makeplane · hajowieland · Nov 23, 2025 · Nov 23, 2025 · Nov 23, 2025 · Nov 23, 2025
diff --git a/charts/plane-enterprise/Chart.yaml b/charts/plane-enterprise/Chart.yaml
@@ -5,7 +5,7 @@ description: Meet Plane. An Enterprise software development tool to manage issue
 
 type: application
 
-version: 1.6.5
+version: 1.6.6
 appVersion: "1.17.0"
 
 home: https://plane.so/

diff --git a/charts/plane-enterprise/templates/_helpers.tpl b/charts/plane-enterprise/templates/_helpers.tpl
@@ -7,7 +7,7 @@
 {{- end -}}
 
 {{- define "plane.podScheduling" -}}
-  {{- with .nodeSelector }} 
+  {{- with .nodeSelector }}
       nodeSelector: {{ toYaml . | nindent 8 }}
   {{- end }}
   {{- with .tolerations }}
@@ -20,9 +20,52 @@
 
 {{- define "plane.labelsAndAnnotations" -}}
   {{- with .labels }}
-  labels: {{ toYaml . | nindent 4 }}
+  {{- toYaml . | nindent 4 }}
   {{- end }}
   {{- with .annotations }}
   annotations: {{ toYaml . | nindent 4 }}
   {{- end }}
 {{- end }}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "plane.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Create a default fully qualified app name.
+*/}}
+{{- define "plane.name" -}}
+{{- .Chart.Name | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Common labels
+*/}}
+{{- define "plane.labels" -}}
+helm.sh/chart: {{ include "plane.chart" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+app.kubernetes.io/name: {{ include "plane.name" . }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+app.kubernetes.io/part-of: {{ include "plane.name" . }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+{{- end }}
+
+{{/*
+Common labels for components
+*/}}
+{{- define "plane.component.labels" -}}
+app.kubernetes.io/name: {{ include "plane.name" .context }}
+app.kubernetes.io/instance: {{ .context.Release.Name }}
+app.kubernetes.io/component: {{ .componentName }}
+app.kubernetes.io/managed-by: {{ .context.Release.Service }}
+app.kubernetes.io/part-of: {{ include "plane.name" .context }}
+{{- if .context.Chart.AppVersion }}
+app.kubernetes.io/version: {{ .context.Chart.AppVersion | quote }}
+{{- end }}
+helm.sh/chart: {{ include "plane.chart" .context }}
+{{- end }}
diff --git a/charts/plane-enterprise/templates/certs/cert-issuers.yaml b/charts/plane-enterprise/templates/certs/cert-issuers.yaml
@@ -5,16 +5,20 @@ kind: Secret
 metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-issuer-api-token-secret
+  labels:
+    {{- include "plane.labels" . | nindent 4 }}
 type: Opaque
 stringData:
   api-token: {{ .Values.ssl.token | default "default-api-token" | quote }}
-  
+
 ---
 apiVersion: cert-manager.io/v1
 kind: Issuer
 metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-cert-issuer
+  labels:
+    {{- include "plane.labels" . | nindent 4 }}
 spec:
   acme:
     email: {{ .Values.ssl.email }}
@@ -42,5 +46,5 @@ spec:
           ingressClassName: {{ .Values.ingress.ingressClass }}
     {{- end }}
 
---- 
-{{- end}}
+---
+{{- end}}
diff --git a/charts/plane-enterprise/templates/certs/certs.yaml b/charts/plane-enterprise/templates/certs/certs.yaml
@@ -5,6 +5,8 @@ kind: Certificate
 metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-ssl-cert
+  labels:
+    {{- include "plane.labels" . | nindent 4 }}
 spec:
   dnsNames:
   - {{ .Values.license.licenseDomain | quote }}

