# \[ACTION REQUIRED\] Helm Chart Moving from Bitnami to Official MongoDB Chart **URL:** \ **Category:** Announcements\ **Tags:** guide\ **Created:** [January 16, 2026, 9:08pm UTC](https://forums.rocket.chat/t/action-required-helm-chart-moving-from-bitnami-to-official-mongodb-chart/22679 "2026-01-16T21:08:43Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![aaron.ogle](https://sea1.discourse-cdn.com/flex021/user_avatar/forums.rocket.chat/aaron.ogle/32/15_2.png) [@aaron.ogle](https://forums.rocket.chat/u/aaron.ogle)\ **Post date:** [January 16, 2026, 9:08pm UTC](https://forums.rocket.chat/t/action-required-helm-chart-moving-from-bitnami-to-official-mongodb-chart/22679/1 "2026-01-16T21:08:43Z")
## Overview We will be **removing Bitnami MongoDB from the Rocket.Chat Helm chart**. This guide walks you through setting up MongoDB externally using the MongoDB Community Operator and migrating your existing data. **What’s changing:** - Bitnami MongoDB will no longer be updated in the Rocket.Chat Chart. - Bitnami MongoDB will be getting removed as a subchart dependency in Rocket.Chat’s Chart. - MongoDB will now need to be deployed and managed independently using the MongoDB Community Operator - You have full control over MongoDB deployments and updates, separate from Rocket.Chat updates * * * ## Background & Why This Change Was Necessary Over the past several years, Bitnami has been the go-to provider for providing MongoDB in our Helm chart. However, significant changes in the community have necessitated a shift in strategy: **Recent Events:** 1. **Bitnami Acquisition Impact** : Bitnami was acquired by VMware (which itself was previously acquired by Broadcom). Following this acquisition, the decision was made to discontinue support for their legacy images and charts that have been the foundation for countless deployments in the community. Rather than continue community support, users are now directed to paid enterprise solutions. 2. **MongoDB CVE & Lack of Updates** : A critical security vulnerability (CVE) was recently discovered in MongoDB. With Bitnami no longer publishing updated images, we face an impossible situation: we cannot recommend users simply update their image to patch the vulnerability, as Bitnami will not be releasing any new images. 3. **MongoDB EOL versions** : MongoDB ends support for older versions of MongoDB so Rocket.Chat needs to keep updating which version we support. MongoDB 7 and 8 both are not present and will not be released by Bitnami **The Solution** : To ensure security, continued support, and access to updated MongoDB versions, we are updating our recommendation to use the **MongoDB Helm chart** published by MongoDB. This chart is actively maintained by MongoDB and receives regular security updates and feature enhancements. We’re recommending deploying **MongoDB 8.2** , the latest version, which includes the latest security patches and performance improvements. ### Important Notes Before You Begin ⚠ **Please read carefully:** - **If you’re already using an external MongoDB instance** (not running MongoDB inside your Kubernetes cluster via Helm), you are **not affected** by this change. You can skip this migration. - **Data backup is critical**. Migrating to external MongoDB requires careful data handling. A backup is essential before proceeding. - **After this migration** : MongoDB will be running in your Kubernetes cluster as an external service (from Rocket.Chat’s perspective). You maintain full control over the MongoDB deployment and can manage it independently from Rocket.Chat updates. * * * ## Step-by-Step Migration Guide This migration requires a brief period of downtime while you transition your data from the Bitnami chart to a standalone MongoDB deployment via the official MongoDB Helm chart. ### Before you start Please make sure you have kubectl and helm tools installed on your machine. Going forward you will see: `` and `` a lot. If you don’t remember those you can run: ```auto helm list -A ``` You should see an output like this: ```auto ❯ helm list -A NAME NAMESPACE REVISION UPDATED STATUS CHART APP VERSION