opsmill · fatih-acar · May 26, 2026 · Apr 16, 2026
diff --git a/charts/infrahub-enterprise/values.yaml b/charts/infrahub-enterprise/values.yaml
@@ -30,6 +30,7 @@ infrahub:
         INFRAHUB_LOG_LEVEL: INFO
         INFRAHUB_PRODUCTION: "false"
         INFRAHUB_INITIAL_ADMIN_TOKEN: 06438eb2-8019-4776-878c-0941b1f1d1ec
+        INFRAHUB_INITIAL_AGENT_TOKEN: 44af444d-3b26-410d-9546-b758657e026c
         INFRAHUB_SECURITY_SECRET_KEY: 327f747f-efac-42be-9e73-999f08f86b92
         INFRAHUB_GIT_REPOSITORIES_DIRECTORY: "/opt/infrahub/git"
         INFRAHUB_WORKFLOW_ADDRESS: prefect-server

diff --git a/charts/infrahub/README.md b/charts/infrahub/README.md
@@ -124,7 +124,7 @@ The chart offers the ability to configure persistence for the database and other
 | infrahubServer.gatewayApi.httpRoute.parentRefs | list | `[]` | Parent Gateway references |
 | infrahubServer.gatewayApi.httpRoute.path | string | `"/"` | Path prefix for the default matching rule |
 | infrahubServer.infrahubServer.args | list | `["gunicorn","--config","/source/backend/infrahub/serve/gunicorn_config.py","-w","2","--logger-class","infrahub.serve.log.GunicornLogger","infrahub.server:app"]` | Container arguments for the API server |
-| infrahubServer.infrahubServer.env | object | `{"INFRAHUB_ALLOW_ANONYMOUS_ACCESS":"true","INFRAHUB_CACHE_PORT":6379,"INFRAHUB_DB_TYPE":"neo4j","INFRAHUB_GIT_REPOSITORIES_DIRECTORY":"/opt/infrahub/git","INFRAHUB_INITIAL_ADMIN_TOKEN":"06438eb2-8019-4776-878c-0941b1f1d1ec","INFRAHUB_LOG_LEVEL":"INFO","INFRAHUB_PRODUCTION":"false","INFRAHUB_SECURITY_SECRET_KEY":"327f747f-efac-42be-9e73-999f08f86b92","INFRAHUB_WORKFLOW_ADDRESS":"prefect-server","INFRAHUB_WORKFLOW_PORT":4200,"PREFECT_API_URL":"http://prefect-server:4200/api"}` | Container environment for the API server |
+| infrahubServer.infrahubServer.env | object | `{"INFRAHUB_ALLOW_ANONYMOUS_ACCESS":"true","INFRAHUB_CACHE_PORT":6379,"INFRAHUB_DB_TYPE":"neo4j","INFRAHUB_GIT_REPOSITORIES_DIRECTORY":"/opt/infrahub/git","INFRAHUB_INITIAL_ADMIN_TOKEN":"06438eb2-8019-4776-878c-0941b1f1d1ec","INFRAHUB_INITIAL_AGENT_TOKEN":"44af444d-3b26-410d-9546-b758657e026c","INFRAHUB_LOG_LEVEL":"INFO","INFRAHUB_PRODUCTION":"false","INFRAHUB_SECURITY_SECRET_KEY":"327f747f-efac-42be-9e73-999f08f86b92","INFRAHUB_WORKFLOW_ADDRESS":"prefect-server","INFRAHUB_WORKFLOW_PORT":4200,"PREFECT_API_URL":"http://prefect-server:4200/api"}` | Container environment for the API server |
 | infrahubServer.infrahubServer.envFromExistingSecret | DEPRECATED | `""` | Name of an existing secret to use for environment variables. Use envFromExistingSecrets instead. @deprecated Use envFromExistingSecrets instead |
 | infrahubServer.infrahubServer.envFromExistingSecrets | list | `[]` | List of existing secrets to use for environment variables |
 | infrahubServer.infrahubServer.extraVolumeMounts | list | `[]` | Extra volumeMounts for the server pod |
@@ -156,7 +156,7 @@ The chart offers the ability to configure persistence for the database and other
 | infrahubServer.type | string | `""` | @deprecated Use `infrahubServer.service.type` instead. This field will be removed in a future release. |
