7 Commits
Author SHA1 Message Date
claude 983313f833 chore: update to phpMyAdmin 5.2.3-fpm-alpine, nginx 1.31.4-alpine-perl 2026-08-24 03:00:30 +00:00
claude d37b1bb84c chore: update to phpMyAdmin 5.2.3-fpm-alpine, nginx 1.31.3-alpine-perl 2026-07-28 09:22:39 +00:00
claude dd79ab3b1b chore: update to phpMyAdmin 5.2.3-fpm-alpine, nginx 1.31.1-alpine-perl 2026-05-25 03:00:19 +00:00
claude e753f2e5a7 chore: update to phpMyAdmin 5.2.3-fpm-alpine, nginx 1.31.0-alpine-perl 2026-05-18 03:00:34 +00:00
claudeandClaude Sonnet 4.6 96cac05191 fix: always inject PMA_BLOWFISH_SECRET and preserve it across upgrades
Helm Chart Release / release-chart (push) Successful in 4s
Update Docker Image Tags and Release Helm Chart / update-and-release (push) Successful in 10s
Two bugs caused the "temporary key" warning in phpMyAdmin:

1. deployment.yaml: PMA_BLOWFISH_SECRET env var was only injected when
   blowfishSecret or existingSecret was explicitly set. With default empty
   values, the env var was never passed to the container, so phpMyAdmin
   fell back to an empty string and auto-generated a temporary key.
   Fix: always inject PMA_BLOWFISH_SECRET since the Secret is always created.

2. secret.yaml: randAlphaNum generated a new random value on every
   helm upgrade, invalidating all cookies and logging out users on every
   deployment.
   Fix: use lookup to check if the Secret already exists and reuse its
   value; only generate a new random value on first install.

Also add checksum/secret annotation to trigger pod rollout when the
secret changes (e.g. when blowfishSecret value is updated in values.yaml).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-30 12:23:18 +09:00
claudeandClaude Sonnet 4.6 be7671b55b fix: fix backup CronJob template bugs
Helm Chart Release / release-chart (push) Successful in 4s
- Fix MYSQL_HOST/PORT: were referencing non-existent .Values.backup.mysql.host/port;
  now correctly read from .Values.phpmyadmin.hosts[0] as documented in README
- Remove broken BACKUP_TIMESTAMP env var (shell command substitution does not
  execute in k8s env vars; timestamp is already defined inside the script)
- Fix NFS readOnly: was always outputting "readOnly: false" even when
  .Values.backup.nfs.readOnly was true; now renders the actual value
- Add MYSQL_HISTFILE=/dev/null to prevent mysql client from writing history
  file when readOnlyRootFilesystem: true
- Fix variable name collision: renamed shell var DATABASES -> DB_LIST in the
  all-databases branch to avoid conflict with the DATABASES env var
- Use /bin/bash (available in mysql:8.0 Debian image) for set -euo pipefail
  and local keyword support
- Split retention find into separate *.sql and *.sql.gz patterns
- Add -mindepth 1 to empty dir cleanup to avoid removing the root backup dir

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-28 08:04:30 +09:00
claudeandClaude Sonnet 4.6 85a22e4d34 fix: fix Helm release workflow and add CLAUDE.md
Helm Chart Release / release-chart (push) Successful in 5s
Update Docker Image Tags and Release Helm Chart / update-and-release (push) Successful in 9s
- Replace broken helmchart/repo checkout+index.yaml approach with
  Gitea Package Registry upload (matching phpfpm pattern)
- Fix release condition: release only on phpMyAdmin update, not nginx-only
- Add release_needed output separate from update_needed
- Add duplicate tag/release guard before creation
- Add jq availability check
- Add env vars REGISTRY_URL and OWNER
- Fix git user to Claude / claude@cafepieters.com
- Add CLAUDE.md with git info, release rules, and PHP runtime note

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-22 11:43:01 +09:00