[bitnami/nessie] Set usePasswordFiles=true by default (#32114)

* [bitnami/nessie] Set `usePasswordFiles=true` by default

Signed-off-by: Miguel Ruiz <[email protected]>

* Update CHANGELOG.md

Signed-off-by: Bitnami Containers <[email protected]>

* Update README.md with readme-generator-for-helm

Signed-off-by: Bitnami Containers <[email protected]>

* Fix typo

Signed-off-by: Miguel Ruiz <[email protected]>

* Fix typo

Signed-off-by: Miguel Ruiz <[email protected]>

* Update CHANGELOG.md

Signed-off-by: Bitnami Containers <[email protected]>

* Bump major after value rename

Signed-off-by: Miguel Ruiz <[email protected]>

* Update README.md

Signed-off-by: Miguel Ruiz <[email protected]>

* Update CHANGELOG.md

Signed-off-by: Bitnami Containers <[email protected]>

---------

Signed-off-by: Miguel Ruiz <[email protected]>
Signed-off-by: Bitnami Containers <[email protected]>
Co-authored-by: Bitnami Containers <[email protected]>

Author: migruiz4

.vib/nessie/goss/goss.yaml

@@ -32,12 +32,12 @@ command:
     exit-status: 0
     stdout:
       - /QUARKUS_LOG_LEVEL.*{{ .Vars.configOverrides.quarkus.log.level }}/
-      {{- if not .Vars.usePasswordFile }}
+      {{- if not .Vars.usePasswordFiles }}
       # The secret configuration should be set via env
       - /QUARKUS_LOG_FILE_LEVEL.*{{ .Vars.secretConfigOverrides.quarkus.log.file.level }}/
       {{- end }}
 
-{{- if .Vars.usePasswordFile }}
+{{- if .Vars.usePasswordFiles }}
 # The secret configuration should be mounted as a file
 file:
   /bitnami/nessie/secrets/configuration/QUARKUS_LOG_FILE_LEVEL:

.vib/nessie/runtime-parameters.yaml

@@ -8,7 +8,7 @@ containerSecurityContext:
 containerPorts:
   http: 6555
   management: 8078
-usePasswordFile: true
+usePasswordFiles: true
 configOverrides:
   quarkus:
     log:

bitnami/nessie/CHANGELOG.md

@@ -1,8 +1,12 @@
 # Changelog
 
-## 1.2.1 (2025-02-24)
+## 2.0.0 (2025-03-13)
 
-* [bitnami/nessie] Release 1.2.1 ([#32144](https://github.com/bitnami/charts/pull/32144))
+* [bitnami/nessie] Set `usePasswordFiles=true` by default ([#32114](https://github.com/bitnami/charts/pull/32114))
+
+## <small>1.2.1 (2025-02-24)</small>
+
+* [bitnami/nessie] Release 1.2.1 (#32144) ([6af5812](https://github.com/bitnami/charts/commit/6af5812bc806e92231e61f263b3da77017661199)), closes [#32144](https://github.com/bitnami/charts/issues/32144)
 
 ## 1.2.0 (2025-02-20)
 

bitnami/nessie/Chart.yaml

@@ -36,7 +36,7 @@ maintainers:
   url: https://github.com/bitnami/charts
 name: nessie
 sources:
-- https://github.com/bitnami/charts/tree/main/bitnami/nessie
-- https://github.com/bitnami/containers/tree/main/bitnami/nessie
-- https://github.com/nessie/nessie
-version: 1.2.1
+  - https://github.com/bitnami/charts/tree/main/bitnami/nessie
+  - https://github.com/bitnami/containers/tree/main/bitnami/nessie
+  - https://github.com/nessie/nessie
+version: 2.0.0

bitnami/nessie/README.md

@@ -361,7 +361,7 @@ wrj2wDbCDCFmfqnSJ+dKI3vFLlEz44sAV8jX/kd4Y6ZTQhlLbYc=
 | `deploymentLabels`                                  | Add extra labels to the Deployment object                                                                                                                                                                            | `{}`                     |
 | `deploymentAnnotations`                             | Add extra annotations to the Deployment object                                                                                                                                                                       | `{}`                     |
 | `logLevel`                                          | Set application log level                                                                                                                                                                                            | `INFO`                   |
-| `usePasswordFile`                                   | Mount all sensitive information as files                                                                                                                                                                             | `true`                   |
+| `usePasswordFiles`                                  | Mount all sensitive information as files                                                                                                                                                                             | `true`                   |
 | `versionStoreType`                                  | Set version store type. The chart natively supports JDBC_POSTGRESQL, ROCKSDB and IN_MEMORY. Any other type requires you to add the configuration in configOverrides and secretConfigOverrides.                       | `JDBC_POSTGRESQL`        |
 | `livenessProbe.enabled`                             | Enable livenessProbe on nessie containers                                                                                                                                                                            | `true`                   |
 | `livenessProbe.initialDelaySeconds`                 | Initial delay seconds for livenessProbe                                                                                                                                                                              | `10`                     |
@@ -622,6 +622,10 @@ Find more information about how to deal with common errors related to Bitnami's
 
 ## Upgrading
 
+### To 2.0.0
+
+Value `usePasswordFile` has been renamed as `usePasswordFiles` to be aligned with the rest of the catalog. Its default value has changed from `false` to `true`.
+
 ### To 1.1.0
 
