fix(yaml): Quote/comment templating syntax

NickLarsenNZ · NickLarsenNZ · commit db2aba94ad5d · 2026-07-09T14:29:13.000+02:00
The update script (.scripts/update_helm_charts.py) skipped these files
diff --git a/demos/argo-cd-git-ops/manifests/airflow-postgres/sealed-airflow-postgres-credentials.yaml b/demos/argo-cd-git-ops/manifests/airflow-postgres/sealed-airflow-postgres-credentials.yaml
@@ -18,5 +18,5 @@ spec:
       namespace: stackable-airflow
       labels:
         stackable.tech/vendor: Stackable
-        stackable.tech/demo: {{ DEMO }}
+        stackable.tech/demo: "{{ DEMO }}"
     type: Opaque
diff --git a/demos/argo-cd-git-ops/manifests/airflow/airflow.yaml b/demos/argo-cd-git-ops/manifests/airflow/airflow.yaml
@@ -5,7 +5,7 @@ metadata:
   name: airflow
   labels:
     stackable.tech/vendor: Stackable
-    stackable.tech/demo: {{ DEMO }}
+    stackable.tech/demo: "{{ DEMO }}"
 spec:
   image:
     productVersion: 3.2.2
diff --git a/demos/argo-cd-git-ops/manifests/airflow/sealed-airflow-credentials.yaml b/demos/argo-cd-git-ops/manifests/airflow/sealed-airflow-credentials.yaml
@@ -23,5 +23,5 @@ spec:
       namespace: stackable-airflow
       labels:
         stackable.tech/vendor: Stackable
-        stackable.tech/demo: {{ DEMO }}
+        stackable.tech/demo: "{{ DEMO }}"
     type: Opaque
diff --git a/demos/argo-cd-git-ops/manifests/airflow/sealed-airflow-minio-connection.yaml b/demos/argo-cd-git-ops/manifests/airflow/sealed-airflow-minio-connection.yaml
@@ -15,5 +15,5 @@ spec:
       namespace: stackable-airflow
       labels:
         stackable.tech/vendor: Stackable
-        stackable.tech/demo: {{ DEMO }}
+        stackable.tech/demo: "{{ DEMO }}"
     type: Opaque
diff --git a/demos/argo-cd-git-ops/manifests/minio/sealed-minio-credentials.yaml b/demos/argo-cd-git-ops/manifests/minio/sealed-minio-credentials.yaml
@@ -16,5 +16,5 @@ spec:
       namespace: minio
       labels:
         stackable.tech/vendor: Stackable
-        stackable.tech/demo: {{ DEMO }}
+        stackable.tech/demo: "{{ DEMO }}"
     type: Opaque
diff --git a/stacks/_templates/argo-cd.yaml b/stacks/_templates/argo-cd.yaml
@@ -9,11 +9,11 @@ options:
   global:
     additionalLabels:
       stackable.tech/vendor: Stackable
-      stackable.tech/stack: {{ STACK }}
+      stackable.tech/stack: "{{ STACK }}"
       # The following is a Jinja2 template directive, not a regular comment.
       # The `#` prefix is required to prevent YAML parsing errors, but Jinja2 still processes it.
       # {% if DEMO is defined %}
-      stackable.tech/demo: {{ DEMO }}
+      stackable.tech/demo: "{{ DEMO }}"
       # {% endif %}
   configs:
     secret:
diff --git a/stacks/_templates/minio-distributed-small-tls/values.yaml b/stacks/_templates/minio-distributed-small-tls/values.yaml
@@ -1,19 +1,19 @@
 ---
 additionalLabels:
   stackable.tech/vendor: Stackable
-  stackable.tech/stack: {{ STACK }}
+  stackable.tech/stack: "{{ STACK }}"
   # The following is a Jinja2 template directive, not a regular comment.
   # The `#` prefix is required to prevent YAML parsing errors, but Jinja2 still processes it.
   # {% if DEMO is defined %}
-  stackable.tech/demo: {{ DEMO }}
+  stackable.tech/demo: "{{ DEMO }}"
   # {% endif %}
 podLabels:
   stackable.tech/vendor: Stackable
-  stackable.tech/stack: {{ STACK }}
+  stackable.tech/stack: "{{ STACK }}"
