From 5776f86952f871180d4a309b5cbffc5b17c0bba1 Mon Sep 17 00:00:00 2001
From: jenkins <jenkins@bstein.dev>
Date: Tue, 14 Jul 2026 19:56:14 -0300
Subject: [PATCH] chore(veles): deploy 0.6.82 bootstrap hardening

---
 services/veles/backend-deployment.yaml  | 12 +++++++-----
 services/veles/configmap.yaml           |  4 ++--
 services/veles/frontend-deployment.yaml |  2 +-
 services/veles/retention-cronjob.yaml   |  2 +-
 4 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/services/veles/backend-deployment.yaml b/services/veles/backend-deployment.yaml
index 9bafebf8a..4af3b7daf 100644
--- a/services/veles/backend-deployment.yaml
+++ b/services/veles/backend-deployment.yaml
@@ -22,7 +22,7 @@ spec:
       labels:
         app: veles-backend
       annotations:
-        veles.bstein.dev/redeploy: "2026-07-14-0.6.81-payoff-exposure-hardening"
+        veles.bstein.dev/redeploy: "2026-07-14-0.6.82-bootstrap-hardening"
         vault.hashicorp.com/agent-inject: "true"
         vault.hashicorp.com/agent-init-first: "true"
         vault.hashicorp.com/agent-pre-populate-only: "true"
@@ -63,7 +63,7 @@ spec:
           type: RuntimeDefault
       initContainers:
         - name: database-init
-          image: registry.bstein.dev/veles/veles-backend:0.6.81 # {"$imagepolicy": "veles:veles-backend"}
+          image: registry.bstein.dev/veles/veles-backend:0.6.82 # {"$imagepolicy": "veles:veles-backend"}
           imagePullPolicy: Always
           command: ["/bin/sh", "-c"]
           args:
@@ -85,7 +85,7 @@ spec:
               memory: 512Mi
       containers:
         - name: backend
-          image: registry.bstein.dev/veles/veles-backend:0.6.81 # {"$imagepolicy": "veles:veles-backend"}
+          image: registry.bstein.dev/veles/veles-backend:0.6.82 # {"$imagepolicy": "veles:veles-backend"}
           imagePullPolicy: Always
           command: ["/bin/sh", "-c"]
           args:
@@ -108,19 +108,21 @@ spec:
               port: http
             initialDelaySeconds: 5
             periodSeconds: 10
+            timeoutSeconds: 3
           livenessProbe:
             httpGet:
               path: /api/v1/live
               port: http
             initialDelaySeconds: 20
             periodSeconds: 20
+            timeoutSeconds: 3
           resources:
             requests:
               cpu: 250m
-              memory: 1Gi
+              memory: 2Gi
             limits:
               cpu: "1"
-              memory: 4Gi
+              memory: 8Gi
           securityContext:
             runAsNonRoot: true
             runAsUser: 10001
diff --git a/services/veles/configmap.yaml b/services/veles/configmap.yaml
index dd0a903ed..c6687807d 100644
--- a/services/veles/configmap.yaml
+++ b/services/veles/configmap.yaml
@@ -18,8 +18,8 @@ data:
   VELES_OIDC_REQUIRED_GROUPS: alpha,veles-tester,admin
   VELES_OIDC_ADMIN_GROUPS: admin
   VELES_NAMESPACE: veles
-  VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.6.81 # {"$imagepolicy": "veles:veles-sim-worker"}
-  VELES_SIM_WORKER_VERSION: "0.6.81"
+  VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.6.82 # {"$imagepolicy": "veles:veles-sim-worker"}
+  VELES_SIM_WORKER_VERSION: "0.6.82"
   VELES_SIM_SERVICE_ACCOUNT: veles-sim
   VELES_SIM_PRIORITY_CLASS: veles-sim
   VELES_SIM_NODE_SELECTOR: veles.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64
diff --git a/services/veles/frontend-deployment.yaml b/services/veles/frontend-deployment.yaml
index 110786ee0..fa8431637 100644
--- a/services/veles/frontend-deployment.yaml
+++ b/services/veles/frontend-deployment.yaml
@@ -48,7 +48,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: frontend
-          image: registry.bstein.dev/veles/veles-frontend:0.6.81 # {"$imagepolicy": "veles:veles-frontend"}
+          image: registry.bstein.dev/veles/veles-frontend:0.6.82 # {"$imagepolicy": "veles:veles-frontend"}
           imagePullPolicy: Always
           ports:
             - name: http
diff --git a/services/veles/retention-cronjob.yaml b/services/veles/retention-cronjob.yaml
index e509dd651..18e1eba5a 100644
--- a/services/veles/retention-cronjob.yaml
+++ b/services/veles/retention-cronjob.yaml
@@ -37,7 +37,7 @@ spec:
               type: RuntimeDefault
           containers:
             - name: retention
-              image: registry.bstein.dev/veles/veles-backend:0.6.81 # {"$imagepolicy": "veles:veles-backend"}
+              image: registry.bstein.dev/veles/veles-backend:0.6.82 # {"$imagepolicy": "veles:veles-backend"}
               imagePullPolicy: IfNotPresent
               command: ["veles-hygiene"]
               args: ["--prune-artifacts"]