You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/content/en/open_source/upgrading/2.51.md
+13Lines changed: 13 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -18,6 +18,16 @@ This release introduces several important changes to the Helm chart configuratio
18
18
> The previous volume implementation prevented mounting projected volumes (such as secret mounts with renamed key names) and per-container volume mounts (like nginx emptyDir when readOnlyRootFs is enforced).
19
19
> The new approach resolves these limitations.
20
20
21
+
#### Security context
22
+
23
+
This Helm chart extends security context capabilities to all deployed pods and containers.
24
+
You can define a default pod and container security context globally using `securityContext.podSecurityContext` and `securityContext.containerSecurityContext` keys.
25
+
Additionally, each deployment can specify its own pod and container security contexts, which will override or merge with the global ones.
26
+
27
+
#### Fine-grained resources
28
+
29
+
Now each container can specify the resource requests and limits.
30
+
21
31
#### Moved values
22
32
23
33
The following Helm chart values have been modified in this release:
@@ -27,6 +37,8 @@ The following Helm chart values have been modified in this release:
27
37
-`redis.redisServer` → `redisServer` (prevents potential schema conflicts with upstream chart)
28
38
-`redis.transportEncryption.params` → `redisParams` (prevents potential schema conflicts with upstream chart)
29
39
-`postgresql.postgresServer` → `postgresServer` (prevents potential schema conflicts with upstream chart)
40
+
-`securityContext.djangoSecurityContext` → deprecated in favor of container-specific security contexts (`celery.beat.containerSecurityContext`, `celery.worker.containerSecurityContext`, `django.uwsgi.containerSecurityContext` and `dbMigrationChecker.containerSecurityContext`)
41
+
-`securityContext.nginxSecurityContext` → deprecated in favor of container-specific security contexts (`django.nginx.containerSecurityContext`)
30
42
31
43
### New features
32
44
@@ -43,6 +55,7 @@ The following Helm chart values have been modified in this release:
43
55
-**Optional secret references**: Some secret references are now optional, allowing the chart to function even when certain secrets are not created.
44
56
-**Fixed secret mounting**: Resolved issues with optional secret mounts and references.
45
57
-**Improved code organization**: Minor Helm chart refactoring to enhance readability and maintainability.
58
+
-**Extra anotations**: Now we can add common annotations to all resources.
46
59
47
60
## PostgreSQL Major Version Upgrade in Docker Compose
0 commit comments