From 3bd7ea7fc54d3ee3823323032cd226a1b481446a Mon Sep 17 00:00:00 2001
From: TheIrritainer <theirritainer@gmail.com>
Date: Thu, 26 Mar 2026 13:59:22 +0800
Subject: [PATCH] small post release tweaks

---
 helm/threadql/haproxy.values.yaml.example | 3 ---
 helm/threadql/templates/secret-env.yaml   | 4 +++-
 helm/threadql/traefik.values.yaml.example | 3 ---
 helm/threadql/values.yaml                 | 5 ++---
 4 files changed, 5 insertions(+), 10 deletions(-)

diff --git a/helm/threadql/haproxy.values.yaml.example b/helm/threadql/haproxy.values.yaml.example
index 021f917..e1c9828 100644
--- a/helm/threadql/haproxy.values.yaml.example
+++ b/helm/threadql/haproxy.values.yaml.example
@@ -13,9 +13,6 @@
 #     -f helm/threadql/values.yaml \
 #     -f helm/threadql/haproxy.values.yaml
 
-imagePullSecrets:
-  - name: registry-credentials
-
 mysql:
   enabled: true
   rootPassword: CHANGE_ME_MYSQL_ROOT_PASSWORD
diff --git a/helm/threadql/templates/secret-env.yaml b/helm/threadql/templates/secret-env.yaml
index 1d51cee..f017ec7 100644
--- a/helm/threadql/templates/secret-env.yaml
+++ b/helm/threadql/templates/secret-env.yaml
@@ -8,7 +8,7 @@ metadata:
 type: Opaque
 stringData:
   {{- /* Keys managed by the chart — skipped in the range loop below */}}
-  {{- $managed := list "DB_HOST" "REDIS_HOST" "MCP_APP_URL" "SSH_TUNNEL_MANAGER_URL" }}
+  {{- $managed := list "DB_HOST" "REDIS_HOST" "MCP_APP_URL" "SSH_TUNNEL_MANAGER_URL" "THREADQL_VERSION" }}
   {{- if and .Values.mysql.enabled .Values.mysql.rootPassword }}
   {{- $managed = append $managed "DB_PASSWORD" }}
   {{- end }}
@@ -18,6 +18,8 @@ stringData:
   {{ $key }}: {{ $value | quote }}
   {{- end }}
   {{- end }}
+  {{- /* Chart version injected as app version */}}
+  THREADQL_VERSION: {{ .Values.version | quote }}
   {{- /* Auto-resolved internal service URLs */}}
   DB_HOST: {{ include "threadql.mysqlHost" . | quote }}
   REDIS_HOST: {{ include "threadql.redisHost" . | quote }}
diff --git a/helm/threadql/traefik.values.yaml.example b/helm/threadql/traefik.values.yaml.example
index 38a9e48..50943af 100644
--- a/helm/threadql/traefik.values.yaml.example
+++ b/helm/threadql/traefik.values.yaml.example
@@ -14,9 +14,6 @@
 #     -f helm/threadql/values.yaml \
 #     -f helm/threadql/traefik.values.yaml
 
-imagePullSecrets:
-  - name: registry-credentials
-
 mysql:
   enabled: true
   rootPassword: CHANGE_ME_MYSQL_ROOT_PASSWORD
diff --git a/helm/threadql/values.yaml b/helm/threadql/values.yaml
index 47d3cae..09731d3 100644
--- a/helm/threadql/values.yaml
+++ b/helm/threadql/values.yaml
@@ -237,12 +237,11 @@ envFrom:
   configMapRef: ""
 
 # These values are used to create a Secret when envFrom.secretRef is empty.
-# DB_HOST, REDIS_HOST, MCP_APP_URL, and SSH_TUNNEL_MANAGER_URL are auto-set
-# by the chart when their respective components are enabled.
+# DB_HOST, REDIS_HOST, MCP_APP_URL, SSH_TUNNEL_MANAGER_URL, and THREADQL_VERSION
+# are auto-set by the chart.
 env:
   APP_NAME: ThreadQL
   APP_ENV: production
-  THREADQL_VERSION: "0.0.6"
   APP_KEY: ""  # Required — generate with: php artisan key:generate --show
   APP_DEBUG: "false"
   APP_URL: "https://threadql.local"