From 40845beb74018aef659bd9e794dba172f8fd5309 Mon Sep 17 00:00:00 2001
From: Tom Bojer <t.bojer@shopware.com>
Date: Fri, 31 Jul 2026 08:03:40 +0200
Subject: [PATCH] feat: add database tls settings for store cr

---
 charts/shopware/Chart.yaml           | 4 ++--
 charts/shopware/templates/store.yaml | 4 ++++
 charts/shopware/values.yaml          | 7 +++++++
 3 files changed, 13 insertions(+), 2 deletions(-)

diff --git a/charts/shopware/Chart.yaml b/charts/shopware/Chart.yaml
index 65a2617..0a8a051 100644
--- a/charts/shopware/Chart.yaml
+++ b/charts/shopware/Chart.yaml
@@ -15,13 +15,13 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.0.2
+version: 1.0.3
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "1.0.2"
+appVersion: "1.0.3"
 
 dependencies:
   - name: pxc-operator
diff --git a/charts/shopware/templates/store.yaml b/charts/shopware/templates/store.yaml
index ca635f7..4e808cf 100644
--- a/charts/shopware/templates/store.yaml
+++ b/charts/shopware/templates/store.yaml
@@ -165,6 +165,10 @@ spec:
     version: {{ .Values.store.database.version | default "8" | quote }}
     port: {{ .Values.store.database.port | default 3306 }}
     name: {{ .Values.store.database.name | default "shopware" }}
+    {{- with .Values.store.database.tls }}
+    tls:
+      {{- toYaml . | nindent 6 }}
+    {{- end }}
   network:
     {{- if hasKey .Values.store "host" }}
     host: {{ .Values.store.host }}
diff --git a/charts/shopware/values.yaml b/charts/shopware/values.yaml
index b100035..d563f66 100644
--- a/charts/shopware/values.yaml
+++ b/charts/shopware/values.yaml
@@ -164,6 +164,13 @@ store:
     #   name: percona-secrets
     #   key: root
 
+    # Configure TLS for the database connection. The referenced secret must contain
+    # ca.crt, and additionally tls.crt plus tls.key when clientCertificate is true.
+    # tls:
+    #   secretName: database-tls
+    #   clientCertificate: false
+    #   dontVerifyServerCertificate: false
+
   # You can define a Monolog configuration here.
   # Please refer to the official Monolog documentation for details.
   # This configuration will be mounted in the deployment as a ConfigMap.