shreemaan-abhishek opened a new pull request, #1018: URL: https://github.com/apache/apisix-helm-chart/pull/1018
### Description Upgrades the APISIX chart to the newly released [APISIX 3.19.0](https://github.com/apache/apisix/releases/tag/3.19.0). - `Chart.yaml`: `appVersion` `3.18.0` -> `3.19.0`, chart `version` `2.17.0` -> `2.18.0` - `values.yaml`: image `tag` `3.18.0-ubuntu` -> `3.19.0-ubuntu` - `configmap.yaml`: render `tls_passthrough` on `stream_proxy.tcp` entries (see below) - `README.md`: regenerated via `make helm-docs` `apache/apisix:3.19.0-ubuntu` is already published on Docker Hub, together with the `-debian` and `-redhat` variants, so `ct install` has an image to pull. ### Chart change for a 3.19.0 feature: `tls_passthrough` 3.19.0 adds TLS passthrough to the stream proxy ([#13912](https://github.com/apache/apisix/pull/13912)), which is configured per TCP listen. The field is new in the config schema for this release: ```diff tls = { type = "boolean", }, + tls_passthrough = { + type = "boolean", + }, ``` The chart's `tcp` renderer emitted only `addr` and `tls`, so a `tls_passthrough` key set in `service.stream.tcp` was silently dropped and the feature could not be reached through the chart. It is now passed through: ```yaml service: stream: enabled: true tcp: - addr: 9100 tls_passthrough: true ``` renders ```yaml stream_proxy: tcp: - addr: 9100 tls_passthrough: true ``` and APISIX 3.19.0 turns that into `ssl_preread on;` on the listen in the generated `nginx.conf`. Rendering a plain listen produces no `ssl_preread`, so the value reaches the runtime rather than being accepted and ignored. The plain port-number and `tls: true` forms are unchanged. Everything else new in 3.19.0 flows through the existing passthroughs: the new `openapi-to-mcp` and `websocket-proxy` plugins are in APISIX's default plugin list, and the `mcp-session` shared dict is in its default `lua_shared_dict` set, so `apisix.plugins` and `luaSharedDicts` can stay empty. ### Verification - `helm lint charts/apisix` passes. - `helm template` renders all three `tcp` element forms (bare port, `tls`, `tls_passthrough`) correctly. - The rendered `config.yaml` was run through `apisix init` in `apache/apisix:3.19.0-debian`; it validates and emits `ssl_preread on;` for the passthrough listen. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
