From 1d70a175f1d696ebd035063269aaa218b39342d8 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 22 Jul 2026 21:44:29 +0000 Subject: [PATCH 001/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 21d6b79e..ed732708 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -20,7 +20,7 @@ resources: - ingress.yaml images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend - newTag: 0.1.1-413 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} + newTag: 0.1.1-414 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend newTag: 0.1.1-413 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: From 3234abb43860c699a581cb04262b05099ef1c217 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 22 Jul 2026 21:47:29 +0000 Subject: [PATCH 002/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index ed732708..8ceec0fc 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -22,7 +22,7 @@ images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend newTag: 0.1.1-414 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend - newTag: 0.1.1-413 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} + newTag: 0.1.1-414 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: - name: chat-ai-gateway namespace: bstein-dev-home From 483541677b218b8af3d85574472442ae94c1f988 Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Wed, 22 Jul 2026 21:03:01 -0300 Subject: [PATCH 003/991] Deploy Cassandra 0.7.56 --- services/veles/backend-deployment.yaml | 6 +++--- services/veles/configmap.yaml | 4 ++-- services/veles/frontend-deployment.yaml | 2 +- services/veles/retention-cronjob.yaml | 2 +- 4 files changed, 7 insertions(+), 7 deletions(-) diff --git a/services/veles/backend-deployment.yaml b/services/veles/backend-deployment.yaml index 86555947..f25466f3 100644 --- a/services/veles/backend-deployment.yaml +++ b/services/veles/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: veles-backend annotations: - veles.bstein.dev/redeploy: "2026-07-22-0.7.52-route-discard-table-preview" + veles.bstein.dev/redeploy: "2026-07-22-0.7.56-attribution-envelope" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" @@ -63,7 +63,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/veles/veles-backend:0.7.52 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.56 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -85,7 +85,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/veles/veles-backend:0.7.52 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.56 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/veles/configmap.yaml b/services/veles/configmap.yaml index 7c80f54e..1efc38c1 100644 --- a/services/veles/configmap.yaml +++ b/services/veles/configmap.yaml @@ -18,8 +18,8 @@ data: VELES_OIDC_REQUIRED_GROUPS: alpha,veles-tester,admin VELES_OIDC_ADMIN_GROUPS: admin VELES_NAMESPACE: veles - VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.7.52 # {"$imagepolicy": "veles:veles-sim-worker"} - VELES_SIM_WORKER_VERSION: "0.7.52" + VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.7.56 # {"$imagepolicy": "veles:veles-sim-worker"} + VELES_SIM_WORKER_VERSION: "0.7.56" VELES_SIM_SERVICE_ACCOUNT: veles-sim VELES_SIM_PRIORITY_CLASS: veles-sim VELES_SIM_NODE_SELECTOR: veles.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/veles/frontend-deployment.yaml b/services/veles/frontend-deployment.yaml index 44fd4a2c..50c63284 100644 --- a/services/veles/frontend-deployment.yaml +++ b/services/veles/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/veles/veles-frontend:0.7.52 # {"$imagepolicy": "veles:veles-frontend"} + image: registry.bstein.dev/veles/veles-frontend:0.7.56 # {"$imagepolicy": "veles:veles-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/veles/retention-cronjob.yaml b/services/veles/retention-cronjob.yaml index f75de3f4..dbe9ca42 100644 --- a/services/veles/retention-cronjob.yaml +++ b/services/veles/retention-cronjob.yaml @@ -37,7 +37,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/veles/veles-backend:0.7.52 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.56 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: IfNotPresent command: ["veles-hygiene"] args: ["--prune-artifacts"] From 0e992698f402b504a369e0d6f973fc17847636c7 Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Wed, 22 Jul 2026 21:50:01 -0300 Subject: [PATCH 004/991] Deploy Cassandra 0.7.57 --- services/veles/backend-deployment.yaml | 6 +++--- services/veles/configmap.yaml | 4 ++-- services/veles/frontend-deployment.yaml | 2 +- services/veles/retention-cronjob.yaml | 2 +- 4 files changed, 7 insertions(+), 7 deletions(-) diff --git a/services/veles/backend-deployment.yaml b/services/veles/backend-deployment.yaml index f25466f3..d31b74ac 100644 --- a/services/veles/backend-deployment.yaml +++ b/services/veles/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: veles-backend annotations: - veles.bstein.dev/redeploy: "2026-07-22-0.7.56-attribution-envelope" + veles.bstein.dev/redeploy: "2026-07-22-0.7.57-legal-action-audit" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" @@ -63,7 +63,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/veles/veles-backend:0.7.56 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.57 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -85,7 +85,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/veles/veles-backend:0.7.56 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.57 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/veles/configmap.yaml b/services/veles/configmap.yaml index 1efc38c1..e8184ed8 100644 --- a/services/veles/configmap.yaml +++ b/services/veles/configmap.yaml @@ -18,8 +18,8 @@ data: VELES_OIDC_REQUIRED_GROUPS: alpha,veles-tester,admin VELES_OIDC_ADMIN_GROUPS: admin VELES_NAMESPACE: veles - VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.7.56 # {"$imagepolicy": "veles:veles-sim-worker"} - VELES_SIM_WORKER_VERSION: "0.7.56" + VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.7.57 # {"$imagepolicy": "veles:veles-sim-worker"} + VELES_SIM_WORKER_VERSION: "0.7.57" VELES_SIM_SERVICE_ACCOUNT: veles-sim VELES_SIM_PRIORITY_CLASS: veles-sim VELES_SIM_NODE_SELECTOR: veles.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/veles/frontend-deployment.yaml b/services/veles/frontend-deployment.yaml index 50c63284..54e9bfb0 100644 --- a/services/veles/frontend-deployment.yaml +++ b/services/veles/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/veles/veles-frontend:0.7.56 # {"$imagepolicy": "veles:veles-frontend"} + image: registry.bstein.dev/veles/veles-frontend:0.7.57 # {"$imagepolicy": "veles:veles-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/veles/retention-cronjob.yaml b/services/veles/retention-cronjob.yaml index dbe9ca42..0bfed97b 100644 --- a/services/veles/retention-cronjob.yaml +++ b/services/veles/retention-cronjob.yaml @@ -37,7 +37,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/veles/veles-backend:0.7.56 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.57 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: IfNotPresent command: ["veles-hygiene"] args: ["--prune-artifacts"] From 026391f1b166aa6c4ddaf655379922b2568c077b Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Wed, 22 Jul 2026 22:13:14 -0300 Subject: [PATCH 005/991] Deploy Cassandra 0.7.58 --- services/veles/backend-deployment.yaml | 6 +++--- services/veles/configmap.yaml | 4 ++-- services/veles/frontend-deployment.yaml | 2 +- services/veles/retention-cronjob.yaml | 2 +- 4 files changed, 7 insertions(+), 7 deletions(-) diff --git a/services/veles/backend-deployment.yaml b/services/veles/backend-deployment.yaml index d31b74ac..db96bee2 100644 --- a/services/veles/backend-deployment.yaml +++ b/services/veles/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: veles-backend annotations: - veles.bstein.dev/redeploy: "2026-07-22-0.7.57-legal-action-audit" + veles.bstein.dev/redeploy: "2026-07-22-0.7.58-route-payoff-progress" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" @@ -63,7 +63,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/veles/veles-backend:0.7.57 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.58 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -85,7 +85,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/veles/veles-backend:0.7.57 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.58 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/veles/configmap.yaml b/services/veles/configmap.yaml index e8184ed8..55a2477b 100644 --- a/services/veles/configmap.yaml +++ b/services/veles/configmap.yaml @@ -18,8 +18,8 @@ data: VELES_OIDC_REQUIRED_GROUPS: alpha,veles-tester,admin VELES_OIDC_ADMIN_GROUPS: admin VELES_NAMESPACE: veles - VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.7.57 # {"$imagepolicy": "veles:veles-sim-worker"} - VELES_SIM_WORKER_VERSION: "0.7.57" + VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.7.58 # {"$imagepolicy": "veles:veles-sim-worker"} + VELES_SIM_WORKER_VERSION: "0.7.58" VELES_SIM_SERVICE_ACCOUNT: veles-sim VELES_SIM_PRIORITY_CLASS: veles-sim VELES_SIM_NODE_SELECTOR: veles.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/veles/frontend-deployment.yaml b/services/veles/frontend-deployment.yaml index 54e9bfb0..95d69c03 100644 --- a/services/veles/frontend-deployment.yaml +++ b/services/veles/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/veles/veles-frontend:0.7.57 # {"$imagepolicy": "veles:veles-frontend"} + image: registry.bstein.dev/veles/veles-frontend:0.7.58 # {"$imagepolicy": "veles:veles-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/veles/retention-cronjob.yaml b/services/veles/retention-cronjob.yaml index 0bfed97b..324c0537 100644 --- a/services/veles/retention-cronjob.yaml +++ b/services/veles/retention-cronjob.yaml @@ -37,7 +37,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/veles/veles-backend:0.7.57 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.58 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: IfNotPresent command: ["veles-hygiene"] args: ["--prune-artifacts"] From 2af9a2c0aa6086062f829311f8e57b5c5c10b0ac Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Wed, 22 Jul 2026 22:28:41 -0300 Subject: [PATCH 006/991] Deploy Cassandra 0.7.59 --- services/veles/backend-deployment.yaml | 6 +++--- services/veles/configmap.yaml | 4 ++-- services/veles/frontend-deployment.yaml | 2 +- services/veles/retention-cronjob.yaml | 2 +- 4 files changed, 7 insertions(+), 7 deletions(-) diff --git a/services/veles/backend-deployment.yaml b/services/veles/backend-deployment.yaml index db96bee2..33f174b9 100644 --- a/services/veles/backend-deployment.yaml +++ b/services/veles/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: veles-backend annotations: - veles.bstein.dev/redeploy: "2026-07-22-0.7.58-route-payoff-progress" + veles.bstein.dev/redeploy: "2026-07-22-0.7.59-public-exile-visibility" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" @@ -63,7 +63,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/veles/veles-backend:0.7.58 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.59 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -85,7 +85,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/veles/veles-backend:0.7.58 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.59 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/veles/configmap.yaml b/services/veles/configmap.yaml index 55a2477b..91353e19 100644 --- a/services/veles/configmap.yaml +++ b/services/veles/configmap.yaml @@ -18,8 +18,8 @@ data: VELES_OIDC_REQUIRED_GROUPS: alpha,veles-tester,admin VELES_OIDC_ADMIN_GROUPS: admin VELES_NAMESPACE: veles - VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.7.58 # {"$imagepolicy": "veles:veles-sim-worker"} - VELES_SIM_WORKER_VERSION: "0.7.58" + VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.7.59 # {"$imagepolicy": "veles:veles-sim-worker"} + VELES_SIM_WORKER_VERSION: "0.7.59" VELES_SIM_SERVICE_ACCOUNT: veles-sim VELES_SIM_PRIORITY_CLASS: veles-sim VELES_SIM_NODE_SELECTOR: veles.