From a723955a45d11bff70f15f61a50dd1bd2c75a9d6 Mon Sep 17 00:00:00 2001 From: sarankumar1325 <120080287+sarankumar1325@users.noreply.github.com> Date: Sat, 31 Oct 2026 00:23:39 +0000 Subject: [PATCH 1/2] docs(nextcloud): fix README defaults and mislabelled externalRedis keys The parameters table had drifted from values.yaml: - externalRedis.existingSecret.secretName/passwordKey were listed as externalDatabase.existingSecret.*, so the Redis secret keys were undocumented and the database ones appeared twice - nginx.containerPort showed IfNotPresent instead of 80, and the nginx.image.pullPolicy row was duplicated - existingSecret key names, mail/smtp settings, image repositories (library/*, bitnamilegacy/*), redis.auth.password, imaginary.securityContext and the collabora extra_params (--o:ssl.enable) defaults now match values.yaml Bump chart version to 9.4.2. Signed-off-by: sarankumar1325 <120080287+sarankumar1325@users.noreply.github.com> --- charts/nextcloud/Chart.yaml | 2 +- charts/nextcloud/README.md | 49 ++++++++++++++++++------------------- 2 files changed, 25 insertions(+), 26 deletions(-) diff --git a/charts/nextcloud/Chart.yaml b/charts/nextcloud/Chart.yaml index 25b717f2..499560c9 100644 --- a/charts/nextcloud/Chart.yaml +++ b/charts/nextcloud/Chart.yaml @@ -1,6 +1,6 @@ apiVersion: v2 name: nextcloud -version: 9.4.1 +version: 9.4.2 # renovate: image=docker.io/library/nextcloud appVersion: 35.0.2 description: A file sharing server that puts the control and security of your own data back into your hands. diff --git a/charts/nextcloud/README.md b/charts/nextcloud/README.md index bd94bb23..418e0069 100644 --- a/charts/nextcloud/README.md +++ b/charts/nextcloud/README.md @@ -113,7 +113,7 @@ The following table lists the configurable parameters of the nextcloud chart and | Parameter | Description | Default | | ----------------------------------------------------------- | --------------------------------------------------------------------------------------------------- | ------------------------------------------------------------ | -| `image.repository` | nextcloud Image name | `nextcloud` | +| `image.repository` | nextcloud Image name | `library/nextcloud` | | `image.flavor` | nextcloud Image type (Options: apache, fpm) | `apache` | | `image.tag` | nextcloud Image tag | `appVersion` | | `image.pullPolicy` | Image pull policy | `IfNotPresent` | @@ -132,25 +132,25 @@ The following table lists the configurable parameters of the nextcloud chart and | `nextcloud.password` | Application password | `changeme` | | `nextcloud.existingSecret.enabled` | Whether to use an existing secret or not | `false` | | `nextcloud.existingSecret.secretName` | Name of the existing secret | `nil` | -| `nextcloud.existingSecret.usernameKey` | Name of the key that contains the username | `nil` | -| `nextcloud.existingSecret.passwordKey` | Name of the key that contains the password | `nil` | -| `nextcloud.existingSecret.smtpUsernameKey` | Name of the key that contains the SMTP username | `nil` | -| `nextcloud.existingSecret.smtpPasswordKey` | Name of the key that contains the SMTP password | `nil` | -| `nextcloud.existingSecret.smtpHostKey` | Name of the key that contains the SMTP hostname | `nil` | +| `nextcloud.existingSecret.usernameKey` | Name of the key that contains the username | `nextcloud-username` | +| `nextcloud.existingSecret.passwordKey` | Name of the key that contains the password | `nextcloud-password` | +| `nextcloud.existingSecret.smtpUsernameKey` | Name of the key that contains the SMTP username | `smtp-username` | +| `nextcloud.existingSecret.smtpPasswordKey` | Name of the key that contains the SMTP password | `smtp-password` | +| `nextcloud.existingSecret.smtpHostKey` | Name of the key that contains the SMTP hostname | `smtp-host` | | `nextcloud.existingSecret.tokenKey` | Name of the key that contains the nextcloud metrics token | `''` | | `nextcloud.update` | Trigger update if custom command is used | `0` | | `nextcloud.containerPort` | Customize container port when not running as root | `80` | | `nextcloud.trustedDomains` | Optional space-separated list of trusted domains | `[]` | | `nextcloud.datadir` | nextcloud data dir location | `/var/www/html/data` | | `nextcloud.mail.enabled` | Whether to enable/disable email settings | `false` | -| `nextcloud.mail.fromAddress` | nextcloud mail send from field | `nil` | -| `nextcloud.mail.domain` | nextcloud mail domain | `nil` | -| `nextcloud.mail.smtp.host` | SMTP hostname | `nil` | -| `nextcloud.mail.smtp.secure` | SMTP connection `ssl` or empty | `''` | -| `nextcloud.mail.smtp.port` | Optional SMTP port | `nil` | +| `nextcloud.mail.fromAddress` | nextcloud mail send from field | `user` | +| `nextcloud.mail.domain` | nextcloud mail domain | `domain.com` | +| `nextcloud.mail.smtp.host` | SMTP hostname | `domain.com` | +| `nextcloud.mail.smtp.secure` | SMTP connection `ssl` or empty | `ssl` | +| `nextcloud.mail.smtp.port` | Optional SMTP port | `465` | | `nextcloud.mail.smtp.authtype` | SMTP authentication method | `LOGIN` | -| `nextcloud.mail.smtp.name` | SMTP username, ONLY the part before the domain name. i.e. 