Categories

Versions

Patch files from 2026.0.2 to 2026.0.3

As part of the upgrade after you downloaded the new version of the deployment templates, please apply the following changes in your values.yaml file:

As usual with patch files, the first character in every line has a meaning:

  • Lines starting with + need to be added
  • Lines starting with - need to be removed
  • Lines starting with a space ` ` are just for context and should not be changed
  • Lines starting with @@ indicate the line numbers in the original file and should not be changed

values.yaml

@@ -37,9 +37,9 @@ common:
   # The namespace of the deployment
   productNS: "<NAMESPACE-PLACEHOLDER>"
   # The docker image tag
-  mainVersion: "2026.0.3"
+  mainVersion: "2026.1.1"
   # The docker image tag for Coding Environment Storage
-  cesVersion: "2026.0.3"
+  cesVersion: "2026.1.1"
   # Docker registry prefix rapidminer/ references our public docker registry, but that can be changed to the fqdn of your internal registry
   dockerURL: "rapidminer/"
   # The TZ database name of the deployment's timezone, for example "America/New_York"
@@ -201,8 +201,9 @@ proxy:
   # You can overwrite the Docker registry prefix rapidminer/ if you have on own repository, but that can be changed to the fqdn of your internal registry
   # repoName: "<registry.example.com/> or <customedockerhubreponame/>"
   # You can overwrite the mainVersion value for this component
-  # version: "2026.0.3"
+  # version: "2026.1.1"
   configName: "proxy-config"
+  secretName: "proxy-secret"
   # Deprecated, please use httpPort and httpsPort
   unprivilegedPorts: "true"
   # Proxy ports: httpPort will respond with a redirect once configured with https
@@ -210,6 +211,8 @@ proxy:
   httpPort: 1080
   httpsPort: 1443
   dataUploadLimit: "25GB"
+  # Cache max age in seconds (default: 604800 = 7 days)
+  cacheMaxAge: 604800
   metrics:
     authBasic:
       user: "admin"
@@ -219,6 +222,14 @@ proxy:
     keyPath: tls.key
     keyPasswordPath: password.txt
     dhPath: dhparam.pem
+    #
+    # SSL/TLS settings
+    sslCiphers: "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256"
+    sslProtocols: "TLSv1.3"
+    # Less secure values before 2026.1.0 are more compatible with old http clients
+    #sslCiphers: "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305"
+    #sslProtocols: "TLSv1.2,TLSv1.3"
+    #
   # You can overwrite the defaultStorageClassRBX value for this component
   # dhparamStorageClass: "<STORAGECLASS-PLACEHOLDER_RWX>"
   dhparamStorageSize: "100M"
@@ -233,15 +244,19 @@ proxy:
     timeoutseconds: 1
   storageSize: "10Gi"
   debug: "false"
+  # Optional comma-separated allow-list for webapi CORS origins.
+  # Example: https://a.example.com,https://b.example.com
+  # If empty, ACCESS_CONTROL_ALLOW_ORIGIN_WEBAPI is used as default.
