Skip to content

Commit ddd2658

Browse files
github-actions[bot]IN-Automation
github-actions[bot]
and
IN-Automation
authored
[jfrog-platform] 11.3.4 release (#2132)
Co-authored-by: IN-Automation <in-automation@jfrog.com>
1 parent 06bc423 commit ddd2658

File tree

10 files changed

+150
-57
lines changed

10 files changed

+150
-57
lines changed

‎stable/jfrog-platform/CHANGELOG.md‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,11 @@
11
# JFrog Platform Chart Changelog (GA releases only)
22
All changes to this chart will be documented in this file.
33

4+
## [11.3.4] - December 12, 2025
5+
* Update dependency xray chart version to 103.131.25
6+
* Update dependency catalog chart version to 101.28.3
7+
* Added `openshift-values.yaml` file for openshift deployment, please refer [here](README.md#openshift-deployment)
8+
49
## [11.3.3] - December 05, 2025
510
* Update dependency artifactory chart version to 107.125.8
611
* Update dependency xray chart version to 103.131.23

‎stable/jfrog-platform/Chart.lock‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -10,15 +10,15 @@ dependencies:
1010
version: 107.125.8
1111
- name: xray
1212
repository: https://charts.jfrog.io/
13-
version: 103.131.23
13+
version: 103.131.25
1414
- name: catalog
1515
repository: https://charts.jfrog.io/
16-
version: 101.27.1
16+
version: 101.28.3
1717
- name: distribution
1818
repository: https://charts.jfrog.io/
1919
version: 102.35.0
2020
- name: worker
2121
repository: https://charts.jfrog.io/
2222
version: 101.167.0
23-
digest: sha256:bd15bc7f8c962f94cc2fa28d305719a05a05c45ad8c9406fe066e91ee6802d3c
24-
generated: "2025-12-05T05:32:57.045903252Z"
23+
digest: sha256:9c42a36c25a921b75e171145dc616358dc3492cb671b84058f55f78994d9fbd6
24+
generated: "2025-12-12T00:09:24.645813494Z"

‎stable/jfrog-platform/Chart.yaml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -16,11 +16,11 @@ dependencies:
1616
- condition: xray.enabled
1717
name: xray
1818
repository: https://charts.jfrog.io/
19-
version: 103.131.23
19+
version: 103.131.25
2020
- condition: catalog.enabled
2121
name: catalog
2222
repository: https://charts.jfrog.io/
23-
version: 101.27.1
23+
version: 101.28.3
2424
- condition: distribution.enabled
2525
name: distribution
2626
repository: https://charts.jfrog.io/
@@ -52,4 +52,4 @@ name: jfrog-platform
5252
sources:
5353
- https://github.com/jfrog/charts
5454
type: application
55-
version: 11.3.3
55+
version: 11.3.4

