CHANGELOG

All notable changes to the openaev chart will be documented in this file.

[2.0.42] - 2026-10-16

fix(backup): archive new installs to a fresh barman prefix (#188)

[2.0.41] - 2026-10-16

chore(deps): update dependency openaev-platform/openaev to v3.261016.0 (#189)

[2.0.40] - 2026-10-14

chore(deps): update dependency openaev-platform/openaev to v3.261014.1 (#187)

[2.0.39] - 2026-10-13

chore(deps): update dependency openaev-platform/openaev to v3.261013.1 (#186)

[2.0.38] - 2026-10-09

chore(deps): update dependency openaev-platform/openaev to v3.261009.0 (#184)

[2.0.37] - 2026-10-05

chore(deps): update dependency openaev-platform/openaev to v3.261005.0 (#183)

[2.0.36] - 2026-10-02

fix(pgadmin): render pgadmin config when postgresql-app secret is missing (#182)

[2.0.35] - 2026-10-01

chore(deps): update dependency openaev-platform/openaev to v3.261001.0 (#181)

[2.0.34] - 2026-10-01

chore(s3): Switch to silo (#180)

[2.0.33] - 2026-09-29

Changed

S3: Switch to Pigsty Silo image RELEASE.2026-09-16T00-00-00Z

[2.0.32] - 2026-09-23

chore(deps): update dependency openaev-platform/openaev to v3.260923.0 (#179)

[2.0.31] - 2026-09-21

chore(deps): update dependency openaev-platform/openaev to v3.260921.0 (#178)

[2.0.30] - 2026-09-17

chore(deps): update dependency openaev-platform/openaev to v3.260917.1 (#177)

[2.0.29] - 2026-09-15

feat(pgadmin): update pgadmin-config to use the same config as openaev for aws (#138)

[2.0.28] - 2026-09-04

chore(deps): update dependency openaev-platform/openaev to v3.260904.0 (#174)

[2.0.27] - 2026-08-31

chore(deps): update dependency openaev-platform/openaev to v3.260831.0 (#173)

[2.0.26] - 2026-08-27

chore(deps): update dependency openaev-platform/openaev to v3 (#171)

[2.0.25] - 2026-08-27

chore(deps): update dependency filigranhq/xtm-composer to v3.260825.0 (#170)

[2.0.21] - 2026-08-12

fix(renovate): remove invalid schedule format (#164)

[2.0.20] - 2026-08-10

fix(ci): add missing permissions for changelog generation (#163)
feat(ci): add CHANGELOG auto generation on bump (#162)

Change Log

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

[2.0.16] - 2026-07-27

Fixed

Network policies: select xtm-composer-managed colljectors on the stable app label only, instead of the full xtmComposer.baseDeployment.spec.template.metadata.labels map. Adding extra pod-template labels to baseDeployment (e.g. use_egress_gateway for a Cilium egress gateway) no longer silently excludes colljector pods from the colljectors egress policy and from the platform (8080) / RabbitMQ (5672) ingress allow-lists, which caused default-deny connection timeouts

[2.0.15] - 2026-07-26

Added

Colljectors: allow egress to the internal ingress-nginx (kube-network) on port 443 from collectors, injectors and xtm-composer-managed colljectors, so they can reach platforms exposed on the internal ingress (e.g. XTM One) - same mechanism as the connector policy in helm-opencti

[2.0.14] - 2026-07-16

Fixed

Allowed unconditionally alloy monitoring ingress to Elasticsearch

[2.0.13] - 2026-07-16

Removed

Prometheus Elasticsearch exporter and related elasticsearch.plugin_prometheus_enabled value

[2.0.12] - 2026-07-04

Added

telemetry deployment tags: new global.telemetry values (defaultTags defaulting to ["saas"], region, extraTags) composed additively into the TELEMETRY_TAGS env var on the platform container (anonymous usage telemetry dimension)

[2.0.11] - 2026-07-01

Changed

Allow ingress connections from prometheus-elasticsearch-exporter

[2.0.10] - 2026-06-02

Fixed

OpenAEV: Allow overriding LOGGING_LEVEL_ROOT, LOGGING_LEVEL_IO_OPENAEV, and LOGGING_FILE_NAME via openaev.env or openaev.extraEnv without causing duplicate env vars
Colljectors: Allow overriding PYTHONUNBUFFERED via collector env config without causing duplicate env vars

[2.0.9] - 2026-04-16

Changed

PostgreSQL: Allow additional config to allow finetuning of postgresql

[2.0.8] - 2026-04-16

Changed

Nuclei: increase default memory request & limit

[2.0.7] - 2026-03-24

Changed

Management ingress: Deploy ingress only when at least one management host is enabled

