Repository: camunda/camunda-platform-helm
Pull request #814 (2023-07-28 15:29:29)

fix: correct backups endpoint in operate
Since 8.2, backup was renamed in backups

### Which problem does the PR fix?

<!-- Which GitHub issues related to or fixed by this PR, if any. -->

### What's in this PR?

<!--
  Explain the contents of the PR.
  Give an overview about the implementation, which decisions were made and why.
-->

### Checklist

Please make sure to follow our [Contributing Guide](../blob/main/CONTRIBUTING.md).

<!-- Place an '[x]' (no spaces) in all applicable fields. Please remove unrelated fields. -->

**Before opening the PR:**

- [ ] There is no other open [pull request](../pulls) for the same update/change.
- [ ] The commits follow our [Commit Guidelines](../blob/main/CONTRIBUTING.md#commit-guidelines).
- [ ] Tests for charts are added (if needed).
- [ ] The main Helm chart and sub-chart are updated (if needed).
- [ ] In-repo [documentation](../blob/main/CONTRIBUTING.md#documentation) are updated (if needed).

**After opening the PR:**

- [ ] Did you sign our CLA (Contributor License Agreement)? It will show once you open the PR.
- [ ] Did all checks/tests pass in the PR?

<!--
### To-Do

- [ ] If the PR is not complete but you want to discuss the approach,
  list what remains to be done here.
-->



Patch:
diff --git a/.tool-versions b/.tool-versions
index 54db27f2..faa2e047 100644
--- a/.tool-versions
+++ b/.tool-versions
@@ -1,7 +1,7 @@
 helm 3.12.2
 # The kubectl version depends on the K8s CI cluster version
 kubectl 1.25.12
-kustomize 5.1.0
-golang 1.20.6
+kustomize 5.1.1
+golang 1.20.7
 # Task is mainly used to run tests locally or in the CI pipeline.
 task 3.20.0
diff --git a/charts/camunda-platform/Chart.yaml b/charts/camunda-platform/Chart.yaml
index 1dab0d14..efadb4fb 100644
--- a/charts/camunda-platform/Chart.yaml
+++ b/charts/camunda-platform/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v2
 name: camunda-platform
-version: 8.2.9
+version: 8.2.10
 appVersion: 8.2.x
 description: |
   Camunda Platform 8 Self-Managed Helm charts.
@@ -20,7 +20,7 @@ keywords:
 dependencies:
   # Camunda Platform charts.
   - name: identity
-    version: 8.2.9
+    version: 8.2.10
     condition: "identity.enabled"
     import-values:
       # NOTE: This is used to share Identity image details with its subchart Keycloak.
@@ -30,19 +30,19 @@ dependencies:
       - child: image
         parent: global.identity.image
   - name: operate
-    version: 8.2.9
+    version: 8.2.10
     condition: "operate.enabled"
   - name: optimize
-    version: 8.2.9
+    version: 8.2.10
     condition: "optimize.enabled"
   - name: tasklist
-    version: 8.2.9
+    version: 8.2.10
     condition: "tasklist.enabled"
   - name: zeebe
-    version: 8.2.9
+    version: 8.2.10
     condition: "zeebe.enabled"
   - name: zeebe-gateway
-    version: 8.2.9
+    version: 8.2.10
     condition: "zeebe.enabled"
   # Dependency charts.
   - name: elasticsearch
@@ -71,8 +71,4 @@ annotations:
     - name: Camunda Platform 8 Self-Managed Helm charts
       url: https://github.com/camunda/camunda-platform-helm
   artifacthub.io/containsSecurityUpdates: "false"
-  artifacthub.io/changes: |
-    - kind: fixed
-      description: "remove callback url suffix from optimize root redirect url"
-    - kind: changed
-      description: "disable operate client in connectors if inbound is disabled"
+  artifacthub.io/changes: ""
diff --git a/charts/camunda-platform/RELEASE-NOTES.md b/charts/camunda-platform/RELEASE-NOTES.md
index 76900b32..ecc6951a 100644
--- a/charts/camunda-platform/RELEASE-NOTES.md
+++ b/charts/camunda-platform/RELEASE-NOTES.md
@@ -2,22 +2,6 @@ The changelog is automatically generated using [git-chglog](https://github.com/g
 and it follows [Conventional Commits](https://www.conventionalcommits.org/en/v1.0.0/) format.
 
 
-<a name="camunda-platform-8.2.9"></a>
-## [camunda-platform-8.2.9](https://github.com/camunda/camunda-platform-helm/compare/camunda-platform-8.2.8...camunda-platform-8.2.9) (2023-07-26)
-
-### Ci
-
-* copy values files to gh-pages branch ([#792](https://github.com/camunda/camunda-platform-helm/issues/792))
-
-### Docs
-
-* update the versioning details ([#791](https://github.com/camunda/camunda-platform-helm/issues/791))
-
-### Fix
-
-* remove callback url suffix from optimize root redirect url ([#780](https://github.com/camunda/camunda-platform-helm/issues/780))
-
-### Refactor
-
-* disable operate client in connectors if inbound is disabled ([#756](https://github.com/camunda/camunda-platform-helm/issues/756))
+<a name="camunda-platform-8.2.10"></a>
+## [camunda-platform-8.2.10](https://github.com/camunda/camunda-platform-helm/compare/camunda-platform-8.2.9...camunda-platform-8.2.10) (2023-07-28)
 
