Deploy Veles 0.4.10 replay stability

services/veles/backend-deployment.yaml

@@ -17,7 +17,7 @@ spec:
       labels:
         app: veles-backend
       annotations:
-        veles.bstein.dev/redeploy: "2026-06-28-0.4.5-public-feedback-replay"
+        veles.bstein.dev/redeploy: "2026-06-29-0.4.10-replay-compression"
         vault.hashicorp.com/agent-inject: "true"
         vault.hashicorp.com/agent-init-first: "true"
         vault.hashicorp.com/agent-pre-populate-only: "true"
@@ -58,7 +58,7 @@ spec:
           type: RuntimeDefault
       initContainers:
         - name: database-init
-          image: registry.bstein.dev/veles/veles-backend:0.4.5 # {"$imagepolicy": "veles:veles-backend"}
+          image: registry.bstein.dev/veles/veles-backend:0.4.10 # {"$imagepolicy": "veles:veles-backend"}
           imagePullPolicy: Always
           command: ["/bin/sh", "-c"]
           args:
@@ -80,7 +80,7 @@ spec:
               memory: 512Mi
       containers:
         - name: backend
-          image: registry.bstein.dev/veles/veles-backend:0.4.5 # {"$imagepolicy": "veles:veles-backend"}
+          image: registry.bstein.dev/veles/veles-backend:0.4.10 # {"$imagepolicy": "veles:veles-backend"}
           imagePullPolicy: Always
           command: ["/bin/sh", "-c"]
           args:

services/veles/configmap.yaml

@@ -18,7 +18,7 @@ data:
   VELES_OIDC_REQUIRED_GROUPS: alpha,veles-tester,admin
   VELES_OIDC_ADMIN_GROUPS: admin
   VELES_NAMESPACE: veles
-  VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.4.5 # {"$imagepolicy": "veles:veles-sim-worker"}
+  VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.4.10 # {"$imagepolicy": "veles:veles-sim-worker"}
   VELES_SIM_SERVICE_ACCOUNT: veles-sim
   VELES_SIM_PRIORITY_CLASS: veles-sim
   VELES_SIM_NODE_SELECTOR: veles.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64

services/veles/feedback-mirror-cronjob.yaml

@@ -1,84 +0,0 @@
-# services/veles/feedback-mirror-cronjob.yaml
-apiVersion: batch/v1
-kind: CronJob
-metadata:
-  name: veles-feedback-mirror
-  namespace: veles
-  labels:
-    app: veles-feedback-mirror
-spec:
-  schedule: "*/15 * * * *"
-  concurrencyPolicy: Forbid
-  successfulJobsHistoryLimit: 1
-  failedJobsHistoryLimit: 3
-  jobTemplate:
-    spec:
-      template:
-        metadata:
-          labels:
-            app: veles-feedback-mirror
-        spec:
-          restartPolicy: Never
-          serviceAccountName: veles-feedback-mirror
-          automountServiceAccountToken: false
-          priorityClassName: veles-core
-          nodeSelector:
-            veles.bstein.dev/node-pool: oceanus
-            kubernetes.io/arch: amd64
-          tolerations:
-            - key: veles.bstein.dev/simulation
-              operator: Equal
-              value: "true"
-              effect: NoSchedule
-          securityContext:
-            fsGroup: 10001
-            fsGroupChangePolicy: OnRootMismatch
-            seccompProfile:
-              type: RuntimeDefault
-          containers:
-            - name: mirror
-              image: registry.bstein.dev/veles/veles-backend:0.4.5 # {"$imagepolicy": "veles:veles-backend"}
-              imagePullPolicy: IfNotPresent
-              command: ["/bin/sh", "-c"]
-              args:
-                - |
-                  set -eu
-                  if [ -z "${GITEA_TOKEN:-}" ]; then
-                    echo "No GITEA_TOKEN configured for feedback mirror; leaving existing mirror untouched."
-                    exit 0
-                  fi
-                  exec veles-feedback-mirror \
-                    --api-base-url "${VELES_FEEDBACK_GITEA_API_URL:-https://scm.bstein.dev/api/v1}" \
-                    --repo "${VELES_FEEDBACK_REPO:-veles-alpha/feedback}" \
-                    --output "${VELES_FEEDBACK_MIRROR_PATH:-/data/veles-artifacts/artifacts/feedback/issues.json}"
-              envFrom:
-                - configMapRef:
-                    name: veles-config
-              env:
-                - name: GITEA_TOKEN
-                  valueFrom:
-                    secretKeyRef:
-                      name: veles-feedback-mirror
-                      key: GITEA_TOKEN
-                      optional: true
-              volumeMounts:
-                - name: artifacts
-                  mountPath: /data/veles-artifacts
-              resources:
-                requests:
-                  cpu: 25m
-                  memory: 128Mi
-                limits:
-                  cpu: 200m
-                  memory: 384Mi
-              securityContext:
-                runAsNonRoot: true
-                runAsUser: 10001
-                runAsGroup: 10001
-                allowPrivilegeEscalation: false
-                capabilities:
-                  drop: ["ALL"]
-          volumes:
-            - name: artifacts
-              persistentVolumeClaim:
-                claimName: veles-artifacts

services/veles/frontend-deployment.yaml

@@ -48,7 +48,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: frontend
-          image: registry.bstein.dev/veles/veles-frontend:0.4.5 # {"$imagepolicy": "veles:veles-frontend"}
+          image: registry.bstein.dev/veles/veles-frontend:0.4.10 # {"$imagepolicy": "veles:veles-frontend"}
           imagePullPolicy: Always
           ports:
             - name: http

services/veles/kustomization.yaml

@@ -18,7 +18,6 @@ resources:
   - backend-deployment.yaml
   - frontend-deployment.yaml
   - retention-cronjob.yaml
-  - feedback-mirror-cronjob.yaml
   - image.yaml
   - ingress.yaml
   - oneoffs/veles-secrets-ensure-job.yaml

services/veles/retention-cronjob.yaml

@@ -37,7 +37,7 @@ spec:
               type: RuntimeDefault
           containers:
             - name: retention
-              image: registry.bstein.dev/veles/veles-backend:0.4.5 # {"$imagepolicy": "veles:veles-backend"}
+              image: registry.bstein.dev/veles/veles-backend:0.4.10 # {"$imagepolicy": "veles:veles-backend"}
               imagePullPolicy: IfNotPresent
               command: ["veles-hygiene"]
               args: ["--prune-artifacts"]

services/veles/serviceaccounts.yaml

@@ -35,15 +35,6 @@ imagePullSecrets:
 ---
 apiVersion: v1
 kind: ServiceAccount
-metadata:
-  name: veles-feedback-mirror
-  namespace: veles
-automountServiceAccountToken: false
-imagePullSecrets:
-  - name: harbor-regcred
----
-apiVersion: v1
-kind: ServiceAccount
 metadata:
   name: veles-vault-sync
   namespace: veles