+  accessControlAllowOrignWebapiList: ""
   # Enable any of them to customize Access-Control-Allow-Origin values
   # accessControlAllowOriginGeneral: '*'
   # accessControlAllowOriginWebapi: '*'
   # accessControlAllowOriginRts: '*'
   # accessControlAllowOriginKeycloak: '*'
   # Improved security value
-  # contentSecurityPolicy: "default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval';style-src 'self' 'unsafe-inline';img-src 'self' data:;connect-src 'self';frame-src 'self';font-src 'self';media-src 'self';object-src 'none';manifest-src 'self';worker-src blob: 'self';form-action 'self';frame-ancestors 'self';"
+  contentSecurityPolicy: "default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval';style-src 'self' 'unsafe-inline';img-src 'self' data:;connect-src 'self';frame-src 'self';font-src 'self';media-src 'self';object-src 'none';manifest-src 'self';worker-src blob: 'self';frame-ancestors 'self';"
   # Backward compatible value
-  contentSecurityPolicy: "worker-src blob: 'self' 'unsafe-inline' 'unsafe-eval'; default-src https: data: 'self' 'unsafe-inline' 'unsafe-eval';"
+  #contentSecurityPolicy: "worker-src blob: 'self' 'unsafe-inline' 'unsafe-eval'; default-src https: data: 'self' 'unsafe-inline' 'unsafe-eval';"
   resources:
     requests:
       memory: "256M"
@@ -274,7 +289,7 @@ letsEncrypt:
   # repoName: "<registry.example.com/> or <customedockerhubreponame/>"
   imageName: "rm-letsencrypt-client"
   # You can overwrite the mainVersion value for this component
-  # version: "2026.0.3"
+  # version: "2026.1.1"
   configName: "letsencrypt-client-config"
   allowLetsEncrypt: "true"
   certsHome: "/certificates/"
@@ -305,8 +320,9 @@ landingPage:
   # repoName: "<registry.example.com/> or <customedockerhubreponame/>"
   imageName: "rapidminer-deployment-landing-page"
   # You can overwrite the mainVersion value for this component
-  # version: "2026.0.3"
+  # version: "2026.1.1"
   configName: "landing-page-config"
+  secretName: "landing-page-secret"
   # You can overwrite the defaultstorageClass value for this component
   # storageClass: "<STORAGECLASS-PLACEHOLDER_RWO>"
   pvcName: "landing-page-uploaded-pvc"
@@ -346,8 +362,9 @@ aihubDB:
   # repoName: "<registry.example.com/> or <customedockerhubreponame/>"
   imageName: "postgres-17"
   # You can overwrite the mainVersion value for this component
-  # version: "2026.0.3"
+  # version: "2026.1.1"
   configName: "aihub-db-config"
+  secretName: "aihub-db-secret"
   # You can overwrite the defaultstorageClass value for this component
   # storageClass: "<STORAGECLASS-PLACEHOLDER_RWO>"
   pvcName: "aihub-db-pvc"
@@ -387,7 +404,7 @@ aihubFrontend:
   # repoName: "<registry.example.com/> or <customedockerhubreponame/>"
   imageName: "rapidminer-aihub-ui"
   # You can overwrite the mainVersion value for this component
-  # version: "2026.0.3"
+  # version: "2026.1.1"
   configName: "aihub-frontend-config"
   nginxPort: "1080"
   ssoClientId: "aihub-frontend"
@@ -426,8 +443,9 @@ activemq:
   # repoName: "<registry.example.com/> or <customedockerhubreponame/>"
   imageName: "rapidminer-activemq-artemis"
   # You can overwrite the mainVersion value for this component
-  # version: "2026.0.3"
+  # version: "2026.1.1"
   configName: "activemq-config"
+  secretName: "activemq-secret"
   pvcName: "activemq-artemis-pvc"
   storageSize: "10Gi"
   enableJmxExporter: "true"
@@ -451,14 +469,16 @@ activemq:
       cpu: "2"
   securityContext:
     fsGroup: 0
+  terminationGracePeriodSeconds: 30

 aihubBackendInit:
   # You can overwrite the Docker registry prefix rapidminer/ if you have on own repository, but that can be changed to the fqdn of your internal registry
   # repoName: "<registry.example.com/> or <customedockerhubreponame/>"
   imageName: "aihub-backend-init-container"
   # You can overwrite the mainVersion value for this component
-  # version: "2026.0.3"
+  # version: "2026.1.1"
   configName: "aihub-backend-config"
+  secretName: "aihub-backend-secret"
   resources:
     requests:
       memory: "256M"
@@ -475,7 +495,7 @@ aihubBackend:
      # Helps Kubernetes prefer deleting the old pod first during updates
      controller.kubernetes.io/pod-deletion-cost: "0"
   #   prometheus.io/scrape: "true"
-  #   prometheus.io/path: "/system/prometheus"
+  #   prometheus.io/path: "/actuator/prometheus"
   #   prometheus.io/port: "8077"
   #   pre.hook.backup.velero.io/command: '["/sbin/fsfreeze", "--freeze", "/aihub/home"]'
   #   pre.hook.backup.velero.io/container: aihub-backend
@@ -487,8 +507,9 @@ aihubBackend:
   # repoName: "<registry.example.com/> or <customedockerhubreponame/>"
   imageName: "rapidminer-aihub"
   # You can overwrite the mainVersion value for this component
-  # version: "2026.0.3"
+  # version: "2026.1.1"
   configName: "aihub-backend-config"
+  secretName: "aihub-backend-secret"
   # You can overwrite the defaultstorageClass value for this component
   # storageClass: "<STORAGECLASS-PLACEHOLDER_RWO>"
   pvcName: "aihub-home-pvc"
@@ -558,7 +579,7 @@ jobagents:
   # Sample POD annotation
   podAnnotations:
   #   prometheus.io/scrape: "true"
-  #   prometheus.io/path: "/system/prometheus"
+  #   prometheus.io/path: "/actuator/prometheus"
   #   prometheus.io/port: "8066"
   #   pre.hook.backup.velero.io/command: '["/sbin/fsfreeze", "--freeze", "/jobagent/home"]'
   #   pre.hook.backup.velero.io/container: job-agents
@@ -574,12 +595,13 @@ jobagents:
   ssoClientSecret: "<JOBAGENT-OIDC-CLIENT-SECRET-PLACEHOLDER>"
   agents:
     - configName: "job-agents-config-default-queue"
+      secretName: "job-agents-default-queue-secret"
       # You can overwrite the Docker registry prefix rapidminer/ if you have on own repository, but that can be changed to the fqdn of your internal registry
       # repoName: "<registry.example.com/> or <customedockerhubreponame/>"
       imageName: "rapidminer-jobagent"
       home: "/home/rapidminer"    
       # You can overwrite the mainVersion value for this component
-      # version: "2026.0.3"
+      # version: "2026.1.1"
       serviceName: "job-agents-default-queue"
       statefulsetName: "job-agents-default-queue"
       selectorLabels:
@@ -632,11 +654,12 @@ jobagents:
       securityContext:
         fsGroup: 0
     # - configName: "job-agents-config-gpu-queue"
+    #   secretName: "job-agents-gpu-queue-secret"
     #   # You can overwrite the Docker registry prefix rapidminer/ if you have on own repository, but that can be changed to the fqdn of your internal registry
     #   # repoName: "<registry.example.com/> or <customedockerhubreponame/>"
     #   imageName: "rapidminer-jobagent-gpu"
     #   # You can overwrite the mainVersion value for this component
-    #   # version: "2026.0.0"
+    #   # version: "2026.1.0"
     #   serviceName: "job-agents-gpu-queue"
     #   statefulsetName: "job-agents-gpu-queue"
     #   selectorLabels:
@@ -690,40 +713,6 @@ jobagents:
     #   securityContext:
     #     fsGroup: 0

-# Legacy Job Agent configuration, will be removed, code in templates/job-agent.yml is commented out
-#jobagent:
-## You can overwrite the Docker registry prefix rapidminer/ if you have on own repository, but that can be changed to the fqdn of your internal registry
