chore(release): sync main for chart 0.2.0

# Conflicts:
#	.github/workflows/integration-test.yml
#	README.md
#	charts/chromadb-chart/Chart.yaml
#	charts/chromadb-chart/templates/_helpers.tpl
#	charts/chromadb-chart/templates/config.yaml
#	charts/chromadb-chart/templates/statefulset.yaml
#	charts/chromadb-chart/values.yaml

Author: tazarov

.github/workflows/integration-test.yml

@@ -7,26 +7,28 @@ on:
     paths:
       - charts/**
       - tests/**
+      - .github/workflows/integration-test.yml
   pull_request:
     branches:
       - main
       - '**'
     paths:
       - charts/**
       - tests/**
+      - .github/workflows/integration-test.yml
   workflow_dispatch:
 
 env:
-  LATEST_VERSION: "1.0.10"
+  LATEST_VERSION: "1.5.0"
 jobs:
   integration-test:
     strategy:
       matrix:
-        kubernetes-version: [1.23.0, 1.33.1]
+        kubernetes-version: [1.28.0, 1.33.1, 1.35.1]
         chroma-version:
           [
             0.6.3,
-            1.0.10,
+            1.5.0,
           ]
     runs-on: ubuntu-latest
     steps:
@@ -43,32 +45,51 @@ jobs:
           kubernetes-version: ${{ matrix.kubernetes-version }}
       - name: Install chromadb
         run: |
-          set -e
+          set -euo pipefail
           sleep 20
+          EXTRA_ARGS=()
+          if [ "${{ matrix.chroma-version }}" = "${{ env.LATEST_VERSION }}" ]; then
+            EXTRA_ARGS+=(
+              --set chromadb.extraConfig.scorecard_enabled=true
+              --set chromadb.extraConfig.circuit_breaker.requests=500
+            )
+          fi
           helm install chromadb ./charts/chromadb-chart \
           --set chromadb.isPersistent=true \
           --set chromadb.allowReset=true \
-          --set chromadb.apiVersion=${{ matrix.chroma-version }}
+          --set "chromadb.apiVersion=${{ matrix.chroma-version }}" \
+          "${EXTRA_ARGS[@]}"
       - name: Wait for deployment to be ready
         run: |
+          set -euo pipefail
           kubectl wait \
           --for=condition=ready pod \
           --selector=app.kubernetes.io/name=chromadb \
           --timeout=120s
+      - name: Verify extraConfig is present in v1-config
+        if: ${{ matrix.chroma-version == env.LATEST_VERSION }}
+        run: |
+          set -euo pipefail
+          config="$(kubectl get configmap v1-config -o go-template='{{ index .data "config.yaml" }}')"
+          printf '%s\n' "$config"
+          printf '%s\n' "$config" | grep -q '^scorecard_enabled: true$'
+          printf '%s\n' "$config" | grep -q '^circuit_breaker:$'
+          printf '%s\n' "$config" | grep -q '^  requests: 500$'
       - name: Test
         run: |
-          set -e
+          set -euo pipefail
           kubectl get pods -A
           kubectl get svc -A
           helm test chromadb
       - name: Debug
         if: failure()
         run: |
+          set -euo pipefail
           kubectl get pods -A
           kubectl get svc -A
-          kubectl logs --selector=app.kubernetes.io/name=chromadb --previous
+          kubectl logs --selector=app.kubernetes.io/name=chromadb --previous || true
       - name: Setup tmate session
-        if: failure()
+        if: failure() && github.event_name == 'workflow_dispatch'
         uses: mxschmitt/action-tmate@v3
         with:
           limit-access-to-actor: true

.github/workflows/lint.yml

@@ -6,6 +6,8 @@ on:
       - '**'
     paths:
       - charts/**
+      - tests/**
+      - .github/workflows/lint.yml
   workflow_dispatch:
 env:
   REGISTRY: ghcr.io
@@ -28,6 +30,28 @@ jobs:
       - name: Install Helm
         uses: azure/setup-helm@v4.2.0
 
+      - name: Setup Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: "1.24.x"
+
+      - name: Install yq
+        run: |
+          set -euo pipefail
+          YQ_VERSION="v4.44.6"
+          GOBIN_DIR="$(mktemp -d)"
+          cleanup() {
+            rm -rf "${GOBIN_DIR}"
+          }
+          trap cleanup EXIT
+
+          GOBIN="${GOBIN_DIR}" go install "github.com/mikefarah/yq/v4@${YQ_VERSION}"
+          sudo install -m 0755 "${GOBIN_DIR}/yq" /usr/local/bin/yq
+          yq --version
+
+      - name: Run v1 config template tests
+        run: bash tests/test_v1_config.sh
+
       - name: Lint chart
         id: helm-lint
         uses: helm/chart-testing-action@v2.6.1

