feat(console): add console chart to cloudprem

README.md

@@ -5,10 +5,11 @@
 | Readme | Chart Version | App Version | Description | Hub |
 |--------|---------------|-------------|-------------|-----|
 | [Agent](./charts/agent/README.md) | 2.17.0 | v2.12.0 | Formance Membership Agent Helm Chart | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/agent)](https://artifacthub.io/packages/search?repo=agent) |
-| [Cloudprem](./charts/cloudprem/README.md) | 6.1.0 | latest | Formance control-plane | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/cloudprem)](https://artifacthub.io/packages/search?repo=cloudprem) |
+| [Cloudprem](./charts/cloudprem/README.md) | 6.2.0 | latest | Formance control-plane | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/cloudprem)](https://artifacthub.io/packages/search?repo=cloudprem) |
+| [Console](./charts/console/README.md) | 0.1.0 | latest | Formance Console (v4) | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/console)](https://artifacthub.io/packages/search?repo=console) |
 | [Console-V3](./charts/console-v3/README.md) | 5.0.2 | v4.0.2 | Formance Console | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/console-v3)](https://artifacthub.io/packages/search?repo=console-v3) |
 | [Core](./charts/core/README.md) | 1.6.0 | latest | Formance Core Library | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/core)](https://artifacthub.io/packages/search?repo=core) |
-| [Formance](./charts/formance/README.md) | 3.3.0 | latest | Formance Platform - Unified Helm Chart | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/formance)](https://artifacthub.io/packages/search?repo=formance) |
+| [Formance](./charts/formance/README.md) | 3.4.0 | latest | Formance Platform - Unified Helm Chart | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/formance)](https://artifacthub.io/packages/search?repo=formance) |
 | [Identity](./charts/identity/README.md) | 0.1.0 | 4a542c9f48b3799fe4a7f06c75c62a75b83afd0b | Formance Identity service | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/identity)](https://artifacthub.io/packages/search?repo=identity) |
 | [Ledger-Ui](./charts/ledger-ui/README.md) | 0.1.0 | latest | Formance Ledger UI | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/ledger-ui)](https://artifacthub.io/packages/search?repo=ledger-ui) |
 | [Membership](./charts/membership/README.md) | 3.7.2 | v2.5.0 | Formance EE Membership API. Manage stacks, organizations, regions, invitations, users, roles, and permissions. | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/membership)](https://artifacthub.io/packages/search?repo=membership) |

charts/cloudprem/Chart.lock

@@ -14,5 +14,8 @@ dependencies:
 - name: ledger-ui
   repository: file://../ledger-ui
   version: 0.1.0
-digest: sha256:940feee67523dace4d6ca9840a2e7b834ec16b17334c9b8ce7d7574fb72066bd
-generated: "2026-09-29T14:13:43.392383+02:00"
+- name: console
+  repository: file://../console
+  version: 0.1.0
+digest: sha256:84384e334a053ba46c5012dfcfd5021a36f04a2fd5cad17f1fd8b09aa2460569
+generated: "2026-10-12T20:13:31.52604768+02:00"

charts/cloudprem/Chart.yaml

@@ -32,7 +32,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 6.1.0
+version: 6.2.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
@@ -69,3 +69,8 @@ dependencies:
   version: 0.X
   repository: file://../ledger-ui
   condition: global.platform.ledgerUi.enabled
+
+- name: console
+  version: 0.X
+  repository: file://../console
+  condition: global.platform.console.enabled

charts/cloudprem/README.md

@@ -1,7 +1,7 @@
 # Formance cloudprem Helm chart
 
 [![Artifact Hub](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/cloudprem)](https://artifacthub.io/packages/search?repo=cloudprem)
-![Version: 6.1.0](https://img.shields.io/badge/Version-6.1.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: latest](https://img.shields.io/badge/AppVersion-latest-informational?style=flat-square)
+![Version: 6.2.0](https://img.shields.io/badge/Version-6.2.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: latest](https://img.shields.io/badge/AppVersion-latest-informational?style=flat-square)
 
