[bitnami/tomcat] Set usePasswordFiles=true by default (#32767)

* [bitnami/tomcat] Set `usePasswordFiles=true` by default

Signed-off-by: Miguel Ruiz <[email protected]>

* Update CHANGELOG.md

Signed-off-by: Bitnami Bot <[email protected]>

* Update README.md with readme-generator-for-helm

Signed-off-by: Bitnami Bot <[email protected]>

---------

Signed-off-by: Miguel Ruiz <[email protected]>
Signed-off-by: Bitnami Bot <[email protected]>
Co-authored-by: Bitnami Bot <[email protected]>

Author: migruiz4

bitnami/tomcat/CHANGELOG.md

@@ -1,8 +1,13 @@
 # Changelog
 
-## 11.6.1 (2025-03-27)
+## 11.7.0 (2025-04-02)
 
-* [bitnami/tomcat] Release 11.6.1 ([#32629](https://github.com/bitnami/charts/pull/32629))
+* [bitnami/tomcat] Set `usePasswordFiles=true` by default ([#32767](https://github.com/bitnami/charts/pull/32767))
+
+## <small>11.6.1 (2025-03-27)</small>
+
+* [bitnami/*] Add tanzuCategory annotation (#32409) ([a8fba5c](https://github.com/bitnami/charts/commit/a8fba5cb01f6f4464ca7f69c50b0fbe97d837a95)), closes [#32409](https://github.com/bitnami/charts/issues/32409)
+* [bitnami/tomcat] Release 11.6.1 (#32629) ([da54156](https://github.com/bitnami/charts/commit/da541565254f8a73b4bf1eb62746235e70dbed12)), closes [#32629](https://github.com/bitnami/charts/issues/32629)
 
 ## 11.6.0 (2025-03-12)
 

bitnami/tomcat/Chart.yaml

@@ -36,4 +36,4 @@ maintainers:
 name: tomcat
 sources:
 - https://github.com/bitnami/charts/tree/main/bitnami/tomcat
-version: 11.6.1
+version: 11.7.0

bitnami/tomcat/README.md

@@ -195,6 +195,7 @@ You can enable this init container by setting `volumePermissions.enabled` to `tr
 | `commonAnnotations` | Add annotations to all the deployed resources                                                | `{}`            |
 | `clusterDomain`     | Kubernetes Cluster Domain                                                                    | `cluster.local` |
 | `extraDeploy`       | Array of extra objects to deploy with the release                                            | `[]`            |
+| `usePasswordFiles`  | Mount credentials as files instead of using environment variables                            | `true`          |
 
 ### Tomcat parameters
 

bitnami/tomcat/templates/_pod.tpl

@@ -77,6 +77,12 @@ containers:
     env:
       - name: BITNAMI_DEBUG
         value: {{ ternary "true" "false" .Values.image.debug | quote }}
+      {{- if .Values.usePasswordFiles }}
+      - name: TOMCAT_USERNAME_FILE
+        value: {{ printf "/opt/bitnami/tomcat/secrets/%s" (include "tomcat.adminUsernameKey" .) }}
+      - name: TOMCAT_PASSWORD_FILE
+        value: {{ printf "/opt/bitnami/tomcat/secrets/%s" (include "tomcat.adminPasswordKey" .) }}
+      {{- else }}
       - name: TOMCAT_USERNAME
         valueFrom:
           secretKeyRef:
@@ -87,6 +93,7 @@ containers:
           secretKeyRef:
             name: {{ include "tomcat.secretName" . }}
             key: {{ include "tomcat.adminPasswordKey" . }}
+      {{- end }}
       - name: TOMCAT_ALLOW_REMOTE_MANAGEMENT
         value: {{ .Values.tomcatAllowRemoteManagement | quote }}
       - name: TOMCAT_HTTP_PORT_NUMBER
@@ -167,6 +174,10 @@ containers:
       - name: empty-dir
         mountPath: /tmp
         subPath: tmp-dir
+      {{- if  .Values.usePasswordFiles }}
+      - name: tomcat-secrets
+        mountPath: /opt/bitnami/tomcat/secrets
+      {{- end }}
       {{- if .Values.extraVolumeMounts }}
       {{- include "common.tplvalues.render" (dict "value" .Values.extraVolumeMounts "context" $) | nindent 6 }}
       {{- end }}
@@ -209,6 +220,13 @@ containers:
 volumes:
   - name: empty-dir
     emptyDir: {}
+  {{- if .Values.usePasswordFiles }}
+  - name: tomcat-secrets
+    projected:
+      sources:
+        - secret:
+            name: {{ include "tomcat.secretName" . }}
+  {{- end }}
   {{- if (eq .Values.deployment.type "deployment") }}
   {{- if and .Values.persistence.enabled }}
   - name: data

bitnami/tomcat/values.yaml

@@ -59,6 +59,9 @@ clusterDomain: cluster.local
 ## @param extraDeploy Array of extra objects to deploy with the release
 ##
 extraDeploy: []
+## @param usePasswordFiles Mount credentials as files instead of using environment variables
+##
+usePasswordFiles: true
 ## @section Tomcat parameters
 ##