diff --git a/charts/camunda-platform/charts/identity/Chart.yaml b/charts/camunda-platform/charts/identity/Chart.yaml
index 2e7a2ab4..7fce0f64 100644
--- a/charts/camunda-platform/charts/identity/Chart.yaml
+++ b/charts/camunda-platform/charts/identity/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 description: Identity Helm Chart for Kubernetes
 name: identity
-version: 8.2.9
+version: 8.2.10
 type: application
 icon: https://helm.camunda.io/imgs/camunda.svg
 dependencies:
diff --git a/charts/camunda-platform/charts/operate/Chart.yaml b/charts/camunda-platform/charts/operate/Chart.yaml
index db0456b1..ab66ea59 100644
--- a/charts/camunda-platform/charts/operate/Chart.yaml
+++ b/charts/camunda-platform/charts/operate/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v2
 description: Operate Helm Chart for Kubernetes
 name: operate
-version: 8.2.9
+version: 8.2.10
 type: application
 icon: https://helm.camunda.io/imgs/camunda.svg
diff --git a/charts/camunda-platform/charts/operate/templates/configmap.yaml b/charts/camunda-platform/charts/operate/templates/configmap.yaml
index 30d9f82b..0b73dda5 100644
--- a/charts/camunda-platform/charts/operate/templates/configmap.yaml
+++ b/charts/camunda-platform/charts/operate/templates/configmap.yaml
@@ -42,4 +42,4 @@ data:
 {{ . | toYaml | indent 6 }}
 {{- end }}
     #Spring Boot Actuator endpoints to be exposed
-    management.endpoints.web.exposure.include: health,info,conditions,configprops,prometheus,loggers,usage-metrics,backup
+    management.endpoints.web.exposure.include: health,info,conditions,configprops,prometheus,loggers,usage-metrics,backups
diff --git a/charts/camunda-platform/charts/optimize/Chart.yaml b/charts/camunda-platform/charts/optimize/Chart.yaml
index 10adab17..56ccdc8b 100644
--- a/charts/camunda-platform/charts/optimize/Chart.yaml
+++ b/charts/camunda-platform/charts/optimize/Chart.yaml
@@ -1,5 +1,5 @@
 apiVersion: v2
 description: Optimize Helm Chart for Kubernetes
 name: optimize
-version: 8.2.9
+version: 8.2.10
 icon: https://helm.camunda.io/imgs/camunda.svg
diff --git a/charts/camunda-platform/charts/tasklist/Chart.yaml b/charts/camunda-platform/charts/tasklist/Chart.yaml
index 592d9f09..945cf9cb 100644
--- a/charts/camunda-platform/charts/tasklist/Chart.yaml
+++ b/charts/camunda-platform/charts/tasklist/Chart.yaml
@@ -1,5 +1,5 @@
 apiVersion: v2
 description: Zeebe TaskList Helm Chart for Kubernetes
 name: tasklist
-version: 8.2.9
+version: 8.2.10
 icon: https://helm.camunda.io/imgs/camunda.svg
diff --git a/charts/camunda-platform/charts/zeebe-gateway/Chart.yaml b/charts/camunda-platform/charts/zeebe-gateway/Chart.yaml
index 759eb59b..6aa29c9f 100644
--- a/charts/camunda-platform/charts/zeebe-gateway/Chart.yaml
+++ b/charts/camunda-platform/charts/zeebe-gateway/Chart.yaml
@@ -2,5 +2,5 @@ apiVersion: v2
 description: Zeebe Gateway Helm Chart for Kubernetes
 name: zeebe-gateway
 type: application
-version: 8.2.9
+version: 8.2.10
 icon: https://helm.camunda.io/imgs/camunda.svg
diff --git a/charts/camunda-platform/charts/zeebe/Chart.yaml b/charts/camunda-platform/charts/zeebe/Chart.yaml
index 6a5d6de7..43b251e4 100644
--- a/charts/camunda-platform/charts/zeebe/Chart.yaml
+++ b/charts/camunda-platform/charts/zeebe/Chart.yaml
@@ -2,5 +2,5 @@ apiVersion: v2
 description: Zeebe Helm Chart for Kubernetes
 name: zeebe
 type: application
-version: 8.2.9
+version: 8.2.10
 icon: https://helm.camunda.io/imgs/camunda.svg
diff --git a/charts/camunda-platform/openshift/values-patch.yaml b/charts/camunda-platform/openshift/values-patch.yaml
index 5ea831fb..32a53007 100644
--- a/charts/camunda-platform/openshift/values-patch.yaml
+++ b/charts/camunda-platform/openshift/values-patch.yaml
@@ -45,6 +45,10 @@ identity:
           fsGroup: "@@null@@"
           runAsUser: "@@null@@"
 
+zeebe:
+  podSecurityContext:
+    fsGroup: "@@null@@"
+
 # omit the values below if elasticsearch.enabled is false
 elasticsearch:
   # test resources are disabled as they aren't pass on to the post-renderer, meaning they will not be deploy-able. this
diff --git a/charts/camunda-platform/templates/connectors/deployment.yaml b/charts/camunda-platform/templates/connectors/deployment.yaml
index 8a75e9b2..c60640c3 100644
--- a/charts/camunda-platform/templates/connectors/deployment.yaml
+++ b/charts/camunda-platform/templates/connectors/deployment.yaml
@@ -44,12 +44,8 @@ spec:
               value: "false"
             - name: CAMUNDA_CONNECTOR_WEBHOOK_ENABLED
               value: "false"
-            - name: OPERATE_CLIENT_ENABLED
-              value: "false"
           {{- end }}
           {{- if eq .Values.connectors.inbound.mode "credentials" }}
-            - name: OPERATE_CLIENT_ENABLED
-              value: "true"
             - name: CAMUNDA_OPERATE_CLIENT_URL
               value: {{ include "camundaPlatform.operateURL" . | quote }}
             - name: CAMUNDA_OPERATE_CLIENT_USERNAME
@@ -79,8 +75,6 @@ spec:
               {{- end }}
             - name: CAMUNDA_OPERATE_CLIENT_KEYCLOAK-REALM
               value: {{ .Values.global.identity.keycloak.realm | replace "/realms/" "" }}
-            - name: OPERATE_CLIENT_ENABLED
-              value: "true"
             - name: CAMUNDA_OPERATE_CLIENT_URL
               value: {{ include "camundaPlatform.operateURL" . | quote }}
           {{- end }}
diff --git a/charts/camunda-platform/values.yaml b/charts/camunda-platform/values.yaml
index e088a8ef..3b76c73c 100644
--- a/charts/camunda-platform/values.yaml
+++ b/charts/camunda-platform/values.yaml
@@ -37,7 +37,7 @@ global:
     registry: ""
     # Image.tag defines the tag / version which should be used in the most of the apps.
     # renovate: datasource=github-releases depName=camunda/camunda-platform
-    tag: 8.2.10
+    tag: 8.2.11
     # Image.pullPolicy defines the image pull policy which should be used https://kubernetes.io/docs/concepts/containers/images/#image-pull-policy
     pullPolicy: IfNotPresent
     # Image.pullSecrets can be used to configure image pull secrets https://kubernetes.io/docs/concepts/containers/images/#specifying-imagepullsecrets-on-a-pod
@@ -305,7 +305,8 @@ zeebe:
     maxUnavailable: 1
 
   # PodSecurityContext defines the security options the Zeebe broker pod should be run with
-  podSecurityContext: {}
+  podSecurityContext:
+    fsGroup: 1000
 
   # ContainerSecurityContext defines the security options the Zeebe broker container should be run with
   containerSecurityContext: {}
@@ -1432,7 +1433,7 @@ webModeler:
     registry: registry.camunda.cloud
     # Image.tag can be used to set the Docker image tag for the Web Modeler images (overwrites global.image.tag)
     # renovate: datasource=docker depName=camunda/web-modeler lookupName=registry.camunda.cloud/web-modeler-ee/modeler-restapi
-    tag: 8.2.4
+    tag: 8.2.5
     # Image.pullSecrets can be used to configure image pull secrets, see https://kubernetes.io/docs/concepts/containers/images/#specifying-imagepullsecrets-on-a-pod
     # Note: A secret will be required, if the Web Modeler images are pulled directly from Camunda's private registry.
     #
@@ -1895,7 +1896,7 @@ connectors:
     # Image.repository defines which image repository to use
     repository: camunda/connectors-bundle
     # Image.tag can be set to overwrite the global tag, which should be used in that chart
-    tag: 0.21.4
+    tag: 0.22.0
     # Image.pullSecrets can be used to configure image pull secrets https://kubernetes.io/docs/concepts/containers/images/#specifying-imagepullsecrets-on-a-pod
     pullSecrets: []
 