 Formance control-plane
 
@@ -14,6 +14,7 @@ Kubernetes: `>=1.14.0-0`
 | Repository | Name | Version |
 |------------|------|---------|
 | file://../console-v3 | console-v3 | 5.X |
+| file://../console | console | 0.X |
 | file://../identity | identity | 0.X |
 | file://../ledger-ui | ledger-ui | 0.X |
 | file://../membership | membership | 3.X |
@@ -420,6 +421,14 @@ Dex:
 | global.monitoring.traces.insecure | bool | `true` | Insecure |
 | global.monitoring.traces.mode | string | `"grpc"` | Mode |
 | global.monitoring.traces.port | int | `4317` | Port |
+| global.platform.console | object | `{"host":"console.{{ .Values.global.serviceHost }}","oauth":{"client":{"existingSecret":"console-secrets","id":"console","postLogoutRedirectUris":"- {{ tpl (printf \"%s://%s\" .Values.global.platform.console.scheme .Values.global.platform.console.host) $ }}/auth/logout\n","redirectUris":"- {{ tpl (printf \"%s://%s\" .Values.global.platform.console.scheme .Values.global.platform.console.host) $ }}/auth/login\n- {{ tpl (printf \"%s://%s\" .Values.global.platform.console.scheme .Values.global.platform.console.host) $ }}/auth/login-by-org\n","scopes":["accesses","remember_me","keep_refresh_token","on_behalf"],"secret":"","secretKeys":{"secret":"oauth"}}},"scheme":"https"}` | Console |
+| global.platform.console.enabled | bool | `false` | Enable the Console for v4 stacks |
+| global.platform.console.host | string | `"console.{{ .Values.global.serviceHost }}"` | Public Console host |
+| global.platform.console.oauth.client.existingSecret | string | `"console-secrets"` | is the name of the secret |
+| global.platform.console.oauth.client.id | string | `"console"` | is the id of the client |
+| global.platform.console.oauth.client.secret | string | `""` | is the secret of the client |
+| global.platform.console.oauth.client.secretKeys | object | `{"secret":"oauth"}` | is the key contained within the secret |
+| global.platform.console.scheme | string | `"https"` | Public Console URL scheme |
 | global.platform.consoleV3 | object | `{"host":"console.v3.{{ .Values.global.serviceHost }}","oauth":{"client":{"existingSecret":"","id":"console-v3","postLogoutRedirectUris":"- {{ tpl (printf \"%s://%s\" .Values.global.platform.consoleV3.scheme .Values.global.platform.consoleV3.host) $ }}/auth/logout\n","redirectUris":"- {{ tpl (printf \"%s://%s\" .Values.global.platform.consoleV3.scheme .Values.global.platform.consoleV3.host) $ }}/auth/login\n- {{ tpl (printf \"%s://%s\" .Values.global.platform.consoleV3.scheme .Values.global.platform.consoleV3.host) $ }}/auth/login-by-org\n","scopes":["accesses","remember_me","keep_refresh_token","on_behalf"],"secret":"changeMe2","secretKeys":{"secret":""}}},"scheme":"https"}` | Console V3: EXPERIMENTAL |
 | global.platform.consoleV3.enabled | bool | `true` | Enable console-v3 |
 | global.platform.consoleV3.host | string | `"console.v3.{{ .Values.global.serviceHost }}"` | is the host for the console |
@@ -498,50 +507,62 @@ Dex:
 | global.platform.stargate.enabled | bool | `false` | if enabled, the stackApiUrl is not required It will be templated with `{{ printf "http://%s-%s:8080/#{organizationId}/#{stackId}/api" .Release.Name "stargate" -}}` |
 | global.platform.stargate.stackApiUrl | string | `""` | if stargate is disabled, the stackApiUrl is defaulted to the `http://gateway.#{organizationId}-#{stackId}.svc:8080/api` To allow external access sets the stackApiUrl to an external url |
 
-### Migration configuration
+### Console configuration
 
 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
-| console-v3.config.migration.enabled | bool | `true` | Enable migration job with a separated user |
-| ledger-ui.config.migration.enabled | bool | `true` | Enable migration job with a separated user |
-| portal.config.migration.enabled | bool | `true` | Enable migration job with a separated user |
+| console.config.authenticationEnabled | string | `"1"` | Toggle OAuth/DB sessions on the app. `"1"` = stack mode (default): the app uses Membership/OAuth and reaches the stack API through API_STACK_URL. `"0"` = micro-stack / auth-less mode: the app skips OAuth and reads API_STACK_URL directly. |
+| console.config.postgresqlUrl | string | `""` | PostgreSQL connection URL override (if not set, will be generated from global.postgresql) |
+| console-v3.config.postgresqlUrl | string | `""` | PostgreSQL connection URL override (if not set, will be generated from global.postgresql) |
 
-### Console configuration
+### Migration configuration
 
 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
-| console-v3.config.postgresqlUrl | string | `""` | PostgreSQL connection URL override (if not set, will be generated from global.postgresql) |
+| console.config.migration.enabled | bool | `true` | Enable migration job with a separated user |
+| console-v3.config.migration.enabled | bool | `true` | Enable migration job with a separated user |
+| ledger-ui.config.migration.enabled | bool | `true` | Enable migration job with a separated user |
+| portal.config.migration.enabled | bool | `true` | Enable migration job with a separated user |
 
