Merge pull request 'feat(netbird): vendor coturn 9.7.1 for hostNetwork STUN/TURN exposure' (#1670) from netbird-coturn-9.7.1-hostnetwork into master

Reviewed-on: https://gitea.obmondo.com/EnableIT/KubeAid/pulls/1670

Author: ashish1099

argocd-helm-charts/netbird/Chart.yaml

@@ -6,7 +6,7 @@ dependencies:
     version: 1.9.0
     repository: https://netbirdio.github.io/helms
   - name: coturn
-    version: 9.4.0
+    version: 9.7.1
     repository: https://small-hack.github.io/coturn-chart/
   - name: kubeaid-addons
     version: 0.1.0

argocd-helm-charts/netbird/charts/coturn/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: postgresql
   repository: oci://registry-1.docker.io/bitnamicharts
-  version: 16.7.10
+  version: 16.7.27
 - name: mysql
   repository: oci://registry-1.docker.io/bitnamicharts
-  version: 13.0.1
-digest: sha256:5618e69cf8e72335354b5b2fb322c7c5f7d428f5f66c79e9c1ff471cf741f55b
-generated: "2025-06-07T23:51:28.710565+02:00"
+  version: 13.0.4
+digest: sha256:3588e087810573f93a9324a41118b60fe3dfb7934329e4f3097ea8f19dab5d0e
+generated: "2026-06-17T16:23:03.45435176+05:30"

argocd-helm-charts/netbird/charts/coturn/Chart.yaml

@@ -1,22 +1,22 @@
 apiVersion: v2
-appVersion: 4.8.0
-dependencies:
-- condition: postgresql.enabled
-  name: postgresql
-  repository: oci://registry-1.docker.io/bitnamicharts
-  version: 16.7.10
-- condition: mysql.enabled
-  name: mysql
-  repository: oci://registry-1.docker.io/bitnamicharts
-  version: 13.0.1
-description: A Helm chart to deploy coturn
-home: https://github.com/small-hack/coturn-chart
-maintainers:
-- email: jessebot@linux.com
-  name: jessebot
-  url: https://github.com/jessebot/
 name: coturn
-sources:
-- https://github.com/small-hack/coturn-chart
 type: application
-version: 9.4.0
+description: A Helm chart to deploy coturn
+home: "https://codeberg.org/small-hack/coturn-chart"
+version: 9.7.1
+# renovate: image=coturn/coturn
+appVersion: 4.13.1
+sources:
+  - "https://codeberg.org/small-hack/coturn-chart"
+maintainers:
+  - name: "jessebot"
+    url: "https://codeberg.org/jessebot/"
+dependencies:
+  - name: postgresql
+    version: 16.7.27
+    repository: oci://registry-1.docker.io/bitnamicharts
+    condition: postgresql.enabled
+  - name: mysql
+    version: 13.0.4
+    repository: oci://registry-1.docker.io/bitnamicharts
+    condition: mysql.enabled

argocd-helm-charts/netbird/charts/coturn/README.md

@@ -1,27 +1,27 @@
 # coturn
 
-![Version: 9.4.0](https://img.shields.io/badge/Version-9.4.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.8.0](https://img.shields.io/badge/AppVersion-4.8.0-informational?style=flat-square)
+![Version: 9.7.1](https://img.shields.io/badge/Version-9.7.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.13.1](https://img.shields.io/badge/AppVersion-4.13.1-informational?style=flat-square)
 
 A Helm chart to deploy coturn
 
-**Homepage:** <https://github.com/small-hack/coturn-chart>
+**Homepage:** <https://codeberg.org/small-hack/coturn-chart>
 
 ## Maintainers
 
 | Name | Email | Url |
 | ---- | ------ | --- |
-| jessebot | <jessebot@linux.com> | <https://github.com/jessebot/> |
+| jessebot |  | <https://codeberg.org/jessebot/> |
 
