Skip to content

Commit 3b3b220

Browse files
authored
chore: prepare release v3.7.7 (#88)
chore: prepare release v3.7.7 (#88)
1 parent eaa44a4 commit 3b3b220

15 files changed

Lines changed: 176 additions & 19 deletions

Chart.lock

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -7,9 +7,9 @@ dependencies:
77
version: 17.11.3
88
- name: agent
99
repository: ""
10-
version: 3.7.6
10+
version: 3.7.7
1111
- name: server
1212
repository: ""
13-
version: 3.7.6
14-
digest: sha256:25afc9b03cd96a3fa18053eedbf24f0a47747536278a093c7918d6a46ddaa9e3
15-
generated: "2026-03-23T21:35:32.093441+01:00"
13+
version: 3.7.7
14+
digest: sha256:b4f07cde63f5a8f23f7f8ba0c1c3fceeb01558a67e2ee067382854ad4553b0e1
15+
generated: "2026-05-28T21:06:56.373195+01:00"

Chart.yaml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -2,8 +2,8 @@ apiVersion: v2
22
name: convoy
33
description: Open Source Webhooks Gateway
44
type: application
5-
version: "3.7.6"
6-
appVersion: "v26.3.5"
5+
version: "3.7.7"
6+
appVersion: "v26.3.7"
77
keywords:
88
- Webhooks
99
- Kubernetes
@@ -26,11 +26,11 @@ dependencies:
2626

2727
# Vendored subcharts under charts/agent and charts/server (see charts/ directory).
2828
- name: agent
29-
version: 3.7.6
29+
version: 3.7.7
3030
repository: ""
3131
condition: agent.enabled
3232

3333
- name: server
34-
version: 3.7.6
34+
version: 3.7.7
3535
repository: ""
3636
condition: server.enabled

README.md

Lines changed: 6 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# convoy
22

3-
![Version: 3.7.6](https://img.shields.io/badge/Version-3.7.6-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v26.3.5](https://img.shields.io/badge/AppVersion-v26.3.5-informational?style=flat-square)
3+
![Version: 3.7.7](https://img.shields.io/badge/Version-3.7.7-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v26.3.7](https://img.shields.io/badge/AppVersion-v26.3.7-informational?style=flat-square)
44

55
Open Source Webhooks Gateway
66

@@ -78,6 +78,9 @@ helm install convoy .
7878
| agent.env.dispatcher.deny_list[0] | string | `"127.0.0.1/8"` | |
7979
| agent.env.dispatcher.deny_list[1] | string | `"169.254.169.254/32"` | |
8080
| agent.env.dispatcher.insecure_skip_verify | bool | `false` | |
81+
| agent.env.auth.jwt.enabled | bool | `true` | |
82+
| agent.env.auth.jwt.refresh_secret | string | `"convoy-refresh-secret"` | |
83+
| agent.env.auth.jwt.secret | string | `"convoy-secret"` | |
8184
| agent.env.enable_feature_flag | list | `[]` | |
8285
| agent.env.enable_profiling | bool | `false` | |
8386
| agent.env.environment | string | `"oss"` | |
@@ -135,7 +138,7 @@ helm install convoy .
135138
| global.convoy.image | string | `"getconvoy/convoy"` | Docker image tags for all convoy components |
136139
| global.convoy.jwt_refresh_secret | string | `"convoy-refresh-secret"` | JWT Refresh Secret key |
137140
| global.convoy.jwt_secret | string | `"convoy-secret"` | JWT Secret key |
138-
| global.convoy.jwt_secret_name | string | `""` | If this secret parameter is not empty, JWT secret values will be ignored. The secrets should be in the 'jwt_secret' and 'jwt_refresh_secret' keys |
141+
| global.convoy.jwt_secret_name | string | `""` | Existing Kubernetes Secret name for JWT secrets. Recommended for production. When set, JWT secret values are ignored; the secret must contain 'jwt_secret' and 'jwt_refresh_secret' keys. |
139142
| global.convoy.license_key | string | `""` | License Key |
140143
| global.convoy.license_key_secret_name | string | `""` | If this secret parameter is not empty, the inline license key value will be ignored. The license key should be present in the 'license_key' key of the specified secret. |
141144
| global.convoy.log_level | string | `"error"` | Logger Level for all convoy components |
@@ -152,7 +155,7 @@ helm install convoy .
152155
| global.convoy.sentry_dsn | string | `""` | Sentry DSN |
153156
| global.convoy.sentry_environment | string | `"oss"` | Sentry environment |
154157
| global.convoy.sentry_sample_rate | float | `1` | Sentry sample rate for error sampling (0.0 to 1.0) |
155-
| global.convoy.tag | string | `"v26.3.5"` | Docker image tags for all convoy components |
158+
| global.convoy.tag | string | `"v26.3.7"` | Docker image tags for all convoy components |
156159
| global.convoy.tracer_enabled | bool | `false` | Tracing config for all convoy services |
157160
| global.convoy.tracer_type | string | `"otel"` | Tracing provider type |
158161
| global.externalDatabase.database | string | `"convoy"` | Database name for the external database |

