Add flow-0.8.18 and update documentation

examples/values.schema.json

@@ -14,6 +14,21 @@
             "type": "string"
           }
         },
+        "image": {
+          "type": "object",
+          "description": "Global image settings applied to all services unless overridden",
+          "properties": {
+            "tag": {
+              "type": "string",
+              "description": "Default image tag for all services (overrides Chart.appVersion)"
+            },
+            "pullPolicy": {
+              "type": "string",
+              "enum": ["Always", "IfNotPresent", "Never"],
+              "description": "Default image pull policy for all services"
+            }
+          }
+        },
         "azureAd": {
           "type": "object",
           "properties": {

examples/values.yaml

@@ -13,6 +13,18 @@ global:
   # -- Image pull secrets (list of existing secret names)
   imagePullSecrets: []
   
+  # -- Global image settings applied to all services unless overridden
+  image:
+    # -- Default image tag for all services (overrides Chart.appVersion)
+    # Set to a specific version (e.g., "1.0.0") or "latest" for development
+    # Individual services can override this with their own image.tag
+    tag: ""
+    # -- Default image pull policy for all services
+    # Options: Always, IfNotPresent, Never
+    # When tag is "latest" or empty, this defaults to "Always"
+    # Individual services can override this with their own image.pullPolicy
+    pullPolicy: "IfNotPresent"
+  
   # -- Image registry credentials for private registries (e.g., Harbor)
   # When enabled, creates a dockerconfigjson secret for pulling images
   # This is required for Harbor even for public repositories
@@ -1671,7 +1683,7 @@ tls:
   minVersion: "1.2"
   
   # -- Cipher suites (leave empty for secure defaults)
-  # Recommended for TLS 1.2: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
+  # Recommended for TLS 1.2: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GLM_SHA256
   cipherSuites: []
   
   # -- Additional DNS names to include in all certificates