 ## Source Code
 
-* <https://github.com/small-hack/coturn-chart>
+* <https://codeberg.org/small-hack/coturn-chart>
 
 ## Requirements
 
 | Repository | Name | Version |
 |------------|------|---------|
-| oci://registry-1.docker.io/bitnamicharts | mysql | 13.0.1 |
-| oci://registry-1.docker.io/bitnamicharts | postgresql | 16.7.10 |
+| oci://registry-1.docker.io/bitnamicharts | mysql | 13.0.4 |
+| oci://registry-1.docker.io/bitnamicharts | postgresql | 16.7.27 |
 
 ## Values
 
@@ -42,7 +42,7 @@ A Helm chart to deploy coturn
 | coturn.auth.secretKeys.username | string | `"username"` | key in existing secret for turn server user |
 | coturn.auth.staticAuthSecret | string | `""` | 'Static' authentication secret value (a string) for TURN REST API only. If not set, then the turn server will try to use the 'dynamic' value in the turn_secret table in the user database (if present). The database-stored  value can be changed on-the-fly by a separate program, so this is why that mode is considered 'dynamic'. |
 | coturn.auth.username | string | `"coturn"` | username for the main user of the turn server |
-| coturn.extraEnvVars | list | `[]` | Extra environment variables to pass to the Coturn container example:   - name: STATIC_AUTH_SECRET_VAL_OPT     value: supersecretpassword123abcyes |
+| coturn.extraEnvVars | list | `[]` | Extra environment variables to pass to the Coturn container |
 | coturn.extraTurnserverConfiguration | string | `"verbose\n"` | extra configuration for turnserver.conf |
 | coturn.initContainer.image.repository | string | `"mikefarah/yq"` | registry and repository for init container config generator image |
 | coturn.initContainer.image.tag | string | `"latest"` | tag for init container config generator image |
@@ -53,6 +53,9 @@ A Helm chart to deploy coturn
 | coturn.ports.min | int | `49152` | minimum ephemeral port for coturn |
 | coturn.ports.tlsListening | int | `5349` | secure listening port |
 | coturn.realm | string | `"turn.example.com"` | hostname for the coturn server realm |
+| deployment.dnsPolicy | string | `"ClusterFirst"` |  |
+| deployment.hostNetwork | bool | `false` |  |
+| deployment.type | string | `"Deployment"` |  |
 | externalDatabase.database | string | `""` | database to create, ignored if existingSecret is passed in |
 | externalDatabase.enabled | bool | `false` | enables the use of postgresql instead of the default sqlite to use the bundled subchart, enable this, and postgresql.enable |
 | externalDatabase.existingSecret | string | `""` | name of existing Secret to use for postgresql credentials |
@@ -102,4 +105,4 @@ A Helm chart to deploy coturn
 | service.type | string | `"ClusterIP"` | The type of service to deploy for routing Coturn traffic.   ClusterIP: Recommended for DaemonSet configurations. This will create a              standard Kubernetes service for Coturn within the cluster.              No external networking will be configured as the DaemonSet              will handle binding to each Node's host networking    NodePort:  Recommended for Deployment configurations. This will open              TURN ports on every node and route traffic on these ports to              the Coturn pods. You will need to make sure your cloud              provider supports the cluster config setting,              apiserver.service-node-port-range, as this range must contain              the ports defined above for the service to be created.    LoadBalancer: This was what was originally set for this chart in the                 upstream of this fork, but with no details |
 
 ----------------------------------------------
-Autogenerated from chart metadata using [helm-docs v1.11.0](https://github.com/norwoodj/helm-docs/releases/v1.11.0)
+Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)

argocd-helm-charts/netbird/charts/coturn/charts/mysql/Chart.yaml

@@ -2,11 +2,11 @@ annotations:
   category: Database
   images: |
     - name: mysql
-      image: docker.io/bitnami/mysql:9.3.0-debian-12-r2
+      image: docker.io/bitnami/mysql:9.3.0-debian-12-r3
     - name: mysqld-exporter
-      image: docker.io/bitnami/mysqld-exporter:0.17.2-debian-12-r11
+      image: docker.io/bitnami/mysqld-exporter:0.17.2-debian-12-r13
     - name: os-shell
-      image: docker.io/bitnami/os-shell:12-debian-12-r46
+      image: docker.io/bitnami/os-shell:12-debian-12-r48
   licenses: Apache-2.0
   tanzuCategory: service
 apiVersion: v2
@@ -33,4 +33,4 @@ maintainers:
 name: mysql
 sources:
 - https://github.com/bitnami/charts/tree/main/bitnami/mysql
-version: 13.0.1
+version: 13.0.4

argocd-helm-charts/netbird/charts/coturn/charts/mysql/values.yaml

@@ -97,7 +97,7 @@ diagnosticMode:
 image:
   registry: docker.io
   repository: bitnami/mysql
-  tag: 9.3.0-debian-12-r2
+  tag: 9.3.0-debian-12-r3
   digest: ""
   ## Specify a imagePullPolicy
   ## ref: https://kubernetes.io/docs/concepts/containers/images/#pre-pulled-images
@@ -1355,7 +1355,7 @@ volumePermissions:
   image:
     registry: docker.io
     repository: bitnami/os-shell
-    tag: 12-debian-12-r46
+    tag: 12-debian-12-r48
     digest: ""
     pullPolicy: IfNotPresent
     ## Optionally specify an array of imagePullSecrets.
@@ -1400,7 +1400,7 @@ metrics:
   image:
     registry: docker.io
     repository: bitnami/mysqld-exporter
-    tag: 0.17.2-debian-12-r11
+    tag: 0.17.2-debian-12-r13
     digest: ""
     pullPolicy: IfNotPresent
     ## Optionally specify an array of imagePullSecrets.

argocd-helm-charts/netbird/charts/coturn/charts/postgresql/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: common
   repository: oci://registry-1.docker.io/bitnamicharts
-  version: 2.31.1
-digest: sha256:38d6de6fd62a10417ff51df8b2c5e0cf294de80fe393c4e9f3247ca6433718fa
-generated: "2025-05-30T09:38:59.255745+02:00"
+  version: 2.31.4
+digest: sha256:fc442e77200e1914dd46fe26490dcf62f44caa51db673c2f8e67d5319cd4c163
+generated: "2025-08-14T15:30:01.842897577Z"

argocd-helm-charts/netbird/charts/coturn/charts/postgresql/Chart.yaml

@@ -2,15 +2,15 @@ annotations:
   category: Database
   images: |
     - name: os-shell
-      image: docker.io/bitnami/os-shell:12-debian-12-r46
+      image: docker.io/bitnami/os-shell:12-debian-12-r51
     - name: postgres-exporter
-      image: docker.io/bitnami/postgres-exporter:0.17.1-debian-12-r10
+      image: docker.io/bitnami/postgres-exporter:0.17.1-debian-12-r16
     - name: postgresql
-      image: docker.io/bitnami/postgresql:17.5.0-debian-12-r10
+      image: docker.io/bitnami/postgresql:17.6.0-debian-12-r4
   licenses: Apache-2.0
   tanzuCategory: service
 apiVersion: v2
-appVersion: 17.5.0
+appVersion: 17.6.0
 dependencies:
 - name: common
   repository: oci://registry-1.docker.io/bitnamicharts
@@ -35,4 +35,4 @@ maintainers:
 name: postgresql
 sources:
 - https://github.com/bitnami/charts/tree/main/bitnami/postgresql
-version: 16.7.10
+version: 16.7.27

argocd-helm-charts/netbird/charts/coturn/charts/postgresql/README.md

@@ -18,6 +18,17 @@ helm install my-release oci://registry-1.docker.io/bitnamicharts/postgresql
 
 Looking to use PostgreSQL in production? Try [VMware Tanzu Application Catalog](https://bitnami.com/enterprise), the commercial edition of the Bitnami catalog.
 
+## ⚠️ Important Notice: Upcoming changes to the Bitnami Catalog
+
+Beginning August 28th, 2025, Bitnami will evolve its public catalog to offer a curated set of hardened, security-focused images under the new [Bitnami Secure Images initiative](https://news.broadcom.com/app-dev/broadcom-introduces-bitnami-secure-images-for-production-ready-containerized-applications). As part of this transition:
+
+- Granting community users access for the first time to security-optimized versions of popular container images.
+- Bitnami will begin deprecating support for non-hardened, Debian-based software images in its free tier and will gradually remove non-latest tags from the public catalog. As a result, community users will have access to a reduced number of hardened images. These images are published only under the “latest” tag and are intended for development purposes
+- Starting August 28th, over two weeks, all existing container images, including older or versioned tags (e.g., 2.50.0, 10.6), will be migrated from the public catalog (docker.io/bitnami) to the “Bitnami Legacy” repository (docker.io/bitnamilegacy), where they will no longer receive updates.
+- For production workloads and long-term support, users are encouraged to adopt Bitnami Secure Images, which include hardened containers, smaller attack surfaces, CVE transparency (via VEX/KEV), SBOMs, and enterprise support.
+
+These changes aim to improve the security posture of all Bitnami users by promoting best practices for software supply chain integrity and up-to-date deployments. For more details, visit the [Bitnami Secure Images announcement](https://github.com/bitnami/containers/issues/83267).
+
 ## Introduction
 
 This chart bootstraps a [PostgreSQL](https://github.com/bitnami/containers/tree/main/bitnami/postgresql) deployment on a [Kubernetes](https://kubernetes.io) cluster using the [Helm](https://helm.sh) package manager.
@@ -134,7 +145,7 @@ kubectl create secret generic SECRET_NAME --from-literal=password=PASSWORD --fro
 The Bitnami PostgreSQL provides a password update job that will automatically change the PostgreSQL passwords when running helm upgrade. To enable the job set `passwordUpdateJob.enabled=true`. This job requires:
 
 - The new passwords: this is configured using either `auth.postgresPassword`, `auth.password` and `auth.replicationPassword` (if applicable) or setting `auth.existingSecret`.
-- The previous passwords: This value is taken automatically from already deployed secret object. If you are using `auth.existingSecret` or `helm template` instead of `helm upgrade`, then set either `passwordUpdate.job.previousPasswords.postgresPassword`, `passwordUpdate.job.previousPasswords.password`, `passwordUpdate.job.previousPasswords.replicationPassword` (when applicable), or setting `passwordUpdateJob,previousPasswords.existingSecret`.
+- The previous passwords: This value is taken automatically from already deployed secret object. If you are using `auth.existingSecret` or `helm template` instead of `helm upgrade`, then set either `passwordUpdateJob.previousPasswords.postgresPassword`, `passwordUpdateJob.previousPasswords.password`, `passwordUpdateJob.previousPasswords.replicationPassword` (when applicable), or setting `passwordUpdateJob.previousPasswords.existingSecret`.
 
 In the following example we update the password via values.yaml in a PostgreSQL installation with replication
 

argocd-helm-charts/netbird/charts/coturn/charts/postgresql/charts/common/Chart.yaml

@@ -2,7 +2,7 @@ annotations:
   category: Infrastructure
   licenses: Apache-2.0
 apiVersion: v2
-appVersion: 2.31.1
+appVersion: 2.31.4
 description: A Library Helm Chart for grouping common logic between bitnami charts.
   This chart is not deployable by itself.
 home: https://bitnami.com
@@ -20,4 +20,4 @@ name: common
 sources:
 - https://github.com/bitnami/charts/tree/main/bitnami/common
 type: library
-version: 2.31.1
+version: 2.31.4