charts/agent/Chart.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,8 +2,8 @@ apiVersion: v2
22
name: agent
33
description: Convoy Agent Chart
44
type: application
5-
version: "3.7.6"
6-
appVersion: "v26.3.5"
5+
version: "3.7.7"
6+
appVersion: "v26.3.7"
77
maintainers:
88
- name: Convoy Engineering Team
99
email: engineering@getconvoy.io

charts/agent/templates/_helpers.tpl

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -49,3 +49,11 @@ Selector labels
4949
app.kubernetes.io/name: {{ include "convoy-agent.name" . }}
5050
app.kubernetes.io/instance: {{ .Release.Name }}
5151
{{- end }}
52+
53+
{{- define "convoy-agent.jwtSecretName" -}}
54+
{{- if .Values.global.convoy.jwt_secret_name -}}
55+
{{- .Values.global.convoy.jwt_secret_name -}}
56+
{{- else -}}
57+
{{- include "convoy-agent.fullname" . }}-jwt
58+
{{- end -}}
59+
{{- end }}

charts/agent/templates/deployment.yaml

Lines changed: 38 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -62,6 +62,25 @@ spec:
6262
- name: CONVOY_DB_OPTIONS
6363
value: {{ .Values.global.externalDatabase.options | quote }}
6464
{{- end }}
65+
{{- if or .Values.global.convoy.jwt_secret_name .Values.global.convoy.jwt_secret .Values.global.convoy.jwt_refresh_secret }}
66+
- name: CONVOY_JWT_SECRET
67+
valueFrom:
68+
secretKeyRef:
69+
name: "{{ include "convoy-agent.jwtSecretName" . }}"
70+
key: jwt_secret
71+
- name: CONVOY_JWT_REFRESH_SECRET
72+
valueFrom:
73+
secretKeyRef:
74+
name: "{{ include "convoy-agent.jwtSecretName" . }}"
75+
key: jwt_refresh_secret
76+
{{- else }}
77+
- name: CONVOY_JWT_SECRET
78+
value: {{ .Values.env.auth.jwt.secret | quote }}
79+
- name: CONVOY_JWT_REFRESH_SECRET
80+
value: {{ .Values.env.auth.jwt.refresh_secret | quote }}
81+
{{- end }}
82+
- name: CONVOY_JWT_REALM_ENABLED
83+
value: {{ .Values.env.auth.jwt.enabled | quote }}
6584
command: [ "/cmd" ]
6685
args: [ "migrate", "up" ]
6786
{{- with .Values.securityContext }}
@@ -100,6 +119,25 @@ spec:
100119
- name: CONVOY_DISPATCHER_CACERT_PATH
101120
value: "/etc/convoy/ca.crt"
102121
{{- end }}
122+
{{- if or .Values.global.convoy.jwt_secret_name .Values.global.convoy.jwt_secret .Values.global.convoy.jwt_refresh_secret }}
123+
- name: CONVOY_JWT_SECRET
124+
valueFrom:
125+
secretKeyRef:
126+
name: "{{ include "convoy-agent.jwtSecretName" . }}"
127+
key: jwt_secret
128+
- name: CONVOY_JWT_REFRESH_SECRET
129+
valueFrom:
130+
secretKeyRef:
131+
name: "{{ include "convoy-agent.jwtSecretName" . }}"
132+
key: jwt_refresh_secret
133+
{{- else }}
134+
- name: CONVOY_JWT_SECRET
135+
value: {{ .Values.env.auth.jwt.secret | quote }}
136+
- name: CONVOY_JWT_REFRESH_SECRET
137+
value: {{ .Values.env.auth.jwt.refresh_secret | quote }}
138+
{{- end }}
139+
- name: CONVOY_JWT_REALM_ENABLED
140+
value: {{ .Values.env.auth.jwt.enabled | quote }}
103141
{{- if and .Values.env.auth.file.secret (ne .Values.env.auth.file.secret "") }}
104142
- name: CONVOY_BASIC_AUTH_CONFIG
105143
valueFrom:
Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
{{- if and (not .Values.global.convoy.jwt_secret_name) (or .Values.global.convoy.jwt_secret .Values.global.convoy.jwt_refresh_secret) }}
2+
apiVersion: v1
3+
kind: Secret
4+
metadata:
5+
name: {{ include "convoy-agent.jwtSecretName" . }}
6+
labels:
7+
app.kubernetes.io/name: {{ include "convoy-agent.name" . }}
8+
helm.sh/chart: {{ include "convoy-agent.chart" . }}
9+
app.kubernetes.io/instance: {{ .Release.Name }}
10+
app.kubernetes.io/managed-by: {{ .Release.Service }}
11+
type: Opaque
12+
data:
13+
jwt_secret: {{ .Values.global.convoy.jwt_secret | default (randAlphaNum 32) | b64enc | quote }}
14+
jwt_refresh_secret: {{ .Values.global.convoy.jwt_refresh_secret | default (randAlphaNum 32) | b64enc | quote }}
15+
{{- end }}