rocketchat rocketchat 2 2026-01-16 14:38:18.743582 -0600 CST deployed rocketchat-6.29.0 8.0.1 ``` In my case: ```auto -> rocketchat -> rocketchat ``` ### Step 1: Stop Rocket.Chat First, stop the Rocket.Chat deployment to ensure no new data is written during the transition: ```bash # Scale down ALL services and microservices to 0 replicas # This includes the main rocketchat deployment AND all microservices kubectl scale deployment -n \ -rocketchat \ -account \ -authorization \ -ddp-streamer \ -presence \ --replicas=0 # Wait for pods to terminate kubectl wait --for=delete pod -l app.kubernetes.io/name=rocketchat -n --timeout=300s ``` **⚠ Important:** Make sure to scale down ALL deployments, not just the main rocketchat deployment. If you have microservices enabled, you need to scale down all of them (account, authorization, ddp-streamer, presence) to ensure no writes occur during migration. This gives you a clean window to backup and migrate your data without any writes happening. ### Step 2: Backup Your MongoDB Data Create a backup of your current MongoDB data from the Bitnami chart. This is the most critical step. ```bash # Identify your MongoDB pod # The pod name may vary depending on your release name, but typically looks like: -mongodb-0 kubectl get pods -n | grep mongodb # Get the MongoDB root password from the secret MONGO_ROOT_PASSWORD=$(kubectl get secret -mongodb -n \ -o jsonpath='{.data.mongodb-root-password}' | base64 -d) echo "Root password: $MONGO_ROOT_PASSWORD" # Create a backup using mongodump # IMPORTANT: Use ?authSource=admin to backup ALL databases, not just admin kubectl exec -it -mongodb-0 -n -- \ mongodump --uri="mongodb://root:${MONGO_ROOT_PASSWORD}@localhost:27017/?authSource=admin" --out /tmp/backup # Copy the backup out of the pod to your local machine kubectl cp /-mongodb-0:/tmp/backup ./mongodb-backup ``` **⚠ Critical Notes** : - The Bitnami MongoDB chart creates an auto-generated root password stored in the `-mongodb` secret - Use `?authSource=admin` in the connection string to ensure ALL databases are backed up - The Rocket.Chat data is in the `rocketchat` database - Your backup should contain a `rocketchat/` directory Verify your backup was created successfully: ```bash ls -la ./mongodb-backup du -sh ./mongodb-backup ``` ### Step 3: Deploy the Official MongoDB Helm Chart Now deploy the official MongoDB Kubernetes operator and create a MongoDB community instance running MongoDB 8.2. **Step 3a: Prerequisites** Take note of the storageclass you’ll need it. ```bash # Check available StorageClasses kubectl get storageclass ``` **Step 3b: Add the MongoDB Helm repository** ```bash helm repo add mongodb https://mongodb.github.io/helm-charts helm repo update ``` **Step 3c: Install the MongoDB Kubernetes Operator** > **⚠ Important:** Do NOT install the CRDs separately! The operator chart manages them automatically. ```bash helm install mongodb-kubernetes-operator mongodb/mongodb-kubernetes \ -n ``` Wait for the operator to be ready: ```bash kubectl rollout status deployment/mongodb-kubernetes-operator \ -n \ --timeout=300s ``` **Step 3d: Create MongoDB User Secrets and SCRAM Credentials** Create a file named **mongodb-secrets.yaml** with the following contents. **⚠ REQUIRED:** Replace all `` values with actual secure passwords. ```yaml --- apiVersion: v1 kind: Secret metadata: namespace: name: mongodb-admin-password type: Opaque stringData: password: --- apiVersion: v1 kind: Secret metadata: namespace: name: mongodb-rocketchat-password type: Opaque stringData: password: --- apiVersion: v1 kind: Secret metadata: namespace: name: metrics-endpoint-password type: Opaque stringData: password: --- apiVersion: v1 kind: Secret metadata: namespace: name: admin-scram-credentials type: Opaque stringData: username: admin password: --- apiVersion: v1 kind: Secret metadata: namespace: name: rocketchat-scram-credentials type: Opaque stringData: username: rocketchat password: ``` Apply the secrets: ```bash kubectl apply -f mongodb-secrets.yaml ``` **Step 3e: Deploy the MongoDB Community Resource** Create a file named **mongodb-community. yaml** with