From 8687bc7579529b19b2f1be8bc77eb39addd34edc Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Thu, 25 Jun 2026 21:30:36 +0000 Subject: [PATCH 1/5] Update stacklok/toolhive-registry-server to v1.4.11 Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/upstream-projects.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/upstream-projects.yaml b/.github/upstream-projects.yaml index 11468899..1ae52fe2 100644 --- a/.github/upstream-projects.yaml +++ b/.github/upstream-projects.yaml @@ -29,7 +29,7 @@ projects: - id: toolhive-registry-server repo: stacklok/toolhive-registry-server - version: v1.4.10 + version: v1.4.11 docs_paths: - docs/toolhive/guides-registry - docs/toolhive/concepts/registry-criteria.mdx From 9c73b6acc9ce108b48fe8c892a6cbddfc0b2460d Mon Sep 17 00:00:00 2001 From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com> Date: Thu, 25 Jun 2026 21:36:00 +0000 Subject: [PATCH 2/5] Document global.postgres fallback from registry-server v1.4.11 The Helm chart at v1.4.11 adds a global.postgres.{host,port,sslMode} fallback so umbrella charts can set the database host once instead of repeating it per subchart. Cover the standalone Helm guide and the enterprise platform deployment guide, parallel to the existing global.redis docs. --- .../enterprise-platform/deployment.mdx | 26 +++++++++++++++++++ docs/toolhive/guides-registry/deploy-helm.mdx | 20 ++++++++++++++ 2 files changed, 46 insertions(+) diff --git a/docs/platform/enterprise-platform/deployment.mdx b/docs/platform/enterprise-platform/deployment.mdx index 8cc7ee46..711d4673 100644 --- a/docs/platform/enterprise-platform/deployment.mdx +++ b/docs/platform/enterprise-platform/deployment.mdx @@ -289,6 +289,32 @@ override. When set, it takes precedence over `global.redis.host` and ::: +#### Global PostgreSQL defaults + +The Registry Server reads its database host, port, and SSL mode from +`global.postgres` when its own +`toolhive-registry-server.upstream.config.database.host` is empty. This is the +same pattern as `global.redis` above, intended for umbrella deployments that +share a PostgreSQL instance across several backing services. The block is +optional: when `global.postgres.host` is empty, the default is inactive and each +subchart uses its own `config.database` block. + +```yaml title="values.yaml (global PostgreSQL addition)" +global: + postgres: + # When empty, the global default is inactive. + host: 'postgres.example.com' + port: 5432 + sslMode: 'require' +``` + +Only `host`, `port`, and `sslMode` are inherited from the global block. The +database user, database name, and credentials still go under the subchart's own +`config.database` block (and `extraEnv` for the password Secret reference, as +the example above shows). A locally set +`toolhive-registry-server.upstream.config.database.host` always wins over +`global.postgres.host`. + ### 4. Install the chart Install the chart into the `stacklok-system` namespace you created earlier. diff --git a/docs/toolhive/guides-registry/deploy-helm.mdx b/docs/toolhive/guides-registry/deploy-helm.mdx index e6fe0ea4..9c64278f 100644 --- a/docs/toolhive/guides-registry/deploy-helm.mdx +++ b/docs/toolhive/guides-registry/deploy-helm.mdx @@ -73,6 +73,26 @@ config: sslMode: require ``` +### Share a database host across subcharts + +If you install the chart as a subchart in an umbrella that also runs other +PostgreSQL-backed services, set the database connection once at the umbrella +level under `global.postgres` instead of repeating it per subchart: + +```yaml title="values.yaml (umbrella excerpt)" +global: + postgres: + host: 'postgres.example.com' + port: 5432 + sslMode: 'require' +``` + +When `config.database.host` on the Registry Server subchart is empty, the chart +falls back to `global.postgres.{host,port,sslMode}` (port defaults to `5432`). A +locally set `config.database.host` always wins, so per-subchart overrides keep +working. Only `host`, `port`, and `sslMode` are inherited - `user`, `database`, +and credentials still go in the subchart's own `config.database` block. + ## Provide database credentials Database credentials use the pgpass file pattern. Create a Kubernetes Secret From 3a03bd81f93a2d4bf9e2792e470b8523a2016b5b Mon Sep 17 00:00:00 2001 From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com> Date: Thu, 25 Jun 2026 21:38:45 +0000 Subject: [PATCH 3/5] Tighten subchart fallback section in deploy-helm - Clarify 'umbrella chart' instead of bare 'umbrella' - 'Database host' is more accurate than 'database connection' since only host/port/sslMode are inherited - Split the mid-sentence spaced hyphen into two sentences per the project style (spaced hyphens belong in list-style contexts, not prose) --- docs/toolhive/guides-registry/deploy-helm.mdx | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/docs/toolhive/guides-registry/deploy-helm.mdx b/docs/toolhive/guides-registry/deploy-helm.mdx index 9c64278f..e0566ab6 100644 --- a/docs/toolhive/guides-registry/deploy-helm.mdx +++ b/docs/toolhive/guides-registry/deploy-helm.mdx @@ -75,9 +75,9 @@ config: ### Share a database host across subcharts -If you install the chart as a subchart in an umbrella that also runs other -PostgreSQL-backed services, set the database connection once at the umbrella -level under `global.postgres` instead of repeating it per subchart: +If you install the chart as a subchart in an umbrella chart that also runs other +PostgreSQL-backed services, set the database host once at the umbrella level +under `global.postgres` instead of repeating it per subchart: ```yaml title="values.yaml (umbrella excerpt)" global: @@ -90,8 +90,9 @@ global: When `config.database.host` on the Registry Server subchart is empty, the chart falls back to `global.postgres.