   # The following is a Jinja2 template directive, not a regular comment.
   # The `#` prefix is required to prevent YAML parsing errors, but Jinja2 still processes it.
   # {% if DEMO is defined %}
-  stackable.tech/demo: {{ DEMO }}
+  stackable.tech/demo: "{{ DEMO }}"
   # {% endif %}
 rootUser: admin
 rootPassword: adminadmin
diff --git a/stacks/_templates/minio-distributed-tls/values.yaml b/stacks/_templates/minio-distributed-tls/values.yaml
@@ -1,19 +1,19 @@
 ---
 additionalLabels:
   stackable.tech/vendor: Stackable
-  stackable.tech/stack: {{ STACK }}
+  stackable.tech/stack: "{{ STACK }}"
   # The following is a Jinja2 template directive, not a regular comment.
   # The `#` prefix is required to prevent YAML parsing errors, but Jinja2 still processes it.
   # {% if DEMO is defined %}
-  stackable.tech/demo: {{ DEMO }}
+  stackable.tech/demo: "{{ DEMO }}"
   # {% endif %}
 podLabels:
   stackable.tech/vendor: Stackable
-  stackable.tech/stack: {{ STACK }}
+  stackable.tech/stack: "{{ STACK }}"
   # The following is a Jinja2 template directive, not a regular comment.
   # The `#` prefix is required to prevent YAML parsing errors, but Jinja2 still processes it.
   # {% if DEMO is defined %}
-  stackable.tech/demo: {{ DEMO }}
+  stackable.tech/demo: "{{ DEMO }}"
   # {% endif %}
 rootUser: admin
 rootPassword: adminadmin
diff --git a/stacks/_templates/minio.yaml b/stacks/_templates/minio.yaml
@@ -8,22 +8,22 @@ version: 5.4.0 # RELEASE.2024-12-18T13-15-44Z
 options:
   additionalLabels:
     stackable.tech/vendor: Stackable
-    stackable.tech/stack: {{ STACK }}
+    stackable.tech/stack: "{{ STACK }}"
     # The following is a Jinja2 template directive, not a regular comment.
     # The `#` prefix is required to prevent YAML parsing errors, but Jinja2 still processes it.
     # {% if DEMO is defined %}
-    stackable.tech/demo: {{ DEMO }}
+    stackable.tech/demo: "{{ DEMO }}"
     # {% endif %}
   podLabels:
     stackable.tech/vendor: Stackable
-    stackable.tech/stack: {{ STACK }}
+    stackable.tech/stack: "{{ STACK }}"
     # The following is a Jinja2 template directive, not a regular comment.
     # The `#` prefix is required to prevent YAML parsing errors, but Jinja2 still processes it.
     # {% if DEMO is defined %}
-    stackable.tech/demo: {{ DEMO }}
+    stackable.tech/demo: "{{ DEMO }}"
     # {% endif %}
   rootUser: admin
-  rootPassword: {{ minioAdminPassword }}
+  rootPassword: "{{ minioAdminPassword }}"
   mode: standalone
   persistence:
     size: 10Gi
diff --git a/stacks/_templates/opensearch-dashboards.yaml b/stacks/_templates/opensearch-dashboards.yaml
@@ -4,18 +4,18 @@ name: opensearch-dashboards
 repo:
   name: opensearch-dashboards
   url: https://opensearch-project.github.io/helm-charts
-version: {{ opensearchVersion }}
+version: "{{ opensearchVersion }}"
 options:
   image:
     repository: oci.stackable.tech/sdp/opensearch-dashboards
     tag: "{{ opensearchVersion }}-stackable{{ stackableReleaseVersion }}"
   labels:
     stackable.tech/vendor: Stackable
-    stackable.tech/stack: {{ STACK }}
+    stackable.tech/stack: "{{ STACK }}"
     # The following is a Jinja2 template directive, not a regular comment.
     # The `#` prefix is required to prevent YAML parsing errors, but Jinja2 still processes it.
     # {% if DEMO is defined %}
-    stackable.tech/demo: {{ DEMO }}
+    stackable.tech/demo: "{{ DEMO }}"
     # {% endif %}
   service:
     type: NodePort
@@ -25,11 +25,11 @@ options:
       stackable.tech/logging-credentials-secret: opensearch-user
     labels:
       stackable.tech/vendor: Stackable
-      stackable.tech/stack: {{ STACK }}
+      stackable.tech/stack: "{{ STACK }}"