the following contents. **⚠ REQUIRED:** Replace `` with your actual StorageClass name you got earlier. ```yaml apiVersion: mongodbcommunity.mongodb.com/v1 kind: MongoDBCommunity metadata: name: mongodb namespace: spec: members: 3 type: ReplicaSet version: "8.2.3" security: authentication: modes: ["SCRAM"] tls: enabled: false users: - name: admin db: admin passwordSecretRef: name: mongodb-admin-password scramCredentialsSecretName: admin-scram-credentials roles: - name: root db: admin - name: rocketchat db: rocketchat passwordSecretRef: name: mongodb-rocketchat-password scramCredentialsSecretName: rocketchat-scram-credentials roles: - name: readWrite db: rocketchat prometheus: username: prometheus-username passwordSecretRef: name: metrics-endpoint-password statefulSet: spec: volumeClaimTemplates: - metadata: name: data-volume spec: accessModes: ["ReadWriteOnce"] storageClassName: resources: requests: storage: 50Gi template: spec: containers: - name: mongod resources: # set these to what are appropriate for your Rocket.Chat deployment limits: cpu: 1500m memory: 6Gi requests: cpu: 500m memory: 1Gi ``` Apply the MongoDB resource: ```bash kubectl apply -f mongodb-community.yaml ``` **Step 3f: Wait for MongoDB to be ready** ```bash # Check MongoDB pod status kubectl get pods -n | grep mongodb # Wait for all MongoDB pods to be Running and Ready kubectl wait --for=condition=ready pod -l app=mongodb \ -n \ --timeout=300s ``` Verify MongoDB is healthy: ```bash kubectl exec -it mongodb-0 -n -- \ mongosh admin --eval "db.adminCommand('ping')" ``` You should see: `{ ok: 1 }` **Step 3g: Verify MongoDB Service has endpoints** ```bash kubectl get endpoints mongodb-svc -n ``` You should see the MongoDB pod’s IP address listed. If endpoints are empty, the service selector isn’t matching the pod labels correctly. ### Step 4: Restore Your Backup Data **Step 4a: Retrieve MongoDB connection details** ```bash MONGO_PASSWORD=$(kubectl get secret mongodb--password \ -n -o jsonpath='{.data. password}' | base64 -d) echo "MongoDB URI:" echo "mongodb://rocketchat: ${MONGO_PASSWORD}@mongodb-0.mongodb-svc..svc.cluster. local:27017/rocketchat? authSource=rocketchat&replicaSet=mongodb" ``` **Save this URI** - you’ll need it in the next steps. ### Step 4b: Restore your data to the new MongoDB Once the new MongoDB instance is running and ready, restore your backup: ```bash # Copy your backup into one of the MongoDB pods kubectl cp ./mongodb-backup /mongodb-0:/tmp/backup # Restore the data using mongorestore kubectl exec -it mongodb-0 -n -- \ mongorestore --uri="mongodb://rocketchat:@mongodb-0.mongodb-svc. .svc.cluster.local:27017/rocketchat" \ /tmp/backup/rocketchat ``` **Note** : Adjust the connection string to match your MongoDB configuration (username, password, namespace, etc.) **Verify the restore was successful** : ```bash kubectl exec -it mongodb-0 -n -- \ mongosh -u rocketchat -p '' --authenticationDatabase rocketchat \ --eval "use rocketchat; show collections" ``` You should see your collections (workspaces, users, subscriptions, messages, etc.) restored. ### Step 5: Upgrade Rocket.Chat with External MongoDB Now upgrade the Rocket.Chat Helm chart to use the external MongoDB instance: **Step 5a: Upgrade the Rocket.Chat Helm chart** ```bash # Update your Helm repository helm repo update # Upgrade the Rocket.Chat Helm chart with the external MongoDB URI # IMPORTANT: Include ALL your existing helm values (host, ingress, image tag, NATS config, etc.) # along with the new MongoDB configuration helm upgrade rocketchat/rocketchat -n \ --set host= \ --set ingress.enabled= \ --set nats.cluster.name= \ --set image.tag= \ --set mongodb.enabled=false \ --set externalMongodbUrl="mongodb://rocketchat:${MONGO_PASSWORD}@mongodb-0.mongodb-svc..svc.cluster.local:27017/rocketchat?authSource=rocketchat&replicaSet=mongodb" ``` **⚠ Critical:** You MUST include all your existing Rocket.Chat configuration values in the helm upgrade command. If you omit values like `host`, `ingress.enabled`, `nats.cluster.name`, or `image.tag`, they will revert to chart defaults and may break your deployment. Use `helm get values -n ` to see your current values. The upgrade will: 1. Disable the built in insecure and outdate bitnami mongodb 2. Configure Rocket.Chat to connect to your new external MongoDB instance you deployed using the mongodb chart 3. Start Rocket.Chat with the connection to the external MongoDB replicaset **Step 5b: Scale services back up** ```bash # Scale the main Rocket.Chat deployment back to 1 replica kubectl scale deployment -rocketchat -n --replicas=1 # Scale all microservices back to 1 replica kubectl scale deployment -n \ -account \ -authorization \ -ddp-streamer \ -presence \ --replicas=1 ``` Wait for Rocket.Chat to be ready: ```bash kubectl rollout status deployment/-rocketchat \ -n \ --timeout=300s ``` ### Step 6: Verify the Migration Once the upgrade completes, verify that everything is working correctly: ```bash # Check all pods are running kubectl get pods -n # Check Rocket.Chat logs to confirm it's started and connected to MongoDB kubectl logs deployment/-rocketchat -n | grep -A 15 "SERVER RUNNING" ``` You should see output like: ```auto +----------------------------------------------+ | SERVER RUNNING | +----------------------------------------------+ | | | Rocket.Chat Version: 8.0.1 | | NodeJS Version: 22.16.0 - arm64 | | MongoDB Version: 8.2.3 | | MongoDB Engine: unknown | | Platform: linux | | Process Port: 3000 | | Site URL: http://localhost:3000 | | Commit Hash: 7137ec80f3 | | Commit Branch: HEAD | | | +----------------------------------------------+ ``` This confirms Rocket.Chat has successfully connected to MongoDB and is ready. **Additional verification** : ```bash # Verify MongoDB is healthy and replicating kubectl exec -it mongodb-0 -n -- \ mongosh admin --eval "rs.status()" ``` ### Connect to Rocket.Chat web interface You’ll likely be presented with this pop up: ![Screenshot 2026-01-16 at 2.40.42 PM](https://us1.discourse-cdn.com/flex021/uploads/rocketchat/original/2X/b/bfbde0442ad492cf165cc4142a1080e9e1d6a153.png) Be sure to click Configuration Update. * * * ## 📋 Troubleshooting ### MongoDB operator pod not starting ```bash kubectl logs deployment/mongodb-kubernetes-operator -n kubectl describe deployment mongodb-kubernetes-operator -n ``` ### MongoDB pods not starting ```bash kubectl logs mongodb-0 -n kubectl describe mongodbcommunity mongodb -n ``` ### Rocket.Chat can’t connect to MongoDB ```bash # Verify MongoDB service is accessible kubectl get svc -n | grep mongodb # Test connection from a debug pod kubectl run -it --rm debug --image=mongo:8.2.3 --restart=Never -n -- \ mongosh "mongodb://rocketchat:@mongodb-0.mongodb-svc.. svc.cluster.local:27017/rocketchat?authSource=rocketchat" # Check Rocket.Chat logs for connection errors kubectl logs deployment/-rocketchat -n ``` ### Persistent Volume issues ```bash kubectl get pvc -n kubectl describe pvc -n ``` ### Data didn’t restore correctly - Verify the backup wasn’t corrupted: `ls -la ./mongodb-backup` - Check MongoDB logs for restore errors: `kubectl logs mongodb-0 -n ` - Verify you have the correct credentials and authentication database - Try a test restore to a different database first: `mongorestore --uri="..." --nsInclude="backup.*" /tmp/backup` ### Old Bitnami MongoDB pod still exists - The old MongoDB pod should be automatically removed during the Helm upgrade - If it persists, check for any remaining PVCs: `kubectl get pvc -n ` - Manually delete old PVCs if needed (after confirming backup): `kubectl delete pvc -n ` * * * ## 🔄 Common Operations After Migration ### Take a backup ```bash kubectl exec -it mongodb-0 -n -- \ mongodump --uri="mongodb://admin: @mongodb-0.mongodb-svc.. svc.cluster.local:27017/admin" \ --out /tmp/backup kubectl cp /mongodb-0:/tmp/backup ./mongodb-backup-$(date +%Y%m%d) ``` ### Restore a backup ```bash # Copy your backup into one of the MongoDB pods kubectl cp ./mongodb-backup /mongodb-0:/tmp/backup # Restore the data using mongorestore kubectl exec -it mongodb-0 -n -- \ mongorestore --uri="mongodb://rocketchat:@mongodb-0.mongodb-svc..svc. cluster.local:27017/rocketchat" \ /tmp/backup/rocketchat ``` ### Update MongoDB version ```bash