 This version introduces image verification for security purposes. To disable it, set `global.security.allowInsecureImages` to `true`. More details at [GitHub issue](https://github.com/bitnami/charts/issues/30850).
@@ -644,4 +648,4 @@ Unless required by applicable law or agreed to in writing, software
 distributed under the License is distributed on an "AS IS" BASIS,
 WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 See the License for the specific language governing permissions and
-limitations under the License.
+limitations under the License.

bitnami/nessie/templates/_helpers.tpl

@@ -250,8 +250,8 @@ Return the volume-permissions init container
       . /opt/bitnami/scripts/libpostgresql.sh
       . /opt/bitnami/scripts/postgresql-env.sh
 
-      {{- if .Values.usePasswordFile }}
-      export DATABASE_PASSWORD="$(< "/bitnami/nessie/secrets/database/QUARKUS_DATASOURCE_POSTGRESQL_PASSWORD")"
+      {{- if .Values.usePasswordFiles }}
+      export DATABASE_PASSWORD="$(< $DATABASE_PASSWORD_FILE)"
       {{- end }}
       info "Waiting for host $DATABASE_HOST:$DATABASE_PORT_NUMBER"
       export PGCONNECT_TIMEOUT="5"
@@ -280,7 +280,10 @@ Return the volume-permissions init container
       value: {{ include "nessie.database.host" . | quote }}
     - name: DATABASE_PORT_NUMBER
       value: {{ include "nessie.database.port" . | quote }}
-    {{- if not .Values.usePasswordFile }}
+    {{- if .Values.usePasswordFiles }}
+    - name: DATABASE_PASSWORD_FILE
+      value: "/bitnami/nessie/secrets/database/QUARKUS_DATASOURCE_POSTGRESQL_PASSWORD"
+    {{- else -}}
     - name: DATABASE_PASSWORD
       valueFrom:
         secretKeyRef:
@@ -292,7 +295,7 @@ Return the volume-permissions init container
     - name: DATABASE_NAME
       value: {{ include "nessie.database.name" . | quote }}
   volumeMounts:
-    {{- if .Values.usePasswordFile }}
+    {{- if .Values.usePasswordFiles }}
     - name: database-password
       mountPath: /bitnami/nessie/secrets/database
     {{- end }}

bitnami/nessie/templates/deployment.yaml

@@ -112,7 +112,7 @@ spec:
           args:
             - -ec
             - |
-              {{- if .Values.usePasswordFile }}
+              {{- if .Values.usePasswordFiles }}
               # We need to load all the secret env vars to the system
               for file in $(find /bitnami/nessie/secrets -type f); do
                   env_var_name="$(basename $file)"
@@ -125,7 +125,7 @@ spec:
           env:
             - name: BITNAMI_DEBUG
               value: {{ ternary "true" "false" (or .Values.image.debug .Values.diagnosticMode.enabled) | quote }}
-            {{- if and (eq .Values.versionStoreType "JDBC_POSTGRESQL") (not .Values.usePasswordFile) }}
+            {{- if and (eq .Values.versionStoreType "JDBC_POSTGRESQL") (not .Values.usePasswordFiles) }}
             - name: QUARKUS_DATASOURCE_POSTGRESQL_PASSWORD
               valueFrom:
                 secretKeyRef:
@@ -138,7 +138,7 @@ spec:
           envFrom:
             - configMapRef:
                 name: {{ include "nessie.configmapName" . }}
-            {{- if and (not .Values.usePasswordFile) (or .Values.secretConfigOverrides .Values.existingSecret) }}
+            {{- if and (not .Values.usePasswordFiles) (or .Values.secretConfigOverrides .Values.existingSecret) }}
             - secretRef:
                 name: {{ include "nessie.secretName" . }}
             {{- end }}
@@ -206,7 +206,7 @@ spec:
               subPath: {{ .Values.persistence.subPath }}
             {{- end }}
             {{- end }}
-            {{- if .Values.usePasswordFile }}
+            {{- if .Values.usePasswordFiles }}
             {{- if (eq .Values.versionStoreType "JDBC_POSTGRESQL") }}
             - name: database-password
               mountPath: /bitnami/nessie/secrets/database
@@ -228,7 +228,7 @@ spec:
         {{- end }}
         - name: empty-dir
           emptyDir: {}
-        {{- if .Values.usePasswordFile }}
+        {{- if .Values.usePasswordFiles }}
         {{- if (eq .Values.versionStoreType "JDBC_POSTGRESQL") }}
         - name: database-password
           secret:

bitnami/nessie/values.yaml

@@ -167,9 +167,9 @@ deploymentAnnotations: {}
 ## @param logLevel Set application log level
 ##
 logLevel: INFO
-## @param usePasswordFile Mount all sensitive information as files
+## @param usePasswordFiles Mount all sensitive information as files
 ##
-usePasswordFile: true
+usePasswordFiles: true
 ## @param versionStoreType Set version store type. The chart natively supports JDBC_POSTGRESQL, ROCKSDB and IN_MEMORY. Any other type requires you to add the configuration in configOverrides and secretConfigOverrides.
 ##
 versionStoreType: JDBC_POSTGRESQL