       # The following is a Jinja2 template directive, not a regular comment.
       # The `#` prefix is required to prevent YAML parsing errors, but Jinja2 still processes it.
       # {% if DEMO is defined %}
-      stackable.tech/demo: {{ DEMO }}
+      stackable.tech/demo: "{{ DEMO }}"
       # {% endif %}
   opensearchHosts: null # Use the discovery ConfigMap instead
   extraEnvs:
diff --git a/stacks/_templates/postgresql-airflow.yaml b/stacks/_templates/postgresql-airflow.yaml
@@ -8,11 +8,11 @@ version: 18.5.6 # 18.3.0
 options:
   commonLabels:
     stackable.tech/vendor: Stackable
-    stackable.tech/stack: {{ STACK }}
+    stackable.tech/stack: "{{ STACK }}"
     # The following is a Jinja2 template directive, not a regular comment.
     # The `#` prefix is required to prevent YAML parsing errors, but Jinja2 still processes it.
     # {% if DEMO is defined %}
-    stackable.tech/demo: {{ DEMO }}
+    stackable.tech/demo: "{{ DEMO }}"
     # {% endif %}
   auth:
     username: airflow
diff --git a/stacks/_templates/postgresql-druid.yaml b/stacks/_templates/postgresql-druid.yaml
@@ -8,11 +8,11 @@ version: 18.5.6 # 18.3.0
 options:
   commonLabels:
     stackable.tech/vendor: Stackable
-    stackable.tech/stack: {{ STACK }}
+    stackable.tech/stack: "{{ STACK }}"
     # The following is a Jinja2 template directive, not a regular comment.
     # The `#` prefix is required to prevent YAML parsing errors, but Jinja2 still processes it.
     # {% if DEMO is defined %}
-    stackable.tech/demo: {{ DEMO }}
+    stackable.tech/demo: "{{ DEMO }}"
     # {% endif %}
   auth:
     username: druid
diff --git a/stacks/_templates/postgresql-hive-iceberg.yaml b/stacks/_templates/postgresql-hive-iceberg.yaml
@@ -8,11 +8,11 @@ version: 18.5.6 # 18.3.0
 options:
   commonLabels:
     stackable.tech/vendor: Stackable
-    stackable.tech/stack: {{ STACK }}
+    stackable.tech/stack: "{{ STACK }}"
     # The following is a Jinja2 template directive, not a regular comment.
     # The `#` prefix is required to prevent YAML parsing errors, but Jinja2 still processes it.
     # {% if DEMO is defined %}
-    stackable.tech/demo: {{ DEMO }}
+    stackable.tech/demo: "{{ DEMO }}"
     # {% endif %}
   auth:
     username: hive
diff --git a/stacks/_templates/postgresql-hive.yaml b/stacks/_templates/postgresql-hive.yaml
@@ -8,11 +8,11 @@ version: 18.5.6 # 18.3.0
 options:
   commonLabels:
     stackable.tech/vendor: Stackable
-    stackable.tech/stack: {{ STACK }}
+    stackable.tech/stack: "{{ STACK }}"
     # The following is a Jinja2 template directive, not a regular comment.
     # The `#` prefix is required to prevent YAML parsing errors, but Jinja2 still processes it.
     # {% if DEMO is defined %}
-    stackable.tech/demo: {{ DEMO }}
+    stackable.tech/demo: "{{ DEMO }}"
     # {% endif %}
   auth:
     username: hive
diff --git a/stacks/_templates/postgresql-superset.yaml b/stacks/_templates/postgresql-superset.yaml
@@ -8,11 +8,11 @@ version: 18.5.6 # 18.3.0
 options:
   commonLabels:
     stackable.tech/vendor: Stackable
-    stackable.tech/stack: {{ STACK }}
+    stackable.tech/stack: "{{ STACK }}"