diff --git a/charts/camunda-platform/values/values-v8.0.yaml b/charts/camunda-platform/values/values-v8.0.yaml
index 4b59714e..8bd68f11 100644
--- a/charts/camunda-platform/values/values-v8.0.yaml
+++ b/charts/camunda-platform/values/values-v8.0.yaml
@@ -7,7 +7,7 @@ global:
   # https://hub.docker.com/u/camunda
   image:
     # renovate: datasource=github-releases depName=camunda/camunda-platform
-    tag: 8.0.18
+    tag: 8.0.19
 
 identity:
   keycloak:
diff --git a/charts/camunda-platform/values/values-v8.1.yaml b/charts/camunda-platform/values/values-v8.1.yaml
index a1703d17..f388802a 100644
--- a/charts/camunda-platform/values/values-v8.1.yaml
+++ b/charts/camunda-platform/values/values-v8.1.yaml
@@ -7,7 +7,7 @@ global:
   # https://hub.docker.com/u/camunda
   image:
     # renovate: datasource=github-releases depName=camunda/camunda-platform
-    tag: 8.1.14
+    tag: 8.1.15
 
 connectors:
   # https://hub.docker.com/r/camunda/connectors-bundle/tags
diff --git a/kind/camunda-platform-core-kind-values.yaml b/kind/camunda-platform-core-kind-values.yaml
index 172875f1..2b73a929 100644
--- a/kind/camunda-platform-core-kind-values.yaml
+++ b/kind/camunda-platform-core-kind-values.yaml
@@ -31,7 +31,6 @@ connectors:
 # Configure elastic search to make it running for local development
 elasticsearch:
   replicas: 1
-  minimumMasterNodes: 1
   # Allow no backup for single node setups
   clusterHealthCheckParams: "wait_for_status=yellow&timeout=1s"
 


Test patch:
diff --git a/.github/workflows/test-integration-main.yaml b/.github/workflows/test-integration-main.yaml
index d29e748e..d1284f9f 100644
--- a/.github/workflows/test-integration-main.yaml
+++ b/.github/workflows/test-integration-main.yaml
@@ -45,17 +45,30 @@ jobs:
             cluster-location: GKE_ZONE
             workload-identity-provider: GCP_AUTH_WORKLOAD_IDENTITY_PROVIDER
             service-account: GCP_AUTH_SERVICE_ACCOUNT
-        - name: OpenShift 4.10
+          if: true
+        - name: OpenShift 4.13
           type: openshift
+          version: 4.13
           platform: rosa
-          secret:
-            server: OPENSHIFT_URL_410
-            token: OPENSHIFT_TOKEN_410
+          if: true
+        - name: OpenShift 4.12
+          type: openshift
+          version: 4.12
+          platform: rosa
+          if: ${{ contains(github.event.*.labels.*.name, 'test-release') }}
+        - name: OpenShift 4.11
+          type: openshift
+          version: 4.11
+          platform: rosa
+          if: ${{ contains(github.event.*.labels.*.name, 'test-release') }}
+        exclude:
+        - test:
+            if: false
     env:
       TEST_CLUSTER_TYPE: "${{ matrix.test.type }}"
     steps:
     - uses: actions/checkout@v3
-    # TODO: Later, find a way to abstract the auth to different platforms.
+    # TODO: Later, find a way to abstract the auth for different platforms.
     - name: Authenticate to GKE
       if: matrix.test.platform == 'gke'
       uses: ./.github/actions/gke-login
@@ -64,12 +77,20 @@ jobs:
         cluster-location: ${{ secrets[matrix.test.secret.cluster-location] }}
         workload-identity-provider: ${{ secrets[matrix.test.secret.workload-identity-provider] }}
         service-account: ${{ secrets[matrix.test.secret.service-account] }}
+    - name: Set OpenShift authentication vars
+      if: matrix.test.type == 'openshift'
+      run: |
+        OPENSHIFT_CLUSTER_VERSION="$(echo ${{ matrix.test.version }} | tr -d '.')"
+        echo "OPENSHIFT_CLUSTER_URL=OPENSHIFT_CLUSTER_URL_${OPENSHIFT_CLUSTER_VERSION}" >> $GITHUB_ENV
+        echo "OPENSHIFT_CLUSTER_USERNAME=OPENSHIFT_CLUSTER_USERNAME_${OPENSHIFT_CLUSTER_VERSION}" >> $GITHUB_ENV
+        echo "OPENSHIFT_CLUSTER_PASSWORD=OPENSHIFT_CLUSTER_PASSWORD_${OPENSHIFT_CLUSTER_VERSION}" >> $GITHUB_ENV
     - name: Authenticate to OpenShift
       if: matrix.test.platform == 'rosa'
       uses: redhat-actions/oc-login@v1
       with:
-        openshift_server_url: ${{ secrets[matrix.test.secret.server] }}
-        openshift_token: ${{ secrets[matrix.test.secret.token] }}
+        openshift_server_url: ${{ secrets[env.OPENSHIFT_CLUSTER_URL] }}
+        openshift_username: ${{ secrets[env.OPENSHIFT_CLUSTER_USERNAME] }}
+        openshift_password: ${{ secrets[env.OPENSHIFT_CLUSTER_PASSWORD] }}
     - name: Set PR vars
       uses: ./.github/actions/pr-vars
     - name: Install env dependencies
diff --git a/charts/camunda-platform/test/unit/connectors/deployment_test.go b/charts/camunda-platform/test/unit/connectors/deployment_test.go
index 05b585fc..fdf54857 100644
--- a/charts/camunda-platform/test/unit/connectors/deployment_test.go
+++ b/charts/camunda-platform/test/unit/connectors/deployment_test.go
@@ -736,7 +736,6 @@ func (s *deploymentTemplateTest) TestContainerSetInboundModeCredentials() {
 
 	s.Require().Contains(env, corev1.EnvVar{Name: "ZEEBE_CLIENT_BROKER_GATEWAY-ADDRESS", Value: "camunda-platform-test-zeebe-gateway:26500"})
 	s.Require().Contains(env, corev1.EnvVar{Name: "ZEEBE_CLIENT_SECURITY_PLAINTEXT", Value: "true"})
-	s.Require().Contains(env, corev1.EnvVar{Name: "OPERATE_CLIENT_ENABLED", Value: "true"})
 	s.Require().Contains(env, corev1.EnvVar{Name: "CAMUNDA_OPERATE_CLIENT_URL", Value: "http://camunda-platform-test-operate:80"})
 	s.Require().Contains(env, corev1.EnvVar{Name: "CAMUNDA_OPERATE_CLIENT_USERNAME", Value: "connectors"})
 }
@@ -772,7 +771,6 @@ func (s *deploymentTemplateTest) TestContainerSetInboundModeOauth() {
 	s.Require().Contains(env, corev1.EnvVar{Name: "CAMUNDA_OPERATE_CLIENT_KEYCLOAK-URL", Value: "http://camunda-platform-test-keycloak:80"})
 	s.Require().Contains(env, corev1.EnvVar{Name: "CAMUNDA_OPERATE_CLIENT_CLIENT-ID", Value: "connectors"})
 	s.Require().Contains(env, corev1.EnvVar{Name: "CAMUNDA_OPERATE_CLIENT_KEYCLOAK-REALM", Value: "camunda-platform"})
-	s.Require().Contains(env, corev1.EnvVar{Name: "OPERATE_CLIENT_ENABLED", Value: "true"})
 	s.Require().Contains(env, corev1.EnvVar{Name: "CAMUNDA_OPERATE_CLIENT_URL", Value: "http://camunda-platform-test-operate:80"})
 	
