Refactor FleetDM Stack Helm chart: remove MySQL and Redis dependencies, update values.yaml to use built-in Fleet subcharts, add logo image, and adjust Helm install timeout in Makefile.

.gitignore

@@ -4,4 +4,4 @@ fleetdm-stack/charts/*.tgz
 # Local
 .helm/
 *.log
-djinni-007-devops-engineer-flamingo
+/*-flamingo

Makefile

@@ -31,7 +31,7 @@ install: deps
 	@echo "Installing FleetDM stack..."
 	helm upgrade --install $(RELEASE_NAME) fleetdm-stack/ \
 		--namespace $(NAMESPACE) \
-		--wait
+		--wait --timeout 15m
 	@echo "Installation complete. Run 'make verify' to check status."
 
 uninstall:

fleetdm-stack/Chart.lock

@@ -1,12 +1,6 @@
 dependencies:
-- name: mysql
-  repository: oci://registry-1.docker.io/bitnamicharts
-  version: 9.12.5
-- name: redis
-  repository: oci://registry-1.docker.io/bitnamicharts
-  version: 18.1.6
 - name: fleet
   repository: https://fleetdm.github.io/fleet/charts
   version: v6.8.0
-digest: sha256:5bcb4888ac713f0aa05e2aee6794db449f26eaa65a6eced2fd7ff48cf7337a52
+digest: sha256:ab8c11dfc9bb9f35ca7d2dc9cc8d29afc8b031119c5bc68a9ce8ad3885f1914a
-generated: "2026-02-19T15:56:34.555441882Z"
+generated: "2026-02-19T16:05:03.470525533Z"

fleetdm-stack/Chart.yaml

@@ -12,14 +12,7 @@ maintainers:
   - name: Flamingo Applicant
     email: eslider@gmail.com
 dependencies:
-  - name: mysql
+  # Use Fleet's built-in mysql/redis so migration hook runs after they exist
-    version: "9.12.5"
-    repository: oci://registry-1.docker.io/bitnamicharts
-    condition: mysql.enabled
-  - name: redis
-    version: "18.1.6"
-    repository: oci://registry-1.docker.io/bitnamicharts
-    condition: redis.enabled
   - name: fleet
     version: ">=6.7.0"
     repository: https://fleetdm.github.io/fleet/charts

fleetdm-stack/values.yaml

@@ -1,29 +1,34 @@
-# FleetDM Stack - Values for FleetDM Server, MySQL, and Redis
+# FleetDM Stack - Values for FleetDM Server, MySQL and Redis
+# Uses Fleet chart's built-in mysql/redis (ensures migration runs after DB is ready)
 # Deploy with: helm install fleetdm-stack . -n fleetdm -f values.yaml
 
 global:
   namespace: fleetdm
 
-# MySQL configuration
+# Fleet chart (includes mysql + redis as its subcharts)
-mysql:
+fleet:
+  # MySQL (Fleet's subchart)
+  mysql:
     enabled: true
+    image:
+      registry: docker.io
+      repository: bitnamilegacy/mysql
+      tag: 8.0.35-debian-12-r2
     auth:
       username: fleet
       database: fleet
-    # Override for production: --set mysql.auth.password=YOUR_SECURE_PASSWORD
       password: "fleetdm-local-dev"
-  # Optional: use bitnamilegacy/mysql if you hit image pull limits
-  # image:
-  #   repository: bitnamilegacy/mysql
-  #   tag: "8.0.35-debian-12-r2"
     primary:
       persistence:
         enabled: true
         size: 8Gi
-
+  # Redis (Fleet's subchart)
-# Redis configuration
+  redis:
-redis:
     enabled: true
+    image:
+      registry: docker.io
+      repository: bitnamilegacy/redis
+      tag: 7.2.4-debian-12-r12
     architecture: standalone
     auth:
       enabled: false
@@ -31,47 +36,18 @@ redis:
       persistence:
         enabled: true
         size: 1Gi
-  # Optional: use bitnamilegacy/redis if you hit image pull limits
-  # image:
-  #   repository: bitnamilegacy/redis
-  #   tag: "7.2.4-debian-12-r12"
     commonConfiguration: |
       maxmemory 256mb
       maxmemory-policy allkeys-lru
-
-# FleetDM configuration
-fleet:
   enabled: true
   hostName: fleet.localhost
   replicas: 1
   imageRepository: fleetdm/fleet
   imageTag: v4.80.1
-  # Run fleet prepare db on fresh install (autoApplySQLMigrations)
   fleet:
     autoApplySQLMigrations: true
-  mysql:
-    enabled: false
-  redis:
-    enabled: false
-  # Disable TLS for local dev (ingress can terminate TLS if needed)
   tls:
     enabled: false
-  # Connect to our MySQL and Redis subcharts
-  database:
-    secretName: fleetdm-stack-mysql
-    address: fleetdm-stack-mysql:3306
-    database: fleet
-    username: fleet
-    passwordKey: mysql-password
-    maxOpenConns: 50
-    maxIdleConns: 50
-  cache:
-    address: fleetdm-stack-redis-master:6379
-    database: "0"
-    usePassword: false
-    secretName: ""
-    passwordKey: ""
-  # Expose Fleet UI and agent endpoints (reachable by agents)
   ingress:
     enabled: true
     className: nginx
@@ -83,7 +59,6 @@ fleet:
           - path: /
             pathType: ImplementationSpecific
     tls: []
-  # Reduce resources for local dev
   resources:
     limits:
       cpu: 500m