From 0d375535ed9842383e924dd9f52a28a745f4ce85 Mon Sep 17 00:00:00 2001
From: Felix Delattre <felix@developmentseed.org>
Date: Sat, 22 Nov 2025 15:14:05 +0100
Subject: [PATCH 1/3] Added support for initContainers.

---
 helm/Chart.yaml                | 4 ++--
 helm/templates/deployment.yaml | 4 ++++
 helm/values.schema.yaml        | 7 +++++++
 helm/values.yaml               | 8 ++++++++
 4 files changed, 21 insertions(+), 2 deletions(-)

diff --git a/helm/Chart.yaml b/helm/Chart.yaml
index d8e0a92d..9e4109ad 100644
--- a/helm/Chart.yaml
+++ b/helm/Chart.yaml
@@ -2,5 +2,5 @@ apiVersion: v2
 name: stac-auth-proxy
 description: A Helm chart for stac-auth-proxy
 type: application
-version: 0.1.0
-appVersion: "1.0.0" 
\ No newline at end of file
+version: 0.1.1
+appVersion: "1.0.0"
diff --git a/helm/templates/deployment.yaml b/helm/templates/deployment.yaml
index ce3c3f53..92d514fd 100644
--- a/helm/templates/deployment.yaml
+++ b/helm/templates/deployment.yaml
@@ -17,6 +17,10 @@ spec:
       serviceAccountName: {{ include "stac-auth-proxy.serviceAccountName" . }}
       securityContext:
         {{- toYaml .Values.securityContext | nindent 8 }}
+      {{- with .Values.initContainers }}
+      initContainers:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       containers:
         - name: {{ .Chart.Name }}
           securityContext:
diff --git a/helm/values.schema.yaml b/helm/values.schema.yaml
index 34d026e6..9df052a3 100644
--- a/helm/values.schema.yaml
+++ b/helm/values.schema.yaml
@@ -229,6 +229,13 @@ properties:
     additionalProperties: true
     description: "Pod affinity rules"
 
+  initContainers:
+    type: array
+    items:
+      type: object
+      additionalProperties: true
+    description: "Init containers to run before the main container starts"
+
   serviceAccount:
     type: object
     properties:
diff --git a/helm/values.yaml b/helm/values.yaml
index 76e00d4e..e791e0d2 100644
--- a/helm/values.yaml
+++ b/helm/values.yaml
@@ -46,6 +46,14 @@ nodeSelector: {}
 tolerations: []
 affinity: {}
 
+# Init containers to run before the main container starts
+# initContainers: []
+# Example:
+# initContainers:
+#   - name: wait-for-oidc
+#     image: busybox:1.35
+#     command: ['sh', '-c', 'until nc -z oidc-server 8080; do sleep 2; done']
+
 # Environment variables for the application
 env:
   # Required configuration

From 891be66582e34c32fa3b9bc987683124df664d3b Mon Sep 17 00:00:00 2001
From: Anthony Lukach <anthonylukach@gmail.com>
Date: Tue, 25 Nov 2025 09:14:28 -0800
Subject: [PATCH 2/3] bump uv.lock

---
 uv.lock | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/uv.lock b/uv.lock
index ef016612..41930098 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1806,7 +1806,7 @@ wheels = [
 
 [[package]]
 name = "stac-auth-proxy"
-version = "0.8.0"
+version = "0.10.0"
 source = { editable = "." }
 dependencies = [
     { name = "boto3" },

From 7de852e4cff5f62bed45751be8a75a3bd3a544a4 Mon Sep 17 00:00:00 2001
From: Anthony Lukach <anthonylukach@gmail.com>
Date: Tue, 25 Nov 2025 09:17:15 -0800
Subject: [PATCH 3/3] pin python CI version

---
 .github/workflows/cicd.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/cicd.yaml b/.github/workflows/cicd.yaml
index 2da8613e..9758a836 100644
--- a/.github/workflows/cicd.yaml
+++ b/.github/workflows/cicd.yaml
@@ -11,6 +11,8 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-python@v3
+        with:
+          python-version: '3.13'
       - uses: astral-sh/setup-uv@v4
         with:
           enable-cache: true
@@ -26,6 +28,8 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-python@v3
+        with:
+          python-version: '3.13'
       - uses: astral-sh/setup-uv@v4
         with:
           enable-cache: true