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/veles/frontend-deployment.yaml b/services/veles/frontend-deployment.yaml index 95d69c03..ad60b777 100644 --- a/services/veles/frontend-deployment.yaml +++ b/services/veles/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/veles/veles-frontend:0.7.58 # {"$imagepolicy": "veles:veles-frontend"} + image: registry.bstein.dev/veles/veles-frontend:0.7.59 # {"$imagepolicy": "veles:veles-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/veles/retention-cronjob.yaml b/services/veles/retention-cronjob.yaml index 324c0537..af4cf58d 100644 --- a/services/veles/retention-cronjob.yaml +++ b/services/veles/retention-cronjob.yaml @@ -37,7 +37,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/veles/veles-backend:0.7.58 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.59 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: IfNotPresent command: ["veles-hygiene"] args: ["--prune-artifacts"] From daeaf7b5afef07e4bfd8c9b9f16fbc9f4157f44f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 23 Jul 2026 01:36:52 +0000 Subject: [PATCH 007/991] chore(maintenance): automated image update --- services/maintenance/metis-configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index c6254da5..66f09762 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -15,7 +15,7 @@ data: METIS_MAX_DEVICE_BYTES: "1000000000000" METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" - METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-243-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} + METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-244-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-243-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis From 4c9c838c394ab41a1a16e4d031f3476aca819627 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 23 Jul 2026 01:38:54 +0000 Subject: [PATCH 008/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-amd64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-amd64-daemonset.yaml b/services/maintenance/metis-sentinel-amd64-daemonset.yaml index 49782529..c9d1331e 100644 --- a/services/maintenance/metis-sentinel-amd64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-amd64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: amd64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-243-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-244-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} imagePullPolicy: Always envFrom: - configMapRef: From 9b0979682aea4821d070da461bdf30900e4c5b5a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 23 Jul 2026 01:43:53 +0000 Subject: [PATCH 009/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- services/maintenance/metis-configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index b1d09085..3b328c6b 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -54,7 +54,7 @@ images: - name: registry.bstein.dev/bstein/ariadne newTag: 0.1.0-356 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis - newTag: 0.1.0-243-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} + newTag: 0.1.0-244-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria newTag: 0.1.0-120 # {"$imagepolicy": "maintenance:soteria:tag"} configMapGenerator: diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 66f09762..aba9ed82 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -16,7 +16,7 @@ data: METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-244-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} - METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-243-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} + METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-244-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0 From 49db748556702a4e1a6585cab9f45508e21d01ae Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 23 Jul 2026 01:44:55 +0000 Subject: [PATCH 010/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-arm64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-arm64-daemonset.yaml b/services/maintenance/metis-sentinel-arm64-daemonset.yaml index 5f772dce..9240c272 100644 --- a/services/maintenance/metis-sentinel-arm64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-arm64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: arm64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-243-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-244-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} imagePullPolicy: Always envFrom: - configMapRef: From 9c932b5a8190742c302c9290c827f30649be167a Mon Sep 17 00:00:00 2001 From: jenkins Date: Wed, 22 Jul 2026 23:02:25 -0300 Subject: [PATCH 011/991] Deploy Cassandra 0.7.60 --- services/veles/backend-deployment.yaml | 4 ++-- services/veles/configmap.yaml | 4 ++-- services/veles/frontend-deployment.yaml | 2 +- services/veles/retention-cronjob.yaml | 2 +- 4 files changed, 6 insertions(+), 6 deletions(-) diff --git a/services/veles/backend-deployment.yaml b/services/veles/backend-deployment.yaml index 33f174b9..837a4a9f 100644 --- a/services/veles/backend-deployment.yaml +++ b/services/veles/backend-deployment.yaml @@ -63,7 +63,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/veles/veles-backend:0.7.59 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.60 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -85,7 +85,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/veles/veles-backend:0.7.59 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.60 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/veles/configmap.yaml b/services/veles/configmap.yaml index 91353e19..bc53d02d 100644 --- a/services/veles/configmap.yaml +++ b/services/veles/configmap.yaml @@ -18,8 +18,8 @@ data: VELES_OIDC_REQUIRED_GROUPS: alpha,veles-tester,admin VELES_OIDC_ADMIN_GROUPS: admin VELES_NAMESPACE: veles - VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.7.59 # {"$imagepolicy": "veles:veles-sim-worker"} - VELES_SIM_WORKER_VERSION: "0.7.59" + VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.7.60 # {"$imagepolicy": "veles:veles-sim-worker"} + VELES_SIM_WORKER_VERSION: "0.7.60" VELES_SIM_SERVICE_ACCOUNT: veles-sim VELES_SIM_PRIORITY_CLASS: veles-sim VELES_SIM_NODE_SELECTOR: veles.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/veles/frontend-deployment.yaml b/services/veles/frontend-deployment.yaml index ad60b777..ddad1399 100644 --- a/services/veles/frontend-deployment.yaml +++ b/services/veles/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/veles/veles-frontend:0.7.59 # {"$imagepolicy": "veles:veles-frontend"} + image: registry.bstein.dev/veles/veles-frontend:0.7.60 # {"$imagepolicy": "veles:veles-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/veles/retention-cronjob.yaml b/services/veles/retention-cronjob.yaml index af4cf58d..8aa19d0b 100644 --- a/services/veles/retention-cronjob.yaml +++ b/services/veles/retention-cronjob.yaml @@ -37,7 +37,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/veles/veles-backend:0.7.59 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.60 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: IfNotPresent command: ["veles-hygiene"] args: ["--prune-artifacts"] From fd9008460ad6be07f60b3ecd7bfcdefbe86dadd7 Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Wed, 22 Jul 2026 23:41:47 -0300 Subject: [PATCH 012/991] Deploy Cassandra 0.7.61 --- services/veles/backend-deployment.yaml | 6 +++--- services/veles/configmap.yaml | 4 ++-- services/veles/frontend-deployment.yaml | 2 +- services/veles/retention-cronjob.yaml | 2 +- 4 files changed, 7 insertions(+), 7 deletions(-) diff --git a/services/veles/backend-deployment.yaml b/services/veles/backend-deployment.yaml index 837a4a9f..bba0041f 100644 --- a/services/veles/backend-deployment.yaml +++ b/services/veles/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: veles-backend annotations: - veles.bstein.dev/redeploy: "2026-07-22-0.7.59-public-exile-visibility" + veles.bstein.dev/redeploy: "2026-07-23-0.7.61-builder-attribution" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" @@ -63,7 +63,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/veles/veles-backend:0.7.60 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.61 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -85,7 +85,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/veles/veles-backend:0.7.60 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.61 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/veles/configmap.yaml b/services/veles/configmap.yaml index bc53d02d..60e865e0 100644 --- a/services/veles/configmap.yaml +++ b/services/veles/configmap.yaml @@ -18,8 +18,8 @@ data: VELES_OIDC_REQUIRED_GROUPS: alpha,veles-tester,admin VELES_OIDC_ADMIN_GROUPS: admin VELES_NAMESPACE: veles - VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.7.60 # {"$imagepolicy": "veles:veles-sim-worker"} - VELES_SIM_WORKER_VERSION: "0.7.60" + VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.7.61 # {"$imagepolicy": "veles:veles-sim-worker"} + VELES_SIM_WORKER_VERSION: "0.7.61" VELES_SIM_SERVICE_ACCOUNT: veles-sim VELES_SIM_PRIORITY_CLASS: veles-sim VELES_SIM_NODE_SELECTOR: veles.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/veles/frontend-deployment.yaml b/services/veles/frontend-deployment.yaml index ddad1399..f04a4576 100644 --- a/services/veles/frontend-deployment.yaml +++ b/services/veles/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/veles/veles-frontend:0.7.60 # {"$imagepolicy": "veles:veles-frontend"} + image: registry.bstein.dev/veles/veles-frontend:0.7.61 # {"$imagepolicy": "veles:veles-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/veles/retention-cronjob.yaml b/services/veles/retention-cronjob.yaml index 8aa19d0b..2184276a 100644 --- a/services/veles/retention-cronjob.yaml +++ b/services/veles/retention-cronjob.yaml @@ -37,7 +37,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/veles/veles-backend:0.7.60 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.61 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: IfNotPresent command: ["veles-hygiene"] args: ["--prune-artifacts"] From 6fd2a53348570870cf006eeaf9d409e3b3617f85 Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Thu, 23 Jul 2026 00:18:44 -0300 Subject: [PATCH 013/991] Deploy Cassandra 0.7.62 --- services/veles/backend-deployment.yaml | 6 +++--- services/veles/configmap.yaml | 4 ++-- services/veles/frontend-deployment.yaml | 2 +- services/veles/retention-cronjob.yaml | 2 +- 4 files changed, 7 insertions(+), 7 deletions(-) diff --git a/services/veles/backend-deployment.yaml b/services/veles/backend-deployment.yaml index bba0041f..477b0e85 100644 --- a/services/veles/backend-deployment.yaml +++ b/services/veles/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: veles-backend annotations: - veles.bstein.dev/redeploy: "2026-07-23-0.7.61-builder-attribution" + veles.bstein.dev/redeploy: "2026-07-23-0.7.62-experiment-class" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" @@ -63,7 +63,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/veles/veles-backend:0.7.61 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.62 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -85,7 +85,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/veles/veles-backend:0.7.61 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.62 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/veles/configmap.yaml b/services/veles/configmap.yaml index 60e865e0..c9ed2b4f 100644 --- a/services/veles/configmap.yaml +++ b/services/veles/configmap.yaml @@ -18,8 +18,8 @@ data: VELES_OIDC_REQUIRED_GROUPS: alpha,veles-tester,admin VELES_OIDC_ADMIN_GROUPS: admin VELES_NAMESPACE: veles - VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.7.61 # {"$imagepolicy": "veles:veles-sim-worker"} - VELES_SIM_WORKER_VERSION: "0.7.61" + VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.7.62 # {"$imagepolicy": "veles:veles-sim-worker"} + VELES_SIM_WORKER_VERSION: "0.7.62" VELES_SIM_SERVICE_ACCOUNT: veles-sim VELES_SIM_PRIORITY_CLASS: veles-sim VELES_SIM_NODE_SELECTOR: veles.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/veles/frontend-deployment.yaml b/services/veles/frontend-deployment.yaml index f04a4576..f184ba11 100644 --- a/services/veles/frontend-deployment.yaml +++ b/services/veles/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/veles/veles-frontend:0.7.61 # {"$imagepolicy": "veles:veles-frontend"} + image: registry.bstein.dev/veles/veles-frontend:0.7.62 # {"$imagepolicy": "veles:veles-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/veles/retention-cronjob.yaml b/services/veles/retention-cronjob.yaml index 2184276a..07aa4027 100644 --- a/services/veles/retention-cronjob.yaml +++ b/services/veles/retention-cronjob.yaml @@ -37,7 +37,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/veles/veles-backend:0.7.61 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.62 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: IfNotPresent command: ["veles-hygiene"] args: ["--prune-artifacts"] From 7dae338b5f12983c60be38e4a1c4c06875843264 Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Thu, 23 Jul 2026 02:10:26 -0300 Subject: [PATCH 014/991] Deploy Cassandra 0.7.63 --- services/veles/backend-deployment.yaml | 6 +++--- services/veles/configmap.yaml | 4 ++-- services/veles/frontend-deployment.yaml | 2 +- services/veles/retention-cronjob.yaml | 2 +- 4 files changed, 7 insertions(+), 7 deletions(-) diff --git a/services/veles/backend-deployment.yaml b/services/veles/backend-deployment.yaml index 477b0e85..b21a101b 100644 --- a/services/veles/backend-deployment.yaml +++ b/services/veles/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: veles-backend annotations: - veles.bstein.dev/redeploy: "2026-07-23-0.7.62-experiment-class" + veles.bstein.dev/redeploy: "2026-07-23-0.7.63-attribution-identity" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" @@ -63,7 +63,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/veles/veles-backend:0.7.62 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.63 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -85,7 +85,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/veles/veles-backend:0.7.62 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.63 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/veles/configmap.yaml b/services/veles/configmap.yaml index c9ed2b4f..0698a8ab 100644 --- a/services/veles/configmap.yaml +++ b/services/veles/configmap.yaml @@ -18,8 +18,8 @@ data: VELES_OIDC_REQUIRED_GROUPS: alpha,veles-tester,admin VELES_OIDC_ADMIN_GROUPS: admin VELES_NAMESPACE: veles - VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.7.62 # {"$imagepolicy": "veles:veles-sim-worker"} - VELES_SIM_WORKER_VERSION: "0.7.62" + VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.7.63 # {"$imagepolicy": "veles:veles-sim-worker"} + VELES_SIM_WORKER_VERSION: "0.7.63" VELES_SIM_SERVICE_ACCOUNT: veles-sim VELES_SIM_PRIORITY_CLASS: veles-sim VELES_SIM_NODE_SELECTOR: veles.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/veles/frontend-deployment.yaml b/services/veles/frontend-deployment.yaml index f184ba11..9dda98e2 100644 --- a/services/veles/frontend-deployment.yaml +++ b/services/veles/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/veles/veles-frontend:0.7.62 # {"$imagepolicy": "veles:veles-frontend"} + image: registry.bstein.dev/veles/veles-frontend:0.7.63 # {"$imagepolicy": "veles:veles-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/veles/retention-cronjob.yaml b/services/veles/retention-cronjob.yaml index 07aa4027..96b99061 100644 --- a/services/veles/retention-cronjob.yaml +++ b/services/veles/retention-cronjob.yaml @@ -37,7 +37,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/veles/veles-backend:0.7.62 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.63 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: IfNotPresent command: ["veles-hygiene"] args: ["--prune-artifacts"] From 6e42bc29c5f1e32238afd20c0cbc303fb2692c58 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 23 Jul 2026 05:14:55 +0000 Subject: [PATCH 015/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 3b328c6b..be062aa5 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-356 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-357 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-244-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From a036af2dabefe86f14f7ab2baf924313c8dc40b6 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 23 Jul 2026 09:34:21 +0000 Subject: [PATCH 016/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 8ceec0fc..74c42946 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -20,7 +20,7 @@ resources: - ingress.yaml images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend - newTag: 0.1.1-414 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} + newTag: 0.1.1-415 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend newTag: 0.1.1-414 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: From 61e880bde1601f6e8c07be94b0837bd631331597 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 23 Jul 2026 09:35:20 +0000 Subject: [PATCH 017/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 74c42946..92395513 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -22,7 +22,7 @@ images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend newTag: 0.1.1-415 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend - newTag: 0.1.1-414 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} + newTag: 0.1.1-415 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: - name: chat-ai-gateway namespace: bstein-dev-home From 31957080fd8a4512e8ecf2dff5c563788d59d2f1 Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Thu, 23 Jul 2026 09:26:49 -0300 Subject: [PATCH 018/991] Deploy Cassandra 0.7.64 --- services/veles/backend-deployment.yaml | 6 +++--- services/veles/configmap.yaml | 4 ++-- services/veles/frontend-deployment.yaml | 2 +- services/veles/retention-cronjob.yaml | 2 +- 4 files changed, 7 insertions(+), 7 deletions(-) diff --git a/services/veles/backend-deployment.yaml b/services/veles/backend-deployment.yaml index b21a101b..4084897e 100644 --- a/services/veles/backend-deployment.yaml +++ b/services/veles/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: veles-backend annotations: - veles.bstein.dev/redeploy: "2026-07-23-0.7.63-attribution-identity" + veles.bstein.dev/redeploy: "2026-07-23-0.7.64-source-hygiene" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" @@ -63,7 +63,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/veles/veles-backend:0.7.63 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.64 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -85,7 +85,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/veles/veles-backend:0.7.63 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.64 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/veles/configmap.yaml b/services/veles/configmap.yaml index 0698a8ab..81a59ccc 100644 --- a/services/veles/configmap.yaml +++ b/services/veles/configmap.yaml @@ -18,8 +18,8 @@ data: VELES_OIDC_REQUIRED_GROUPS: alpha,veles-tester,admin VELES_OIDC_ADMIN_GROUPS: admin VELES_NAMESPACE: veles - VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.7.63 # {"$imagepolicy": "veles:veles-sim-worker"} - VELES_SIM_WORKER_VERSION: "0.7.63" + VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.7.64 # {"$imagepolicy": "veles:veles-sim-worker"} + VELES_SIM_WORKER_VERSION: "0.7.64" VELES_SIM_SERVICE_ACCOUNT: veles-sim VELES_SIM_PRIORITY_CLASS: veles-sim VELES_SIM_NODE_SELECTOR: veles.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/veles/frontend-deployment.yaml b/services/veles/frontend-deployment.yaml index 9dda98e2..b8a00256 100644 --- a/services/veles/frontend-deployment.yaml +++ b/services/veles/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/veles/veles-frontend:0.7.63 # {"$imagepolicy": "veles:veles-frontend"} + image: registry.bstein.dev/veles/veles-frontend:0.7.64 # {"$imagepolicy": "veles:veles-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/veles/retention-cronjob.yaml b/services/veles/retention-cronjob.yaml index 96b99061..0dbe0a35 100644 --- a/services/veles/retention-cronjob.yaml +++ b/services/veles/retention-cronjob.yaml @@ -37,7 +37,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/veles/veles-backend:0.7.63 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.64 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: IfNotPresent command: ["veles-hygiene"] args: ["--prune-artifacts"] From 15bed728a5cb556116bb200dc212c88a8996696b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 23 Jul 2026 13:44:51 +0000 Subject: [PATCH 019/991] chore(maintenance): automated image update --- services/maintenance/metis-configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index aba9ed82..93bd88ad 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -15,7 +15,7 @@ data: METIS_MAX_DEVICE_BYTES: "1000000000000" METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" - METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-244-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} + METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-245-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-244-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis From aaae8dec7e034cb049daf819bb70abc4484439e1 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 23 Jul 2026 13:51:31 +0000 Subject: [PATCH 020/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-amd64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-amd64-daemonset.yaml b/services/maintenance/metis-sentinel-amd64-daemonset.yaml index c9d1331e..b7e65e1b 100644 --- a/services/maintenance/metis-sentinel-amd64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-amd64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: amd64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-244-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-245-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} imagePullPolicy: Always envFrom: - configMapRef: From d5c614f46db01b999221b86fbb9acde2c134eda3 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 23 Jul 2026 13:54:30 +0000 Subject: [PATCH 021/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- services/maintenance/metis-configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index be062aa5..f7ed1a5c 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -54,7 +54,7 @@ images: - name: registry.bstein.dev/bstein/ariadne newTag: 0.1.0-357 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis - newTag: 0.1.0-244-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} + newTag: 0.1.0-245-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria newTag: 0.1.0-120 # {"$imagepolicy": "maintenance:soteria:tag"} configMapGenerator: diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 93bd88ad..b4f2ff1c 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -16,7 +16,7 @@ data: METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-245-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} - METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-244-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} + METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-245-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0 From 6c78ec3fc2775ea409281eecede1debe99eacbcf Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 23 Jul 2026 13:55:32 +0000 Subject: [PATCH 022/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-arm64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-arm64-daemonset.yaml b/services/maintenance/metis-sentinel-arm64-daemonset.yaml index 9240c272..1f63ade2 100644 --- a/services/maintenance/metis-sentinel-arm64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-arm64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: arm64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-244-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-245-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} imagePullPolicy: Always envFrom: - configMapRef: From 5bae715dea6ea679b59d7542038087d2358f87d0 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 23 Jul 2026 17:14:54 +0000 Subject: [PATCH 023/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index f7ed1a5c..ffcdbe24 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-357 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-358 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-245-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From 394b5c8b92bdb366c64b33941bc2fca0e219de27 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 23 Jul 2026 21:39:05 +0000 Subject: [PATCH 024/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 92395513..0dc05d5f 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -20,7 +20,7 @@ resources: - ingress.yaml images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend - newTag: 0.1.1-415 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} + newTag: 0.1.1-416 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend newTag: 0.1.1-415 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: From 7201c780a608889528f3c7d4b9ac81884960d556 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 23 Jul 2026 21:41:06 +0000 Subject: [PATCH 025/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 0dc05d5f..7770acc2 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -22,7 +22,7 @@ images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend newTag: 0.1.1-416 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend - newTag: 0.1.1-415 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} + newTag: 0.1.1-416 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: - name: chat-ai-gateway namespace: bstein-dev-home From 58196c5c5eea92fdbe3c76ec882b50f7626e332d Mon Sep 17 00:00:00 2001 From: flux-bot Date: Fri, 24 Jul 2026 01:37:08 +0000 Subject: [PATCH 026/991] chore(maintenance): automated image update --- services/maintenance/metis-configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index b4f2ff1c..7033ce1a 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -15,7 +15,7 @@ data: METIS_MAX_DEVICE_BYTES: "1000000000000" METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" - METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-245-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} + METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-246-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-245-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis From e25e43d2d1983df9bdcf67ee67a93359ed4a4767 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Fri, 24 Jul 2026 01:39:07 +0000 Subject: [PATCH 027/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-amd64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-amd64-daemonset.yaml b/services/maintenance/metis-sentinel-amd64-daemonset.yaml index b7e65e1b..734d08e6 100644 --- a/services/maintenance/metis-sentinel-amd64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-amd64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: amd64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-245-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-246-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} imagePullPolicy: Always envFrom: - configMapRef: From 4d45b902fd3463a0b479e4db4eae736ef37e729b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Fri, 24 Jul 2026 01:43:36 +0000 Subject: [PATCH 028/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- services/maintenance/metis-configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index ffcdbe24..6cd98a53 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -54,7 +54,7 @@ images: - name: registry.bstein.dev/bstein/ariadne newTag: 0.1.0-358 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis - newTag: 0.1.0-245-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} + newTag: 0.1.0-246-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria newTag: 0.1.0-120 # {"$imagepolicy": "maintenance:soteria:tag"} configMapGenerator: diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 7033ce1a..dfad7546 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -16,7 +16,7 @@ data: METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-246-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} - METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-245-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} + METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-246-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0 From 5b7a57faa78a988b5f9fdee8d0ee3707cfa5656f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Fri, 24 Jul 2026 01:44:35 +0000 Subject: [PATCH 029/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-arm64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-arm64-daemonset.yaml b/services/maintenance/metis-sentinel-arm64-daemonset.yaml index 1f63ade2..52ce32f8 100644 --- a/services/maintenance/metis-sentinel-arm64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-arm64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: arm64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-245-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-246-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} imagePullPolicy: Always envFrom: - configMapRef: From c1bcea55d2095fef8a35707c306228f131ccc294 Mon Sep 17 00:00:00 2001 From: jenkins Date: Fri, 24 Jul 2026 02:02:27 -0300 Subject: [PATCH 030/991] Deploy Cassandra 0.7.65 generator worker --- .../vault/scripts/vault_k8s_auth_configure.sh | 2 +- services/veles/backend-deployment.yaml | 6 +- .../veles-secrets-ensure-job.yaml | 2 +- services/veles/configmap.yaml | 5 +- services/veles/frontend-deployment.yaml | 2 +- services/veles/generator-deployment.yaml | 84 +++++++++++++++++++ services/veles/image.yaml | 23 +++++ services/veles/kustomization.yaml | 3 +- services/veles/retention-cronjob.yaml | 2 +- services/veles/serviceaccounts.yaml | 8 ++ 10 files changed, 127 insertions(+), 10 deletions(-) rename services/veles/{oneoffs => bootstrap-jobs}/veles-secrets-ensure-job.yaml (99%) create mode 100644 services/veles/generator-deployment.yaml diff --git a/services/vault/scripts/vault_k8s_auth_configure.sh b/services/vault/scripts/vault_k8s_auth_configure.sh index 9c9e89c5..b4116347 100644 --- a/services/vault/scripts/vault_k8s_auth_configure.sh +++ b/services/vault/scripts/vault_k8s_auth_configure.sh @@ -253,7 +253,7 @@ write_policy_and_role "health" "health" "health-vault-sync" \ "health/*" "" write_policy_and_role "game-stream" "game-stream" "game-stream-vault" \ "game-stream/*" "" -write_policy_and_role "veles" "veles" "veles-backend,veles-postgres,veles-vault-sync" \ +write_policy_and_role "veles" "veles" "veles-backend,veles-generator,veles-postgres,veles-vault-sync" \ "veles/* shared/harbor-pull shared/postmark-relay" "" write_policy_and_role "veles-sim" "veles" "veles-sim" \ "veles/codex-cli" "" diff --git a/services/veles/backend-deployment.yaml b/services/veles/backend-deployment.yaml index 4084897e..3c30088b 100644 --- a/services/veles/backend-deployment.yaml +++ b/services/veles/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: veles-backend annotations: - veles.bstein.dev/redeploy: "2026-07-23-0.7.64-source-hygiene" + veles.bstein.dev/redeploy: "2026-07-24-0.7.65-hygiene-generator-worker" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" @@ -63,7 +63,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/veles/veles-backend:0.7.64 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.65 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -85,7 +85,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/veles/veles-backend:0.7.64 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.65 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/veles/oneoffs/veles-secrets-ensure-job.yaml b/services/veles/bootstrap-jobs/veles-secrets-ensure-job.yaml similarity index 99% rename from services/veles/oneoffs/veles-secrets-ensure-job.yaml rename to services/veles/bootstrap-jobs/veles-secrets-ensure-job.yaml index 92221bc4..f22da323 100644 --- a/services/veles/oneoffs/veles-secrets-ensure-job.yaml +++ b/services/veles/bootstrap-jobs/veles-secrets-ensure-job.yaml @@ -1,4 +1,4 @@ -# services/veles/oneoffs/veles-secrets-ensure-job.yaml +# services/veles/bootstrap-jobs/veles-secrets-ensure-job.yaml # One-off job for veles/veles-secrets-ensure-2. # Purpose: seed Veles Vault paths before app/Postgres pods are scaled up. # Keep suspended until the veles Vault role has reconciled, then unsuspend once. diff --git a/services/veles/configmap.yaml b/services/veles/configmap.yaml index 81a59ccc..1b8b6251 100644 --- a/services/veles/configmap.yaml +++ b/services/veles/configmap.yaml @@ -18,8 +18,9 @@ data: VELES_OIDC_REQUIRED_GROUPS: alpha,veles-tester,admin VELES_OIDC_ADMIN_GROUPS: admin VELES_NAMESPACE: veles - VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.7.64 # {"$imagepolicy": "veles:veles-sim-worker"} - VELES_SIM_WORKER_VERSION: "0.7.64" + VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.7.65 # {"$imagepolicy": "veles:veles-sim-worker"} + VELES_SIM_WORKER_VERSION: "0.7.65" + VELES_GENERATOR_WORKER_VERSION: "0.7.65" VELES_SIM_SERVICE_ACCOUNT: veles-sim VELES_SIM_PRIORITY_CLASS: veles-sim VELES_SIM_NODE_SELECTOR: veles.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/veles/frontend-deployment.yaml b/services/veles/frontend-deployment.yaml index b8a00256..5b1aec44 100644 --- a/services/veles/frontend-deployment.yaml +++ b/services/veles/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/veles/veles-frontend:0.7.64 # {"$imagepolicy": "veles:veles-frontend"} + image: registry.bstein.dev/veles/veles-frontend:0.7.65 # {"$imagepolicy": "veles:veles-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/veles/generator-deployment.yaml b/services/veles/generator-deployment.yaml new file mode 100644 index 00000000..8aab002f --- /dev/null +++ b/services/veles/generator-deployment.yaml @@ -0,0 +1,84 @@ +# services/veles/generator-deployment.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + name: veles-generator-worker + namespace: veles + labels: + app: veles-generator-worker +spec: + replicas: 1 + revisionHistoryLimit: 2 + selector: + matchLabels: + app: veles-generator-worker + template: + metadata: + labels: + app: veles-generator-worker + annotations: + veles.bstein.dev/redeploy: "2026-07-24-0.7.65-hygiene-generator-worker" + vault.hashicorp.com/agent-inject: "true" + vault.hashicorp.com/agent-init-first: "true" + vault.hashicorp.com/agent-pre-populate-only: "true" + vault.hashicorp.com/role: "veles" + vault.hashicorp.com/agent-inject-secret-veles-env.sh: "kv/data/atlas/veles/veles-db" + vault.hashicorp.com/agent-inject-template-veles-env.sh: | + {{- with secret "kv/data/atlas/veles/veles-db" }} + unset DATABASE_URL + export VELES_DATABASE_HOST="{{ .Data.data.POSTGRES_HOST }}" + export VELES_DATABASE_PORT="{{ .Data.data.POSTGRES_PORT }}" + export VELES_DATABASE_NAME="{{ .Data.data.POSTGRES_DB }}" + export VELES_DATABASE_USER="{{ .Data.data.POSTGRES_USER }}" + export VELES_DATABASE_PASSWORD="{{ .Data.data.POSTGRES_PASSWORD }}" + export VELES_DATABASE_SSLMODE="disable" + {{- end }} + {{- with secret "kv/data/atlas/veles/app-secrets" }} + export VELES_SESSION_SECRET="{{ .Data.data.VELES_SESSION_SECRET }}" + export VELES_BYOK_ENCRYPTION_KEY="{{ .Data.data.VELES_BYOK_ENCRYPTION_KEY }}" + {{- end }} + spec: + serviceAccountName: veles-generator + priorityClassName: veles-core + nodeSelector: + veles.bstein.dev/node-pool: oceanus + kubernetes.io/arch: amd64 + tolerations: + - key: veles.bstein.dev/simulation + operator: Equal + value: "true" + effect: NoSchedule + securityContext: + fsGroup: 10001 + fsGroupChangePolicy: OnRootMismatch + seccompProfile: + type: RuntimeDefault + containers: + - name: generator + image: registry.bstein.dev/veles/veles-generator-worker:0.7.65 # {"$imagepolicy": "veles:veles-generator-worker"} + imagePullPolicy: Always + command: ["/bin/sh", "-c"] + args: + - | + set -eu + if [ -f /vault/secrets/veles-env.sh ]; then + . /vault/secrets/veles-env.sh + fi + exec veles-generation-worker --loop --idle-sleep-seconds 5 + envFrom: + - configMapRef: + name: veles-config + resources: + requests: + cpu: 100m + memory: 512Mi + limits: + cpu: "1" + memory: 2Gi + securityContext: + runAsNonRoot: true + runAsUser: 10001 + runAsGroup: 10001 + allowPrivilegeEscalation: false + capabilities: + drop: ["ALL"] diff --git a/services/veles/image.yaml b/services/veles/image.yaml index f038856a..27efb87f 100644 --- a/services/veles/image.yaml +++ b/services/veles/image.yaml @@ -47,6 +47,29 @@ spec: --- apiVersion: image.toolkit.fluxcd.io/v1 kind: ImageRepository +metadata: + name: veles-generator-worker + namespace: veles +spec: + image: registry.bstein.dev/veles/veles-generator-worker + interval: 1m0s + secretRef: + name: harbor-regcred +--- +apiVersion: image.toolkit.fluxcd.io/v1 +kind: ImagePolicy +metadata: + name: veles-generator-worker + namespace: veles +spec: + imageRepositoryRef: + name: veles-generator-worker + policy: + semver: + range: ">=0.1.0-0" +--- +apiVersion: image.toolkit.fluxcd.io/v1 +kind: ImageRepository metadata: name: veles-sim-worker namespace: veles diff --git a/services/veles/kustomization.yaml b/services/veles/kustomization.yaml index 764438c1..38db5252 100644 --- a/services/veles/kustomization.yaml +++ b/services/veles/kustomization.yaml @@ -16,8 +16,9 @@ resources: - postgres-statefulset.yaml - services.yaml - backend-deployment.yaml + - generator-deployment.yaml - frontend-deployment.yaml - retention-cronjob.yaml - image.yaml - ingress.yaml - - oneoffs/veles-secrets-ensure-job.yaml + - bootstrap-jobs/veles-secrets-ensure-job.yaml diff --git a/services/veles/retention-cronjob.yaml b/services/veles/retention-cronjob.yaml index 0dbe0a35..480dab9a 100644 --- a/services/veles/retention-cronjob.yaml +++ b/services/veles/retention-cronjob.yaml @@ -37,7 +37,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/veles/veles-backend:0.7.64 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.7.65 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: IfNotPresent command: ["veles-hygiene"] args: ["--prune-artifacts"] diff --git a/services/veles/serviceaccounts.yaml b/services/veles/serviceaccounts.yaml index c14ff0f8..313781ea 100644 --- a/services/veles/serviceaccounts.yaml +++ b/services/veles/serviceaccounts.yaml @@ -9,6 +9,14 @@ imagePullSecrets: --- apiVersion: v1 kind: ServiceAccount +metadata: + name: veles-generator + namespace: veles +imagePullSecrets: + - name: harbor-regcred +--- +apiVersion: v1 +kind: ServiceAccount metadata: name: veles-frontend namespace: veles From 15c9bbc69590211207019642c6c3980c86143fa3 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Fri, 24 Jul 2026 05:14:43 +0000 Subject: [PATCH 031/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 6cd98a53..34c8ceb4 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-358 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-359 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-246-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From 2a68c798a4e101b07340976b0a4727847dedae6e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Fri, 24 Jul 2026 09:35:27 +0000 Subject: [PATCH 032/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 7770acc2..b84db077 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -20,7 +20,7 @@ resources: - ingress.yaml images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend - newTag: 0.1.1-416 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} + newTag: 0.1.1-417 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend newTag: 0.1.1-416 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: From 275cf464c7157074e82351e82dd1c5eb9f54b983 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Fri, 24 Jul 2026 09:36:28 +0000 Subject: [PATCH 033/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index b84db077..0c3e04ce 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -22,7 +22,7 @@ images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend newTag: 0.1.1-417 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend - newTag: 0.1.1-416 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} + newTag: 0.1.1-417 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: - name: chat-ai-gateway namespace: bstein-dev-home From f9e697fab261dee5cadb898d086e2883653e8b23 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Fri, 24 Jul 2026 