[bitnami/schema-registry] Set usePasswordFiles=true by default (#32713)

* [bitnami/schema-registry] Set `usePasswordFiles=true` by default

Signed-off-by: Miguel Ruiz <[email protected]>

* Update CHANGELOG.md

Signed-off-by: Bitnami Bot <[email protected]>

* Update README.md with readme-generator-for-helm

Signed-off-by: Bitnami Bot <[email protected]>

---------

Signed-off-by: Miguel Ruiz <[email protected]>
Signed-off-by: Bitnami Bot <[email protected]>
Co-authored-by: Bitnami Bot <[email protected]>

Author: migruiz4

bitnami/schema-registry/CHANGELOG.md

@@ -1,8 +1,12 @@
 # Changelog
 
+## 25.1.0 (2025-04-01)
+
+* [bitnami/schema-registry] Set `usePasswordFiles=true` by default ([#32713](https://github.com/bitnami/charts/pull/32713))
+
 ## 25.0.0 (2025-03-26)
 
-* [bitnami/schema-registry] feat: bump major due to major bump on Kafka dep ([#32618](https://github.com/bitnami/charts/pull/32618))
+* [bitnami/schema-registry] feat: bump major due to major bump on Kafka dep (#32618) ([d1bd546](https://github.com/bitnami/charts/commit/d1bd54623e3b6c26ae2358a5295e106b396e3702)), closes [#32618](https://github.com/bitnami/charts/issues/32618)
 
 ## 24.0.0 (2025-03-12)
 

bitnami/schema-registry/Chart.yaml

@@ -35,4 +35,4 @@ maintainers:
 name: schema-registry
 sources:
 - https://github.com/bitnami/charts/tree/main/bitnami/schema-registry
-version: 25.0.0
+version: 25.1.0

bitnami/schema-registry/README.md

@@ -226,6 +226,7 @@ For annotations, please see [this document](https://github.com/kubernetes/ingres
 | `commonAnnotations`      | Annotations to add to all deployed objects                                                                | `{}`            |
 | `clusterDomain`          | Kubernetes cluster domain name                                                                            | `cluster.local` |
 | `extraDeploy`            | Array of extra objects to deploy with the release                                                         | `[]`            |
+| `usePasswordFiles`       | Mount credentials as files instead of using environment variables                                         | `true`          |
 | `diagnosticMode.enabled` | Enable diagnostic mode (all probes will be disabled and the command will be overridden)                   | `false`         |
 | `diagnosticMode.command` | Command to override all containers in the deployment                                                      | `["sleep"]`     |
 | `diagnosticMode.args`    | Args to override all containers in the deployment                                                         | `["infinity"]`  |

bitnami/schema-registry/templates/statefulset.yaml

@@ -176,12 +176,17 @@ spec:
               {{- else }}
               value: {{ .Values.externalKafka.sasl.user | quote }}
               {{- end }}
+            {{- if .Values.userPasswordFiles }}
+            - name: SCHEMA_REGISTRY_KAFKA_SASL_PASSWORDS
+              value: "/opt/bitnami/schema-registry/secrets/client-passwords"
+            {{- else }}
             - name: SCHEMA_REGISTRY_KAFKA_SASL_PASSWORDS
               valueFrom:
                 secretKeyRef:
                   name: {{ include "schema-registry.secretName" . }}
                   key: client-passwords
             {{- end }}
+            {{- end }}
             {{- if contains "SSL" $kafkaProtocol }}
             - name: SCHEMA_REGISTRY_SSL_ENDPOINT_IDENTIFICATION_ALGORITHM
               value: {{ .Values.auth.kafka.tlsEndpointIdentificationAlgorithm | quote }}
@@ -255,6 +260,10 @@ spec:
             - name: empty-dir
               mountPath: /opt/bitnami/schema-registry/logs
               subPath: app-logs-dir
+            {{- if and .Values.usePasswordFiles (contains "SASL" $kafkaProtocol) }}
+            - name: schema-registry-secrets
+              mountPath: /opt/bitnami/schema-registry/secrets
+            {{- end }}
             {{- if or .Values.configuration .Values.existingConfigmap }}
             - name: configuration
               mountPath: /bitnami/schema-registry/etc/schema-registry/schema-registry.properties
@@ -279,6 +288,13 @@ spec:
       volumes:
         - name: empty-dir
           emptyDir: {}
+        {{- if and .Values.usePasswordFiles (contains "SASL" $kafkaProtocol) }}
+        - name: schema-registry-secrets
+          projected:
+            sources:
+              - secret:
+                  name: {{ include "schema-registry.secretName" . }}
+        {{- end }}
         {{- if or .Values.configuration .Values.existingConfigmap }}
         - name: configuration
           configMap:

bitnami/schema-registry/values.yaml

@@ -57,6 +57,9 @@ clusterDomain: cluster.local
 ## @param extraDeploy Array of extra objects to deploy with the release
 ##
 extraDeploy: []
+## @param usePasswordFiles Mount credentials as files instead of using environment variables
+##
+usePasswordFiles: true
 ## Enable diagnostic mode in the deployment
 ##
 diagnosticMode: