dbInit.mysqlUser and dbInit.mysqlPasswordKey are now configurable in
values.yaml. Defaults to root/mysql-root-password since SQL migrations
need SUPER privilege for triggers with DEFINER=root@%.
App (hades-service) still connects as hades_user — only the migration
job uses root.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
The values.yaml database.username has no effect when Backstage deploys
with mysql.enabled=false — Backstage passes the username from the UI.
The shared MySQL init SQL needs to create hades_user separately.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Change database.username from "hades_user" to "mysql_user" to match
the shared MySQL user created by Backstage environment provisioning
- Remove mysql.enabled=true condition from dbinit job so SQL migrations
run against external/shared MySQL databases too
Without these fixes, deploying hades with mysql.enabled=false (Backstage
shared MySQL) causes access denied because hades_user doesn't exist in
the shared MySQL, and dbinit is skipped so no tables are created.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Test-framework pods need write access to Tomcat dirs like webapps,
conf/Catalina, work. Running as root (user 0) permanently fixes this.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
hadesV3 runs as non-root user (1000) and can't write to Tomcat dirs.
Added tomcatWritableDirs config to mount emptyDir volumes at paths
like /usr/local/tomcat/conf/Catalina and /usr/local/tomcat/work.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
App looks for config at /etc/onlinesales/db/hadesV2/ but was only
mounted at /etc/onlinesales/config/hades/. Now mountPaths is a list
in values.yaml so both paths can be served.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Moved helm/hades/* to hades/ to match ArgoCD path: hades
- Included mysql-1.6.9.tgz subchart for ArgoCD dependency resolution
- Fixed sync wave ordering: dbinit wave 0, deployment wave 1