13:28:03 +0000 Subject: [PATCH 034/991] chore(maintenance): automated image update --- services/maintenance/metis-configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index dfad7546..f3c162c1 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -15,7 +15,7 @@ data: METIS_MAX_DEVICE_BYTES: "1000000000000" METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" - METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-246-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} + METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-247-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-246-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis From 3bdb127df99e86c605005c62c3c727ac4e5d06d5 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Fri, 24 Jul 2026 13:30:16 +0000 Subject: [PATCH 035/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-amd64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-amd64-daemonset.yaml b/services/maintenance/metis-sentinel-amd64-daemonset.yaml index 734d08e6..47a28c6d 100644 --- a/services/maintenance/metis-sentinel-amd64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-amd64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: amd64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-246-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-247-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} imagePullPolicy: Always envFrom: - configMapRef: From 6e19cea4f174a3c278fc3fa6ea79360de741aab0 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Fri, 24 Jul 2026 13:31:18 +0000 Subject: [PATCH 036/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- services/maintenance/metis-configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 34c8ceb4..88666315 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -54,7 +54,7 @@ images: - name: registry.bstein.dev/bstein/ariadne newTag: 0.1.0-359 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis - newTag: 0.1.0-246-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} + newTag: 0.1.0-247-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria newTag: 0.1.0-120 # {"$imagepolicy": "maintenance:soteria:tag"} configMapGenerator: diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index f3c162c1..63415795 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -16,7 +16,7 @@ data: METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-247-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} - METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-246-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} + METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-247-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0 From 47516666da2ca88672dbcea351f70611a153dcc1 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Fri, 24 Jul 2026 13:32:17 +0000 Subject: [PATCH 037/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-arm64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-arm64-daemonset.yaml b/services/maintenance/metis-sentinel-arm64-daemonset.yaml index 52ce32f8..5a061352 100644 --- a/services/maintenance/metis-sentinel-arm64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-arm64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: arm64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-246-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-247-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} imagePullPolicy: Always envFrom: - configMapRef: From 6a00b20c00b95d3a9b754c6d6a69c5f55faaa53f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Fri, 24 Jul 2026 17:15:59 +0000 Subject: [PATCH 038/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 88666315..2ee1bdaf 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-359 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-360 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-247-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From 78c14655cc231bb329bae04a098eba5c79e800be Mon Sep 17 00:00:00 2001 From: flux-bot Date: Fri, 24 Jul 2026 21:35:36 +0000 Subject: [PATCH 039/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 0c3e04ce..0c8c2e9b 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -20,7 +20,7 @@ resources: - ingress.yaml images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend - newTag: 0.1.1-417 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} + newTag: 0.1.1-418 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend newTag: 0.1.1-417 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: From b9cafacf8b8e84641f05ade49e6fe831dc33c1c2 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Fri, 24 Jul 2026 21:37:03 +0000 Subject: [PATCH 040/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 0c8c2e9b..43f36a0a 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -22,7 +22,7 @@ images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend newTag: 0.1.1-418 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend - newTag: 0.1.1-417 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} + newTag: 0.1.1-418 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: - name: chat-ai-gateway namespace: bstein-dev-home From 282636bfb6f6cd75b6bee8b7a52d34a2ba1b6614 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 25 Jul 2026 01:36:36 +0000 Subject: [PATCH 041/991] chore(maintenance): automated image update --- services/maintenance/metis-configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 63415795..dd29ba3c 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -15,7 +15,7 @@ data: METIS_MAX_DEVICE_BYTES: "1000000000000" METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" - METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-247-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} + METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-248-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-247-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis From b29c760f1cb3754caf28c61bf39282f20f5b6c2c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 25 Jul 2026 01:38:36 +0000 Subject: [PATCH 042/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-amd64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-amd64-daemonset.yaml b/services/maintenance/metis-sentinel-amd64-daemonset.yaml index 47a28c6d..50d0e89a 100644 --- a/services/maintenance/metis-sentinel-amd64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-amd64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: amd64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-247-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-248-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} imagePullPolicy: Always envFrom: - configMapRef: From 1208bfef780e350de506692d1bc32846986620a7 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 25 Jul 2026 01:43:50 +0000 Subject: [PATCH 043/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-arm64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-arm64-daemonset.yaml b/services/maintenance/metis-sentinel-arm64-daemonset.yaml index 5a061352..198c8fdc 100644 --- a/services/maintenance/metis-sentinel-arm64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-arm64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: arm64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-247-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-248-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} imagePullPolicy: Always envFrom: - configMapRef: From 6520774af366e39c3943d5ed9fa84060debd3744 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 25 Jul 2026 01:43:54 +0000 Subject: [PATCH 044/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- services/maintenance/metis-configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 2ee1bdaf..750b8400 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -54,7 +54,7 @@ images: - name: registry.bstein.dev/bstein/ariadne newTag: 0.1.0-360 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis - newTag: 0.1.0-247-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} + newTag: 0.1.0-248-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria newTag: 0.1.0-120 # {"$imagepolicy": "maintenance:soteria:tag"} configMapGenerator: diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index dd29ba3c..77b9592b 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -16,7 +16,7 @@ data: METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-248-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} - METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-247-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} + METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-248-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0 From b5dd4f505838fec9246ae315814a34f31202755e Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 25 Jul 2026 00:18:48 -0300 Subject: [PATCH 045/991] feat(cassandra): add parallel migration infrastructure --- .../cassandra-auth/kustomization.yaml | 23 + .../cassandra/image-automation.yaml | 29 ++ .../applications/cassandra/kustomization.yaml | 28 ++ .../applications/kustomization.yaml | 2 + .../core/node-prefer-noschedule-cronjob.yaml | 3 + .../core/cassandra-recurring-jobs.yaml | 60 +++ .../longhorn/core/kustomization.yaml | 1 + .../core/scripts/longhorn_disk_tags_ensure.py | 18 +- .../longhorn/core/veles-recurring-jobs.yaml | 30 ++ .../modules/base/priorityclass/cassandra.yaml | 17 + .../base/priorityclass/kustomization.yaml | 1 + .../storageclass/cassandra-artifacts.yaml | 20 + .../base/storageclass/cassandra-db.yaml | 20 + .../cassandra-storage-policy.yaml | 25 ++ .../base/storageclass/kustomization.yaml | 3 + ...assandra-gitea-oidc-secret-ensure-job.yaml | 54 +++ .../cassandra-realm-ensure-job.yaml | 401 ++++++++++++++++++ services/cassandra-auth/kustomization.yaml | 13 + .../cassandra_gitea_oidc_secret_ensure.sh | 157 +++++++ services/cassandra/NOTES.md | 144 +++++++ services/cassandra/artifacts-pvc.yaml | 32 ++ services/cassandra/backend-deployment.yaml | 139 ++++++ .../cassandra-secrets-ensure-job.yaml | 142 +++++++ services/cassandra/configmap.yaml | 45 ++ services/cassandra/frontend-deployment.yaml | 80 ++++ services/cassandra/generator-deployment.yaml | 84 ++++ services/cassandra/image.yaml | 92 ++++ services/cassandra/ingress.yaml | 47 ++ services/cassandra/kustomization.yaml | 26 ++ services/cassandra/limitrange.yaml | 21 + .../artifact-copy-veles-to-cassandra-job.yaml | 150 +++++++ .../db-copy-veles-to-cassandra-job.yaml | 120 ++++++ services/cassandra/namespace.yaml | 8 + services/cassandra/postgres-service.yaml | 17 + services/cassandra/postgres-statefulset.yaml | 86 ++++ services/cassandra/rbac.yaml | 36 ++ services/cassandra/resourcequota.yaml | 54 +++ services/cassandra/retention-cronjob.yaml | 68 +++ services/cassandra/secretproviderclass.yaml | 70 +++ services/cassandra/serviceaccounts.yaml | 76 ++++ services/cassandra/services.yaml | 32 ++ services/cassandra/vault-sync-deployment.yaml | 43 ++ .../vault/scripts/vault_k8s_auth_configure.sh | 11 +- services/veles/kustomization.yaml | 1 + .../cassandra-artifact-export.yaml | 159 +++++++ 45 files changed, 2684 insertions(+), 4 deletions(-) create mode 100644 clusters/atlas/flux-system/applications/cassandra-auth/kustomization.yaml create mode 100644 clusters/atlas/flux-system/applications/cassandra/image-automation.yaml create mode 100644 clusters/atlas/flux-system/applications/cassandra/kustomization.yaml create mode 100644 infrastructure/longhorn/core/cassandra-recurring-jobs.yaml create mode 100644 infrastructure/modules/base/priorityclass/cassandra.yaml create mode 100644 infrastructure/modules/base/storageclass/cassandra-artifacts.yaml create mode 100644 infrastructure/modules/base/storageclass/cassandra-db.yaml create mode 100644 infrastructure/modules/base/storageclass/cassandra-storage-policy.yaml create mode 100644 services/cassandra-auth/bootstrap-jobs/cassandra-gitea-oidc-secret-ensure-job.yaml create mode 100644 services/cassandra-auth/bootstrap-jobs/cassandra-realm-ensure-job.yaml create mode 100644 services/cassandra-auth/kustomization.yaml create mode 100644 services/cassandra-auth/scripts/cassandra_gitea_oidc_secret_ensure.sh create mode 100644 services/cassandra/NOTES.md create mode 100644 services/cassandra/artifacts-pvc.yaml create mode 100644 services/cassandra/backend-deployment.yaml create mode 100644 services/cassandra/bootstrap-jobs/cassandra-secrets-ensure-job.yaml create mode 100644 services/cassandra/configmap.yaml create mode 100644 services/cassandra/frontend-deployment.yaml create mode 100644 services/cassandra/generator-deployment.yaml create mode 100644 services/cassandra/image.yaml create mode 100644 services/cassandra/ingress.yaml create mode 100644 services/cassandra/kustomization.yaml create mode 100644 services/cassandra/limitrange.yaml create mode 100644 services/cassandra/migration-jobs/artifact-copy-veles-to-cassandra-job.yaml create mode 100644 services/cassandra/migration-jobs/db-copy-veles-to-cassandra-job.yaml create mode 100644 services/cassandra/namespace.yaml create mode 100644 services/cassandra/postgres-service.yaml create mode 100644 services/cassandra/postgres-statefulset.yaml create mode 100644 services/cassandra/rbac.yaml create mode 100644 services/cassandra/resourcequota.yaml create mode 100644 services/cassandra/retention-cronjob.yaml create mode 100644 services/cassandra/secretproviderclass.yaml create mode 100644 services/cassandra/serviceaccounts.yaml create mode 100644 services/cassandra/services.yaml create mode 100644 services/cassandra/vault-sync-deployment.yaml create mode 100644 services/veles/migration-jobs/cassandra-artifact-export.yaml diff --git a/clusters/atlas/flux-system/applications/cassandra-auth/kustomization.yaml b/clusters/atlas/flux-system/applications/cassandra-auth/kustomization.yaml new file mode 100644 index 00000000..aaf8ceee --- /dev/null +++ b/clusters/atlas/flux-system/applications/cassandra-auth/kustomization.yaml @@ -0,0 +1,23 @@ +# clusters/atlas/flux-system/applications/cassandra-auth/kustomization.yaml +apiVersion: kustomize.toolkit.fluxcd.io/v1 +kind: Kustomization +metadata: + name: cassandra-auth + namespace: flux-system + annotations: + kustomize.toolkit.fluxcd.io/ssa: IfNotPresent +spec: + interval: 10m + path: ./services/cassandra-auth + targetNamespace: sso + prune: true + sourceRef: + kind: GitRepository + name: flux-system + namespace: flux-system + dependsOn: + - name: keycloak + - name: vault + - name: vault-injector + wait: false + timeout: 10m diff --git a/clusters/atlas/flux-system/applications/cassandra/image-automation.yaml b/clusters/atlas/flux-system/applications/cassandra/image-automation.yaml new file mode 100644 index 00000000..a87fb5c5 --- /dev/null +++ b/clusters/atlas/flux-system/applications/cassandra/image-automation.yaml @@ -0,0 +1,29 @@ +# clusters/atlas/flux-system/applications/cassandra/image-automation.yaml +# Staged for the first Cassandra image rollout. Add this file to the parent +# applications kustomization after the namespace exists and the Harbor repos +# have initial tags. +apiVersion: image.toolkit.fluxcd.io/v1 +kind: ImageUpdateAutomation +metadata: + name: cassandra + namespace: cassandra +spec: + interval: 1m0s + sourceRef: + kind: GitRepository + name: flux-system + namespace: flux-system + git: + checkout: + ref: + branch: main + commit: + author: + email: ops@bstein.dev + name: flux-bot + messageTemplate: "chore(cassandra): automated image update" + push: + branch: main + update: + strategy: Setters + path: services/cassandra diff --git a/clusters/atlas/flux-system/applications/cassandra/kustomization.yaml b/clusters/atlas/flux-system/applications/cassandra/kustomization.yaml new file mode 100644 index 00000000..242fc32f --- /dev/null +++ b/clusters/atlas/flux-system/applications/cassandra/kustomization.yaml @@ -0,0 +1,28 @@ +# clusters/atlas/flux-system/applications/cassandra/kustomization.yaml +apiVersion: kustomize.toolkit.fluxcd.io/v1 +kind: Kustomization +metadata: + name: cassandra + namespace: flux-system + annotations: + kustomize.toolkit.fluxcd.io/ssa: IfNotPresent +spec: + interval: 10m + path: ./services/cassandra + targetNamespace: cassandra + prune: true + sourceRef: + kind: GitRepository + name: flux-system + namespace: flux-system + dependsOn: + - name: cert-manager + - name: core + - name: keycloak + - name: longhorn + - name: traefik + - name: vault + - name: vault-csi + - name: vault-injector + wait: false + timeout: 20m diff --git a/clusters/atlas/flux-system/applications/kustomization.yaml b/clusters/atlas/flux-system/applications/kustomization.yaml index 1dc31c08..b4b3a034 100644 --- a/clusters/atlas/flux-system/applications/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/kustomization.yaml @@ -29,6 +29,8 @@ resources: - openclaw/kustomization.yaml - hermes/kustomization.yaml - game-stream/kustomization.yaml + - cassandra-auth/kustomization.yaml + - cassandra/kustomization.yaml - veles/kustomization.yaml - typhon/kustomization.yaml - nextcloud/kustomization.yaml diff --git a/infrastructure/core/node-prefer-noschedule-cronjob.yaml b/infrastructure/core/node-prefer-noschedule-cronjob.yaml index 95b41313..f3313243 100644 --- a/infrastructure/core/node-prefer-noschedule-cronjob.yaml +++ b/infrastructure/core/node-prefer-noschedule-cronjob.yaml @@ -68,7 +68,10 @@ spec: k label node titan-23 \ veles.bstein.dev/simulation=true \ veles.bstein.dev/node-pool=oceanus \ + cassandra.bstein.dev/simulation=true \ + cassandra.bstein.dev/node-pool=oceanus \ node-role.kubernetes.io/veles-sim=true \ + node-role.kubernetes.io/cassandra-sim=true \ longhorn-host=true \ hardware=oceanus \ --overwrite=true || true diff --git a/infrastructure/longhorn/core/cassandra-recurring-jobs.yaml b/infrastructure/longhorn/core/cassandra-recurring-jobs.yaml new file mode 100644 index 00000000..b3fca3a8 --- /dev/null +++ b/infrastructure/longhorn/core/cassandra-recurring-jobs.yaml @@ -0,0 +1,60 @@ +# infrastructure/longhorn/core/cassandra-recurring-jobs.yaml +apiVersion: longhorn.io/v1beta2 +kind: RecurringJob +metadata: + name: cassandra-postgres-backup + namespace: longhorn-system +spec: + name: cassandra-postgres-backup + cron: "30 5 * * *" + task: backup + groups: + - cassandra + - cassandra-postgres + retain: 7 + concurrency: 1 +--- +apiVersion: longhorn.io/v1beta2 +kind: RecurringJob +metadata: + name: cassandra-postgres-snapshot + namespace: longhorn-system +spec: + name: cassandra-postgres-snapshot + cron: "*/30 * * * *" + task: snapshot + groups: + - cassandra + - cassandra-postgres + retain: 8 + concurrency: 1 +--- +apiVersion: longhorn.io/v1beta2 +kind: RecurringJob +metadata: + name: cassandra-artifacts-backup + namespace: longhorn-system +spec: + name: cassandra-artifacts-backup + cron: "45 5 * * *" + task: backup + groups: + - cassandra + - cassandra-artifacts + retain: 7 + concurrency: 1 +--- +apiVersion: longhorn.io/v1beta2 +kind: RecurringJob +metadata: + name: cassandra-artifacts-snapshot + namespace: longhorn-system +spec: + name: cassandra-artifacts-snapshot + cron: "15 */6 * * *" + task: snapshot + groups: + - cassandra + - cassandra-artifacts + retain: 8 + concurrency: 1 diff --git a/infrastructure/longhorn/core/kustomization.yaml b/infrastructure/longhorn/core/kustomization.yaml index 73603b81..1e899d36 100644 --- a/infrastructure/longhorn/core/kustomization.yaml +++ b/infrastructure/longhorn/core/kustomization.yaml @@ -7,6 +7,7 @@ resources: - secretproviderclass.yaml - vault-sync-deployment.yaml - helmrelease.yaml + - cassandra-recurring-jobs.yaml - veles-recurring-jobs.yaml - longhorn-settings-ensure-job.yaml - longhorn-csi-toleration-ensure-job.yaml diff --git a/infrastructure/longhorn/core/scripts/longhorn_disk_tags_ensure.py b/infrastructure/longhorn/core/scripts/longhorn_disk_tags_ensure.py index 65f69461..df26d3ab 100644 --- a/infrastructure/longhorn/core/scripts/longhorn_disk_tags_ensure.py +++ b/infrastructure/longhorn/core/scripts/longhorn_disk_tags_ensure.py @@ -19,8 +19,14 @@ LONGHORN_NS = "longhorn-system" LONGHORN_API = "/apis/longhorn.io/v1beta2/namespaces/{namespace}/nodes" DESIRED_DISK_TAGS = { "/mnt/astreae": ["astreae"], - "/mnt/asteria": ["asteria"], - "/mnt/veles": ["veles-oceanus", "veles-db", "veles-artifacts"], + "/mnt/asteria": ["asteria", "cassandra-db", "cassandra-artifacts"], + "/mnt/veles": [ + "veles-oceanus", + "veles-db", + "veles-artifacts", + "cassandra-db", + "cassandra-artifacts", + ], "/mnt/veles-db": ["veles-oceanus", "veles-db"], "/mnt/veles-artifacts": ["veles-oceanus", "veles-artifacts"], } @@ -34,7 +40,13 @@ DESIRED_NODE_DISKS = { "allowScheduling": True, "evictionRequested": False, "storageReserved": 0, - "tags": ["veles-oceanus", "veles-db", "veles-artifacts"], + "tags": [ + "veles-oceanus", + "veles-db", + "veles-artifacts", + "cassandra-db", + "cassandra-artifacts", + ], } } } diff --git a/infrastructure/longhorn/core/veles-recurring-jobs.yaml b/infrastructure/longhorn/core/veles-recurring-jobs.yaml index b7fe3514..434b94c6 100644 --- a/infrastructure/longhorn/core/veles-recurring-jobs.yaml +++ b/infrastructure/longhorn/core/veles-recurring-jobs.yaml @@ -28,3 +28,33 @@ spec: - veles-postgres retain: 8 concurrency: 1 +--- +apiVersion: longhorn.io/v1beta2 +kind: RecurringJob +metadata: + name: veles-artifacts-backup + namespace: longhorn-system +spec: + name: veles-artifacts-backup + cron: "45 5 * * *" + task: backup + groups: + - veles + - veles-artifacts + retain: 7 + concurrency: 1 +--- +apiVersion: longhorn.io/v1beta2 +kind: RecurringJob +metadata: + name: veles-artifacts-snapshot + namespace: longhorn-system +spec: + name: veles-artifacts-snapshot + cron: "15 */6 * * *" + task: snapshot + groups: + - veles + - veles-artifacts + retain: 8 + concurrency: 1 diff --git a/infrastructure/modules/base/priorityclass/cassandra.yaml b/infrastructure/modules/base/priorityclass/cassandra.yaml new file mode 100644 index 00000000..65e1f331 --- /dev/null +++ b/infrastructure/modules/base/priorityclass/cassandra.yaml @@ -0,0 +1,17 @@ +# infrastructure/modules/base/priorityclass/cassandra.yaml +apiVersion: scheduling.k8s.io/v1 +kind: PriorityClass +metadata: + name: cassandra-core +value: 500 +globalDefault: false +description: "For Cassandra core database, API, and controller workloads" +--- +apiVersion: scheduling.k8s.io/v1 +kind: PriorityClass +metadata: + name: cassandra-sim +value: 50 +globalDefault: false +preemptionPolicy: Never +description: "For Cassandra simulation jobs; lower than core and non-preempting" diff --git a/infrastructure/modules/base/priorityclass/kustomization.yaml b/infrastructure/modules/base/priorityclass/kustomization.yaml index 3d486b4e..a9b27e71 100644 --- a/infrastructure/modules/base/priorityclass/kustomization.yaml +++ b/infrastructure/modules/base/priorityclass/kustomization.yaml @@ -3,4 +3,5 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: - scavenger.yaml + - cassandra.yaml - veles.yaml diff --git a/infrastructure/modules/base/storageclass/cassandra-artifacts.yaml b/infrastructure/modules/base/storageclass/cassandra-artifacts.yaml new file mode 100644 index 00000000..2f5be8da --- /dev/null +++ b/infrastructure/modules/base/storageclass/cassandra-artifacts.yaml @@ -0,0 +1,20 @@ +# infrastructure/modules/base/storageclass/cassandra-artifacts.yaml +apiVersion: storage.k8s.io/v1 +kind: StorageClass +metadata: + name: cassandra-artifacts + annotations: + cassandra.bstein.dev/allowed-namespace: cassandra +provisioner: driver.longhorn.io +parameters: + diskSelector: cassandra-artifacts + fromBackup: "" + numberOfReplicas: "2" + staleReplicaTimeout: "30" + fsType: ext4 + replicaAutoBalance: least-effort + dataLocality: best-effort + recurringJobSelector: '[{"name":"cassandra-artifacts-backup","isGroup":false},{"name":"cassandra-artifacts-snapshot","isGroup":false}]' +reclaimPolicy: Retain +allowVolumeExpansion: true +volumeBindingMode: WaitForFirstConsumer diff --git a/infrastructure/modules/base/storageclass/cassandra-db.yaml b/infrastructure/modules/base/storageclass/cassandra-db.yaml new file mode 100644 index 00000000..504ae55f --- /dev/null +++ b/infrastructure/modules/base/storageclass/cassandra-db.yaml @@ -0,0 +1,20 @@ +# infrastructure/modules/base/storageclass/cassandra-db.yaml +apiVersion: storage.k8s.io/v1 +kind: StorageClass +metadata: + name: cassandra-db + annotations: + cassandra.bstein.dev/allowed-namespace: cassandra +provisioner: driver.longhorn.io +parameters: + diskSelector: cassandra-db + fromBackup: "" + numberOfReplicas: "2" + staleReplicaTimeout: "30" + fsType: ext4 + replicaAutoBalance: least-effort + dataLocality: best-effort + recurringJobSelector: '[{"name":"cassandra-postgres-backup","isGroup":false},{"name":"cassandra-postgres-snapshot","isGroup":false}]' +reclaimPolicy: Retain +allowVolumeExpansion: true +volumeBindingMode: WaitForFirstConsumer diff --git a/infrastructure/modules/base/storageclass/cassandra-storage-policy.yaml b/infrastructure/modules/base/storageclass/cassandra-storage-policy.yaml new file mode 100644 index 00000000..f1e7ec02 --- /dev/null +++ b/infrastructure/modules/base/storageclass/cassandra-storage-policy.yaml @@ -0,0 +1,25 @@ +# infrastructure/modules/base/storageclass/cassandra-storage-policy.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingAdmissionPolicy +metadata: + name: cassandra-storage-namespace +spec: + failurePolicy: Fail + matchConstraints: + resourceRules: + - apiGroups: [""] + apiVersions: ["v1"] + operations: ["CREATE", "UPDATE"] + resources: ["persistentvolumeclaims"] + validations: + - expression: "!has(object.spec.storageClassName) || !