diff --git a/charts/plane-enterprise/templates/certs/email-certs.yaml b/charts/plane-enterprise/templates/certs/email-certs.yaml
@@ -4,12 +4,14 @@ kind: Certificate
 metadata:
   name: {{ .Release.Name }}-mail-tls-cert
   namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "plane.labels" . | nindent 4 }}
 spec:
   dnsNames:
   - {{ .Values.env.email_service_envs.smtp_domain | quote }}
-  
+
   issuerRef:
     name: {{ .Release.Name }}-cert-issuer
   secretName: {{ .Release.Name }}-mail-tls-secret
---- 
-{{- end }}
+---
+{{- end }}
diff --git a/charts/plane-enterprise/templates/config-secrets/app-env.yaml b/charts/plane-enterprise/templates/config-secrets/app-env.yaml
@@ -5,6 +5,8 @@ type: Opaque
 metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-app-secrets
+  labels:
+    {{- include "plane.labels" . | nindent 4 }}
 stringData:
   SECRET_KEY: {{ .Values.env.secret_key | default "60gp0byfz2dvffa45cxl20p1scy9xbpf6d8c5y0geejgkyp1b5" | quote }}
   AES_SECRET_KEY: {{ .Values.env.silo_envs.aes_secret_key | default "dsOdt7YrvxsTIFJ37pOaEVvLxN8KGBCr" | quote }}
@@ -44,6 +46,8 @@ kind: ConfigMap
 metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-app-vars
+  labels:
+    {{- include "plane.labels" . | nindent 4 }}
 data:
   PRIME_HOST: {{ .Values.license.licenseServer | quote }}
   MACHINE_SIGNATURE: {{ include "hashString" . | quote }}
@@ -78,4 +82,4 @@ data:
   CORS_ALLOWED_ORIGINS: "http://{{ .Values.license.licenseDomain }},https://{{ .Values.license.licenseDomain }},{{ .Values.env.cors_allowed_origins }}"
   {{- else}}
   CORS_ALLOWED_ORIGINS: "http://{{ .Values.license.licenseDomain }},https://{{ .Values.license.licenseDomain }}"
-  {{- end }} 
+  {{- end }}
diff --git a/charts/plane-enterprise/templates/config-secrets/automations-consumer.yaml b/charts/plane-enterprise/templates/config-secrets/automations-consumer.yaml
@@ -4,10 +4,12 @@ kind: ConfigMap
 metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-automation-consumer-vars
+  labels:
+    {{- include "plane.component.labels" (dict "componentName" "automation-consumer" "context" $) | nindent 4 }}
 data:
   AUTOMATION_EVENT_STREAM_QUEUE_NAME: {{ .Values.env.automation_consumer_envs.event_stream_queue_name | default "plane.event_stream.automations" | quote }}
   AUTOMATION_EVENT_STREAM_PREFETCH: {{ .Values.env.automation_consumer_envs.event_stream_prefetch | default 10 | quote }}
   AUTOMATION_EXCHANGE_NAME: {{ .Values.env.automation_consumer_envs.exchange_name | default "plane.event_stream" | quote }}
   AUTOMATION_EVENT_TYPES: {{ .Values.env.automation_consumer_envs.event_types | default "issue" | quote }}
 ---
-{{- end }}
+{{- end }}
diff --git a/charts/plane-enterprise/templates/config-secrets/doc-store.yaml b/charts/plane-enterprise/templates/config-secrets/doc-store.yaml
@@ -5,6 +5,8 @@ type: Opaque
 metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-doc-store-secrets
+  labels:
+    {{- include "plane.labels" . | nindent 4 }}
 stringData:
   FILE_SIZE_LIMIT: {{ .Values.env.file_size_limit | default "5242880" | quote }}
   AWS_S3_BUCKET_NAME: {{ .Values.env.docstore_bucket | default "" | quote  }}
@@ -23,4 +25,4 @@ stringData:
   AWS_S3_ENDPOINT_URL: {{ .Values.env.aws_s3_endpoint_url | quote }}
   {{- end }}
 {{- end }}
----
+---
diff --git a/charts/plane-enterprise/templates/config-secrets/docker-registry.yaml b/charts/plane-enterprise/templates/config-secrets/docker-registry.yaml
@@ -5,8 +5,10 @@ kind: Secret
 metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-docker-registry-credentials
+  labels:
+    {{- include "plane.labels" . | nindent 4 }}
 data:
   .dockerconfigjson: {{ include "imagePullSecret" .}}
 type: kubernetes.io/dockerconfigjson
 