{host,port,sslMode}` (port defaults to `5432`). A locally set `config.database.host` always wins, so per-subchart overrides keep -working. Only `host`, `port`, and `sslMode` are inherited - `user`, `database`, -and credentials still go in the subchart's own `config.database` block. +working. Only `host`, `port`, and `sslMode` are inherited. The `user`, +`database`, and credentials still go in the subchart's own `config.database` +block. ## Provide database credentials From 5202b1e0883c57b13b8cea37dd82db350ef910e4 Mon Sep 17 00:00:00 2001 From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com> Date: Thu, 25 Jun 2026 21:48:37 +0000 Subject: [PATCH 4/5] Frame subchart Postgres section as enterprise Co-authored-by: Dan Barr --- docs/toolhive/guides-registry/deploy-helm.mdx | 15 +++++++++++---- 1 file changed, 11 insertions(+), 4 deletions(-) diff --git a/docs/toolhive/guides-registry/deploy-helm.mdx b/docs/toolhive/guides-registry/deploy-helm.mdx index e0566ab6..15ec46a6 100644 --- a/docs/toolhive/guides-registry/deploy-helm.mdx +++ b/docs/toolhive/guides-registry/deploy-helm.mdx @@ -73,11 +73,14 @@ config: sslMode: require ``` -### Share a database host across subcharts +### Share a database host across subcharts -If you install the chart as a subchart in an umbrella chart that also runs other -PostgreSQL-backed services, set the database host once at the umbrella level -under `global.postgres` instead of repeating it per subchart: +The Registry Server chart ships as a subchart of the +[Stacklok Enterprise platform](../../platform/enterprise-platform/deployment.mdx), +Stacklok's canonical umbrella chart for a full-platform deployment. When the +platform's bundled services share a single PostgreSQL instance, you set the +database host once at the umbrella level under `global.postgres` instead of +repeating it per subchart: ```yaml title="values.yaml (umbrella excerpt)" global: @@ -94,6 +97,10 @@ working. Only `host`, `port`, and `sslMode` are inherited. The `user`, `database`, and credentials still go in the subchart's own `config.database` block. +For the full umbrella context, including the database credential Secrets and the +other components that read `global.postgres`, see +[Deploy the platform](../../platform/enterprise-platform/deployment.mdx#global-postgresql-defaults). + ## Provide database credentials Database credentials use the pgpass file pattern. Create a Kubernetes Secret From 122358d35d9dad80368074ad8b9626d201c257f5 Mon Sep 17 00:00:00 2001 From: Claude Date: Thu, 25 Jun 2026 22:09:41 +0000 Subject: [PATCH 5/5] docs(registry): use enterprise-context callout instead of gating badge for global.postgres The global.postgres fallback is a generic Helm global.* mechanism usable by any umbrella chart, not an enterprise-gated feature, so the EnterpriseBadge on the section heading mislabeled it. Replace it with an :::enterprise context callout that still routes full-platform users to the platform-wide PostgreSQL defaults, and keep the section description OSS-neutral. --- docs/toolhive/guides-registry/deploy-helm.mdx | 25 +++++++++++-------- 1 file changed, 15 insertions(+), 10 deletions(-) diff --git a/docs/toolhive/guides-registry/deploy-helm.mdx b/docs/toolhive/guides-registry/deploy-helm.mdx index 15ec46a6..8d79f452 100644 --- a/docs/toolhive/guides-registry/deploy-helm.mdx +++ b/docs/toolhive/guides-registry/deploy-helm.mdx @@ -73,14 +73,13 @@ config: sslMode: require ``` -### Share a database host across subcharts +### Share a database host across subcharts -The Registry Server chart ships as a subchart of the -[Stacklok Enterprise platform](../../platform/enterprise-platform/deployment.mdx), -Stacklok's canonical umbrella chart for a full-platform deployment. When the -platform's bundled services share a single PostgreSQL instance, you set the -database host once at the umbrella level under `global.postgres` instead of -repeating it per subchart: +When the Registry Server chart runs as a subchart of an umbrella chart whose +bundled services share a single PostgreSQL instance, you can set the database +host once at the umbrella level under `global.postgres` instead of repeating it +per subchart. This is a standard Helm `global.*` mechanism, so any umbrella +chart can use it: ```yaml title="values.yaml (umbrella excerpt)" global: @@ -97,9 +96,15 @@ working. Only `host`, `port`, and `sslMode` are inherited. The `user`, `database`, and credentials still go in the subchart's own `config.database` block. -For the full umbrella context, including the database credential Secrets and the -other components that read `global.postgres`, see -[Deploy the platform](../../platform/enterprise-platform/deployment.mdx#global-postgresql-defaults). +:::enterprise + +If you run the full Stacklok Enterprise platform, its canonical umbrella chart +already wires up `global.postgres`, so you set the shared database host once at +the umbrella level rather than per subchart. See the +[platform-wide PostgreSQL defaults](../../platform/enterprise-platform/deployment.mdx#global-postgresql-defaults) +for the credential Secrets and the other components that read `global.postgres`. + +::: ## Provide database credentials