 }
diff --git a/charts/camunda-platform/test/unit/connectors/golden/deployment.golden.yaml b/charts/camunda-platform/test/unit/connectors/golden/deployment.golden.yaml
index 2553bcfa..02cd6196 100644
--- a/charts/camunda-platform/test/unit/connectors/golden/deployment.golden.yaml
+++ b/charts/camunda-platform/test/unit/connectors/golden/deployment.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: connectors
   annotations:
     {}
@@ -32,14 +32,14 @@ spec:
         app.kubernetes.io/instance: camunda-platform-test
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: camunda-platform
-        app.kubernetes.io/version: "8.2.10"
+        app.kubernetes.io/version: "8.2.11"
         app.kubernetes.io/component: connectors
     spec:
       imagePullSecrets:
         []
       containers:
         - name: connectors
-          image: camunda/connectors-bundle:0.21.3
+          image: camunda/connectors-bundle:0.22.0
           imagePullPolicy: IfNotPresent
           ports:
             - containerPort: 8080
@@ -59,8 +59,6 @@ spec:
                   key: connectors-secret
             - name: CAMUNDA_OPERATE_CLIENT_KEYCLOAK-REALM
               value: camunda-platform
-            - name: OPERATE_CLIENT_ENABLED
-              value: "true"
             - name: CAMUNDA_OPERATE_CLIENT_URL
               value: "http://camunda-platform-test-operate:80"
             - name: ZEEBE_CLIENT_BROKER_GATEWAY-ADDRESS
diff --git a/charts/camunda-platform/test/unit/connectors/golden/ingress-all-enabled.golden.yaml b/charts/camunda-platform/test/unit/connectors/golden/ingress-all-enabled.golden.yaml
index 50c1395e..bdfb4061 100644
--- a/charts/camunda-platform/test/unit/connectors/golden/ingress-all-enabled.golden.yaml
+++ b/charts/camunda-platform/test/unit/connectors/golden/ingress-all-enabled.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: connectors
   annotations: 
     ingress.kubernetes.io/rewrite-target: /
diff --git a/charts/camunda-platform/test/unit/connectors/golden/ingress.golden.yaml b/charts/camunda-platform/test/unit/connectors/golden/ingress.golden.yaml
index 523c4220..289792a9 100644
--- a/charts/camunda-platform/test/unit/connectors/golden/ingress.golden.yaml
+++ b/charts/camunda-platform/test/unit/connectors/golden/ingress.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: connectors
   annotations: 
     ingress.kubernetes.io/rewrite-target: /
diff --git a/charts/camunda-platform/test/unit/connectors/golden/service.golden.yaml b/charts/camunda-platform/test/unit/connectors/golden/service.golden.yaml
index 35ab1259..1d6d079b 100644
--- a/charts/camunda-platform/test/unit/connectors/golden/service.golden.yaml
+++ b/charts/camunda-platform/test/unit/connectors/golden/service.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: connectors
   annotations:
 spec:
diff --git a/charts/camunda-platform/test/unit/connectors/golden/serviceaccount.golden.yaml b/charts/camunda-platform/test/unit/connectors/golden/serviceaccount.golden.yaml
index 44182e2a..f7407256 100644
--- a/charts/camunda-platform/test/unit/connectors/golden/serviceaccount.golden.yaml
+++ b/charts/camunda-platform/test/unit/connectors/golden/serviceaccount.golden.yaml
@@ -10,5 +10,5 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: connectors
\ No newline at end of file
diff --git a/charts/camunda-platform/test/unit/golden/curator-configmap.golden.yaml b/charts/camunda-platform/test/unit/golden/curator-configmap.golden.yaml
index d0e54e39..0a7221f8 100644
--- a/charts/camunda-platform/test/unit/golden/curator-configmap.golden.yaml
+++ b/charts/camunda-platform/test/unit/golden/curator-configmap.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
 data:
   action_file.yml: |-
     ---
diff --git a/charts/camunda-platform/test/unit/golden/curator-cronjob.golden.yaml b/charts/camunda-platform/test/unit/golden/curator-cronjob.golden.yaml
index 6116f733..08ffb330 100644
--- a/charts/camunda-platform/test/unit/golden/curator-cronjob.golden.yaml
+++ b/charts/camunda-platform/test/unit/golden/curator-cronjob.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
 spec:
   schedule: "0 0 * * *"
   successfulJobsHistoryLimit: 1
diff --git a/charts/camunda-platform/test/unit/golden/keycloak-statefulset.golden.yaml b/charts/camunda-platform/test/unit/golden/keycloak-statefulset.golden.yaml
index 2e02b4c5..a941262c 100644
--- a/charts/camunda-platform/test/unit/golden/keycloak-statefulset.golden.yaml
+++ b/charts/camunda-platform/test/unit/golden/keycloak-statefulset.golden.yaml
@@ -54,7 +54,7 @@ spec:
           - sh
           - -c
           - cp -a /app/keycloak-theme/* /mnt
-          image: 'camunda/identity:8.2.10'
+          image: 'camunda/identity:8.2.11'
           imagePullPolicy: 'IfNotPresent'
           name: copy-camunda-theme
           volumeMounts:
diff --git a/charts/camunda-platform/test/unit/golden/service-monitor.golden.yaml b/charts/camunda-platform/test/unit/golden/service-monitor.golden.yaml
index 5c707d77..9eb5e1be 100644
--- a/charts/camunda-platform/test/unit/golden/service-monitor.golden.yaml
+++ b/charts/camunda-platform/test/unit/golden/service-monitor.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     release: metrics
 spec:
   selector:
diff --git a/charts/camunda-platform/test/unit/identity/golden/deployment.golden.yaml b/charts/camunda-platform/test/unit/identity/golden/deployment.golden.yaml
index 2684d3ad..9abae701 100644
--- a/charts/camunda-platform/test/unit/identity/golden/deployment.golden.yaml
+++ b/charts/camunda-platform/test/unit/identity/golden/deployment.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: identity
   annotations:
     {}
@@ -32,14 +32,14 @@ spec:
         app.kubernetes.io/instance: camunda-platform-test
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: camunda-platform
-        app.kubernetes.io/version: "8.2.10"
+        app.kubernetes.io/version: "8.2.11"
         app.kubernetes.io/component: identity
     spec:
       imagePullSecrets:
         []
       containers:
       - name: identity
-        image: "camunda/identity:8.2.10"
+        image: "camunda/identity:8.2.11"
         imagePullPolicy: IfNotPresent
         env:
           - name: KEYCLOAK_INIT_OPERATE_SECRET
diff --git a/charts/camunda-platform/test/unit/identity/golden/ingress-all-enabled.golden.yaml b/charts/camunda-platform/test/unit/identity/golden/ingress-all-enabled.golden.yaml
index f3e11e4a..5fa65b21 100644
--- a/charts/camunda-platform/test/unit/identity/golden/ingress-all-enabled.golden.yaml