-## repoName: "<registry.example.com/> or <customedockerhubreponame/>"
-#  imageName: "rapidminer-jobagent"
-## You can overwrite the mainVersion value for this component
-## version: "10.3.2"
-#  configName: "job-agents-config"
-## You can overwrite the SC where JA store its config
-## storageClass: "<STORAGECLASS-PLACEHOLDER_RWO>"
-#  homeStorageSize: "10Gi"
-#  homePvcName: "jobagent-home-pvc"
-#  huggingfacePvcName: "jobagent-huggingface"
-#  name: "JOBAGENT-1" # TODO make this dynamic with the StatefulSet
-#  ssoClientId: "aihub-jobagent"
-#  ssoClientSecret: "<JOBAGENT-OIDC-CLIENT-SECRET-PLACEHOLDER>"
-#  springProfilesActive: "default,prometheus"
-#  logLevel: "INFO"
-#  jobQueue: "DEFAULT"
-#  containerCount: "1"
-#  containerMemLimit: "2048"
-#  initSharedCondaSettings: "true"
-#  containerJavaOpts: ""
-#  javaOpts: "-Djobagent.container.jvmCustomProperties=Dlogging.level.com.rapidminer=INFO"
-#  resources:
-#    requests:
-#      memory: "4G"
-#      cpu: "2"
-#    limits:
-#      memory: "4G"
-#      cpu: "2"
-#  securityContext:
-#    fsGroup: 0
-
 keycloak:
   # Sample POD annotation
   podAnnotations:
@@ -735,9 +724,9 @@ keycloak:
   serviceName: "keycloak-svc"
   imageName: "rapidminer-keycloak"
   # You can overwrite the mainVersion value for this component
-  # version: "2026.0.3"
+  # version: "2026.1.1"
   configName: "keycloak-config"
-  terminationGracePeriodSeconds: 60
+  secretName: "keycloak-secret"
   logLevel: "info"
   features: "token-exchange"
   healthEnabled: "true"
@@ -780,8 +769,9 @@ keycloakDB:
   # repoName: "<registry.example.com/> or <customedockerhubreponame/>"
   imageName: "postgres-17"
   # You can overwrite the mainVersion value for this component
-  # version: "2026.0.3"
+  # version: "2026.1.1"
   configName: "keycloak-db-config"
+  secretName: "keycloak-db-secret"
   # You can overwrite the defaultstorageClass value for this component
   # storageClass: "<STORAGECLASS-PLACEHOLDER_RWO>"
   pvcName: "keycloak-db-pvc"
@@ -837,8 +827,9 @@ licenseProxy:
   hostname: "license-proxy"
   imageName: "rapidminer-licenseproxy"
   # You can overwrite the mainVersion value for this component
-  # version: "2026.0.3"
+  # version: "2026.1.1"
   configName: "license-proxy-config"
+  envSecretName: "license-proxy-env-secret"
   # You can overwrite the defaultstorageClass value for this component
   # storageClass: "<STORAGECLASS-PLACEHOLDER_RWO>"
   pvcName: "license-proxy-pvc"
@@ -848,7 +839,11 @@ licenseProxy:
   secretName: "license-proxy-secret"
   secretKeyName: "TOKEN"
   licenseProxyOpts: "-Xmx2g"
-  managementEndpointsWebExposureInclude: "health"
+  almHhwuProxyHost: ""
+  almHhwuProxyPort: ""
+  almHhwuProxyUsername: ""
+  almHhwuProxyPassword: ""
+  managementEndpointsWebExposureInclude: "health,prometheus"
   readinessprobe:
     failurethreshold: 3
     initialdelayseconds: 60
@@ -872,13 +867,28 @@ deploymentInit:
   # repoName: "<registry.example.com/> or <customedockerhubreponame/>"
   imageName: "rapidminer-deployment-init"
   # You can overwrite the mainVersion value for this component
-  # version: "2026.0.3"
+  # version: "2026.1.1"
   configName: "deployment-init-config"
+  secretName: "deployment-init-secret"
   # You can overwrite the defaultstorageClass value for this component
   # storageClass: "<STORAGECLASS-PLACEHOLDER_RWO>"
   pvcName: "deployment-init-pvc"
   storageSize: "100M"
   debug: "false"
+  # This will set the access token expiration time in Keycloak in seconds. Default is 10800 seconds (3 hours). 
+  # Please adjust this value if you want to have a different token expiration time.