 | infrahubTaskWorker.affinity | object | `{}` | Affinity for the task worker pods |
 | infrahubTaskWorker.infrahubTaskWorker.args | list | `["prefect","worker","start","--type","infrahubasync","--pool","infrahub-worker","--with-healthcheck"]` | Container arguments for the task worker |
-| infrahubTaskWorker.infrahubTaskWorker.env | object | `{"INFRAHUB_API_TOKEN":"06438eb2-8019-4776-878c-0941b1f1d1ec","INFRAHUB_CACHE_PORT":6379,"INFRAHUB_DB_TYPE":"neo4j","INFRAHUB_GIT_REPOSITORIES_DIRECTORY":"/opt/infrahub/git","INFRAHUB_LOG_LEVEL":"DEBUG","INFRAHUB_PRODUCTION":"false","INFRAHUB_TIMEOUT":"60","INFRAHUB_WORKFLOW_ADDRESS":"prefect-server","INFRAHUB_WORKFLOW_PORT":4200,"PREFECT_AGENT_QUERY_INTERVAL":3,"PREFECT_API_URL":"http://prefect-server:4200/api","PREFECT_WORKER_QUERY_SECONDS":3}` | Container environment for the task worker |
+| infrahubTaskWorker.infrahubTaskWorker.env | object | `{"INFRAHUB_API_TOKEN":"06438eb2-8019-4776-878c-0941b1f1d1ec","INFRAHUB_CACHE_PORT":6379,"INFRAHUB_DB_TYPE":"neo4j","INFRAHUB_GIT_REPOSITORIES_DIRECTORY":"/opt/infrahub/git","INFRAHUB_INITIAL_AGENT_TOKEN":"44af444d-3b26-410d-9546-b758657e026c","INFRAHUB_LOG_LEVEL":"DEBUG","INFRAHUB_PRODUCTION":"false","INFRAHUB_TIMEOUT":"60","INFRAHUB_WORKFLOW_ADDRESS":"prefect-server","INFRAHUB_WORKFLOW_PORT":4200,"PREFECT_AGENT_QUERY_INTERVAL":3,"PREFECT_API_URL":"http://prefect-server:4200/api","PREFECT_WORKER_QUERY_SECONDS":3}` | Container environment for the task worker |
 | infrahubTaskWorker.infrahubTaskWorker.envFromExistingSecret | DEPRECATED | `""` | Name of an existing secret to use for environment variables. Use envFromExistingSecrets instead. @deprecated Use envFromExistingSecrets instead |
 | infrahubTaskWorker.infrahubTaskWorker.envFromExistingSecrets | list | `[]` | List of existing secrets to use for environment variables |
 | infrahubTaskWorker.infrahubTaskWorker.extraVolumeMounts | list | `[]` | Extra volumeMounts for the task worker pod |
@@ -197,7 +197,7 @@ The chart offers the ability to configure persistence for the database and other
 | neo4j.volumes.data.mode | string | `"volume"` |  |
 | neo4j.volumes.data.volume.emptyDir | object | `{}` |  |
 | prefect-server.enabled | bool | `true` |  |
-| prefect-server.global.prefect.image.prefectTag | string | `"1.8.2"` |  |
+| prefect-server.global.prefect.image.prefectTag | string | `"1.8.4"` |  |
 | prefect-server.global.prefect.image.repository | string | `"registry.opsmill.io/opsmill/infrahub"` |  |
 | prefect-server.postgresql.enabled | bool | `true` |  |
 | prefect-server.postgresql.image.repository | string | `"bitnamilegacy/postgresql"` |  |
@@ -234,6 +234,7 @@ The chart offers the ability to configure persistence for the database and other
 | redis.image.tag | string | `"8.2.1-debian-12-r0"` |  |
 | redis.master.persistence.enabled | bool | `false` |  |
 | redis.master.podLabels.infrahub/service | string | `"cache"` |  |
+| redis.master.resourcesPreset | string | `"medium"` |  |
 | redis.master.service.ports.redis | int | `6379` |  |
 | redis.nameOverride | string | `"cache"` |  |
 | upgrade.enabled | bool | `false` | Whether to run infrahub upgrade as a post-install/pre-upgrade hook job |