 ### Publisher configuration
 
 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
+| console.config.publisher.clientID | string | `"console"` | NATS client ID |
+| console.config.publisher.topicMapping | string | `"console"` | NATS topic mapping |
 | console-v3.config.publisher.clientID | string | `"console-v3"` | NATS client ID |
 | console-v3.config.publisher.topicMapping | string | `"console-v3"` | NATS topic mapping |
 | ledger-ui.config.publisher.clientID | string | `"ledger-ui"` | NATS client ID |
 | ledger-ui.config.publisher.topicMapping | string | `"ledger-ui"` | NATS topic mapping |
 | portal.config.publisher.clientID | string | `"portal"` | NATS client ID |
 | portal.config.publisher.topicMapping | string | `"portal"` | NATS topic mapping |
 
-### Membership Feature
+### Console Feature
 
 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
-| console-v3.feature.migrationHooks | bool | `false` | Run migration in a hook |
-| membership.feature.disableEvents | bool | `true` | Membership feature disable events |
-| membership.feature.managedStacks | bool | `true` | Membership feature managed stacks |
-| membership.feature.migrationHooks | bool | `false` | Run migration in a hook |
-| portal.feature.migrationHooks | bool | `false` | Run migration in a hook |
+| console.feature.migrationHooks | bool | `true` | Run migration in a hook |
 
 ### Postgresql configuration
 
 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
+| console.postgresql.enabled | bool | `false` | Enable postgresql |
 | console-v3.postgresql.enabled | bool | `false` | Enable postgresql |
 | ledger-ui.postgresql.enabled | bool | `false` | Enable postgresql |
 | membership.postgresql.enabled | bool | `true` | Enable postgresql |
 | portal.postgresql.enabled | bool | `false` | Enable postgresql |
 
+### Membership Feature
+
+| Key | Type | Default | Description |
+|-----|------|---------|-------------|
+| console-v3.feature.migrationHooks | bool | `false` | Run migration in a hook |
+| membership.feature.disableEvents | bool | `true` | Membership feature disable events |
+| membership.feature.managedStacks | bool | `true` | Membership feature managed stacks |
+| membership.feature.migrationHooks | bool | `false` | Run migration in a hook |
+| portal.feature.migrationHooks | bool | `false` | Run migration in a hook |
+
 ### Ledger UI configuration
 