+  accessTokenLifespan: "10800"
+  # Brute force detection settings for Keycloak
+  bruteForceDetection:
+    enabled: true
+    permanentLockout: false
+    maxTemporaryLockouts: 0
+    bruteForceStrategy: "MULTIPLE"
+    maxFailureWaitSeconds: 900
+    minimumQuickLoginWaitSeconds: 60
+    waitIncrementSeconds: 60
+    quickLoginCheckMilliSeconds: 1000
+    failureFactor: 30
   resources:
     requests:
       memory: "256M"
@@ -902,8 +912,9 @@ platformAdmin:
   # repoName: "<registry.example.com/> or <customedockerhubreponame/>"
   imageName: "rapidminer-platform-admin-webui"
   # You can overwrite the mainVersion value for this component
-  # version: "2026.0.3"
+  # version: "2026.1.1"
   configName: "platform-admin-webui-config"
+  secretName: "platform-admin-webui-secret"
   # You can overwrite the defaultstorageClass value for this component
   # storageClass: "<STORAGECLASS-PLACEHOLDER_RWO>"
   pvcName: "platform-admin-webui-uploaded-pvc"
@@ -946,7 +957,7 @@ ces:
   # You can overwrite the Docker registry prefix rapidminer/ if you have on own repository, but that can be changed to the fqdn of your internal registry
   # repoName: "<registry.example.com/> or <customedockerhubreponame/>"
   # You can overwrite the mainVersion value for this component
-  # version: "2026.0.3"
+  # version: "2026.1.1"
   configName: "rapidminer-coding-environment-storage-config"
   pvcName: "coding-environment-storage"
   pvcSubPath: "coding-shared"
@@ -974,7 +985,7 @@ scoringAgent:
   # Sample POD annotation
   podAnnotations:
   #   prometheus.io/scrape: "true"
-  #   prometheus.io/path: "/system/prometheus"
+  #   prometheus.io/path: "/actuator/prometheus"
   #   prometheus.io/port: "8067"
   #   pre.hook.backup.velero.io/command: '["/sbin/fsfreeze", "--freeze", "/scoring-agent/home"]'
   #   pre.hook.backup.velero.io/container: scoring-agent
@@ -986,8 +997,9 @@ scoringAgent:
   # repoName: "<registry.example.com/> or <customedockerhubreponame/>"
   imageName: "rapidminer-scoringagent"
   # This is the last version of scoring agent, please migrate to webapi
-  # version: "2026.0.3"
+  # version: "2026.1.1"
   configName: "scoring-agent-config"
+  secretName: "scoring-agent-secret"
   # You can overwrite the defaultstorageClass value for this component
   # storageClass: "<STORAGECLASS-PLACEHOLDER_RWX>"
   pvcName: "scoring-home-pvc"
@@ -1060,8 +1072,9 @@ jupyterDB:
   serviceName: "jupyterhub-db"
   imageName: "rapidminer-jupyterhub-postgres"
   # You can overwrite the mainVersion value for this component
-  # version: "2026.0.3"
+  # version: "2026.1.1"
   configName: "jupyterhub-db-config"
+  secretName: "jupyterhub-db-secret"
   # You can overwrite the defaultstorageClass value for this component
   # storageClass: "<STORAGECLASS-PLACEHOLDER_RWO>"
   pvcName: "jupyterhub-db-pvc"
@@ -1105,14 +1118,15 @@ jupyterHub:
   serviceName: "jupyterhub-hub-svc-priv"
   imageName: "rapidminer-jupyterhub-jupyterhub"
   # You can overwrite the mainVersion value for this component
-  # version: "2026.0.3"
+  # version: "2026.1.1"
   configName: "jupyterhub-config"
+  secretName: "jupyterhub-secret"
   createServiceAccount: "true"
   initRBAC: "true"
   serviceAccountName: "jupyterhub-kubespawner-service-account"
   # You can overwrite the defaultstorageClass value for this component
   # storageClass: "<STORAGECLASS-PLACEHOLDER_RWO>"
-  proxyURLSuffix: "/jupyter"
+  proxyURLSuffix: "/jupyter/"
   # Jupyterhub crypt key can be generated with the command: openssl rand -hex 32
   cryptKey: "<JUPYTERHUB-CRYPT-KEY-PLACEHOLDER>"
   debug: "False"
