charts/snowplow-iglu-server: Add support for sending HSTS headers (cl…

…oses #154)
snowplow-devops · Jan 18, 2024 · 84943dd · 84943dd
1 parent 6c423d9
commit 84943dd
Show file tree

Hide file tree

Showing 9 changed files with 20 additions and 3 deletions.
diff --git a/CHANGELOG b/CHANGELOG
@@ -1,3 +1,7 @@
+Version 0.1.61 (2024-01-18)
+---------------------------
+charts/snowplow-iglu-server: Add support for sending HSTS headers (#154)
+
 Version 0.1.60 (2023-12-18)
 ---------------------------
 charts/service-deployment: Allow disabling SA once bound (#152)

diff --git a/charts/snowplow-iglu-server/Chart.yaml b/charts/snowplow-iglu-server/Chart.yaml
@@ -1,8 +1,8 @@
 apiVersion: v2
 name: snowplow-iglu-server
 description: A Helm Chart to deploy the Snowplow Iglu Server project
-version: 0.3.1
-appVersion: "0.10.0"
+version: 0.4.0
+appVersion: "0.12.0"
 icon: https://raw.githubusercontent.com/snowplow-devops/helm-charts/master/docs/logo/snowplow.png
 home: https://github.com/snowplow-devops/helm-charts
 sources:

diff --git a/charts/snowplow-iglu-server/README.md b/charts/snowplow-iglu-server/README.md
@@ -158,6 +158,7 @@ You will need to fill these targeted fields:
 | service.config.patchesAllowed | bool | `false` | Whether to allow schema patching |
 | service.config.repoServer.idleTimeout | string | `"65 seconds"` |  |
 | service.config.repoServer.maxConnections | int | `16384` |  |
+| service.config.repoServer.hsts.enable | bool | `true` | Whether to enable sending HSTS headers (>=0.12.0) |
 | service.config.secrets.superApiKey | string | `""` | Lowercase uuidv4 to use as admin apikey of the service (default: auto-generated) |
 | service.deploySetupHooks | bool | `true` | Whether to run the post-deploy setup hooks |
 | service.gcp.deployProxy | bool | `false` | Whether to use CloudSQL Proxy (note: requires GCP service account to be attached) |

diff --git a/charts/snowplow-iglu-server/templates/iglu-deployment.yaml b/charts/snowplow-iglu-server/templates/iglu-deployment.yaml
@@ -55,6 +55,8 @@ spec:
           value: "{{ .Values.service.config.repoServer.maxConnections }}"
         - name : "CONFIG_FORCE_iglu_repoServer_idleTimeout"
           value: "{{ .Values.service.config.repoServer.idleTimeout }}"
+        - name : "CONFIG_FORCE_iglu_repoServer_hsts_enable"
+          value: "{{ .Values.service.config.repoServer.hsts.enable }}"
         - name : "CONFIG_FORCE_iglu_database_type"
           value: "{{ include "iglu.service.config.database.type" . }}"
         {{- if .Values.service.gcp.deployProxy }}

diff --git a/charts/snowplow-iglu-server/values-aws.yaml.tmpl b/charts/snowplow-iglu-server/values-aws.yaml.tmpl
@@ -18,6 +18,8 @@ service:
     repoServer:
       maxConnections: 16384
       idleTimeout: "65 seconds"
+      hsts:
+        enable: true
     database:
       type: "postgres"
       host: "<host>" 

diff --git a/charts/snowplow-iglu-server/values-azure.yaml.tmpl b/charts/snowplow-iglu-server/values-azure.yaml.tmpl
@@ -18,6 +18,8 @@ service:
     repoServer:
       maxConnections: 16384
       idleTimeout: "65 seconds"
+      hsts:
+        enable: true
     database:
       type: "postgres"
       port: 5432

diff --git a/charts/snowplow-iglu-server/values-gcp.yaml.tmpl b/charts/snowplow-iglu-server/values-gcp.yaml.tmpl
@@ -18,6 +18,8 @@ service:
     repoServer:
       maxConnections: 16384
       idleTimeout: "65 seconds"
+      hsts:
+        enable: true
     database:
       type: "postgres"
       port: 5432

diff --git a/charts/snowplow-iglu-server/values-local.yaml.tmpl b/charts/snowplow-iglu-server/values-local.yaml.tmpl
@@ -15,6 +15,8 @@ service:
     repoServer:
       maxConnections: 16384
       idleTimeout: "65 seconds"
+      hsts:
+        enable: true
     database:
       type: "postgres"
       host: "<host>" 

diff --git a/charts/snowplow-iglu-server/values.yaml b/charts/snowplow-iglu-server/values.yaml
@@ -13,7 +13,7 @@ service:
   port: 8080
   image:
     repository: "snowplow/iglu-server"
-    tag: "0.10.0-distroless"
+    tag: "0.12.0-distroless"
     # -- Whether the repository is public
     isRepositoryPublic: true
     # -- The image pullPolicy to use
@@ -45,6 +45,8 @@ service:
     repoServer:
       maxConnections: 16384
       idleTimeout: "65 seconds"
+      hsts:
+        enable: true
     database:
       # -- Can be either 'dummy' (in-memory) or 'postgres'
       type: "dummy"