 | Key | Type | Default | Description |
@@ -616,6 +637,69 @@ Dex:
 | global.platform.portal.oauth.client.scopes[3] | string | `"on_behalf"` |  |
 | global.platform.stargate.serverURL | string | `""` |  |
 | global.platform.stargate.tls.disable | bool | `false` |  |
+| console.affinity | object | `{}` | Console affinity |
+| console.annotations | object | `{}` | Console annotations |
+| console.autoscaling.enabled | bool | `false` |  |
+| console.autoscaling.maxReplicas | int | `100` |  |
+| console.autoscaling.minReplicas | int | `1` |  |
+| console.autoscaling.targetCPUUtilizationPercentage | int | `80` |  |
+| console.aws.targetGroups.http.ipAddressType | string | `"ipv4"` | Target group IP address type |
+| console.aws.targetGroups.http.serviceRef.name | string | `"{{ include \"core.fullname\" $ }}"` | Target group service reference name |
+| console.aws.targetGroups.http.serviceRef.port | string | `"{{ .Values.service.ports.http.port }}"` | Target group service reference port |
+| console.aws.targetGroups.http.targetGroupARN | string | `""` | Target group ARN |
+| console.aws.targetGroups.http.targetGroupName | string | `""` | Target group name, used when its ARN is not known before provisioning |
+| console.aws.targetGroups.http.targetType | string | `"ip"` | Target group target type |
+| console.config.additionalEnv | list | `[]` | Console additional environment variables |
+| console.config.cookie.encryptionKey | string | `""` | is used to encrypt a cookie value |
+| console.config.cookie.existingSecret | string | `"console-secrets"` | is the name of the secret |
+| console.config.cookie.secretKeys | object | `{"encryptionKey":"cookie"}` | is the key contained within the secret |
+| console.config.environment | string | `"production"` | Console environment |
+| console.config.migration.annotations | object | `{}` | Console job migration annotations Argo CD translate `pre-install,pre-upgrade` to: argocd.argoproj.io/hook: PreSync |
+| console.config.migration.serviceAccount.annotations | object | `{}` |  |
+| console.config.migration.serviceAccount.create | bool | `true` |  |
+| console.config.migration.serviceAccount.name | string | `""` |  |
+| console.config.migration.ttlSecondsAfterFinished | string | `""` |  |
+| console.config.migration.volumeMounts | list | `[]` |  |
+| console.config.migration.volumes | list | `[]` |  |
+| console.config.postgresql.auth.database | string | `"console"` |  |
+| console.config.sentry.authToken | object | `{"existingSecret":"","secretKeys":{"value":""},"value":""}` | Sentry Auth Token |
+| console.config.sentry.dsn | string | `""` | Sentry DSN |
+| console.config.sentry.enabled | bool | `false` | Sentry enabled |
+| console.config.sentry.environment | string | `""` | Sentry environment |
+| console.config.sentry.release | string | `""` | Sentry release |
+| console.config.stargate_url | string | `""` | Deprecated |
+| console.image.pullPolicy | string | `"IfNotPresent"` | image pull policy |
+| console.image.repository | string | `"ghcr.io/formancehq/console"` | image repository |
+| console.image.tag | string | `""` | image tag |
+| console.imagePullSecrets | list | `[]` | image pull secrets |
+| console.ingress.annotations | object | `{}` | ingress annotations |
+| console.ingress.className | string | `""` | ingress class name |
+| console.ingress.enabled | bool | `true` | ingress enabled |
+| console.ingress.hosts[0] | object | `{"host":"{{ tpl .Values.global.platform.console.host $ }}","paths":[{"path":"/","pathType":"Prefix"}]}` | ingress host |
+| console.ingress.hosts[0].paths[0] | object | `{"path":"/","pathType":"Prefix"}` | ingress path |
+| console.ingress.hosts[0].paths[0].pathType | string | `"Prefix"` | ingress path type |
+| console.ingress.labels | object | `{}` | ingress labels |
+| console.ingress.tls | list | `[]` | ingress tls |
+| console.livenessProbe | object | `{}` | Console liveness probe |
+| console.nodeSelector | object | `{}` | Console node selector |
+| console.podDisruptionBudget.enabled | bool | `false` | Enable pod disruption budget |
+| console.podDisruptionBudget.maxUnavailable | int | `0` | Maximum unavailable pods |
+| console.podDisruptionBudget.minAvailable | int | `1` | Minimum available pods |
+| console.podSecurityContext | object | `{}` | Pod Security Context |
+| console.readinessProbe | object | `{}` | Console readiness probe |
+| console.replicas | int | `1` | Number of replicas |
+| console.resources | object | `{}` | Console resources |
+| console.securityContext | object | `{}` | Container Security Context |
+| console.service.annotations | object | `{}` | service annotations |
+| console.service.clusterIP | string | `""` | service cluster IP |
+| console.service.ports.http | object | `{"port":3000}` | service http port |
+| console.service.type | string | `"ClusterIP"` | service type |
+| console.serviceAccount.annotations | object | `{}` | Service account annotations |
+| console.serviceAccount.create | bool | `true` | Service account creation |
+| console.serviceAccount.name | string | `""` | Service account name |
+| console.tolerations | list | `[]` | Console tolerations |
+| console.volumeMounts | list | `[]` | Console volume mounts |
+| console.volumes | list | `[]` | Console volumes |
 | console-v3.affinity | object | `{}` | Console affinity |
 | console-v3.annotations | object | `{}` | Console annotations  |
 | console-v3.autoscaling.enabled | bool | `false` |  |

charts/cloudprem/values.schema.json

@@ -115,6 +115,20 @@
                 "platform": {
                     "type": "object",
                     "properties": {
+                        "console": {
+                            "type": "object",
+                            "properties": {
+                                "enabled": {
+                                    "type": "boolean"
+                                },
+                                "host": {
+                                    "type": "string"
+                                },
+                                "scheme": {
+                                    "type": "string"
+                                }
+                            }
+                        },
                         "consoleV3": {
                             "type": "object",
                             "properties": {

charts/cloudprem/values.yaml

@@ -74,6 +74,16 @@ global:
             # -- Key containing the Membership client secret.
             # @section -- Global configuration
             secret: ""
+    console:
+      # -- Enable the Console for v4 stacks
+      # @section -- Global configuration
+      enabled: false
+      # -- Public Console URL scheme
+      # @section -- Global configuration
+      scheme: "https"
+      # -- Public Console host
+      # @section -- Global configuration
+      host: "console.{{ .Values.global.serviceHost }}"
     consoleV3:
       # -- Enable console-v3
       # @section -- Global configuration

charts/console/.helmignore

@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/

charts/console/Chart.lock

@@ -0,0 +1,9 @@
+dependencies:
+- name: core
+  repository: file://../core
+  version: 1.6.0
+- name: postgresql
+  repository: oci://registry-1.docker.io/bitnamicharts
+  version: 18.12.4
+digest: sha256:5457fc098855d743bb2670c9016833fb6c703922dd49ca80476bd66d0074af04
+generated: "2026-09-29T14:13:23.660336+02:00"