kubectl patch mongodbcommunity mongodb -n \ --type='json' -p='[{"op": "replace", "path": "/spec/version", "value": "8.2.4"}]' ``` ### Check MongoDB replica set status ```bash kubectl exec -it mongodb-0 -n -- \ mongosh admin --eval "rs.status()" ``` * * * ## 📚 Additional Resources - [MongoDB Community Operator GitHub](https://github.com/mongodb/mongodb-kubernetes-operator) - [MongoDB Helm Charts](https://github.com/mongodb/helm-charts) - [Rocket.Chat Helm Charts](https://github.com/RocketChat/helm-charts) - [Kubernetes StorageClass Documentation](https://kubernetes.io/docs/concepts/storage/storage-classes/) - [MongoDB Database Resource Specification](https://www.mongodb.com/docs/kubernetes/current/reference/k8s-operator-specification/) * * * ## Getting Help If you encounter issues during the migration: - Check the [official MongoDB Kubernetes Operator documentation](https://github.com/mongodb/mongodb-kubernetes-operator) - Review the [Rocket.Chat Helm charts repository](https://github.com/RocketChat/helm-charts) - Post in our community forums with details of the error you’re encountering ---
**Author:** ![reetp](https://sea1.discourse-cdn.com/flex021/user_avatar/forums.rocket.chat/reetp/32/5546_2.png) [@reetp](https://forums.rocket.chat/u/reetp)\ **Post date:** [January 17, 2026, 9:15am UTC](https://forums.rocket.chat/t/action-required-helm-chart-moving-from-bitnami-to-official-mongodb-chart/22679/2 "2026-01-17T09:15:41Z")
Aaron, what about docker? As per this: > [@RC v7.x to v8.0.1 needing to upgrade MongoDB to v8.2](https://forums.rocket.chat/t/rc-v7-x-to-v8-0-1-needing-to-upgrade-mongodb-to-v8-2/22676): > > What version are you coming from? 7.13.1 What version are you going to? 8.0.1 What deployment method did you use to deploy? Docker Did you follow a particular doc? Which one? What issues are you running into upgrading? Bitnami/MongoDB v6 no longer supported. MongoDB v8.2 required, but not being pulled. ---
**Author:** ![reetp](https://sea1.discourse-cdn.com/flex021/user_avatar/forums.rocket.chat/reetp/32/5546_2.png) [@reetp](https://forums.rocket.chat/u/reetp)\ **Post date:** [January 18, 2026, 9:26am UTC](https://forums.rocket.chat/t/action-required-helm-chart-moving-from-bitnami-to-official-mongodb-chart/22679/4 "2026-01-18T09:26:56Z")
> [@RC v7.x to v8.0.1 needing to upgrade MongoDB to v8.2](https://forums.rocket.chat/t/rc-v7-x-to-v8-0-1-needing-to-upgrade-mongodb-to-v8-2/22676/9): > > I worked through this over the last 24 hours with a succesful upgrade from RC v7 and MongoDB v7 to RC v8.0.1 and MongoDB v8.2.3 for test docker environment. Found [here (RC develop compose.yml)](https://github.com/RocketChat/Rocket.Chat/blob/develop/docker-compose-local.yml) line 133: mongo: image: mongodb/mongodb-community-server:8.2-ubi8 Upgrade notes: ## Take backup of existing database for restoration post MongoDB version upgrade ## # Confirm correct DB name. Make backup of the correct database... $ docker exec -it rocketchat-mongodb-1 mongosh --eval "show dbs" a… ---
**Author:** ![aaron.ogle](https://sea1.discourse-cdn.com/flex021/user_avatar/forums.rocket.chat/aaron.ogle/32/15_2.png) [@aaron.ogle](https://forums.rocket.chat/u/aaron.ogle)\ **Post date:** [January 20, 2026, 11:22pm UTC](https://forums.rocket.chat/t/action-required-helm-chart-moving-from-bitnami-to-official-mongodb-chart/22679/5 "2026-01-20T23:22:19Z")
Docker compose will have subsequent forum post here in next couple of days. Confirming a detailed process like this to make sure its clear what to do. ---
**Author:** ![aaron.ogle](https://sea1.discourse-cdn.com/flex021/user_avatar/forums.rocket.chat/aaron.ogle/32/15_2.png) [@aaron.ogle](https://forums.rocket.chat/u/aaron.ogle)\ **Post date:** [January 23, 2026, 1:09am UTC](https://forums.rocket.chat/t/action-required-helm-chart-moving-from-bitnami-to-official-mongodb-chart/22679/6 "2026-01-23T01:09:07Z")
Compose update instructions can be found here: [[ACTION REQUIRED] Docker Compose Moving from Bitnami to Official MongoDB Image](https://forums.rocket.chat/t/action-required-docker-compose-moving-from-bitnami-to-official-mongodb-image/22693)