+++ b/charts/camunda-platform/test/unit/identity/golden/ingress-all-enabled.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: identity
   annotations: 
     ingress.kubernetes.io/rewrite-target: /
diff --git a/charts/camunda-platform/test/unit/identity/golden/ingress.golden.yaml b/charts/camunda-platform/test/unit/identity/golden/ingress.golden.yaml
index f06c7f99..15ffae13 100644
--- a/charts/camunda-platform/test/unit/identity/golden/ingress.golden.yaml
+++ b/charts/camunda-platform/test/unit/identity/golden/ingress.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: identity
   annotations: 
     ingress.kubernetes.io/rewrite-target: /
diff --git a/charts/camunda-platform/test/unit/identity/golden/operate-secret.golden.yaml b/charts/camunda-platform/test/unit/identity/golden/operate-secret.golden.yaml
index 587cb120..586d6b07 100644
--- a/charts/camunda-platform/test/unit/identity/golden/operate-secret.golden.yaml
+++ b/charts/camunda-platform/test/unit/identity/golden/operate-secret.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: identity
 type: Opaque
 data:
\ No newline at end of file
diff --git a/charts/camunda-platform/test/unit/identity/golden/service.golden.yaml b/charts/camunda-platform/test/unit/identity/golden/service.golden.yaml
index 02a7ba88..b828f291 100644
--- a/charts/camunda-platform/test/unit/identity/golden/service.golden.yaml
+++ b/charts/camunda-platform/test/unit/identity/golden/service.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: identity
   annotations:
 spec:
diff --git a/charts/camunda-platform/test/unit/identity/golden/serviceaccount.golden.yaml b/charts/camunda-platform/test/unit/identity/golden/serviceaccount.golden.yaml
index 7cdfb101..f80151a9 100644
--- a/charts/camunda-platform/test/unit/identity/golden/serviceaccount.golden.yaml
+++ b/charts/camunda-platform/test/unit/identity/golden/serviceaccount.golden.yaml
@@ -10,5 +10,5 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: identity
\ No newline at end of file
diff --git a/charts/camunda-platform/test/unit/identity/golden/tasklist-secret.golden.yaml b/charts/camunda-platform/test/unit/identity/golden/tasklist-secret.golden.yaml
index 8674ee62..e576757f 100644
--- a/charts/camunda-platform/test/unit/identity/golden/tasklist-secret.golden.yaml
+++ b/charts/camunda-platform/test/unit/identity/golden/tasklist-secret.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: identity
 type: Opaque
 data:
\ No newline at end of file
diff --git a/charts/camunda-platform/test/unit/operate/golden/configmap.golden.yaml b/charts/camunda-platform/test/unit/operate/golden/configmap.golden.yaml
index 35109e49..419b0dcf 100644
--- a/charts/camunda-platform/test/unit/operate/golden/configmap.golden.yaml
+++ b/charts/camunda-platform/test/unit/operate/golden/configmap.golden.yaml
@@ -9,7 +9,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: operate
 apiVersion: v1
 data:
@@ -43,4 +43,4 @@ data:
         ROOT: INFO
         io.camunda.operate: DEBUG
     #Spring Boot Actuator endpoints to be exposed
-    management.endpoints.web.exposure.include: health,info,conditions,configprops,prometheus,loggers,usage-metrics,backup
\ No newline at end of file
+    management.endpoints.web.exposure.include: health,info,conditions,configprops,prometheus,loggers,usage-metrics,backups
\ No newline at end of file
diff --git a/charts/camunda-platform/test/unit/operate/golden/deployment.golden.yaml b/charts/camunda-platform/test/unit/operate/golden/deployment.golden.yaml
index 0a3d3e5c..e95f12d0 100644
--- a/charts/camunda-platform/test/unit/operate/golden/deployment.golden.yaml
+++ b/charts/camunda-platform/test/unit/operate/golden/deployment.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: operate
   annotations:
     {}
@@ -32,14 +32,14 @@ spec:
         app.kubernetes.io/instance: camunda-platform-test
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: camunda-platform
-        app.kubernetes.io/version: "8.2.10"
+        app.kubernetes.io/version: "8.2.11"
         app.kubernetes.io/component: operate
     spec:
       imagePullSecrets:
         []
       containers:
       - name: operate
-        image: "camunda/operate:8.2.10"
+        image: "camunda/operate:8.2.11"
         imagePullPolicy: IfNotPresent
         env:
           - name: SPRING_PROFILES_ACTIVE
diff --git a/charts/camunda-platform/test/unit/operate/golden/ingress-all-enabled.golden.yaml b/charts/camunda-platform/test/unit/operate/golden/ingress-all-enabled.golden.yaml
index fb58a254..15397986 100644
--- a/charts/camunda-platform/test/unit/operate/golden/ingress-all-enabled.golden.yaml
+++ b/charts/camunda-platform/test/unit/operate/golden/ingress-all-enabled.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: operate
   annotations: 
     ingress.kubernetes.io/rewrite-target: /
diff --git a/charts/camunda-platform/test/unit/operate/golden/ingress.golden.yaml b/charts/camunda-platform/test/unit/operate/golden/ingress.golden.yaml
index e994bfcd..03d26d29 100644
--- a/charts/camunda-platform/test/unit/operate/golden/ingress.golden.yaml
+++ b/charts/camunda-platform/test/unit/operate/golden/ingress.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: operate
   annotations: 
     ingress.kubernetes.io/rewrite-target: /
diff --git a/charts/camunda-platform/test/unit/operate/golden/service.golden.yaml b/charts/camunda-platform/test/unit/operate/golden/service.golden.yaml
index ddd49bf4..753361e8 100644
--- a/charts/camunda-platform/test/unit/operate/golden/service.golden.yaml
+++ b/charts/camunda-platform/test/unit/operate/golden/service.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: operate
   annotations:
 spec:
diff --git a/charts/camunda-platform/test/unit/operate/golden/serviceaccount.golden.yaml b/charts/camunda-platform/test/unit/operate/golden/serviceaccount.golden.yaml
index c2304283..a3429681 100644
--- a/charts/camunda-platform/test/unit/operate/golden/serviceaccount.golden.yaml
+++ b/charts/camunda-platform/test/unit/operate/golden/serviceaccount.golden.yaml
@@ -10,5 +10,5 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: operate
\ No newline at end of file
diff --git a/charts/camunda-platform/test/unit/tasklist/golden/configmap.golden.yaml b/charts/camunda-platform/test/unit/tasklist/golden/configmap.golden.yaml
index 14c3cc1d..727fac93 100644
--- a/charts/camunda-platform/test/unit/tasklist/golden/configmap.golden.yaml
+++ b/charts/camunda-platform/test/unit/tasklist/golden/configmap.golden.yaml
@@ -9,7 +9,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: tasklist
 apiVersion: v1
 data:
diff --git a/charts/camunda-platform/test/unit/tasklist/golden/deployment.golden.yaml b/charts/camunda-platform/test/unit/tasklist/golden/deployment.golden.yaml
index 472ce8d1..819e27b4 100644
--- a/charts/camunda-platform/test/unit/tasklist/golden/deployment.golden.yaml
+++ b/charts/camunda-platform/test/unit/tasklist/golden/deployment.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: tasklist
   annotations:
     {}
@@ -32,14 +32,14 @@ spec:
         app.kubernetes.io/instance: camunda-platform-test
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: camunda-platform
-        app.kubernetes.io/version: "8.2.10"
+        app.kubernetes.io/version: "8.2.11"
         app.kubernetes.io/component: tasklist
     spec:
       imagePullSecrets:
         []
       containers:
       - name: tasklist
-        image: "camunda/tasklist:8.2.10"
+        image: "camunda/tasklist:8.2.11"
         imagePullPolicy: IfNotPresent
         env:
           - name: SPRING_PROFILES_ACTIVE
diff --git a/charts/camunda-platform/test/unit/tasklist/golden/ingress-all-enabled.golden.yaml b/charts/camunda-platform/test/unit/tasklist/golden/ingress-all-enabled.golden.yaml
index ffc80156..ad0c491b 100644
--- a/charts/camunda-platform/test/unit/tasklist/golden/ingress-all-enabled.golden.yaml
+++ b/charts/camunda-platform/test/unit/tasklist/golden/ingress-all-enabled.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: tasklist
   annotations: 
     ingress.kubernetes.io/rewrite-target: /
diff --git a/charts/camunda-platform/test/unit/tasklist/golden/ingress.golden.yaml b/charts/camunda-platform/test/unit/tasklist/golden/ingress.golden.yaml
index 1e9a5bca..bb9342a9 100644
--- a/charts/camunda-platform/test/unit/tasklist/golden/ingress.golden.yaml
+++ b/charts/camunda-platform/test/unit/tasklist/golden/ingress.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: tasklist
   annotations: 
     ingress.kubernetes.io/rewrite-target: /
diff --git a/charts/camunda-platform/test/unit/tasklist/golden/service.golden.yaml b/charts/camunda-platform/test/unit/tasklist/golden/service.golden.yaml
index 26f6d2cb..bbb1d40e 100644
--- a/charts/camunda-platform/test/unit/tasklist/golden/service.golden.yaml
+++ b/charts/camunda-platform/test/unit/tasklist/golden/service.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: tasklist
 spec:
   type: ClusterIP
diff --git a/charts/camunda-platform/test/unit/web-modeler/golden/configmap-shared.golden.yaml b/charts/camunda-platform/test/unit/web-modeler/golden/configmap-shared.golden.yaml
index d6735a15..195b8b9f 100644
--- a/charts/camunda-platform/test/unit/web-modeler/golden/configmap-shared.golden.yaml
+++ b/charts/camunda-platform/test/unit/web-modeler/golden/configmap-shared.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.4"
+    app.kubernetes.io/version: "8.2.5"
     app.kubernetes.io/component: web-modeler
   annotations:
     {}
diff --git a/charts/camunda-platform/test/unit/web-modeler/golden/deployment-restapi.golden.yaml b/charts/camunda-platform/test/unit/web-modeler/golden/deployment-restapi.golden.yaml
index ec58b27d..f594bf4a 100644
--- a/charts/camunda-platform/test/unit/web-modeler/golden/deployment-restapi.golden.yaml
+++ b/charts/camunda-platform/test/unit/web-modeler/golden/deployment-restapi.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.4"
+    app.kubernetes.io/version: "8.2.5"
     app.kubernetes.io/component: restapi
   annotations:
     {}
@@ -32,14 +32,14 @@ spec:
         app.kubernetes.io/instance: camunda-platform-test
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: camunda-platform
-        app.kubernetes.io/version: "8.2.4"
+        app.kubernetes.io/version: "8.2.5"
         app.kubernetes.io/component: restapi
     spec:
       imagePullSecrets:
         []
       containers:
       - name: web-modeler-restapi
-        image: "registry.camunda.cloud/web-modeler-ee/modeler-restapi:8.2.4"
+        image: "registry.camunda.cloud/web-modeler-ee/modeler-restapi:8.2.5"
         imagePullPolicy: IfNotPresent
         env:
           - name: JAVA_OPTIONS
diff --git a/charts/camunda-platform/test/unit/web-modeler/golden/deployment-webapp.golden.yaml b/charts/camunda-platform/test/unit/web-modeler/golden/deployment-webapp.golden.yaml
index e84d52d5..64ff0af5 100644
--- a/charts/camunda-platform/test/unit/web-modeler/golden/deployment-webapp.golden.yaml
+++ b/charts/camunda-platform/test/unit/web-modeler/golden/deployment-webapp.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.4"
+    app.kubernetes.io/version: "8.2.5"
     app.kubernetes.io/component: webapp
   annotations:
     {}
@@ -32,14 +32,14 @@ spec:
         app.kubernetes.io/instance: camunda-platform-test
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: camunda-platform
-        app.kubernetes.io/version: "8.2.4"
+        app.kubernetes.io/version: "8.2.5"
         app.kubernetes.io/component: webapp
     spec:
       imagePullSecrets:
         []
       containers:
       - name: web-modeler-webapp
-        image: "registry.camunda.cloud/web-modeler-ee/modeler-webapp:8.2.4"
+        image: "registry.camunda.cloud/web-modeler-ee/modeler-webapp:8.2.5"
         imagePullPolicy: IfNotPresent
         env:
           - name: NODE_ENV
diff --git a/charts/camunda-platform/test/unit/web-modeler/golden/deployment-websockets.golden.yaml b/charts/camunda-platform/test/unit/web-modeler/golden/deployment-websockets.golden.yaml
index de2760d9..e728ad8c 100644
--- a/charts/camunda-platform/test/unit/web-modeler/golden/deployment-websockets.golden.yaml
+++ b/charts/camunda-platform/test/unit/web-modeler/golden/deployment-websockets.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.4"
+    app.kubernetes.io/version: "8.2.5"
     app.kubernetes.io/component: websockets
   annotations:
     {}
@@ -32,14 +32,14 @@ spec:
         app.kubernetes.io/instance: camunda-platform-test
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: camunda-platform
-        app.kubernetes.io/version: "8.2.4"
+        app.kubernetes.io/version: "8.2.5"
         app.kubernetes.io/component: websockets
     spec:
       imagePullSecrets:
         []
       containers:
       - name: web-modeler-websockets
-        image: "registry.camunda.cloud/web-modeler-ee/modeler-websockets:8.2.4"
+        image: "registry.camunda.cloud/web-modeler-ee/modeler-websockets:8.2.5"
         imagePullPolicy: IfNotPresent
         env:
           - name: APP_NAME
diff --git a/charts/camunda-platform/test/unit/web-modeler/golden/ingress-all-enabled.golden.yaml b/charts/camunda-platform/test/unit/web-modeler/golden/ingress-all-enabled.golden.yaml
