[junminahn]

Summary

This change updates the Helm values for the n8n deployment to improve security defaults, enable encryption key rotation across environments, and turn on the scheduler in the shared main chart defaults.

What changed

• Enabled N8N_ENV_FEAT_ENCRYPTION_KEY_ROTATION in dev, test, and prod values for both gold and golddr deployments.
• Added production SSRF protections:
  • N8N_SSRF_PROTECTION_ENABLED=true
  • N8N_SSRF_ALLOWED_HOSTNAMES=*.svc.cluster.local
• Set EXECUTIONS_DATA_MAX_AGE=8784 in prod to retain execution data for roughly one year.
• Tightened shared chart defaults in values.yaml:
  • disabled version notifications
  • disabled public API Swagger UI
  • enabled the scheduler via N8N_SCHEDULER_ENABLED=true
  • excluded the Execute Command node alongside other globally disabled nodes

Notes

These updates reduce exposure in deployed environments while keeping the configuration aligned across the current environment-specific values files. Enabling the scheduler in the shared main values ensures scheduled workflows can run by default in deployments using these chart settings.

Files changed

• helm/main/values.yaml
• helm/main/values-c89a45-dev-gold.yaml
• helm/main/values-c89a45-dev-golddr.yaml
• helm/main/values-c89a45-prod-gold.yaml
• helm/main/values-c89a45-prod-golddr.yaml
• helm/main/values-c89a45-test-gold.yaml
• helm/main/values-c89a45-test-golddr.yaml

[ratheesh-aot]

LGTM

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud