fixed [Bug][Paperless] Redis password from secret isn't working #5

charts/donetick/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: donetick
 description: Donetick helm chart for Kubernetes
 type: application
-version: 1.0.4
+version: 1.0.5
 appVersion: "v0.1.60"
 maintainers:
   - name: Richard Tomik

charts/donetick/templates/configmap.yaml

@@ -37,11 +37,9 @@ data:
       {{- end }}
       {{- end }}
     jwt:
-      {{- if .Values.config.jwt.existingSecret }}
+      # Placeholder value - actual secret injected via DT_JWT_SECRET env var
-      # Secret will be injected from Secret
+      # This placeholder is required for environment variable overrides to work
-      {{- else }}
+      secret: "placeholder"
-      secret: {{ .Values.config.jwt.secret | quote }}
-      {{- end }}
       session_time: {{ .Values.config.jwt.session_time | quote }}
       max_refresh: {{ .Values.config.jwt.max_refresh | quote }}
     server:

charts/paperless-ngx/Chart.yaml

@@ -2,8 +2,8 @@ apiVersion: v2
 name: paperless-ngx
 description: Paperless-ngx helm chart for Kubernetes
 type: application
-version: 0.0.3
+version: 0.0.4
-appVersion: "latest"
+appVersion: "2.20.3"
 maintainers:
   - name: Richard Tomik
     email: richard.tomik@proton.me

charts/paperless-ngx/templates/_helpers.tpl

@@ -92,17 +92,26 @@ Redis port
 Redis URL
 Constructs the Redis URL with optional authentication.
 Format: redis://[username]:[password]@host:port/database
+When existingSecret is configured, uses environment variable placeholder for password.
 */}}
 {{- define "paperless-ngx.redis.url" -}}
 {{- $host := include "paperless-ngx.redis.host" . }}
 {{- $port := include "paperless-ngx.redis.port" . }}
 {{- $database := .Values.redis.external.database | toString }}
 {{- $username := .Values.redis.external.username | default "" }}
-{{- $password := .Values.redis.external.password | default "" }}
+{{- if .Values.redis.external.existingSecret }}
-{{- if and $username $password }}
+  {{- if $username }}
+{{- printf "redis://%s:$REDIS_PASSWORD@%s:%s/%s" $username $host $port $database }}
+  {{- else }}
+{{- printf "redis://:$REDIS_PASSWORD@%s:%s/%s" $host $port $database }}
+  {{- end }}
+{{- else if .Values.redis.external.password }}
+  {{- $password := .Values.redis.external.password }}
+  {{- if $username }}
 {{- printf "redis://%s:%s@%s:%s/%s" $username $password $host $port $database }}
-{{- else if $password }}
+  {{- else }}
 {{- printf "redis://:%s@%s:%s/%s" $password $host $port $database }}
+  {{- end }}
 {{- else }}
 {{- printf "redis://%s:%s/%s" $host $port $database }}
 {{- end }}

charts/paperless-ngx/templates/deployment.yaml

@@ -73,6 +73,16 @@ spec:
             - name: PAPERLESS_REDIS_PREFIX
               value: {{ .Values.redis.external.prefix | quote }}
             {{- end }}
+
+            # Redis password from secret (if configured)
+            {{- if or .Values.redis.external.existingSecret .Values.redis.external.password }}
+            - name: REDIS_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .Values.redis.external.existingSecret | default (printf "%s-secrets" (include "paperless-ngx.fullname" .)) }}
+                  key: {{ .Values.redis.external.passwordKey | default "redis-password" }}
+            {{- end }}
+
             - name: PAPERLESS_DBHOST
               value: {{ include "paperless-ngx.postgresql.host" . | quote }}
             - name: PAPERLESS_DBPORT

charts/paperless-ngx/values.yaml

@@ -5,7 +5,7 @@ fullnameOverride: ""
 ## Image settings
 image:
   repository: ghcr.io/paperless-ngx/paperless-ngx
-  tag: "2.18.4"
+  tag: "2.20.3"
   pullPolicy: IfNotPresent
 
 ## Deployment settings