq/templates/statefulset.yaml b/charts/rabbitmq/templates/statefulset.yaml
@@ -284,7 +284,7 @@ spec:
       kind: PersistentVolumeClaim
       metadata:
         name: data
-        {{- with $labels := merge (include "rabbitmq.labels" . | fromYaml) .Values.persistence.labels }} 
+        {{- with $labels := merge (include "rabbitmq.selectorLabels" . | fromYaml) .Values.persistence.labels .Values.podLabels }}
         labels:
           {{- toYaml $labels | nindent 10 }}
         {{- end }}

diff --git a/charts/redis/Chart.yaml b/charts/redis/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: redis
 description: An open source, in-memory data structure store used as a database, cache, and message broker.
 type: application
-version: 0.16.5
+version: 0.16.6
 appVersion: "8.4.0"
 keywords:
   - redis
@@ -42,7 +42,7 @@ annotations:
       url: https://www.cloudpirates.io
   artifacthub.io/changes: |2
         - kind: changed
-          description: "metrics service annotation does not work (#687)"
+          description: "Fix Redis issue with immutableFields cause by the label addition on volumeClaimTemplate (#695)"
           links:
-            - name: "Commit 6c053af"
-              url: "https://github.com/CloudPirates-io/helm-charts/commit/6c053af"
+            - name: "Commit f5ce66f"
+              url: "https://github.com/CloudPirates-io/helm-charts/commit/f5ce66f"