'postmaster' NOT 'postmaster@example.com' | `''` | -| `nextcloud.mail.smtp.password` | SMTP password | `''` | +| `nextcloud.mail.smtp.name` | SMTP username, ONLY the part before the domain name. i.e. 'postmaster' NOT 'postmaster@example.com' | `user` | +| `nextcloud.mail.smtp.password` | SMTP password | `pass` | | `nextcloud.configs` | Config files created in `/var/www/html/config` | `{}` | | `nextcloud.persistence.subPath` | Set the subPath for nextcloud to use in volume | `nil` | | `nextcloud.phpConfigs` | PHP Config files created in `/usr/local/etc/php/conf.d` | `{}` | @@ -180,11 +180,10 @@ The following table lists the configurable parameters of the nextcloud chart and | `nextcloud.postgreSqlInitContainer.securityContext` | Set postgresql initContainer securityContext parameters. | `{}` | | `nextcloud.priorityClassName` | Priority Class for nextcloud. Defaults to .priorityClassName | `nil` | | `nginx.enabled` | Enable nginx (requires you use php-fpm image) | `false` | -| `nginx.image.repository` | nginx Image name, e.g. use `nginxinc/nginx-unprivileged` for rootless container | `nginx` | +| `nginx.image.repository` | nginx Image name, e.g. use `nginxinc/nginx-unprivileged` for rootless container | `library/nginx` | | `nginx.image.tag` | nginx Image tag | `alpine` | | `nginx.image.pullPolicy` | nginx Image pull policy | `IfNotPresent` | -| `nginx.image.pullPolicy` | nginx Image pull policy | `IfNotPresent` | -| `nginx.containerPort` | Customize container port e.g. when not running as root | `IfNotPresent` | +| `nginx.containerPort` | Customize container port e.g. when not running as root | `80` | | `nginx.ipFamilies` | Customize container to listen on IPv4, IPv6 or both | `["IPv4"]` | | `nginx.config.default` | Whether to use nextcloud's recommended nginx config | `true` | | `nginx.config.custom` | Specify a custom config for nginx | `{}` | @@ -195,7 +194,7 @@ The following table lists the configurable parameters of the nextcloud chart and | `lifecycle.preStopCommand` | Specify deployment lifecycle hook preStopCommand | `nil` | | `redis.enabled` | Whether to install/use redis for locking | `false` | | `redis.auth.enabled` | Whether to enable password authentication with redis | `true` | -| `redis.auth.password` | The password redis uses | `''` | +| `redis.auth.password` | The password redis uses | `changeme` | | `redis.auth.existingSecret` | The name of an existing secret with Redis® credentials | `''` | | `redis.auth.existingSecretPasswordKey` | Password key to be retrieved from existing secret | `''` | | `redis.global.storageClass` | PVC Storage Class for both Redis® master and replica Persistent Volumes | `''` | @@ -206,8 +205,8 @@ The following table lists the configurable parameters of the nextcloud chart and | `externalRedis.port` | Redis port | `"6379"` | | `externalRedis.password` | Redis password | `""` | | `externalRedis.existingSecret.enabled` | Whether to use a existing secret or not | `false` | -| `externalDatabase.existingSecret.secretName` | Name of the existing secret | `nil` | -| `externalDatabase.existingSecret.passwordKey` | Name of the key that contains the Redis password | `redis-password` | +| `externalRedis.existingSecret.secretName` | Name of the existing secret | `nil` | +| `externalRedis.existingSecret.passwordKey` | Name of the key that contains the Redis password | `redis-password` | | `cronjob.enabled` | Whether to enable/disable cron jobs | `false` | | `cronjob.type` | Choose which cron implementation to use. Either `sidecar` or `cronjob`. | `sidecar` | | `cronjob.sidecar.command` | The command the cronjob sidecar container executes | `/cron.sh` | @@ -311,8 +310,8 @@ If you choose to use one of the prepackaged Bitnami helm charts, you must config | `externalDatabase.password` | Password for the above username | `nil` | | `externalDatabase.existingSecret.enabled` | Whether to use a existing secret or not | `false` | | `externalDatabase.existingSecret.secretName` | Name of the existing secret | `nil` | -| `externalDatabase.existingSecret.usernameKey` | Name of the key that contains the username | `nil` | -| `externalDatabase.existingSecret.passwordKey` | Name of the key that contains the password | `nil` | +| `externalDatabase.existingSecret.usernameKey` | Name of the key that