index 38ba0081..ed685db7 100644
--- a/charts/camunda-platform/test/unit/web-modeler/golden/ingress-all-enabled.golden.yaml
+++ b/charts/camunda-platform/test/unit/web-modeler/golden/ingress-all-enabled.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.4"
+    app.kubernetes.io/version: "8.2.5"
     app.kubernetes.io/component: web-modeler
   annotations:
     ingress.kubernetes.io/rewrite-target: /
diff --git a/charts/camunda-platform/test/unit/web-modeler/golden/ingress.golden.yaml b/charts/camunda-platform/test/unit/web-modeler/golden/ingress.golden.yaml
index 0fc34c76..30f992ad 100644
--- a/charts/camunda-platform/test/unit/web-modeler/golden/ingress.golden.yaml
+++ b/charts/camunda-platform/test/unit/web-modeler/golden/ingress.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.4"
+    app.kubernetes.io/version: "8.2.5"
     app.kubernetes.io/component: web-modeler
   annotations:
     ingress.kubernetes.io/rewrite-target: /
diff --git a/charts/camunda-platform/test/unit/web-modeler/golden/secret-shared.golden.yaml b/charts/camunda-platform/test/unit/web-modeler/golden/secret-shared.golden.yaml
index b6d64c8d..962dd438 100644
--- a/charts/camunda-platform/test/unit/web-modeler/golden/secret-shared.golden.yaml
+++ b/charts/camunda-platform/test/unit/web-modeler/golden/secret-shared.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.4"
+    app.kubernetes.io/version: "8.2.5"
     app.kubernetes.io/component: web-modeler
   annotations:
     {}
diff --git a/charts/camunda-platform/test/unit/web-modeler/golden/service-restapi.golden.yaml b/charts/camunda-platform/test/unit/web-modeler/golden/service-restapi.golden.yaml
index 6cecc2c2..cf564f3b 100644
--- a/charts/camunda-platform/test/unit/web-modeler/golden/service-restapi.golden.yaml
+++ b/charts/camunda-platform/test/unit/web-modeler/golden/service-restapi.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.4"
+    app.kubernetes.io/version: "8.2.5"
     app.kubernetes.io/component: restapi
   annotations:
 spec:
diff --git a/charts/camunda-platform/test/unit/web-modeler/golden/service-webapp.golden.yaml b/charts/camunda-platform/test/unit/web-modeler/golden/service-webapp.golden.yaml
index e9966675..4a380e1b 100644
--- a/charts/camunda-platform/test/unit/web-modeler/golden/service-webapp.golden.yaml
+++ b/charts/camunda-platform/test/unit/web-modeler/golden/service-webapp.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.4"
+    app.kubernetes.io/version: "8.2.5"
     app.kubernetes.io/component: webapp
   annotations:
 spec:
diff --git a/charts/camunda-platform/test/unit/web-modeler/golden/service-websockets.golden.yaml b/charts/camunda-platform/test/unit/web-modeler/golden/service-websockets.golden.yaml
index c68989f3..26f56b61 100644
--- a/charts/camunda-platform/test/unit/web-modeler/golden/service-websockets.golden.yaml
+++ b/charts/camunda-platform/test/unit/web-modeler/golden/service-websockets.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.4"
+    app.kubernetes.io/version: "8.2.5"
     app.kubernetes.io/component: websockets
   annotations:
 spec:
diff --git a/charts/camunda-platform/test/unit/web-modeler/golden/serviceaccount.golden.yaml b/charts/camunda-platform/test/unit/web-modeler/golden/serviceaccount.golden.yaml
index e5f5b28f..76f649d7 100644
--- a/charts/camunda-platform/test/unit/web-modeler/golden/serviceaccount.golden.yaml
+++ b/charts/camunda-platform/test/unit/web-modeler/golden/serviceaccount.golden.yaml
@@ -10,5 +10,5 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.4"
+    app.kubernetes.io/version: "8.2.5"
     app.kubernetes.io/component: web-modeler
\ No newline at end of file
diff --git a/charts/camunda-platform/test/unit/zeebe-gateway/golden/configmap-log4j2.golden.yaml b/charts/camunda-platform/test/unit/zeebe-gateway/golden/configmap-log4j2.golden.yaml
index 7782ee05..fccf5224 100644
--- a/charts/camunda-platform/test/unit/zeebe-gateway/golden/configmap-log4j2.golden.yaml
+++ b/charts/camunda-platform/test/unit/zeebe-gateway/golden/configmap-log4j2.golden.yaml
@@ -9,7 +9,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: zeebe-gateway
 apiVersion: v1
 data:
diff --git a/charts/camunda-platform/test/unit/zeebe-gateway/golden/configmap.golden.yaml b/charts/camunda-platform/test/unit/zeebe-gateway/golden/configmap.golden.yaml
index a4b45533..ebfe6d29 100644
--- a/charts/camunda-platform/test/unit/zeebe-gateway/golden/configmap.golden.yaml
+++ b/charts/camunda-platform/test/unit/zeebe-gateway/golden/configmap.golden.yaml
@@ -9,7 +9,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: zeebe-gateway
 apiVersion: v1
 data:
diff --git a/charts/camunda-platform/test/unit/zeebe-gateway/golden/gateway-deployment.golden.yaml b/charts/camunda-platform/test/unit/zeebe-gateway/golden/gateway-deployment.golden.yaml
index e76af473..f4a1ced8 100644
--- a/charts/camunda-platform/test/unit/zeebe-gateway/golden/gateway-deployment.golden.yaml
+++ b/charts/camunda-platform/test/unit/zeebe-gateway/golden/gateway-deployment.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: zeebe-gateway
   annotations:
     {}
@@ -32,7 +32,7 @@ spec:
         app.kubernetes.io/instance: camunda-platform-test
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: camunda-platform
-        app.kubernetes.io/version: "8.2.10"
+        app.kubernetes.io/version: "8.2.11"
         app.kubernetes.io/component: zeebe-gateway
       annotations:
         {}
@@ -41,7 +41,7 @@ spec:
         []
       containers:
         - name: zeebe-gateway
-          image: "camunda/zeebe:8.2.10"
+          image: "camunda/zeebe:8.2.11"
           imagePullPolicy: IfNotPresent
           ports:
             - containerPort: 9600
diff --git a/charts/camunda-platform/test/unit/zeebe-gateway/golden/gateway-service.golden.yaml b/charts/camunda-platform/test/unit/zeebe-gateway/golden/gateway-service.golden.yaml
index 15280299..e1b18dac 100644
--- a/charts/camunda-platform/test/unit/zeebe-gateway/golden/gateway-service.golden.yaml
+++ b/charts/camunda-platform/test/unit/zeebe-gateway/golden/gateway-service.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: zeebe-gateway
   annotations:
 spec:
diff --git a/charts/camunda-platform/test/unit/zeebe-gateway/golden/gateway-serviceaccount.golden.yaml b/charts/camunda-platform/test/unit/zeebe-gateway/golden/gateway-serviceaccount.golden.yaml
index 3713254e..6d381a38 100644
--- a/charts/camunda-platform/test/unit/zeebe-gateway/golden/gateway-serviceaccount.golden.yaml
+++ b/charts/camunda-platform/test/unit/zeebe-gateway/golden/gateway-serviceaccount.golden.yaml