‎stable/jfrog-platform/README.md‎

Lines changed: 26 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -44,6 +44,32 @@ For example , for small sizings :
4444
helm upgrade --install jfrog-platform jfrog/jfrog-platform -f sizing/platform-small.yaml --namespace platform --create-namespace
4545
````
4646

47+
### OpenShift Deployment
48+
For OpenShift deployments, security contexts must be disabled because OpenShift manages pod security policies automatically.
49+
An OpenShift-optimized values file is provided that disables all security contexts for the platform’s products and services.
50+
For additional background on OpenShift's handling of pod security, refer to Red Hat’s [documentation](https://docs.redhat.com/en/documentation/openshift_container_platform/4.10/html/authentication_and_authorization/managing-pod-security-policies)
51+
52+
To deploy JFrog Platform on OpenShift:
53+
54+
```bash
55+
helm upgrade --install jfrog-platform jfrog/jfrog-platform \
56+
-f values.yaml \
57+
-f openshift-values.yaml \
58+
--namespace jfrog-platform \
59+
--create-namespace
60+
```
61+
62+
* Important:
63+
openshift-values.yaml must be applied last. When using multiple -f flags in Helm, later files override earlier ones.
64+
This guarantees that the OpenShift-specific settings take precedence.
65+
66+
The openshift-values.yaml file disables the following for all products and services deployed using this Helm chart:
67+
- Pod security contexts
68+
- Container security contexts
69+
70+
This ensures compatibility with OpenShift’s built-in security model and allows the platform to operate under OpenShift’s default pod security enforcement.
71+
72+
4773
### Upgrade Chart
4874
**NOTE:** If you are using bundled PostgreSQL, before upgrading the JFrog Platform chart, follow these steps:
4975

‎stable/jfrog-platform/ci/default-values.yaml‎

Lines changed: 0 additions & 27 deletions
Original file line numberDiff line numberDiff line change
@@ -1,30 +1,3 @@
11
# Leave this file empty to ensure that CI runs builds against the default configuration in values.yaml.
22
# If this is an upgrade over an existing platform chart, explicitly pass 'gaUpgradeReady=true' to upgrade
33
gaUpgradeReady: true
4-
5-
postgresql:
6-
persistence:
7-
enabled: false
8-
artifactory:
9-
artifactory:
10-
persistence:
11-
enabled: false
12-
xray:
13-
common:
14-
persistence:
15-
enabled: false
16-
distribution:
17-
distribution:
18-
persistence:
19-
enabled: false
20-
redis:
21-
persistence:
22-
enabled: false
23-
24-
rabbitmq:
25-
persistence:
26-
enabled: false
27-
redis:
28-
master:
29-
persistence:
30-
enabled: false

‎stable/jfrog-platform/ci/platform-ha-values.yaml‎

Lines changed: 1 addition & 21 deletions
Original file line numberDiff line numberDiff line change
@@ -1,32 +1,12 @@
11
# If this is an upgrade over an existing platform chart, explicitly pass 'gaUpgradeReady=true' to upgrade
22
gaUpgradeReady: true
33

4-
postgresql:
5-
persistence:
6-
enabled: false
74
artifactory:
85
artifactory:
96
replicaCount: 3
10-
persistence:
11-
enabled: false
127
xray:
13-
replicaCount: 1
14-
common:
15-
persistence:
16-
enabled: false
8+
replicaCount: 3
179
distribution:
1810
replicaCount: 2
19-
distribution:
20-
persistence:
21-
enabled: false
22-
redis:
23-
persistence:
24-
enabled: false
2511
rabbitmq:
2612
replicaCount: 3
27-
persistence:
28-
enabled: false
29-
redis:
30-
master:
31-
persistence:
32-
enabled: false

‎stable/jfrog-platform/ci/platform-openshift-values.yaml‎

Lines changed: 98 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,98 @@
1+
# artifactory subchart
2+
artifactory:
3+
containerSecurityContext:
4+
enabled: false
5+
apptrust:
6+
podSecurityContext:
7+
enabled: false
8+
containerSecurityContext:
9+
enabled: false
10+
artifactory:
11+
podSecurityContext:
12+
enabled: false
13+
jfbus:
14+
podSecurityContext:
15+
enabled: false
16+
containerSecurityContext:
17+
enabled: false
18+
nginx:
19+
podSecurityContext:
20+
enabled: false
21+
containerSecurityContext:
22+
enabled: false
23+
platformfederation:
24+
podSecurityContext:
25+
enabled: false
26+
containerSecurityContext:
27+
enabled: false
28+
rtfs:
29+
podSecurityContext:
30+
enabled: false
31+
containerSecurityContext:
32+
enabled: false
33+
unifiedpolicy:
34+
podSecurityContext:
35+
enabled: false
36+
containerSecurityContext:
37+
enabled: false
38+
39+
# catalog subchart
40+
catalog:
41+
podSecurityContext:
42+
enabled: false
43+
containerSecurityContext:
44+
enabled: false
45+
46+
# distribution subchart
47+
distribution:
48+
podSecurityContext:
49+
enabled: false
50+
containerSecurityContext:
51+
enabled: false
52+
redis:
53+
containerSecurityContext:
54+
enabled: false
55+
56+
# postgresql subchart
57+
postgresql:
58+
primary:
59+
podSecurityContext:
60+
enabled: false
61+
containerSecurityContext:
62+
enabled: false
63+
readReplicas:
64+
podSecurityContext:
65+
enabled: false
66+
containerSecurityContext:
67+
enabled: false
68+
69+
# rabbitmq subchart
70+
rabbitmq:
71+
podSecurityContext:
72+
enabled: false
73+
containerSecurityContext:
74+
enabled: false
75+
76+
# worker subchart
77+
worker:
78+
podSecurityContext:
79+
enabled: false
80+
securityContext:
81+
enabled: false
82+
83+
# xray subchart
84+
xray:
85+
podSecurityContext:
86+
enabled: false
87+
containerSecurityContext:
88+
enabled: false
89+
catalog:
90+
podSecurityContext:
91+
enabled: false
92+
containerSecurityContext:
93+
enabled: false
94+
valkey:
95+
podSecurityContext:
96+
enabled: false
97+
containerSecurityContext:
98+
enabled: false

‎stable/jfrog-platform/ci/xray-podsplit-values.yaml‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
# If this is an upgrade over an existing platform chart, explicitly pass 'gaUpgradeReady=true' to upgrade
2+
gaUpgradeReady: true
3+
4+
# Xray pod split enabled
5+
xray:
6+
enabled: true
7+
splitXraytoSeparateDeployments:
8+
fullSplit: true

‎stable/jfrog-platform/openshift-values.yaml‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
# OpenShift optimized values for JFrog Platform chart
2+
# Auto-generated from Chart.yaml dependencies and internal service configurations
3+
# This configuration disables security contexts for all products and services for OpenShift compatibility
4+

‎stable/jfrog-platform/values.yaml‎

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -82,7 +82,6 @@ global:
8282
waitForPreviousPodsOnInitialStartup: true
8383
vhost: xray_haq
8484

85-
8685
## This Postgresql is used by all products , set postgresql.enabled: false, when you want to use external postgresql for all products
8786
postgresql:
8887
enabled: true
@@ -270,7 +269,7 @@ rabbitmq:
270269
artifactory:
271270
enabled: true
272271
unifiedUpgradeAllowed: true
273-
installerInfo: '{"productId":"Helm_JFrogPlatform/{{ printf "11.3.3-%s" .Chart.AppVersion }}","features":[{"featureId":"Platform/{{ printf "%s-%s" "kubernetes" .Capabilities.KubeVersion.Version }}"},{"featureId":"Database/{{ .Values.database.type }}"},{"featureId":"Nginx_Enabled/{{ .Values.nginx.enabled }}"},{"featureId":"ArtifactoryPersistence_Type/{{ .Values.artifactory.persistence.type }}"},{"featureId":"SplitServicesToContainers_Enabled/{{ .Values.splitServicesToContainers }}"},{"featureId":"Filebeat_Enabled/{{ .Values.filebeat.enabled }}"},{"featureId":"ReplicaCount/{{ .Values.artifactory.replicaCount }}"}]}'
272+
installerInfo: '{"productId":"Helm_JFrogPlatform/{{ printf "11.3.4-%s" .Chart.AppVersion }}","features":[{"featureId":"Platform/{{ printf "%s-%s" "kubernetes" .Capabilities.KubeVersion.Version }}"},{"featureId":"Database/{{ .Values.database.type }}"},{"featureId":"Nginx_Enabled/{{ .Values.nginx.enabled }}"},{"featureId":"ArtifactoryPersistence_Type/{{ .Values.artifactory.persistence.type }}"},{"featureId":"SplitServicesToContainers_Enabled/{{ .Values.splitServicesToContainers }}"},{"featureId":"Filebeat_Enabled/{{ .Values.filebeat.enabled }}"},{"featureId":"ReplicaCount/{{ .Values.artifactory.replicaCount }}"}]}'
274273
postgresql:
275274
enabled: false
276275
waitForDatabase: false

0 commit comments

Comments
 (0)