@@ -1145,7 +1159,7 @@ jupyterHub:
   #     slug: default
   #     default: "True"
   #     kubespawner_override:
-  #       image_spec: rapidminer/rapidminer-jupyter_notebook:2026.0.3
+  #       image_spec: rapidminer/rapidminer-jupyter_notebook:2026.1.1
   #       cpu_guarantee: 2
   #       mem_guarantee: 3G
   #       cpu_limit: 2
@@ -1158,7 +1172,7 @@ jupyterHub:
   #     slug: rapidminer-single-nvidia-gpu
   #     default: "False"
   #     kubespawner_override:
-  #       image_spec: rapidminer/rapidminer-jupyter_notebook_nvidia:2026.0.3
+  #       image_spec: rapidminer/rapidminer-jupyter_notebook_nvidia:2026.1.1
   #       cpu_guarantee: 3.5
   #       mem_guarantee: 28G
   #       cpu_limit: 3.5
@@ -1178,7 +1192,7 @@ jupyterHub:
   #     slug: rapidminer-four-nvidia-gpu
   #     default: "False"
   #     kubespawner_override:
-  #       image_spec: rapidminer/rapidminer-jupyter_notebook_nvidia:2026.0.3
+  #       image_spec: rapidminer/rapidminer-jupyter_notebook_nvidia:2026.1.1
   #       cpu_guarantee: 40
   #       mem_guarantee: 170G
   #       cpu_limit: 40
@@ -1213,7 +1227,7 @@ jupyterNoteBook:
   # repoName: "<registry.example.com/> or <customedockerhubreponame/>"
   imageName: "rapidminer-jupyter_notebook"
   # You can overwrite the mainVersion value for this component
-  # version: "2026.0.3"
+  # version: "2026.1.1"
   memLimit: "3G"
   cpuLimit: "100"
   ssoUidKey: "X_NB_UID"
@@ -1247,7 +1261,7 @@ grafanaProxy:
   threadNumbers: "16"
   imageName: "rapidminer-grafana-proxy"
   # You can overwrite the mainVersion value for this component
-  # version: "2026.0.3"
+  # version: "2026.1.1"
   # Possible values: NOTSET, DEBUG, INFO, WARNING, ERROR, CRITICAL
   logLevel: "INFO"
   logResponseData: "False"
@@ -1277,7 +1291,7 @@ grafanaAnonProxy:
   serviceName: "grafana-anonymous-proxy-svc"
   imageName: "rapidminer-grafana-proxy"
   # You can overwrite the mainVersion value for this component
-  # version: "2026.0.3"
+  # version: "2026.1.1"
   # Possible values: NOTSET, DEBUG, INFO, WARNING, ERROR, CRITICAL
   logLevel: "INFO"
   threadNumbers: "16"
@@ -1304,7 +1318,7 @@ grafanaInit:
   # repoName: "<registry.example.com/> or <customedockerhubreponame/>"
   imageName: "rapidminer-grafana-init"
   # You can overwrite the mainVersion value for this component
-  # version: "2026.0.3"
+  # version: "2026.1.1"
   configName: "grafana-init-config"
   resources:
     requests:
@@ -1334,8 +1348,9 @@ grafana:
   serviceName: "grafana-svc"
   # You can overwrite the mainVersion value for this component
   # This is the version of the official Grafana docker image
-  staticVersion: "12.3.4-ubuntu"
+  staticVersion: "12.4.2-ubuntu"
   configName: "grafana-config"
+  secretName: "grafana-secret"
   # You can overwrite the defaultstorageClass value for this component
   # storageClass: "<STORAGECLASS-PLACEHOLDER_RWO>"
   homePvcName: "grafana-home-pvc"
@@ -1397,8 +1412,9 @@ tokenTool:
   serviceName: "token-tool-svc"
   imageName: "rapidminer-deployment-landing-page"
   # You can overwrite the mainVersion value for this component
-  # version: "2026.0.3"
+  # version: "2026.1.1"
   configName: "token-tool-config"
+  secretName: "token-tool-secret"
   # You can overwrite the defaultstorageClass value for this component
   # storageClass: "<STORAGECLASS-PLACEHOLDER_RWO>"
   pvcName: "token-tool-uploaded-pvc"
@@ -1430,13 +1446,14 @@ webApiGateway:
   # Sample POD annotation
   podAnnotations:
   #   prometheus.io/scrape: "true"
-  #   prometheus.io/path: "/system/prometheus"
+  #   prometheus.io/path: "/actuator/prometheus"
