feat: update evolution chart version to 2.3.0, add CronJob for rolling restart, and enhance service account permissions

Author: milesibastos

charts/evolution/Chart.yaml

@@ -15,10 +15,10 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.0.7
+version: 2.3.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "v2.2.3"
+appVersion: "v2.3.0"

charts/evolution/templates/cronjob-restart.yaml

@@ -0,0 +1,42 @@
+{{- /*
+CronJob que força rolling-restart
+Habilitado somente se .Values.restartCronJob.enabled = true
+*/ -}}
+{{- if .Values.restartCronJob.enabled }}
+{{- /* --------- helpers --------- */}}
+{{- $timezone     := default "UTC" .Values.restartCronJob.timezone }}
+{{- $targetKind   := default "Deployment" .Values.restartCronJob.targetKind }}
+{{- $targetName   := default (include "evolution.fullname" .) .Values.restartCronJob.targetName }}
+{{- $saName       := default (printf "%s-restart" (include "evolution.fullname" .)) .Values.restartCronJob.serviceAccount.name }}
+
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: {{ include "evolution.fullname" . }}-restart
+  labels:
+    {{- include "evolution.labels" . | nindent 4 }}
+  annotations:
+    cronjob.kubernetes.io/timezone: "{{ $timezone }}"
+spec:
+  schedule: "{{ .Values.restartCronJob.schedule }}"
+  successfulJobsHistoryLimit: 1
+  failedJobsHistoryLimit: 1
+  jobTemplate:
+    spec:
+      template:
+        spec:
+          restartPolicy: Never
+          serviceAccountName: {{ $saName }}
+          containers:
+          - name: kubectl
+            image: "{{ .Values.restartCronJob.image.repository }}:{{ .Values.restartCronJob.image.tag }}"
+            imagePullPolicy: {{ .Values.restartCronJob.image.pullPolicy }}
+            command:
+            - /bin/sh
+            - -c
+            - |
+              set -e
+              echo "Rolling-restart de {{ $targetKind }}/{{ $targetName }} @ $(date -Iseconds)"
+              kubectl patch {{ $targetKind | lower }} {{ $targetName }} \
+                -p "{\"spec\":{\"template\":{\"metadata\":{\"annotations\":{\"restartedAt\":\"$(date -Iseconds)\"}}}}}"
+{{- end }}

charts/evolution/templates/deployment.yaml

@@ -1,6 +1,10 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
+  annotations:
+    {{- with .Values.podAnnotations }}
+    {{- toYaml . | nindent 4 }}
+    {{- end }}
   name: {{ include "evolution.fullname" . }}
   labels:
     {{- include "evolution.labels" . | nindent 4 }}

charts/evolution/templates/sa-restart.yaml

@@ -0,0 +1,29 @@
+{{- if and .Values.restartCronJob.enabled .Values.restartCronJob.serviceAccount.create }}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ default (printf "%s-restart" (include "evolution.fullname" .)) .Values.restartCronJob.serviceAccount.name }}
+  labels:
+    {{- include "evolution.labels" . | nindent 4 }}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: {{ include "evolution.fullname" . }}-restart
+rules:
+- apiGroups: ["", "apps"]
+  resources: ["pods", "deployments", "statefulsets", "daemonsets"]
+  verbs: ["get", "patch", "delete"]
+---
+kind: RoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: {{ include "evolution.fullname" . }}-restart
+subjects:
+- kind: ServiceAccount
+  name: {{ default (printf "%s-restart" (include "evolution.fullname" .)) .Values.restartCronJob.serviceAccount.name }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: {{ include "evolution.fullname" . }}-restart
+{{- end }}

charts/evolution/values.yaml

@@ -8,7 +8,7 @@ image:
   repository: ghcr.io/chatwoot-br/evolution-api
   pullPolicy: Always
   # Overrides the image tag whose default is the chart appVersion.
-  tag: v2.2.3
+  tag: v2.3.0
 
 imagePullSecrets: []
 nameOverride: ""
@@ -35,7 +35,7 @@ config:
   # Configura a Versão do WhatsApp
   # Você pode consultar as versões no link abaixo:
   # https://web.whatsapp.com/check-update?version=0&platform=web
-  CONFIG_SESSION_PHONE_VERSION: "2.3000.1023247615"
+  # CONFIG_SESSION_PHONE_VERSION: "2.3000.1023247615"
   # Informa a quantidade de QRCODE que será gerado
   QRCODE_LIMIT: "3"
   # Informa o idioma da Evolution
@@ -278,3 +278,20 @@ nodeSelector: {}
 tolerations: []
 
 affinity: {}
+
+# values.yaml
+restartCronJob:
+  enabled: true            # vira false se não quiser instalar
+  schedule: "0 5 * * *"    # 05:00 todo dia
+  timezone: "America/Sao_Paulo"
+  # imagem leve que já traz kubectl
+  image:
+    repository: bitnami/kubectl
+    tag: 1.31             # mantenha alinhado ao seu cluster
+    pullPolicy: IfNotPresent
+  targetKind: Deployment   # ou StatefulSet/DaemonSet/Pod
+  targetName: ""
+  # RBAC
+  serviceAccount:
+    create: true
+    name: ""               # vazio → usa {{ include "evolution.fullname" . }}-restart