-{{- end }}
+{{- end }}
diff --git a/charts/plane-enterprise/templates/config-secrets/email-env.yaml b/charts/plane-enterprise/templates/config-secrets/email-env.yaml
@@ -5,9 +5,11 @@ kind: ConfigMap
 metadata:
   name: {{ .Release.Name }}-email-vars
   namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "plane.component.labels" (dict "componentName" "email-service" "context" $) | nindent 4 }}
 data:
   SMTP_DOMAIN: {{ .Values.env.email_service_envs.smtp_domain | default "" | quote }}
-  EMAIL_SAVE_ENDPOINT: "http://{{ .Release.Name }}-api.{{ .Release.Namespace }}.svc.cluster.local:8000/intake/email/" 
+  EMAIL_SAVE_ENDPOINT: "http://{{ .Release.Name }}-api.{{ .Release.Namespace }}.svc.cluster.local:8000/intake/email/"
   WEBHOOK_URL: "http://{{ .Release.Name }}-api.{{ .Release.Namespace }}.svc.cluster.local:8000/intake/email/"
   domain-blacklist.txt: |
     10minutemail.com
@@ -17,6 +19,6 @@ data:
     casino
     lottery
     jackpot
-   
+
 ---
-{{- end }}
+{{- end }}
diff --git a/charts/plane-enterprise/templates/config-secrets/live-env.yaml b/charts/plane-enterprise/templates/config-secrets/live-env.yaml
@@ -5,6 +5,8 @@ type: Opaque
 metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-live-secrets
+  labels:
+    {{- include "plane.component.labels" (dict "componentName" "live" "context" $) | nindent 4 }}
 stringData:
   LIVE_SERVER_SECRET_KEY: {{ .Values.env.live_server_secret_key | default "htbqvBJAgpm9bzvf3r4urJer0ENReatceh" | quote }}
   {{- if .Values.services.redis.local_setup }}
@@ -21,6 +23,8 @@ kind: ConfigMap
 metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-live-vars
+  labels:
+    {{- include "plane.component.labels" (dict "componentName" "live" "context" $) | nindent 4 }}
 data:
   API_BASE_URL: "http://{{ .Release.Name }}-api.{{ .Release.Namespace }}.svc.cluster.local:8000/"
   LIVE_SENTRY_DSN: {{ .Values.env.live_sentry_dsn | default "" | quote }}

diff --git a/charts/plane-enterprise/templates/config-secrets/monitor.yaml b/charts/plane-enterprise/templates/config-secrets/monitor.yaml
@@ -3,6 +3,8 @@ kind: ConfigMap
 metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-monitor-vars
+  labels:
+    {{- include "plane.component.labels" (dict "componentName" "monitor" "context" $) | nindent 4 }}
 data:
   PRIME_HOST: {{ .Values.license.licenseServer | quote }}
   MACHINE_SIGNATURE: {{ include "hashString" . | quote }}
@@ -13,4 +15,4 @@ data:
   API_HOSTNAME: "http://{{ .Release.Name }}-api.{{ .Release.Namespace }}.svc.cluster.local:8000/"
   {{- if .Values.airgapped.enabled }}
   IS_AIRGAPPED: "1"
-  {{- end }}
+  {{- end }}
diff --git a/charts/plane-enterprise/templates/config-secrets/outbox-poller.yaml b/charts/plane-enterprise/templates/config-secrets/outbox-poller.yaml
@@ -4,6 +4,8 @@ kind: ConfigMap
 metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-outbox-poller-vars
+  labels:
+    {{- include "plane.component.labels" (dict "componentName" "outbox-poller" "context" $) | nindent 4 }}
 data:
   OUTBOX_POLLER_MEMORY_LIMIT_MB: {{ .Values.env.outbox_poller_envs.memory_limit_mb | default 400 | quote }}
   OUTBOX_POLLER_INTERVAL_MIN: {{ .Values.env.outbox_poller_envs.interval_min | default 0.25 | quote }}
@@ -19,4 +21,4 @@ data:
   OUTBOX_POLLER_POOL_RECONNECT_TIMEOUT: {{ .Values.env.outbox_poller_envs.pool.reconnect_timeout | default 5.0 | quote }}
   OUTBOX_POLLER_POOL_HEALTH_CHECK_INTERVAL: {{ .Values.env.outbox_poller_envs.pool.health_check_interval | default 60 | quote }}
 ---
-{{- end }}
+{{- end }}
diff --git a/charts/plane-enterprise/templates/config-secrets/pgdb.yaml b/charts/plane-enterprise/templates/config-secrets/pgdb.yaml
@@ -5,9 +5,11 @@ type: Opaque
 metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-pgdb-secrets
+  labels:
+    {{- include "plane.component.labels" (dict "componentName" "pgdb" "context" $) | nindent 4 }}
 stringData:
   POSTGRES_USER: {{ .Values.env.pgdb_username | default "plane" | quote }}
   POSTGRES_PASSWORD: {{ .Values.env.pgdb_password | default "plane" | quote }}
   POSTGRES_DB: {{ .Values.env.pgdb_name | default "plane" | quote }}
 ---
-{{- end}}
+{{- end}}
diff --git a/charts/plane-enterprise/templates/config-secrets/rabbitmqdb.yaml b/charts/plane-enterprise/templates/config-secrets/rabbitmqdb.yaml
@@ -5,9 +5,11 @@ type: Opaque
 metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-rabbitmq-secrets
+  labels:
+    {{- include "plane.component.labels" (dict "componentName" "rabbitmq" "context" $) | nindent 4 }}
 stringData:
   RABBITMQ_DEFAULT_USER: {{ .Values.services.rabbitmq.default_user | default "plane" | quote }}
   RABBITMQ_DEFAULT_PASS: {{ .Values.services.rabbitmq.default_password | default "plane" |quote }}
 ---
 