diff --git a/charts/infrahub/templates/infrahub-demo-data-job.yaml b/charts/infrahub/templates/infrahub-demo-data-job.yaml
@@ -38,7 +38,7 @@ spec:
           {{- include "infrahub-helm.infrahubDemoData.defaultEnv" . | nindent 12 }}
           {{- with .Values.infrahubDemoData.env }}
             {{- range $key, $value := . }}
-            {{- if or $value (not (or (eq $key "INFRAHUB_INITIAL_ADMIN_TOKEN") (eq $key "INFRAHUB_SECURITY_SECRET_KEY") (eq $key "INFRAHUB_API_TOKEN"))) }}
+            {{- if or $value (not (or (eq $key "INFRAHUB_INITIAL_ADMIN_TOKEN") (eq $key "INFRAHUB_INITIAL_AGENT_TOKEN") (eq $key "INFRAHUB_SECURITY_SECRET_KEY") (eq $key "INFRAHUB_API_TOKEN"))) }}
             - name: {{ $key }}
               value: {{ $value | quote }}
             {{- end }}

diff --git a/charts/infrahub/templates/infrahub-server.yaml b/charts/infrahub/templates/infrahub-server.yaml
@@ -60,7 +60,7 @@ spec:
           env:
             {{- include "infrahub-helm.infrahubServer.defaultEnv" . | nindent 12 }}
             {{- range $key, $value := .Values.infrahubServer.infrahubServer.env }}
-            {{- if or $value (not (or (eq $key "INFRAHUB_INITIAL_ADMIN_TOKEN") (eq $key "INFRAHUB_SECURITY_SECRET_KEY") (eq $key "INFRAHUB_API_TOKEN"))) }}
+            {{- if or $value (not (or (eq $key "INFRAHUB_INITIAL_ADMIN_TOKEN") (eq $key "INFRAHUB_INITIAL_AGENT_TOKEN") (eq $key "INFRAHUB_SECURITY_SECRET_KEY") (eq $key "INFRAHUB_API_TOKEN"))) }}
             - name: {{ $key }}
               value: {{ $value | quote }}
             {{- end }}

diff --git a/charts/infrahub/templates/infrahub-task-worker.yaml b/charts/infrahub/templates/infrahub-task-worker.yaml
@@ -61,7 +61,7 @@ spec:
           env:
             {{- include "infrahub-helm.infrahubTaskWorker.defaultEnv" . | nindent 12 }}
             {{- range $key, $value := .Values.infrahubTaskWorker.infrahubTaskWorker.env }}
-            {{- if or $value (not (or (eq $key "INFRAHUB_INITIAL_ADMIN_TOKEN") (eq $key "INFRAHUB_SECURITY_SECRET_KEY") (eq $key "INFRAHUB_API_TOKEN"))) }}
+            {{- if or $value (not (or (eq $key "INFRAHUB_INITIAL_ADMIN_TOKEN") (eq $key "INFRAHUB_INITIAL_AGENT_TOKEN") (eq $key "INFRAHUB_SECURITY_SECRET_KEY") (eq $key "INFRAHUB_API_TOKEN"))) }}
             - name: {{ $key }}
               value: {{ $value | quote }}
             {{- end }}

diff --git a/charts/infrahub/templates/infrahub-upgrade-job.yaml b/charts/infrahub/templates/infrahub-upgrade-job.yaml
@@ -53,7 +53,7 @@ spec:
           env:
             {{- include "infrahub-helm.infrahubServer.defaultEnv" . | nindent 12 }}
             {{- range $key, $value := .Values.infrahubServer.infrahubServer.env }}
-            {{- if or $value (not (or (eq $key "INFRAHUB_INITIAL_ADMIN_TOKEN") (eq $key "INFRAHUB_SECURITY_SECRET_KEY") (eq $key "INFRAHUB_API_TOKEN"))) }}
+            {{- if or $value (not (or (eq $key "INFRAHUB_INITIAL_ADMIN_TOKEN") (eq $key "INFRAHUB_INITIAL_AGENT_TOKEN") (eq $key "INFRAHUB_SECURITY_SECRET_KEY") (eq $key "INFRAHUB_API_TOKEN"))) }}
             - name: {{ $key }}
               value: {{ $value | quote }}
             {{- end }}

diff --git a/charts/infrahub/values.yaml b/charts/infrahub/values.yaml
@@ -117,6 +117,7 @@ infrahubTaskWorker:
       INFRAHUB_LOG_LEVEL: DEBUG
       INFRAHUB_PRODUCTION: "false"
       INFRAHUB_API_TOKEN: 06438eb2-8019-4776-878c-0941b1f1d1ec
+      INFRAHUB_INITIAL_AGENT_TOKEN: 44af444d-3b26-410d-9546-b758657e026c
       INFRAHUB_TIMEOUT: "60"
       INFRAHUB_GIT_REPOSITORIES_DIRECTORY: "/opt/infrahub/git"
       INFRAHUB_WORKFLOW_ADDRESS: prefect-server
@@ -251,6 +252,7 @@ infrahubServer:
       INFRAHUB_LOG_LEVEL: INFO
       INFRAHUB_PRODUCTION: "false"
       INFRAHUB_INITIAL_ADMIN_TOKEN: 06438eb2-8019-4776-878c-0941b1f1d1ec
+      INFRAHUB_INITIAL_AGENT_TOKEN: 44af444d-3b26-410d-9546-b758657e026c
       INFRAHUB_SECURITY_SECRET_KEY: 327f747f-efac-42be-9e73-999f08f86b92
       INFRAHUB_GIT_REPOSITORIES_DIRECTORY: "/opt/infrahub/git"
       INFRAHUB_WORKFLOW_ADDRESS: prefect-server