contains the username | `db-username` | +| `externalDatabase.existingSecret.passwordKey` | Name of the key that contains the password | `db-password` | | `externalDatabase.existingSecret.hostKey` | Name of the key that contains the database hostname or IP address | `nil` | | `externalDatabase.existingSecret.databaseKey` | Name of the key that contains the database name | `nil` | | `mariadb.enabled` | Whether to use the MariaDB chart | `false` | @@ -322,7 +321,7 @@ If you choose to use one of the prepackaged Bitnami helm charts, you must config | `mariadb.auth.rootPassword` | MariaDB admin password | `nil` | | `mariadb.auth.existingSecret` | Use existing secret for MariaDB password details; see values.yaml for more detail | `''` | | `mariadb.image.registry` | MariaDB image registry | `docker.io` | -| `mariadb.image.repository` | MariaDB image repository | `bitnami/mariadb` | +| `mariadb.image.repository` | MariaDB image repository | `bitnamilegacy/mariadb` | | `mariadb.image.tag` | MariaDB image tag | `` | | `mariadb.global.defaultStorageClass` | MariaDB Global default StorageClass for Persistent Volume(s) | `''` | | `mariadb.primary.persistence.enabled` | Whether or not to Use a PVC on MariaDB primary | `false` | @@ -330,7 +329,7 @@ If you choose to use one of the prepackaged Bitnami helm charts, you must config | `mariadb.primary.persistence.existingClaim` | Use an existing PVC for MariaDB primary | `''` | | `postgresql.enabled` | Whether to use the PostgreSQL chart | `false` | | `postgresql.image.registry` | PostgreSQL image registry | `docker.io` | -| `postgresql.image.repository` | PostgreSQL image repository | `bitnami/postgresql` | +| `postgresql.image.repository` | PostgreSQL image repository | `bitnamilegacy/postgresql` | | `postgresql.image.tag` | PostgreSQL image tag | `15.4.0-debian-11-r10` | | `postgresql.global.postgresql.auth.database` | Database name to create | `nextcloud` | | `postgresql.global.postgresql.auth.username` | Database user to create | `nextcloud` | @@ -564,7 +563,7 @@ This section provides options to enable and configure the Collabora Online serve | `collabora.enabled` | Enable or disable the Collabora Online integration | `false` | | `collabora.autoscaling.enabled` | Enable or disable autoscaling for the Collabora Online pods | `false` | | `collabora.collabora.aliasgroups` | List of HTTPS nextcloud domains if Collabora is behind a reverse proxy | `[]` | -| `collabora.collabora.extra_params` | Additional parameters for the Collabora Online service | `"--o:ssl.enabled=false"` | +| `collabora.collabora.extra_params` | Additional parameters for the Collabora Online service | `"--o:ssl.enable=false"` | | `collabora.collabora.server_name` | Specify the server name when the hostname is not directly reachable (e.g., behind a reverse proxy) | `null` | | `collabora.collabora.existingSecret.enabled` | Enable using existing secret for admin login credentials | `false` | | `collabora.collabora.existingSecret.secretName` | Name of the existing secret containing admin login credentials | `""` | @@ -606,7 +605,7 @@ We include an optional external preview provider from [h2non/imaginary](https:// | `imaginary.topologySpreadConstraints` | Imaginary pod topologySpreadConstraints | `[]` | | `imaginary.resources` | imaginary resources | `{}` | | `imaginary.priorityClassName` | Imaginary pod Priority Class. Defaults to .priorityClassName | `nil` | -| `imaginary.securityContext` | Optional security context for the Imaginary container | `nil` | +| `imaginary.securityContext` | Optional security context for the Imaginary container | `{runAsUser: 1000, runAsNonRoot: true}` | | `imaginary.podSecurityContext` | Optional security context for the Imaginary pod (applies to all containers in the pod) | `nil` | | `imaginary.service.type` | Imaginary: Kubernetes Service type | `ClusterIP` | | `imaginary.service.loadBalancerIP` | Imaginary: LoadBalancerIp for service type LoadBalancer | `nil` | From 521e236c563b2f9e8699740b596119624bdc2685 Mon Sep 17 00:00:00 2001 From: WrenIX <133280015+wrenix@users.noreply.github.com> Date: Thu, 12 Nov 2026 22:44:58 +0100 Subject: [PATCH 2/2] Update Chart.yaml Signed-off-by: WrenIX <133280015+wrenix@users.noreply.github.com> --- charts/nextcloud/Chart.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/nextcloud/Chart.yaml b/charts/nextcloud/Chart.yaml index 499560c9..5a24555a 100644 --- a/charts/nextcloud/Chart.yaml +++ b/charts/nextcloud/Chart.yaml @@ -1,6 +1,6 @@ apiVersion: v2 name: nextcloud -version: 9.4.2 +version: 9.4.3 # renovate: image=docker.io/library/nextcloud appVersion: 35.0.2 description: A file sharing server that puts the control and security of your own data back into your hands.