@@ -10,5 +10,5 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: zeebe-gateway
\ No newline at end of file
diff --git a/charts/camunda-platform/test/unit/zeebe-gateway/golden/ingress-all-enabled.golden.yaml b/charts/camunda-platform/test/unit/zeebe-gateway/golden/ingress-all-enabled.golden.yaml
index 2b5fe0bf..1c77c70d 100644
--- a/charts/camunda-platform/test/unit/zeebe-gateway/golden/ingress-all-enabled.golden.yaml
+++ b/charts/camunda-platform/test/unit/zeebe-gateway/golden/ingress-all-enabled.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: zeebe-gateway
   annotations: 
     ingress.kubernetes.io/rewrite-target: /
diff --git a/charts/camunda-platform/test/unit/zeebe-gateway/golden/ingress.golden.yaml b/charts/camunda-platform/test/unit/zeebe-gateway/golden/ingress.golden.yaml
index 2a4a8fdd..dae2968d 100644
--- a/charts/camunda-platform/test/unit/zeebe-gateway/golden/ingress.golden.yaml
+++ b/charts/camunda-platform/test/unit/zeebe-gateway/golden/ingress.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: zeebe-gateway
   annotations: 
     ingress.kubernetes.io/rewrite-target: /
diff --git a/charts/camunda-platform/test/unit/zeebe-gateway/golden/poddisruptionbudget.golden.yaml b/charts/camunda-platform/test/unit/zeebe-gateway/golden/poddisruptionbudget.golden.yaml
index 9be75f24..ee3117eb 100644
--- a/charts/camunda-platform/test/unit/zeebe-gateway/golden/poddisruptionbudget.golden.yaml
+++ b/charts/camunda-platform/test/unit/zeebe-gateway/golden/poddisruptionbudget.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: zeebe-gateway
 spec:
   minAvailable: 1
diff --git a/charts/camunda-platform/test/unit/zeebe-gateway/golden/serviceaccount-annotations.golden.yaml b/charts/camunda-platform/test/unit/zeebe-gateway/golden/serviceaccount-annotations.golden.yaml
index ad532096..9eb01e8b 100644
--- a/charts/camunda-platform/test/unit/zeebe-gateway/golden/serviceaccount-annotations.golden.yaml
+++ b/charts/camunda-platform/test/unit/zeebe-gateway/golden/serviceaccount-annotations.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: zeebe-gateway
   annotations:
     foo: bar
diff --git a/charts/camunda-platform/test/unit/zeebe/golden/configmap-log4j2.golden.yaml b/charts/camunda-platform/test/unit/zeebe/golden/configmap-log4j2.golden.yaml
index f5f05e89..f4da9337 100644
--- a/charts/camunda-platform/test/unit/zeebe/golden/configmap-log4j2.golden.yaml
+++ b/charts/camunda-platform/test/unit/zeebe/golden/configmap-log4j2.golden.yaml
@@ -9,7 +9,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: zeebe-broker
 apiVersion: v1
 data:
diff --git a/charts/camunda-platform/test/unit/zeebe/golden/configmap.golden.yaml b/charts/camunda-platform/test/unit/zeebe/golden/configmap.golden.yaml
index b171ea52..7c95c894 100644
--- a/charts/camunda-platform/test/unit/zeebe/golden/configmap.golden.yaml
+++ b/charts/camunda-platform/test/unit/zeebe/golden/configmap.golden.yaml
@@ -9,7 +9,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: zeebe-broker
 apiVersion: v1
 data:
diff --git a/charts/camunda-platform/test/unit/zeebe/golden/poddisruptionbudget.golden.yaml b/charts/camunda-platform/test/unit/zeebe/golden/poddisruptionbudget.golden.yaml
index 35f61ad3..e02b459a 100644
--- a/charts/camunda-platform/test/unit/zeebe/golden/poddisruptionbudget.golden.yaml
+++ b/charts/camunda-platform/test/unit/zeebe/golden/poddisruptionbudget.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: zeebe-broker
 spec:
   maxUnavailable: 1
diff --git a/charts/camunda-platform/test/unit/zeebe/golden/service.golden.yaml b/charts/camunda-platform/test/unit/zeebe/golden/service.golden.yaml
index 214b6785..94569649 100644
--- a/charts/camunda-platform/test/unit/zeebe/golden/service.golden.yaml
+++ b/charts/camunda-platform/test/unit/zeebe/golden/service.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: zeebe-broker
   annotations:
     {}
diff --git a/charts/camunda-platform/test/unit/zeebe/golden/serviceaccount.golden.yaml b/charts/camunda-platform/test/unit/zeebe/golden/serviceaccount.golden.yaml
index 93de07f8..3cd31fbb 100644
--- a/charts/camunda-platform/test/unit/zeebe/golden/serviceaccount.golden.yaml
+++ b/charts/camunda-platform/test/unit/zeebe/golden/serviceaccount.golden.yaml
@@ -10,5 +10,5 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: zeebe-broker
\ No newline at end of file
diff --git a/charts/camunda-platform/test/unit/zeebe/golden/statefulset.golden.yaml b/charts/camunda-platform/test/unit/zeebe/golden/statefulset.golden.yaml
index 16644ae1..caa0a94d 100644
--- a/charts/camunda-platform/test/unit/zeebe/golden/statefulset.golden.yaml
+++ b/charts/camunda-platform/test/unit/zeebe/golden/statefulset.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.10"
+    app.kubernetes.io/version: "8.2.11"
     app.kubernetes.io/component: zeebe-broker
   annotations:
 spec:
@@ -35,7 +35,7 @@ spec:
         app.kubernetes.io/instance: camunda-platform-test
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: camunda-platform
-        app.kubernetes.io/version: "8.2.10"
+        app.kubernetes.io/version: "8.2.11"
         app.kubernetes.io/component: zeebe-broker
       annotations:
     spec:
@@ -44,7 +44,7 @@ spec:
       initContainers:
       containers:
       - name: zeebe
-        image: "camunda/zeebe:8.2.10"
+        image: "camunda/zeebe:8.2.11"
         imagePullPolicy: IfNotPresent
         env:
         - name: LC_ALL
@@ -145,6 +145,8 @@ spec:
             defaultMode: 492
         - name: exporters
           emptyDir: {}
+      securityContext:
+        fsGroup: 1000
       affinity:
         podAntiAffinity:
           requiredDuringSchedulingIgnoredDuringExecution:
diff --git a/charts/camunda-platform/values/values-latest.yaml b/charts/camunda-platform/values/values-latest.yaml
index 89d68e64..84a04870 100644
--- a/charts/camunda-platform/values/values-latest.yaml
+++ b/charts/camunda-platform/values/values-latest.yaml
@@ -7,13 +7,13 @@ global:
   # https://hub.docker.com/u/camunda
   image:
     # renovate: datasource=github-releases depName=camunda/camunda-platform
-    tag: 8.2.10
+    tag: 8.2.11
 
 connectors:
   # https://hub.docker.com/r/camunda/connectors-bundle/tags
   image:
     repository: camunda/connectors-bundle
-    tag: 0.21.4
+    tag: 0.22.0
 
 identity:
   keycloak:
@@ -38,7 +38,7 @@ webModeler:
   # registry.camunda.cloud/web-modeler-ee
   image:
     # renovate: datasource=docker depName=camunda/web-modeler lookupName=registry.camunda.cloud/web-modeler-ee/modeler-restapi
-    tag: 8.2.4
+    tag: 8.2.5
 
 #
 # Elasticsearch