-{{- end }}
+{{- end }}
diff --git a/charts/plane-enterprise/templates/config-secrets/silo.yaml b/charts/plane-enterprise/templates/config-secrets/silo.yaml
@@ -6,6 +6,8 @@ type: Opaque
 metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-silo-secrets
+  labels:
+    {{- include "plane.component.labels" (dict "componentName" "silo" "context" $) | nindent 4 }}
 stringData:
   {{- if .Values.env.silo_envs.hmac_secret_key }}
   SILO_HMAC_SECRET_KEY: {{ .Values.env.silo_envs.hmac_secret_key | quote }}
@@ -62,6 +64,8 @@ kind: ConfigMap
 metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-silo-vars
+  labels:
+    {{- include "plane.component.labels" (dict "componentName" "silo" "context" $) | nindent 4 }}
 data:
   PORT: "3000"
   BATCH_SIZE: {{ .Values.env.silo_envs.batch_size | default 100 | quote }}
@@ -75,7 +79,7 @@ data:
   CORS_ALLOWED_ORIGINS: "http://{{ .Values.license.licenseDomain }},https://{{ .Values.license.licenseDomain }},{{ .Values.env.silo_envs.cors_allowed_origins }}"
   {{- else}}
   CORS_ALLOWED_ORIGINS: "http://{{ .Values.license.licenseDomain }},https://{{ .Values.license.licenseDomain }}"
-  {{- end }} 
+  {{- end }}
 
   APP_BASE_URL: "https://{{ .Values.license.licenseDomain }}"
   API_BASE_URL: "http://{{ .Release.Name }}-api.{{ .Release.Namespace }}.svc.{{ .Values.env.default_cluster_domain | default "cluster.local" }}:8000/"
@@ -89,4 +93,4 @@ data:
   SENTRY_TRACES_SAMPLE_RATE: {{ .Values.env.silo_envs.sentry_traces_sample_rate | default "0.1" | quote }}
 
 {{- end }}
----
+---
diff --git a/charts/plane-enterprise/templates/ingress.yaml b/charts/plane-enterprise/templates/ingress.yaml
@@ -11,6 +11,8 @@ metadata:
     {{ $key }}: {{ $value | quote }}
     {{- end }}
   {{- end }}
+  labels:
+    {{- include "plane.labels" . | nindent 4 }}
 spec:
   ingressClassName: {{ .Values.ingress.ingressClass }}
   rules:
@@ -132,4 +134,4 @@ spec:
       secretName: {{ .Release.Name }}-ssl-cert
   {{- end }}
 
-{{- end }}
+{{- end }}
diff --git a/charts/plane-enterprise/templates/service-account.yaml b/charts/plane-enterprise/templates/service-account.yaml
@@ -4,7 +4,9 @@ kind: ServiceAccount
 metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-srv-account
+  labels:
+    {{- include "plane.labels" . | nindent 4 }}
 {{- if .Values.dockerRegistry.enabled }}
 imagePullSecrets:
   - name: {{ .Release.Name }}-docker-registry-credentials
-{{- end}}
+{{- end}}
diff --git a/charts/plane-enterprise/templates/workloads/admin.deployment.yaml b/charts/plane-enterprise/templates/workloads/admin.deployment.yaml
@@ -6,6 +6,7 @@ metadata:
   name: {{ .Release.Name }}-admin
   labels:
     app.name: {{ .Release.Namespace }}-{{ .Release.Name }}-admin
+    {{- include "plane.component.labels" (dict "componentName" "admin" "context" $) | nindent 4 }}
 spec:
   type: ClusterIP
   {{- if not .Values.services.admin.assign_cluster_ip }}
@@ -26,7 +27,9 @@ kind: Deployment
 metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}-admin-wl
-  {{- include "plane.labelsAndAnnotations" .Values.services.admin }}
+  labels:
+    {{- include "plane.component.labels" (dict "componentName" "admin" "context" $) | nindent 4 }}
+    {{- include "plane.labelsAndAnnotations" .Values.services.admin }}
 spec:
   replicas: {{ .Values.services.admin.replicas | default 1 }}
   selector:
@@ -37,6 +40,7 @@ spec:
       namespace: {{ .Release.Namespace }}
       labels:
         app.name: {{ .Release.Namespace }}-{{ .Release.Name }}-admin
+        {{- include "plane.component.labels" (dict "componentName" "admin" "context" $) | nindent 8 }}
       annotations:
         timestamp: {{ now | quote }}
     spec:
@@ -60,4 +64,4 @@ spec:
       {{- include "plane.podScheduling" .Values.services.admin }}
       serviceAccount: {{ .Release.Name }}-srv-account
       serviceAccountName: {{ .Release.Name }}-srv-account
----
+---