charts/agent/templates/rollout.yaml

Lines changed: 38 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -64,6 +64,25 @@ spec:
6464
- name: CONVOY_DB_OPTIONS
6565
value: {{ .Values.global.externalDatabase.options | quote }}
6666
{{- end }}
67+
{{- if or .Values.global.convoy.jwt_secret_name .Values.global.convoy.jwt_secret .Values.global.convoy.jwt_refresh_secret }}
68+
- name: CONVOY_JWT_SECRET
69+
valueFrom:
70+
secretKeyRef:
71+
name: "{{ include "convoy-agent.jwtSecretName" . }}"
72+
key: jwt_secret
73+
- name: CONVOY_JWT_REFRESH_SECRET
74+
valueFrom:
75+
secretKeyRef:
76+
name: "{{ include "convoy-agent.jwtSecretName" . }}"
77+
key: jwt_refresh_secret
78+
{{- else }}
79+
- name: CONVOY_JWT_SECRET
80+
value: {{ .Values.env.auth.jwt.secret | quote }}
81+
- name: CONVOY_JWT_REFRESH_SECRET
82+
value: {{ .Values.env.auth.jwt.refresh_secret | quote }}
83+
{{- end }}
84+
- name: CONVOY_JWT_REALM_ENABLED
85+
value: {{ .Values.env.auth.jwt.enabled | quote }}
6786
command: [ "/cmd" ]
6887
args: [ "migrate", "up" ]
6988
{{- with .Values.securityContext }}
@@ -102,6 +121,25 @@ spec:
102121
- name: CONVOY_DISPATCHER_CACERT_PATH
103122
value: "/etc/convoy/ca.crt"
104123
{{- end }}
124+
{{- if or .Values.global.convoy.jwt_secret_name .Values.global.convoy.jwt_secret .Values.global.convoy.jwt_refresh_secret }}
125+
- name: CONVOY_JWT_SECRET
126+
valueFrom:
127+
secretKeyRef:
128+
name: "{{ include "convoy-agent.jwtSecretName" . }}"
129+
key: jwt_secret
130+
- name: CONVOY_JWT_REFRESH_SECRET
131+
valueFrom:
132+
secretKeyRef:
133+
name: "{{ include "convoy-agent.jwtSecretName" . }}"
134+
key: jwt_refresh_secret
135+
{{- else }}
136+
- name: CONVOY_JWT_SECRET
137+
value: {{ .Values.env.auth.jwt.secret | quote }}
138+
- name: CONVOY_JWT_REFRESH_SECRET
139+
value: {{ .Values.env.auth.jwt.refresh_secret | quote }}
140+
{{- end }}
141+
- name: CONVOY_JWT_REALM_ENABLED
142+
value: {{ .Values.env.auth.jwt.enabled | quote }}
105143
{{- if and .Values.env.auth.file.secret (ne .Values.env.auth.file.secret "") }}
106144
- name: CONVOY_BASIC_AUTH_CONFIG
107145
valueFrom:

charts/agent/values.yaml

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -73,6 +73,10 @@ env:
7373
sign_up_enabled: false
7474
log_level: "error"
7575
auth:
76+
jwt:
77+
enabled: true
78+
secret: "convoy-secret"
79+
refresh_secret: "convoy-refresh-secret"
7680
file:
7781
basic: []
7882
# -- If this secret parameter is not empty, basic auth inline value will be ignored. The basic auth config should be in the 'basic_auth_config' key
@@ -154,7 +158,7 @@ env:
154158
image:
155159
repository: getconvoy/convoy
156160
pullPolicy: IfNotPresent
157-
tag: v26.3.5
161+
tag: v26.3.7
158162

159163
nameOverride: "convoy-agent"
160164
fullNameOverride: "convoy-agent"

charts/server/Chart.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,13 +15,13 @@ type: application
1515
# This is the chart version. This version number should be incremented each time you make changes
1616
# to the chart and its templates, including the app version.
1717
# Versions are expected to follow Semantic Versioning (https://semver.org/)
18-
version: "3.7.6"
18+
version: "3.7.7"
1919

2020
# This is the version number of the application being deployed. This version number should be
2121
# incremented each time you make changes to the application. Versions are not expected to
2222
# follow Semantic Versioning. They should reflect the version the application is using.
2323
# It is recommended to use it with quotes.
24-
appVersion: "v26.3.5"
24+
appVersion: "v26.3.7"
2525

2626
maintainers:
2727
- name: Convoy Engineering Team

0 commit comments

Comments
 (0)