     # The following is a Jinja2 template directive, not a regular comment.
     # The `#` prefix is required to prevent YAML parsing errors, but Jinja2 still processes it.
     # {% if DEMO is defined %}
-    stackable.tech/demo: {{ DEMO }}
+    stackable.tech/demo: "{{ DEMO }}"
     # {% endif %}
   auth:
     username: superset
diff --git a/stacks/_templates/postgresql-timescaledb.yaml b/stacks/_templates/postgresql-timescaledb.yaml
@@ -8,11 +8,11 @@ version: 0.33.1
 options:
   podLabels:
     stackable.tech/vendor: Stackable
-    stackable.tech/stack: {{ STACK }}
+    stackable.tech/stack: "{{ STACK }}"
     # The following is a Jinja2 template directive, not a regular comment.
     # The `#` prefix is required to prevent YAML parsing errors, but Jinja2 still processes it.
     # {% if DEMO is defined %}
-    stackable.tech/demo: {{ DEMO }}
+    stackable.tech/demo: "{{ DEMO }}"
     # {% endif %}
   replicaCount: 1
   secrets:
diff --git a/stacks/_templates/vector-aggregator.yaml b/stacks/_templates/vector-aggregator.yaml
@@ -8,19 +8,19 @@ version: 0.52.0 # app version 0.55.0
 options:
   commonLabels:
     stackable.tech/vendor: Stackable
-    stackable.tech/stack: {{ STACK }}
+    stackable.tech/stack: "{{ STACK }}"
     # The following is a Jinja2 template directive, not a regular comment.
     # The `#` prefix is required to prevent YAML parsing errors, but Jinja2 still processes it.
     # {% if DEMO is defined %}
-    stackable.tech/demo: {{ DEMO }}
+    stackable.tech/demo: "{{ DEMO }}"
     # {% endif %}
   podLabels:
     stackable.tech/vendor: Stackable
-    stackable.tech/stack: {{ STACK }}
+    stackable.tech/stack: "{{ STACK }}"
     # The following is a Jinja2 template directive, not a regular comment.
     # The `#` prefix is required to prevent YAML parsing errors, but Jinja2 still processes it.
     # {% if DEMO is defined %}
-    stackable.tech/demo: {{ DEMO }}
+    stackable.tech/demo: "{{ DEMO }}"
     # {% endif %}
   role: Aggregator
   customConfig:
@@ -49,7 +49,7 @@ options:
         auth:
           strategy: basic
           user: admin
-          password: {{ openSearchAdminPassword }}
+          password: "{{ openSearchAdminPassword }}"
   envFrom:
     - configMapRef:
         name: opensearch
diff --git a/stacks/argo-cd-git-ops/secrets/sealed-secrets-key.yaml b/stacks/argo-cd-git-ops/secrets/sealed-secrets-key.yaml
@@ -5,11 +5,11 @@ metadata:
   name: sealed-secrets-key
   labels:
     stackable.tech/vendor: Stackable
-    stackable.tech/stack: {{ STACK }}
+    stackable.tech/stack: "{{ STACK }}"
     # The following is a Jinja2 template directive, not a regular comment.
     # The `#` prefix is required to prevent YAML parsing errors, but Jinja2 still processes it.
     # {% if DEMO is defined %}
-    stackable.tech/demo: {{ DEMO }}
+    stackable.tech/demo: "{{ DEMO }}"
     # {% endif %}
 stringData:
   # Generated on 2025/04/12
diff --git a/stacks/jupyterhub-keycloak/jupyterhub-native-auth.yaml b/stacks/jupyterhub-keycloak/jupyterhub-native-auth.yaml
@@ -41,11 +41,11 @@ options:
       enabled: false
     extraLabels:
       stackable.tech/vendor: Stackable
-      stackable.tech/stack: {{ STACK }}
+      stackable.tech/stack: "{{ STACK }}"
       # The following is a Jinja2 template directive, not a regular comment.
       # The `#` prefix is required to prevent YAML parsing errors, but Jinja2 still processes it.
       # {% if DEMO is defined %}
-      stackable.tech/demo: {{ DEMO }}
+      stackable.tech/demo: "{{ DEMO }}"
       # {% endif %}
     profileList:
       - display_name: "Default"
diff --git a/stacks/jupyterhub-keycloak/jupyterhub.yaml b/stacks/jupyterhub-keycloak/jupyterhub.yaml
@@ -19,7 +19,7 @@ options:
           - isla.williams
       GenericOAuthenticator:
         client_id: jupyterhub
-        client_secret: {{jupyterhubClientPassword}}
+        client_secret: "{{jupyterhubClientPassword}}"
         username_claim: preferred_username
         scope:
           - openid
@@ -149,11 +149,11 @@ options:
       enabled: false
     extraLabels:
       stackable.tech/vendor: Stackable
-      stackable.tech/stack: {{ STACK }}
+      stackable.tech/stack: "{{ STACK }}"