   #   prometheus.io/port: "8078"
   #   backup.velero.io/backup-volumes: proxy-pv
   # You can overwrite the Docker registry prefix rapidminer/ if you have on own repository, but that can be changed to the fqdn of your internal registry
   # repoName: "<registry.example.com/> or <customedockerhubreponame/>"
   imageName: rapidminer-webapi-gateway
   configName: "webapi-gateway-config"
+  secretName: "webapi-gateway-secret"
   serviceName: "webapi-gateway"
   debugEnabled: False
   springProfilesActive: "default,prometheus"
@@ -1476,7 +1493,7 @@ webApiAgents:
   # Sample POD annotation
   podAnnotations:
   #   prometheus.io/scrape: "true"
-  #   prometheus.io/path: "/system/prometheus"
+  #   prometheus.io/path: "/actuator/prometheus"
   #   prometheus.io/port: "8067"
   #   backup.velero.io/backup-volumes: proxy-pv
   ssoClientId: "aihub-webapiagent"
@@ -1486,12 +1503,13 @@ webApiAgents:
   debugEnabled: False
   agents:
   - configName: "webapi-agent-config-default-queue"
+    secretName: "webapi-agent-default-queue-secret"
     groupName: "DEFAULT"
     # You can overwrite the Docker registry prefix rapidminer/ if you have on own repository, but that can be changed to the fqdn of your internal registry
     # repoName: "<registry.example.com/> or <customedockerhubreponame/>"
     imageName: "rapidminer-scoringagent"
     # You can overwrite the mainVersion value for this component
-    # version: "2026.0.3"
+    # version: "2026.1.1"
     statefulsetName: "webapi-agent-default-queue"
     eurekaInstanceHostname: "webapi-agent-default-queue"
     # You can overwrite the defaultstorageClass value for this component
@@ -1560,12 +1578,13 @@ webApiAgents:
     securityContext:
       fsGroup: 0
   # - configName: "webapi-agent-config-gpu-queue"
+  #   secretName: "webapi-agent-gpu-queue-secret"
   #   groupName: "GPU"
   #   # You can overwrite the Docker registry prefix rapidminer/ if you have on own repository, but that can be changed to the fqdn of your internal registry
   #   # repoName: "<registry.example.com/> or <customedockerhubreponame/>"
   #   imageName: "rapidminer-scoringagent-gpu"
   #   # You can overwrite the mainVersion value for this component
-  #   # version: "2026.0.0"
+  #   # version: "2026.1.0"
   #   statefulsetName: "webapi-agent-gpu-queue"
   #   eurekaInstanceHostname: "webapi-agent-gpu-queue"
   #   # You can overwrite the defaultstorageClass value for this component
@@ -1633,65 +1652,6 @@ webApiAgents:
   #   securityContext:
   #     fsGroup: 0

-# Legacy WebApi Agent configuration, will be removed, code in templates/webapi-agent.yml is commented out
-# webApiAgent:
-#   # Sample POD annotation
-#   podAnnotations:
-#   #   prometheus.io/scrape: "true"
-#   #   prometheus.io/path: "/system/prometheus"
-#   #   prometheus.io/port: "8067"
-#   #   backup.velero.io/backup-volumes: proxy-pv
-#   # You can overwrite the Docker registry prefix rapidminer/ if you have on own repository, but that can be changed to the fqdn of your internal registry
-#   # repoName: "<registry.example.com/> or <customedockerhubreponame/>"
-#   imageName: "rapidminer-scoringagent"
-#   # You can overwrite the mainVersion value for this component
-#   # version: "2026.0.0"
-#   configName: "webapi-agent-config"
-#   # You can overwrite the defaultstorageClass value for this component
-#   # storageClass: "<STORAGECLASS-PLACEHOLDER_RWX>"
-#   pvcName: "webapi-agent-home-pvc"
-#   ssoClientId: "aihub-webapiagent"
-#   # keycloak client secrets can be generated with the uuidgen command from the uuid package or