.gitignore

@@ -89,4 +89,7 @@ dmypy.json
 cython_debug/
 
 # macOS temporary files
-.DS_Store
+.DS_Store
+
+# Auto-generated working files
+ISSUE_CONTEXT.md

CLAUDE.md

@@ -0,0 +1,93 @@
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## Project Overview
+
+This is a Helm chart repository for deploying ChromaDB (a vector database) on Kubernetes. The chart is maintained by Amikos Tech and provides a single-node Chroma database deployment with support for various configuration options including authentication, persistence, and observability.
+
+## Key Commands
+
+### Helm Chart Development
+
+```bash
+# Lint the chart locally
+make lint
+# or directly:
+helm lint charts/chromadb-chart
+
+# Install the chart for local testing (requires Kubernetes cluster)
+helm install chromadb ./charts/chromadb-chart --set chromadb.allowReset=true
+
+# Run Helm tests after installation
+helm test chromadb
+
+# Package the chart
+helm package charts/chromadb-chart
+
+# Update chart dependencies
+helm dependency update charts/chromadb-chart
+```
+
+### Testing
+
+```bash
+# Run Python integration tests (requires ChromaDB instance running)
+python tests/test_chroma.py
+
+# Run Helm chart tests in Kubernetes
+helm test chromadb
+
+# GitHub Actions integration tests run on:
+# - Kubernetes versions: 1.28.0, 1.33.1, 1.35.1
+# - Chroma versions: 0.6.3, 1.5.0
+```
+
+### Local Development with Minikube
+
+```bash
+# Setup Minikube cluster with ingress
+minikube start --addons=ingress -p chroma
+minikube profile chroma
+
+# Forward service to localhost
+minikube service chromadb --url
+```
+
+## Architecture & Structure
+
+### Chart Components
+
+The Helm chart (`charts/chromadb-chart/`) contains:
+
+- **StatefulSet Deployment**: Main ChromaDB application deployed as a StatefulSet with persistent storage
+- **Service**: ClusterIP service exposing ChromaDB API on port 8000
+- **ConfigMap**: Configuration for ChromaDB settings including auth, logging, and telemetry
+- **Secret**: Auto-generated or custom authentication credentials (token/basic auth)
+- **PersistentVolumeClaim**: Storage for ChromaDB data (configurable size and storage class)
+- **Ingress**: Optional ingress for external access
+- **Test Jobs**: Kubernetes Jobs for testing API connectivity and authentication
+
+### Key Configuration Points
+
+The chart supports multiple ChromaDB versions from 0.4.3 to 1.0.x with version-specific features:
+
+- **Authentication**: Supported in versions < 1.0.0 (token auth from 0.4.8+, basic auth from 0.4.7+)
+- **Logging Configuration**: Custom log levels and config maps (versions < 1.0.0)
+- **Cache Management**: LRU cache policy configuration (versions < 1.0.0)
+- **CORS Configuration**: List-based CORS origins (wildcard supported for all versions)
+- **Telemetry**: OTEL telemetry support with configurable endpoints
+
+### GitHub Workflows
+
+- **Lint on PR** (`.github/workflows/lint.yml`): Validates chart syntax on pull requests
+- **Integration Tests** (`.github/workflows/integration-test.yml`): Tests chart installation across multiple Kubernetes and ChromaDB versions
+- **Release** (`.github/workflows/release.yml`): Handles chart packaging and publishing to GitHub Pages
+
+## Important Notes
+
+- Default ChromaDB version is 1.5.0 (as of chart version 0.2.0)
+- Authentication is NOT supported in ChromaDB 1.0.x - use network-level security or API gateway
+- Data persistence is enabled by default at `/data` directory
+- Anonymous telemetry is disabled by default for privacy
+- The chart uses ghcr.io/chroma-core/chroma as the default image repository

Makefile

@@ -1,3 +1,6 @@
-.PHONY: lint
+.PHONY: lint ci-smoke
 lint:
-	helm lint charts/chromadb-chart
+	helm lint charts/chromadb-chart
+
+ci-smoke:
+	bash tests/ci_smoke.sh