       # The following is a Jinja2 template directive, not a regular comment.
       # The `#` prefix is required to prevent YAML parsing errors, but Jinja2 still processes it.
       # {% if DEMO is defined %}
-      stackable.tech/demo: {{ DEMO }}
+      stackable.tech/demo: "{{ DEMO }}"
       # {% endif %}
     initContainers:
       - name: download-notebook
@@ -199,29 +199,29 @@ options:
           cpu:
             display_name: CPU
             choices:
-{% for cpu in ["1","2","4","8","16","32"] %}
+# {% for cpu in ["1","2","4","8","16","32"] %}
               "{{cpu}}":
                 display_name: "{{cpu}}"
                 kubespawner_override:
-                  cpu_guarantee: {{cpu}}
-                  cpu_limit: {{cpu}}
-{% endfor %}
+                  cpu_guarantee: "{{cpu}}"
+                  cpu_limit: "{{cpu}}"
+# {% endfor %}
           memory:
             display_name: Memory
             choices:
-{% for memory in ["1","2","4","8","16","32","64","128"] %}
+# {% for memory in ["1","2","4","8","16","32","64","128"] %}
               "{{memory}} GB":
                 display_name: "{{memory}} GB"
                 kubespawner_override:
                   mem_guarantee: "{{memory}}G"
                   mem_limit: "{{memory}}G"
-{% endfor %}
+# {% endfor %}
           image:
             display_name: Image
             choices:
-{% for image in ["quay.io/jupyter/pyspark-notebook:python-3.11.9", "quay.io/jupyter/pyspark-notebook:spark-3.5.2"] %}
+# {% for image in ["quay.io/jupyter/pyspark-notebook:python-3.11.9", "quay.io/jupyter/pyspark-notebook:spark-3.5.2"] %}
               "{{image}}":
                 display_name: "{{image}}"
                 kubespawner_override:
                   image: "{{image}}"
-{% endfor %}
+# {% endfor %}
diff --git a/stacks/monitoring/prometheus.yaml b/stacks/monitoring/prometheus.yaml
@@ -8,15 +8,15 @@ version: 82.10.3 # 0.89.0
 options:
   commonLabels:
     stackable.tech/vendor: Stackable
-    stackable.tech/stack: {{ STACK }}
+    stackable.tech/stack: "{{ STACK }}"
     # The following is a Jinja2 template directive, not a regular comment.
     # The `#` prefix is required to prevent YAML parsing errors, but Jinja2 still processes it.
     # {% if DEMO is defined %}
-    stackable.tech/demo: {{ DEMO }}
+    stackable.tech/demo: "{{ DEMO }}"
     # {% endif %}
   prometheusOperator:
     kubeletService:
-      namespace: {{ NAMESPACE }}
+      namespace: "{{ NAMESPACE }}"
   prometheus:
     prometheusSpec:
       storageSpec:
@@ -33,7 +33,7 @@ options:
     grafana.ini:
       analytics:
         check_for_updates: false
-    adminPassword: {{ grafanaAdminPassword }}
+    adminPassword: "{{ grafanaAdminPassword }}"
     persistence:
       enabled: true
       size: 10Gi
diff --git a/stacks/observability/grafana-admin-credentials.yaml b/stacks/observability/grafana-admin-credentials.yaml
diff --git a/stacks/observability/grafana-tempo.yaml b/stacks/observability/grafana-tempo.yaml
diff --git a/stacks/observability/grafana.yaml b/stacks/observability/grafana.yaml
diff --git a/stacks/observability/jaeger.yaml b/stacks/observability/jaeger.yaml
diff --git a/stacks/observability/opentelemetry-operator.yaml b/stacks/observability/opentelemetry-operator.yaml
diff --git a/stacks/signal-processing/grafana.yaml b/stacks/signal-processing/grafana.yaml
diff --git a/stacks/signal-processing/jupyterhub.yaml b/stacks/signal-processing/jupyterhub.yaml
diff --git a/stacks/signal-processing/secrets.yaml b/stacks/signal-processing/secrets.yaml
