Merge pull request #52 from unicef/feat/ES-9.4.3

feat: ES upgrade to 9.4.3

Author: elnino-nic

charts/aurora/CHANGELOG.md

@@ -1,5 +1,8 @@
 # Changelog
 
+## 0.2.2 (2026-07-14)
+* Add `celery.resources` and `celery.beatResources` values (both `{}` by default). Celery worker resources fall back `celery.resources | default resources`; celery beat falls back `celery.beatResources | default celery.resources | default resources`
+
 ## 0.2.1 (2026-04-07)
 * Fix celery worker/beat to use `args: ["run"]` with `START_WORKER`/`START_CRON` env vars (circusd entrypoint)
 

charts/core/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.14.7 (2026-07-16)
+* Upgrade ES9 image `docker.elastic.co/elasticsearch/elasticsearch` from `9.0.1` to `9.4.3` in `x-es9-base` (main container) and both `x-es9-nodegroup` initContainers (`configure-sysctl`, `install-plugins`) — affects `es-search` and `es-index`. Minor upgrade within ES 9.x: rolling restart, no reindex.
+
+## 0.14.6 (2026-07-14)
+* Add `celery.resources` and `celery.beatResources` values (both `{}` by default); celery beat now uses `celery.beatResources | default celery.resources` so beat can be sized independently of the workers
+* Default `celery.autoscaling.enabled` to `false` (was `true`): no celery HPA template exists, so enabling it only stripped the replica count from the worker Deployments, leaving them unmanaged
+
 ## 0.14.5 (2026-06-23)
 * Add `volume-permissions` initContainer to `x-es9-nodegroup`: chowns `/bitnami/elasticsearch/data` to `1000:0` so the official ES image (runAsUser 1000) can write its data dir
 * Set `coordinating.replicaCount: 0` in `x-es9-base`: Bitnami chart defaults to 2 coordinating pods; all-roles master design needs none

charts/core/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: core
 description: A Helm chart for Kubernetes
 type: application
-version: 0.14.6
+version: 0.14.7
 appVersion: "core-2.10.1"
 
 dependencies:

charts/core/values.yaml

@@ -387,7 +387,7 @@ x-es9-base: &es9-base
   image:
     registry: docker.elastic.co
     repository: elasticsearch/elasticsearch
-    tag: "9.0.1"
+    tag: "9.4.3"
   sysctlImage:
     enabled: false
   enableDefaultInitContainers: false
@@ -433,7 +433,7 @@ x-es9-nodegroup: &es9-nodegroup
     allowPrivilegeEscalation: false
   initContainers:
     - name: configure-sysctl
-      image: "docker.elastic.co/elasticsearch/elasticsearch:9.0.1"
+      image: "docker.elastic.co/elasticsearch/elasticsearch:9.4.3"
       command: ['sysctl', '-w', 'vm.max_map_count=262144']
       securityContext:
         privileged: true
@@ -452,7 +452,7 @@ x-es9-nodegroup: &es9-nodegroup
         - name: data
           mountPath: /bitnami/elasticsearch/data
     - name: install-plugins
-      image: "docker.elastic.co/elasticsearch/elasticsearch:9.0.1"
+      image: "docker.elastic.co/elasticsearch/elasticsearch:9.4.3"
       command:
         - bash
         - -c

charts/deduplication-engine/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 0.14.8 (2026-07-14)
+* Add backend `HorizontalPodAutoscaler` template (`autoscaling/v2`), gated on `autoscaling.enabled`, with optional CPU and memory utilization targets
+* Lower `autoscaling.maxReplicas` default from `100` to `3`
+* Add backend `resources: {}` and celery `resources` / `beatResources` values; celery beat uses `beatResources | default resources`, worker uses `celery.resources`
+
 ## 0.14.7 (2026-05-29)
 * Add `IMAGES_ROOT: /var/data` default to `backend.config`
 

charts/payment-gateway/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 0.9.4 (2026-07-14)
+* Add backend `HorizontalPodAutoscaler` template (`autoscaling/v2`), gated on `backend.autoscaling.enabled`, with optional CPU and memory utilization targets
+* Add `backend.autoscaling` values (minReplicas 1, maxReplicas 3, targetCPUUtilizationPercentage 80)
+* Add top-level `resources: {}` shared by backend and celery worker; add celery `resources` / `beatResources` (worker falls back to top-level `resources`, beat to `celery.beatResources | default celery.resources`)
+
 ## 0.9.3 (2026-03-17)
 * Redis: fix replica missing command/args/volumeMount defaults (same as master)
 

charts/reporting/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 0.14.3 (2026-07-14)
+* Add celery `resources` and `beatResources` values (both `{}` by default); celery beat uses `beatResources | default resources`, worker uses `celery.resources`
+* Set celery worker `replicas` to `1` (removed the `autoscaling.enabled` replica guard)
+
 ## 0.14.2 (2026-03-17)
 * Redis: fix replica missing command/args/volumeMount defaults (same as master)
 

charts/workspace/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 0.5.4 (2026-07-14)
+* Add backend `HorizontalPodAutoscaler` template (`autoscaling/v2`), gated on `autoscaling.enabled`, with optional CPU and memory utilization targets
+* Add backend `autoscaling` values (enabled false, minReplicas 1, maxReplicas 3, targetCPUUtilizationPercentage 80) and backend `resources: {}`
+* Add celery `resources` / `beatResources` values; celery beat uses `beatResources | default resources`, worker uses `celery.resources`
+
 ## 0.5.3 (2026-03-17)
 * Redis: fix replica missing command/args/volumeMount defaults (same as master)