The chart can trust an internal certificate authority.extraCaCerts takes a PEM bundle inline or from an existing Secret, mounts it into the pods and adds it to the trust store through NODE_EXTRA_CA_CERTS. An MTA with a certificate from an internal CA then works with certificate verification left on. The values match ai-service's. e8f716e
The chart can autoscale and protect pods from node drains.hpa.create renders a HorizontalPodAutoscaler with CPU and memory targets, extra metrics and scaling behaviour, and leaves replicas out of the Deployment. pdb.create renders a PodDisruptionBudget that keeps a single replica drainable by default. Both are off by default and follow the same values contract as the core-mw and core-ui charts. 99c51d4
Links work without a configured base address. While pollBaseURL or bookingBaseURL is unset, poll, booking-page and manage links are built from the host the request was sent to, as long as that host is one of the origins in the new linkOrigins setting. Booking mails on such a deployment now carry their manage link. A host not listed there gets no link, so a forged Host header cannot put a foreign domain into a mail. A configured base address still wins. b88474b
Reserve a poll's proposed times in your own calendar. A new poll setting holds each proposed time in your calendar while the poll is open, so nothing else is booked over it, and releases the holds when you finalize. 3547001
The chart deploys the image of its own release.image.tag defaults to "", so the tag follows the chart's appVersion instead of the mutable main image. Set image.tag to deploy something else. 26b88c4
Rollouts always start a new pod before stopping an old one. The Deployment sets an explicit rolling-update strategy of maxUnavailable: 0 and maxSurge: 1 instead of the Kubernetes default, which lets a quarter of the pods go unavailable once there are four or more. Override strategy to change it. 99c51d4
A booking page card without a link says so in plain words. Instead of naming a configuration key, it tells the owner the page cannot be shared yet and to contact their administrator. b88474b
A deployment no longer fails when a config checksum looks like a number. The chart's checksum/* pod annotations are now quoted. A hash made only of digits, or read as scientific notation, was parsed as a number and rejected by Kubernetes (#58). 6157e43
A booking page shows the accent colour its owner picked. Light colours such as green, amber or lime were darkened before they reached the primary button and the selected day and time. In the light theme they now show the exact colour. White and colours close to it show as a light grey, so the button stays visible.
The time zone next to a date shows that date's UTC offset. Poll and booking pages used today's offset, so a date on the other side of a clock change showed the wrong one, such as "Europe/Berlin (UTC+2)" for a booking in late October. A poll whose dates fall on both sides of a change shows the zone name alone (#60). 7eec181