-#   # with using openssl library: echo "$(openssl rand -hex 4)-$(openssl rand -hex 2)-$(openssl rand -hex 2)-$(openssl rand -hex 2)-$(openssl rand -hex 6)"
-#   ssoClientSecret: "<SCORING-AGENT-OIDC-CLIENT-SECRET-PLACEHOLDER>"
-#   springProfilesActive: "webapi,prometheus"
-#   storageSize: "10Gi"
-#   replicasNumber: "2"
-#   cacheRepositoryClearOnCollection: "false"
-#   cacheRepositoryMaximumSize: "50"
-#   cacheRepositoryAccessExpiration: "900000"
-#   cacheRepositoryCopyCachedIoObject: "true"
-#   corsPathPatter: ""
-#   corsAllowedMethods: "*"
-#   corsAllowedHeaders: "*"
-#   corsAllowedOrigins: "*"
-#   restContextPath: "/api"
-#   taskSchedulerPoolSize: "10"
-#   taskSchedulerThreadPriority: "5"
-#   executionCleanupEnabled: "false"
-#   executionCleanupCronExpression: "0 0 0-6 ? * * *"
-#   executionCleanupTimeout: "10000"
-#   executionCleanupWaitBetween: "1000"
-#   auditEnabled: "false"
-#   eurekaInstanceHostname: "webapi-agents"
-#   eurekaInstancePreferIPAddress: "true"
-#   licensesPvcName: "scoring-licenses-pvc"
-#   debugEnabled: False
-#   rapidminerScoringAgentOpts: "-Xmx4g"
-#   readinessprobe:
-#     failurethreshold: 6
-#     initialdelayseconds: 30
-#     periodseconds: 60
-#     timeoutseconds: 1
-#   resources:
-#     requests:
-#       memory: "1G"
-#       cpu: "1"
-#     limits:
-#       memory: "5G"
-#       cpu: "2"
-#   securityContext:
-#     fsGroup: 0

 panopticonVizapp:
   # Sample POD annotation
@@ -1710,8 +1670,9 @@ panopticonVizapp:
   # You can overwrite the Docker registry prefix rapidminer/ if you have on own repository, but that can be changed to the fqdn of your internal registry
   # repoName: "<registry.example.com/> or <customedockerhubreponame/>"
   # You can overwrite the mainVersion value for this component
-  # version: "2026.0.3"
+  # version: "2026.1.1"
   serviceName: "panopticon-vizapp"
+  secretName: "panopticon-vizapp-secret"
   catalinaOpts: "-Xms900m -Xmx1900m --add-opens java.base/java.nio=ALL-UNNAMED"
   lmxUseEpoll: '1'
   file:
@@ -1783,7 +1744,7 @@ panopticonVizappPython:
   # You can overwrite the Docker registry prefix rapidminer/ if you have on own repository, but that can be changed to the fqdn of your internal registry
   # repoName: "<registry.example.com/> or <customedockerhubreponame/>"
   # You can overwrite the mainVersion value for this component
-  # version: "2026.0.3"
+  # version: "2026.1.1"
   serviceName: "panopticon-vizapp-python"
   #xsmall
   # You can overwrite these values:
@@ -1802,6 +1763,7 @@ panopticonVizappPython:
     - "requests==2.32.3"
     - "beautifulsoup4==4.13.1"
     - "lxml==5.3.0"
+    - "serpent==1.41"
   resources:
     requests:
       cpu: "1"
@@ -1829,7 +1791,7 @@ panopticonRserve:
   # You can overwrite the Docker registry prefix rapidminer/ if you have on own repository, but that can be changed to the fqdn of your internal registry
   # repoName: "<registry.example.com/> or <customedockerhubreponame/>"
   # You can overwrite the mainVersion value for this component
-  # version: "2026.0.3"
+  # version: "2026.1.1"
   serviceName: "panopticon-rserve"
   # You can overwrite these values:
   # storageClass: "<STORAGECLASS-PLACEHOLDER_RWO>"
@@ -1862,8 +1824,9 @@ panopticonMonetDB:
   # repoName: "<registry.example.com/> or <customedockerhubreponame/>"
   deploy: true
   # You can overwrite the mainVersion value for this component
-  # version: "2026.0.3"
+  # version: "2026.1.1"
   serviceName: "panopticon-monetdb"
+  secretName: "panopticon-monetdb-secret"
   adminPass: "<ADMIN_PASSWORD_PLACEHOLDER>"
   # You can overwrite these values:
   # storageClass: "<STORAGECLASS-PLACEHOLDER_RWO>"