[2.0.6] - 2026-03-02

Added

OpenAEV: Fix default LOGGING_LEVEL_ROOT & LOGGING_LEVEL_IO_OPENAEV

[2.0.5] - 2026-02-26

Added

OpenAEV: Fix Values.openaev.extraEnv

[2.0.4] - 2026-02-26

Added

OpenAEV: Add back Values.openaev.extraEnv

[2.0.3] - 2026-02-26

Added

OpenAEV: Rename MICROSOFT_SENTINEL_EDR_COLLECTORS var to COLLECTOR_MICROSOFT_SENTINEL_EDR_COLLECTORS

[2.0.2] - 2026-02-24

Changed

Remove timestamp annotation to Deployment used to force Helm upgrades

[2.0.1] - 2026-02-24

Added

Update ingress timeout

[2.0.0]

Added

Added a customer-ready Helm Chart distribution for deployinng OpenAEV on Kubernetes

Changed

Updated Chart structure and defaults to support customer deployments.

Notes

This chart version is intended as the official distribution artifact for customer installations

[1.5.18] - 2026-02-17

Changed

Postgres: Update network policy to be more restricted (to own namespace)
Postgres: Allow postgres master to talk to slave on port 8000

[1.5.17] - 2026-02-16

Added

Postgres: Now use switchover as upgrade strategy to minimize downtime

[1.5.16] - 2026-02-04

Added

OpenAEV: Added timestamp annotation to Deployment to force Helm upgrades

Changed

OpenAEV: Edited NetPols to allow scrapping from Prometheus

[1.5.15] - 2026-01-29

Added

OpenAEV: Fix labels for collectors & injectors deployed by XTM Composer

[1.5.14] - 2026-01-28

Added

OpenAEV: Fix dedicated CiliumNetworkPolicy for collectors & injectors deployed by XTM Composer, RabbitMQ ingress

[1.5.13] - 2026-01-27

Added

OpenAEV: Use dedicated CiliumNetworkPolicy for collectors & injectors deployed by XTM Composer

[1.5.12] - 2026-01-27

Added

OpenAEV: Add admin encryption secrets

[1.5.11] - 2026-01-27

Added

Implement AWS specifics

[1.5.10] - 2026-01-26

Added

OpenAEV: Add OPENAEV_ADMIN_ENCRYPTION_KEY and OPENAEV_ADMIN_ENCRYPTION_SALT env vars

[1.5.9] - 2026-01-19

Added

XTM Composer Add missing variables

[1.5.8] - 2026-01-08

Added

XTM Composer deployment

[1.5.7] - 2026-01-08

Added

MINOR New collector : Google Workspace

[1.5.6] - 2025-12-18

Changed

Postgres: Added Barman plugin definition by default. Added associated Barman Object Store definition

[1.5.5] - 2025-12-16

Changed

Allow label injection into ingress

[1.5.4] - 2025-11-13

Updated

PG: Bump to 17.6
PGAdmin: Bump to 9.10

[1.5.3] - 2025-09-27

Changed

Rename obas => oaev

[1.5.2] - 2025-09-18

Changed

RabbitMQ: Bump to 4.1.4

[1.5.1] - 2025-09-09

Changed

OpenAEV: Set platform identifier with value

[1.5.0] - 2025-09-05

Changed

MinIO: Bump to RELEASE.2025-06-13T11-33-47Z
MinIO: Fix NetworkPolicies to allow minio tenants to connect to operator
MinIO: Update labels and annotations definition to match the new operator version (7.1.1)

[1.4.4] - 2025-09-08

Changed

MinIO: Update NetPols to allow transition with new operator

[1.4.3] - 2025-08-06

Changed

ES: Bump to 8.18.3

[1.4.2] - 2025-02-28

Changed

MINOR Add -(collector|injector) in main container's name for colljector to avoid naming collision (useful for logs distinction) as it's done on octi

[1.4.1] - 2025-02-28

Added

MINOR cnpg add dynamic affinity
MINOR rabbitmq add dynamic affinity

[1.4.0] - 2025-02-28

Added

MINOR pgAdmin option to deployment

[1.3.4] - 2025-02-25

Added

PATCH Added new labels to identify properly OBAS resources

[1.3.3] - 2025-02-18

Added

PATCH Pyroscope telemetry config for OBAS

[1.3.2] - 2024-11-27

Changed

PATCH Allow to define a fined grained ImagePullPolicy for each component

[1.3.1] - 2024-11-15

Changed

PATCH RabbitMQ anti-affinity changed from preferred to required

[1.3.0] - 2024-06-13

Added

MINOR pgAdmin option to deployment

[1.2.0] - 2024-03-22

Added

MINOR New collector : Sentinel

[1.1.2] - 2024-01-24

Added

PACTH allow minio backup from node
PATCH allow network policy postgres backup to aws

[1.1.1] - 2023-12-20

Added

PACTH allow shared minio between opencti and openbas

[1.1.0] - 2023-12-11

Added

HelmOpenBAS MINOR add Cilium network policy for openbas