Helm Chart Release Notes
Changelog for the bighammer Helm chart, aligned with chart version and your mirrored GAR tag.
Chart OCI name: bighammer (repository path bh-helm-release/bighammer in your GAR after mirror)
[1.0.0] — baseline
Chart
- Chart:
bighammer1.0.0 - Minimum: GKE 1.28+, Helm 3.10+, ESO 0.18.x
- Edge modes: NGINX Ingress | Gateway API + Envoy
Features
- GCP Secret Manager via ESO + Workload Identity (no ESO JSON key)
- Configurable
global.remoteSecretsfor per-environment GSM names - Cloud SQL private IP + mTLS client certs (
postgresSSLMode: require) - Dual edge:
global.ingress(nginx) andglobal.gateway(HTTPRoutes)
Known fixes included in 1.0.0 line
| Area | Fix |
|---|---|
| PostgreSQL SSL | postgresSSLMode: require for Cloud SQL private IP |
| Workload Identity | Empty GCP_CREDENTIALS_FILE — ADC via WI |
| Keycloak TLS key | DER format in db-client-private-key-der |
| App DB password | bh-app-user-password in GSM must match Cloud SQL bh_app_user |
| Keycloak DB | keycloak_db_<env> + keycloak_db_user; password in GSM bh-kcdbpwd |
| Audit API image | Dockerfile --ignore-installed for pip deps |
Image tags (verify values-release.yaml sample overlay or your env file at release)
| Service | Example tag |
|---|---|
| bh-ui | <tag-from-release-manifest> |
| bh-catalog-api | <tag-from-release-manifest> |
| bh-audit-api | <tag-from-release-manifest> |
| bh-keycloak | <tag-from-release-manifest> |
| bh-ai-agent | <tag-from-release-manifest> |
Upgrade notes
- Mirror the new chart version and image tags to your GAR — Release Manifest & Distribution.
- Update
values-<env>.yamland your release manifest pins. - Run
helm upgradefrom your GAR OCI URI.
Template for future releases
## [x.y.z] — YYYY-MM-DD
### Added
- ...
### Changed
- ...
### Fixed
- ...
### Breaking changes
- ...
### Promoted to customers
- Customer <name>: chart x.y.z + images <tags>
Update this page when a new chart version is published. Customers mirror new versions per Release Manifest & Distribution.