# Helm

## HQ Changelog

### Small bugfixes

* Service account annotations were wrongly referenced and were not taking into account upon creation of a new service account
* In case *authenSignReq* was enabled and secrets were not placed it would create environment variable with null values - now it skips creation of environment variables

## Agent changelog

### Improvements

{% hint style="warning" %}
**Breaking change**
{% endhint %}

* External secret supports now:
  * Changeable External Secret Store type: SecretStore | ClusterSecretStore\
    hq:

    <pre class="language-yaml" data-title="values.yaml"><code class="lang-yaml">lensesAgent:  
      hq:
        agentKey:
          secret:
            type: "externalSecret"
            # Secret name where agentKey will be read from
            name: hq-password
            # Key name under secret where agentKey is stored
            key: key
            externalSecret:
              secretStoreRef:
                type: ClusterSecretStore # ClusterSecretStore | SecretStore
                name: [secretstore_name]
    </code></pre>
  * additionalSpecs <br>

    <pre class="language-yaml" data-title="values.yaml"><code class="lang-yaml">lensesHq:
      storage:
        postgres:
          enabled: true
          host: postgres-postgresql.hq-agent-test.svc.cluster.local
          port: 5432
          username: postgres
          database: hq
          passwordSecret:
            type: "externalSecret"
            name: postgres-aurora
            key:  password
            externalSecret:
              additionalSpecs:
                refreshInterval: 12h
              secretStoreRef:
                  type: ClusterSecretStore
                  name: enjoy3-secrets
    </code></pre>

### Small bugfixes

* Service account annotations were wrongly referenced and were not taking into account upon creation of a new service account