feat(helm): add Helm hook annotations to migration Job

Add Helm hook annotations to the migration Job template to ensure proper
recreation during upgrades and prevent immutable field errors.

Changes:
- Add helm.sh/hook: pre-install,pre-upgrade to run Job before install/upgrade
- Add helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded to
  remove old Jobs and clean up succeeded ones
- Bump chart version to 0.9.1
- Update CHANGELOG with migration job fix details

This eliminates upgrade failures caused by Kubernetes rejecting changes to
immutable spec.template fields in existing Job resources.

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

Author: crivetimihai

charts/mcp-stack/CHANGELOG.md

@@ -6,6 +6,17 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/)
 
 ---
 
+## [0.9.1] - 2025-12-03
+
+### Added
+* **Helm Hook Support for Migration Job** - enable recreation of the migration Job on every deployment
+  - helm.sh/hook: pre-install,pre-upgrade — ensures the migration Job runs automatically during installs and upgrades
+  - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded — removes old migration Jobs to prevent immutable field errors
+  - Eliminates upgrade failures caused by changes to spec.template in Kubernetes Jobs
+
+### Changed
+* **Chart version** - Bumped to 0.9.1 for migration job fix
+
 ## [0.9.0] - 2025-11-05
 
 ### Added

charts/mcp-stack/Chart.yaml

@@ -22,7 +22,7 @@ type: application
 # * appVersion   - upstream application version; shown in UIs but not
 #                  used for upgrade logic.
 # --------------------------------------------------------------------
-version: 0.9.0
+version: 0.9.1
 appVersion: "0.9.0"
 
 # Icon shown by registries / dashboards (must be an http(s) URL).

charts/mcp-stack/templates/job-migration.yaml

@@ -6,6 +6,11 @@ metadata:
   labels:
     {{- include "mcp-stack.labels" . | nindent 4 }}
     app.kubernetes.io/component: migration
+  annotations:
+    # Run this Job before install/upgrade
+    "helm.sh/hook": pre-install,pre-upgrade
+    # Delete old Job before new one and clean up succeeded ones
+    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
 spec:
   # Job configuration
   backoffLimit: {{ .Values.migration.backoffLimit }}
@@ -61,16 +66,13 @@ spec:
                 secretKeyRef:
                   name: {{ include "mcp-stack.postgresSecretName" . | trim }}
                   key: POSTGRES_PASSWORD
-
             # ---------- DERIVED URLS ----------
             - name: DATABASE_URL
               value: >-
                 postgresql://$(POSTGRES_USER):$(POSTGRES_PASSWORD)@$(POSTGRES_HOST):$(POSTGRES_PORT)/$(POSTGRES_DB)
-
             # ---------- LOGGING ----------
             - name: LOG_LEVEL
               value: "INFO"
-
           # Resource limits
           resources:
 {{- toYaml .Values.migration.resources | nindent 12 }}