(object.spec.storageClassName in ['cassandra-db', 'cassandra-artifacts']) || object.metadata.namespace == 'cassandra'" + message: "Cassandra storage classes are reserved for namespace cassandra" +--- +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingAdmissionPolicyBinding +metadata: + name: cassandra-storage-namespace +spec: + policyName: cassandra-storage-namespace + validationActions: + - Deny diff --git a/infrastructure/modules/base/storageclass/kustomization.yaml b/infrastructure/modules/base/storageclass/kustomization.yaml index a4c111a1..1898deb7 100644 --- a/infrastructure/modules/base/storageclass/kustomization.yaml +++ b/infrastructure/modules/base/storageclass/kustomization.yaml @@ -5,6 +5,9 @@ resources: - asteria.yaml - asteria-encrypted.yaml - astreae.yaml + - cassandra-db.yaml + - cassandra-artifacts.yaml + - cassandra-storage-policy.yaml - veles-oceanus-db.yaml - veles-oceanus-artifacts.yaml - veles-oceanus-policy.yaml diff --git a/services/cassandra-auth/bootstrap-jobs/cassandra-gitea-oidc-secret-ensure-job.yaml b/services/cassandra-auth/bootstrap-jobs/cassandra-gitea-oidc-secret-ensure-job.yaml new file mode 100644 index 00000000..38039196 --- /dev/null +++ b/services/cassandra-auth/bootstrap-jobs/cassandra-gitea-oidc-secret-ensure-job.yaml @@ -0,0 +1,54 @@ +# services/keycloak/bootstrap-jobs/cassandra-gitea-oidc-secret-ensure-job.yaml +# One-off job for sso/cassandra-gitea-oidc-secret-ensure-1. +# Purpose: create/update the Keycloak cassandra realm Gitea OIDC client, ensure the +# cassandra-tester group exists, and write the client secret to Vault for Gitea. +# Run by setting spec.suspend to false, reconcile, then set it back to true. +# Safe to delete the finished Job/pod; it should not run continuously. +apiVersion: batch/v1 +kind: Job +metadata: + name: cassandra-gitea-oidc-secret-ensure-1 + namespace: sso +spec: + suspend: true + backoffLimit: 0 + ttlSecondsAfterFinished: 3600 + template: + metadata: + annotations: + vault.hashicorp.com/agent-inject: "true" + vault.hashicorp.com/agent-pre-populate-only: "true" + vault.hashicorp.com/role: "sso-secrets" + vault.hashicorp.com/agent-inject-secret-keycloak-admin-env.sh: "kv/data/atlas/shared/keycloak-admin" + vault.hashicorp.com/agent-inject-template-keycloak-admin-env.sh: | + {{ with secret "kv/data/atlas/shared/keycloak-admin" }} + export KEYCLOAK_ADMIN="{{ .Data.data.username }}" + export KEYCLOAK_ADMIN_USER="{{ .Data.data.username }}" + export KEYCLOAK_ADMIN_PASSWORD="{{ .Data.data.password }}" + {{ end }} + spec: + serviceAccountName: mas-secrets-ensure + restartPolicy: Never + volumes: + - name: cassandra-gitea-oidc-secret-ensure-script + configMap: + name: cassandra-gitea-oidc-secret-ensure-script + defaultMode: 0555 + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: kubernetes.io/arch + operator: In + values: ["arm64"] + - key: node-role.kubernetes.io/worker + operator: Exists + containers: + - name: apply + image: bitnami/kubectl@sha256:554ab88b1858e8424c55de37ad417b16f2a0e65d1607aa0f3fe3ce9b9f10b131 + command: ["/scripts/cassandra_gitea_oidc_secret_ensure.sh"] + volumeMounts: + - name: cassandra-gitea-oidc-secret-ensure-script + mountPath: /scripts + readOnly: true diff --git a/services/cassandra-auth/bootstrap-jobs/cassandra-realm-ensure-job.yaml b/services/cassandra-auth/bootstrap-jobs/cassandra-realm-ensure-job.yaml new file mode 100644 index 00000000..3b3d10b3 --- /dev/null +++ b/services/cassandra-auth/bootstrap-jobs/cassandra-realm-ensure-job.yaml @@ -0,0 +1,401 @@ +# services/keycloak/bootstrap-jobs/cassandra-realm-ensure-job.yaml +# One-off job for sso/cassandra-realm-ensure-1. +# Purpose: create the Cassandra realm, groups, OIDC client, SMTP settings, and Vault client secret. +# Keep suspended until Cassandra Vault paths/policies have reconciled, then unsuspend once. +apiVersion: batch/v1 +kind: Job +metadata: + name: cassandra-realm-ensure-1 + namespace: sso +spec: + suspend: true + backoffLimit: 0 + ttlSecondsAfterFinished: 3600 + template: + metadata: + annotations: + vault.hashicorp.com/agent-inject: "true" + vault.hashicorp.com/agent-pre-populate-only: "true" + vault.hashicorp.com/role: "sso-secrets" + vault.hashicorp.com/agent-inject-secret-keycloak-admin-env.sh: "kv/data/atlas/shared/keycloak-admin" + vault.hashicorp.com/agent-inject-template-keycloak-admin-env.sh: | + {{ with secret "kv/data/atlas/shared/keycloak-admin" }} + export KEYCLOAK_ADMIN="{{ .Data.data.username }}" + export KEYCLOAK_ADMIN_USER="{{ .Data.data.username }}" + export KEYCLOAK_ADMIN_PASSWORD="{{ .Data.data.password }}" + {{ end }} + {{ with secret "kv/data/atlas/shared/postmark-relay" }} + export KEYCLOAK_SMTP_USER="{{ index .Data.data "apikey" }}" + export KEYCLOAK_SMTP_PASSWORD="{{ index .Data.data "apikey" }}" + {{ end }} + spec: + serviceAccountName: mas-secrets-ensure + restartPolicy: Never + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: node-role.kubernetes.io/worker + operator: Exists + preferredDuringSchedulingIgnoredDuringExecution: + - weight: 100 + preference: + matchExpressions: + - key: kubernetes.io/arch + operator: In + values: ["arm64"] + containers: + - name: configure + image: python:3.11-alpine + env: + - name: KEYCLOAK_SERVER + value: http://keycloak.sso.svc.cluster.local + - name: KEYCLOAK_REALM + value: cassandra + - name: KEYCLOAK_CLIENT_ID + value: cassandra-web + - name: KEYCLOAK_PUBLIC_ISSUER + value: https://sso.bstein.dev/realms/cassandra + - name: CASSANDRA_BASE_URL + value: https://cassandra.bstein.dev + - name: CASSANDRA_TESTER_GROUP + value: cassandra-tester + - name: KEYCLOAK_SMTP_HOST + value: mail.bstein.dev + - name: KEYCLOAK_SMTP_PORT + value: "587" + - name: KEYCLOAK_SMTP_FROM + value: no-reply-cassandra@bstein.dev + - name: KEYCLOAK_SMTP_FROM_NAME + value: Cassandra + - name: CASSANDRA_PUBLIC_REPLAY_USERS + value: cassandra-dev,daniel-test,viktor-test + command: ["/bin/sh", "-c"] + args: + - | + set -eu + . /vault/secrets/keycloak-admin-env.sh + python - <<'PY' + import json + import os + import time + import urllib.error + import urllib.parse + import urllib.request + + base_url = os.environ["KEYCLOAK_SERVER"].rstrip("/") + realm = os.environ["KEYCLOAK_REALM"] + client_id = os.environ["KEYCLOAK_CLIENT_ID"] + issuer = os.environ["KEYCLOAK_PUBLIC_ISSUER"] + app_base_url = os.environ["CASSANDRA_BASE_URL"].rstrip("/") + admin_user = os.environ["KEYCLOAK_ADMIN_USER"] + admin_password = os.environ["KEYCLOAK_ADMIN_PASSWORD"] + + def request(method, url, token=None, payload=None, headers=None, timeout=30): + data = None + req_headers = headers.copy() if headers else {} + if token: + req_headers["Authorization"] = f"Bearer {token}" + if payload is not None: + data = json.dumps(payload).encode() + req_headers["Content-Type"] = "application/json" + req = urllib.request.Request(url, data=data, headers=req_headers, method=method) + try: + with urllib.request.urlopen(req, timeout=timeout) as resp: + body = resp.read() + if not body: + return resp.status, None + return resp.status, json.loads(body.decode()) + except urllib.error.HTTPError as exc: + raw = exc.read() + if not raw: + return exc.code, None + try: + return exc.code, json.loads(raw.decode()) + except Exception: + return exc.code, {"raw": raw.decode(errors="replace")} + + token_body = None + form = urllib.parse.urlencode( + { + "grant_type": "password", + "client_id": "admin-cli", + "username": admin_user, + "password": admin_password, + } + ).encode() + for attempt in range(1, 11): + req = urllib.request.Request( + f"{base_url}/realms/master/protocol/openid-connect/token", + data=form, + headers={"Content-Type": "application/x-www-form-urlencoded"}, + method="POST", + ) + try: + with urllib.request.urlopen(req, timeout=10) as resp: + token_body = json.loads(resp.read().decode()) + break + except urllib.error.URLError as exc: + if attempt == 10: + raise SystemExit(f"Keycloak token request failed after retries: {exc}") + time.sleep(attempt * 2) + token = token_body["access_token"] + + smtp = { + "host": os.environ["KEYCLOAK_SMTP_HOST"], + "port": os.environ["KEYCLOAK_SMTP_PORT"], + "from": os.environ["KEYCLOAK_SMTP_FROM"], + "fromDisplayName": os.environ["KEYCLOAK_SMTP_FROM_NAME"], + "replyTo": os.environ["KEYCLOAK_SMTP_FROM"], + "replyToDisplayName": os.environ["KEYCLOAK_SMTP_FROM_NAME"], + "user": os.environ["KEYCLOAK_SMTP_USER"], + "password": os.environ["KEYCLOAK_SMTP_PASSWORD"], + "auth": "true", + "starttls": "true", + "ssl": "false", + } + + status, realm_rep = request("GET", f"{base_url}/admin/realms/{realm}", token) + if status == 404: + create_payload = { + "realm": realm, + "enabled": True, + "registrationAllowed": False, + "resetPasswordAllowed": True, + "verifyEmail": True, + "loginWithEmailAllowed": True, + "duplicateEmailsAllowed": False, + "smtpServer": smtp, + } + status, body = request("POST", f"{base_url}/admin/realms", token, create_payload) + if status not in (201, 204, 409): + raise SystemExit(f"Realm create failed: status={status} body={body}") + status, realm_rep = request("GET", f"{base_url}/admin/realms/{realm}", token) + if status != 200 or not isinstance(realm_rep, dict): + raise SystemExit(f"Realm fetch failed: status={status}") + + realm_rep.update( + { + "enabled": True, + "registrationAllowed": False, + "resetPasswordAllowed": True, + "verifyEmail": True, + "loginWithEmailAllowed": True, + "duplicateEmailsAllowed": False, + "smtpServer": smtp, + } + ) + status, body = request("PUT", f"{base_url}/admin/realms/{realm}", token, realm_rep) + if status not in (200, 204): + raise SystemExit(f"Realm update failed: status={status} body={body}") + + def find_group(name): + status, groups = request( + "GET", + f"{base_url}/admin/realms/{realm}/groups?search={urllib.parse.quote(name)}", + token, + ) + if status != 200: + raise SystemExit(f"Group search failed for {name}: status={status}") + for group in groups or []: + if group.get("name") == name: + return group + return None + + def ensure_group(name): + group = find_group(name) + if group: + return group + status, body = request("POST", f"{base_url}/admin/realms/{realm}/groups", token, {"name": name}) + if status not in (201, 204, 409): + raise SystemExit(f"Group create failed for {name}: status={status} body={body}") + group = find_group(name) + if not group: + raise SystemExit(f"Group missing after create for {name}") + return group + + def find_user(username): + encoded = urllib.parse.quote(username) + for query in (f"username={encoded}&exact=true", f"email={encoded}&exact=true", f"search={encoded}"): + status, users = request( + "GET", + f"{base_url}/admin/realms/{realm}/users?{query}", + token, + ) + if status != 200: + raise SystemExit(f"User search failed for {username}: status={status}") + for user in users or []: + candidates = { + str(user.get("username") or "").casefold(), + str(user.get("email") or "").casefold(), + } + if username.casefold() in candidates: + return user + return None + + def ensure_user_group(username, group): + user = find_user(username) + if not user: + print(f"WARNING: Cassandra public replay user {username!r} not found; skipping membership") + return + user_id = user.get("id") + group_id = group.get("id") + if not user_id or not group_id: + raise SystemExit(f"Missing id for user/group membership: user={username}") + status, memberships = request( + "GET", + f"{base_url}/admin/realms/{realm}/users/{user_id}/groups", + token, + ) + if status != 200: + raise SystemExit(f"User group lookup failed for {username}: status={status}") + if any(item.get("id") == group_id for item in memberships or []): + return + status, body = request( + "PUT", + f"{base_url}/admin/realms/{realm}/users/{user_id}/groups/{group_id}", + token, + ) + if status not in (200, 204): + raise SystemExit(f"User group update failed for {username}: status={status} body={body}") + + ensure_group("alpha") + ensure_group("admin") + ensure_group(os.environ["CASSANDRA_TESTER_GROUP"]) + public_replay_group = ensure_group("public-replay") + for username in os.environ.get("CASSANDRA_PUBLIC_REPLAY_USERS", "").split(","): + username = username.strip() + if username: + ensure_user_group(username, public_replay_group) + + status, clients = request( + "GET", + f"{base_url}/admin/realms/{realm}/clients?clientId={urllib.parse.quote(client_id)}", + token, + ) + if status != 200: + raise SystemExit(f"Client lookup failed: status={status}") + client_uuid = clients[0]["id"] if clients else None + client_payload = { + "clientId": client_id, + "enabled": True, + "protocol": "openid-connect", + "publicClient": False, + "standardFlowEnabled": True, + "implicitFlowEnabled": False, + "directAccessGrantsEnabled": False, + "serviceAccountsEnabled": False, + "redirectUris": [f"{app_base_url}/*"], + "webOrigins": [app_base_url], + "rootUrl": app_base_url, + "baseUrl": "/", + "attributes": { + "pkce.code.challenge.method": "S256", + "post.logout.redirect.uris": f"{app_base_url}/*", + }, + } + if not client_uuid: + status, body = request("POST", f"{base_url}/admin/realms/{realm}/clients", token, client_payload) + if status not in (201, 204, 409): + raise SystemExit(f"Client create failed: status={status} body={body}") + status, clients = request( + "GET", + f"{base_url}/admin/realms/{realm}/clients?clientId={urllib.parse.quote(client_id)}", + token, + ) + client_uuid = clients[0]["id"] if clients else None + if not client_uuid: + raise SystemExit("Client cassandra-web not found after create") + status, body = request( + "PUT", + f"{base_url}/admin/realms/{realm}/clients/{client_uuid}", + token, + client_payload, + ) + if status not in (200, 204): + raise SystemExit(f"Client update failed: status={status} body={body}") + + mapper_payload = { + "name": "groups", + "protocol": "openid-connect", + "protocolMapper": "oidc-group-membership-mapper", + "consentRequired": False, + "config": { + "full.path": "false", + "id.token.claim": "true", + "access.token.claim": "true", + "userinfo.token.claim": "true", + "claim.name": "groups", + "jsonType.label": "String", + }, + } + status, mappers = request( + "GET", + f"{base_url}/admin/realms/{realm}/clients/{client_uuid}/protocol-mappers/models", + token, + ) + if status != 200: + raise SystemExit(f"Mapper lookup failed: status={status}") + mapper_id = next((mapper.get("id") for mapper in mappers or [] if mapper.get("name") == "groups"), None) + if mapper_id: + mapper_update_payload = dict(mapper_payload) + mapper_update_payload["id"] = mapper_id + status, body = request( + "PUT", + f"{base_url}/admin/realms/{realm}/clients/{client_uuid}/protocol-mappers/models/{mapper_id}", + token, + mapper_update_payload, + ) + else: + status, body = request( + "POST", + f"{base_url}/admin/realms/{realm}/clients/{client_uuid}/protocol-mappers/models", + token, + mapper_payload, + ) + if status not in (200, 201, 204): + raise SystemExit(f"Mapper ensure failed: status={status} body={body}") + + status, secret = request( + "GET", + f"{base_url}/admin/realms/{realm}/clients/{client_uuid}/client-secret", + token, + ) + client_secret = (secret or {}).get("value") + if status != 200 or not client_secret: + raise SystemExit(f"Client secret fetch failed: status={status}") + + vault_addr = os.environ.get("VAULT_ADDR", "http://vault.vault.svc.cluster.local:8200") + jwt = open("/var/run/secrets/kubernetes.io/serviceaccount/token", encoding="utf-8").read().strip() + login_payload = json.dumps({"jwt": jwt, "role": os.environ.get("VAULT_ROLE", "sso-secrets")}).encode() + req = urllib.request.Request( + f"{vault_addr}/v1/auth/kubernetes/login", + data=login_payload, + headers={"Content-Type": "application/json"}, + method="POST", + ) + with urllib.request.urlopen(req, timeout=20) as resp: + vault_token = json.loads(resp.read().decode())["auth"]["client_token"] + + payload = { + "data": { + "client_id": client_id, + "client_secret": client_secret, + "issuer": issuer, + "realm": realm, + "required_groups": "alpha,admin", + } + } + req = urllib.request.Request( + f"{vault_addr}/v1/kv/data/atlas/cassandra/cassandra-oidc", + data=json.dumps(payload).encode(), + headers={"X-Vault-Token": vault_token, "Content-Type": "application/json"}, + method="POST", + ) + with urllib.request.urlopen(req, timeout=20) as resp: + if resp.status not in (200, 204): + raise SystemExit(f"Vault write returned {resp.status}") + + print("Cassandra Keycloak realm/client ready") + PY diff --git a/services/cassandra-auth/kustomization.yaml b/services/cassandra-auth/kustomization.yaml new file mode 100644 index 00000000..a84908f3 --- /dev/null +++ b/services/cassandra-auth/kustomization.yaml @@ -0,0 +1,13 @@ +# services/cassandra-auth/kustomization.yaml +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: sso +resources: + - bootstrap-jobs/cassandra-realm-ensure-job.yaml + - bootstrap-jobs/cassandra-gitea-oidc-secret-ensure-job.yaml +configMapGenerator: + - name: cassandra-gitea-oidc-secret-ensure-script + files: + - cassandra_gitea_oidc_secret_ensure.sh=scripts/cassandra_gitea_oidc_secret_ensure.sh +generatorOptions: + disableNameSuffixHash: true diff --git a/services/cassandra-auth/scripts/cassandra_gitea_oidc_secret_ensure.sh b/services/cassandra-auth/scripts/cassandra_gitea_oidc_secret_ensure.sh new file mode 100644 index 00000000..fc1e2ae5 --- /dev/null +++ b/services/cassandra-auth/scripts/cassandra_gitea_oidc_secret_ensure.sh @@ -0,0 +1,157 @@ +#!/usr/bin/env sh +set -euo pipefail + +. /vault/secrets/keycloak-admin-env.sh + +KC_URL="${KEYCLOAK_SERVER:-http://keycloak.sso.svc.cluster.local}" +REALM="${KEYCLOAK_REALM:-cassandra}" +CLIENT_ID="${KEYCLOAK_CLIENT_ID:-gitea}" +PUBLIC_BASE_URL="${GITEA_PUBLIC_BASE_URL:-https://scm.bstein.dev}" +AUTH_SOURCE_NAME="${GITEA_AUTH_SOURCE_NAME:-cassandra}" +TESTER_GROUP="${CASSANDRA_GITEA_TESTER_GROUP:-cassandra-tester}" +VAULT_SECRET_PATH="${VAULT_SECRET_PATH:-kv/data/atlas/gitea/gitea-cassandra-oidc}" + +ACCESS_TOKEN="" +for attempt in 1 2 3 4 5 6 7 8 9 10; do + if curl -fsS "${KC_URL}/realms/master" >/dev/null 2>&1; then + break + fi + echo "Waiting for Keycloak to be reachable (attempt ${attempt})" >&2 + sleep $((attempt * 2)) +done +for attempt in 1 2 3 4 5; do + TOKEN_JSON="$(curl -sS -X POST "$KC_URL/realms/master/protocol/openid-connect/token" \ + -H 'Content-Type: application/x-www-form-urlencoded' \ + -d "grant_type=password" \ + -d "client_id=admin-cli" \ + -d "username=${KEYCLOAK_ADMIN}" \ + -d "password=${KEYCLOAK_ADMIN_PASSWORD}" || true)" + ACCESS_TOKEN="$(echo "$TOKEN_JSON" | jq -r '.access_token' 2>/dev/null || true)" + if [ -n "$ACCESS_TOKEN" ] && [ "$ACCESS_TOKEN" != "null" ]; then + break + fi + echo "Keycloak token request failed (attempt ${attempt})" >&2 + sleep $((attempt * 2)) +done +if [ -z "$ACCESS_TOKEN" ] || [ "$ACCESS_TOKEN" = "null" ]; then + echo "Failed to fetch Keycloak admin token" >&2 + exit 1 +fi + +ensure_group() { + group_name="$1" + groups="$(curl -sS -H "Authorization: Bearer ${ACCESS_TOKEN}" \ + "${KC_URL}/admin/realms/${REALM}/groups?search=$(printf '%s' "${group_name}" | jq -sRr @uri)" || true)" + if echo "$groups" | jq -e --arg name "$group_name" '.[]? | select(.name == $name)' >/dev/null 2>&1; then + return + fi + status="$(curl -sS -o /dev/null -w "%{http_code}" -X POST \ + -H "Authorization: Bearer ${ACCESS_TOKEN}" \ + -H 'Content-Type: application/json' \ + -d "$(jq -nc --arg name "$group_name" '{name:$name}')" \ + "${KC_URL}/admin/realms/${REALM}/groups")" + if [ "$status" != "201" ] && [ "$status" != "204" ] && [ "$status" != "409" ]; then + echo "Keycloak group create failed for ${group_name} (status ${status})" >&2 + exit 1 + fi +} + +ensure_group "${TESTER_GROUP}" + +CLIENT_QUERY="$(curl -sS -H "Authorization: Bearer ${ACCESS_TOKEN}" \ + "${KC_URL}/admin/realms/${REALM}/clients?clientId=$(printf '%s' "${CLIENT_ID}" | jq -sRr @uri)" || true)" +CLIENT_UUID="$(echo "$CLIENT_QUERY" | jq -r '.[0].id' 2>/dev/null || true)" + +client_payload="$(jq -nc \ + --arg client_id "${CLIENT_ID}" \ + --arg root_url "${PUBLIC_BASE_URL}" \ + --arg callback "${PUBLIC_BASE_URL}/user/oauth2/${AUTH_SOURCE_NAME}/callback" \ + '{clientId:$client_id,enabled:true,protocol:"openid-connect",publicClient:false,standardFlowEnabled:true,implicitFlowEnabled:false,directAccessGrantsEnabled:false,serviceAccountsEnabled:false,redirectUris:[$callback],webOrigins:[$root_url],rootUrl:$root_url,baseUrl:"/",attributes:{"pkce.code.challenge.method":"S256","post.logout.redirect.uris":($root_url + "/*")}}')" + +if [ -z "$CLIENT_UUID" ] || [ "$CLIENT_UUID" = "null" ]; then + status="$(curl -sS -o /dev/null -w "%{http_code}" -X POST \ + -H "Authorization: Bearer ${ACCESS_TOKEN}" \ + -H 'Content-Type: application/json' \ + -d "${client_payload}" \ + "${KC_URL}/admin/realms/${REALM}/clients")" + if [ "$status" != "201" ] && [ "$status" != "204" ] && [ "$status" != "409" ]; then + echo "Keycloak client create failed for ${CLIENT_ID} (status ${status})" >&2 + exit 1 + fi + CLIENT_QUERY="$(curl -sS -H "Authorization: Bearer ${ACCESS_TOKEN}" \ + "${KC_URL}/admin/realms/${REALM}/clients?clientId=$(printf '%s' "${CLIENT_ID}" | jq -sRr @uri)" || true)" + CLIENT_UUID="$(echo "$CLIENT_QUERY" | jq -r '.[0].id' 2>/dev/null || true)" +fi + +if [ -z "$CLIENT_UUID" ] || [ "$CLIENT_UUID" = "null" ]; then + echo "Keycloak client ${CLIENT_ID} not found after create" >&2 + exit 1 +fi + +status="$(curl -sS -o /dev/null -w "%{http_code}" -X PUT \ + -H "Authorization: Bearer ${ACCESS_TOKEN}" \ + -H 'Content-Type: application/json' \ + -d "${client_payload}" \ + "${KC_URL}/admin/realms/${REALM}/clients/${CLIENT_UUID}")" +if [ "$status" != "200" ] && [ "$status" != "204" ]; then + echo "Keycloak client update failed for ${CLIENT_ID} (status ${status})" >&2 + exit 1 +fi + +mapper_payload="$(jq -nc \ + '{name:"groups",protocol:"openid-connect",protocolMapper:"oidc-group-membership-mapper",consentRequired:false,config:{"full.path":"false","id.token.claim":"true","access.token.claim":"true","userinfo.token.claim":"true","claim.name":"groups","jsonType.label":"String"}}')" +mappers="$(curl -sS -H "Authorization: Bearer ${ACCESS_TOKEN}" \ + "${KC_URL}/admin/realms/${REALM}/clients/${CLIENT_UUID}/protocol-mappers/models" || true)" +MAPPER_ID="$(echo "$mappers" | jq -r '.[]? | select(.name == "groups") | .id' | head -n1 || true)" +if [ -n "$MAPPER_ID" ] && [ "$MAPPER_ID" != "null" ]; then + status="$(curl -sS -o /dev/null -w "%{http_code}" -X PUT \ + -H "Authorization: Bearer ${ACCESS_TOKEN}" \ + -H 'Content-Type: application/json' \ + -d "${mapper_payload}" \ + "${KC_URL}/admin/realms/${REALM}/clients/${CLIENT_UUID}/protocol-mappers/models/${MAPPER_ID}")" +else + status="$(curl -sS -o /dev/null -w "%{http_code}" -X POST \ + -H "Authorization: Bearer ${ACCESS_TOKEN}" \ + -H 'Content-Type: application/json' \ + -d "${mapper_payload}" \ + "${KC_URL}/admin/realms/${REALM}/clients/${CLIENT_UUID}/protocol-mappers/models")" +fi +if [ "$status" != "200" ] && [ "$status" != "201" ] && [ "$status" != "204" ]; then + echo "Keycloak groups mapper ensure failed (status ${status})" >&2 + exit 1 +fi + +CLIENT_SECRET="$(curl -sS -H "Authorization: Bearer ${ACCESS_TOKEN}" \ + "${KC_URL}/admin/realms/${REALM}/clients/${CLIENT_UUID}/client-secret" | jq -r '.value' 2>/dev/null || true)" +if [ -z "$CLIENT_SECRET" ] || [ "$CLIENT_SECRET" = "null" ]; then + echo "Keycloak client secret not found for ${CLIENT_ID}" >&2 + exit 1 +fi + +vault_addr="${VAULT_ADDR:-http://vault.vault.svc.cluster.local:8200}" +vault_role="${VAULT_ROLE:-sso-secrets}" +jwt="$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)" +login_payload="$(jq -nc --arg jwt "${jwt}" --arg role "${vault_role}" '{jwt:$jwt, role:$role}')" +vault_token="$(curl -sS --request POST --data "${login_payload}" \ + "${vault_addr}/v1/auth/kubernetes/login" | jq -r '.auth.client_token')" +if [ -z "${vault_token}" ] || [ "${vault_token}" = "null" ]; then + echo "vault login failed" >&2 + exit 1 +fi + +payload="$(jq -nc \ + --arg client_id "${CLIENT_ID}" \ + --arg client_secret "${CLIENT_SECRET}" \ + --arg discovery_url "${PUBLIC_BASE_URL}" \ + --arg issuer "https://sso.bstein.dev/realms/${REALM}" \ + --arg auto_discovery_url "https://sso.bstein.dev/realms/${REALM}/.well-known/openid-configuration" \ + --arg auth_source_name "${AUTH_SOURCE_NAME}" \ + --arg tester_group "${TESTER_GROUP}" \ + --arg group_team_map "{\"${TESTER_GROUP}\":{\"cassandra-alpha\":[\"testers\"]}}" \ + '{data:{client_id:$client_id,client_secret:$client_secret,issuer:$issuer,openid_auto_discovery_url:$auto_discovery_url,auth_source_name:$auth_source_name,required_claim_name:"groups",required_claim_value:$tester_group,group_claim_name:"groups",restricted_group:$tester_group,group_team_map:$group_team_map,gitea_base_url:$discovery_url}}')" + +curl -sS -X POST -H "X-Vault-Token: ${vault_token}" \ + -H 'Content-Type: application/json' \ + -d "${payload}" "${vault_addr}/v1/${VAULT_SECRET_PATH}" >/dev/null + +echo "Cassandra realm Gitea OIDC client ready" diff --git a/services/cassandra/NOTES.md b/services/cassandra/NOTES.md new file mode 100644 index 00000000..b993e477 --- /dev/null +++ b/services/cassandra/NOTES.md @@ -0,0 +1,144 @@ +# Cassandra Infrastructure Contract + +This stack is staged as a parallel replacement for Veles. Do not remove or +mutate Veles data while Cassandra is being validated. + +## Cluster Contract + +- Namespace: `cassandra` +- Hostname: `https://cassandra.bstein.dev` +- Namespace: `cassandra`; no alternate alpha namespace is used. +- Backend service: `cassandra-backend.cassandra.svc.cluster.local:80` +- Frontend service: `cassandra-frontend.cassandra.svc.cluster.local:80` +- Postgres service: `cassandra-postgres.cassandra.svc.cluster.local:5432` +- Artifact PVC: `cassandra-artifacts`, mounted at `/data/cassandra-artifacts` +- Storage classes: `cassandra-db`, `cassandra-artifacts` +- Images: + - `registry.bstein.dev/cassandra/cassandra-backend` + - `registry.bstein.dev/cassandra/cassandra-frontend` + - `registry.bstein.dev/cassandra/cassandra-sim-worker` +- Backend `http` container port: `8796` +- Frontend `http` container port: `8080` +- Generator and retention workloads start disabled so copied data is not + consumed or pruned before the migration is verified. + +## Auth Contract + +Cassandra owns authorization in the app. The `cassandra` Ingress does not use oauth2-proxy or Traefik forward-auth, so no ingress/auth layer should strip OIDC token claims. The app should validate tokens from `https://sso.bstein.dev/realms/cassandra` and expect stable `sub`, `email`, `preferred_username`, `groups`, and `realm_access.roles` claims. Do not scale Cassandra for real user traffic until native OIDC login/session flow is implemented and smoke-tested. + +The Keycloak realm setup creates both groups and realm roles named `alpha` and `admin`. Members of the `alpha` group receive the `alpha` realm role; members of `admin` receive both `alpha` and `admin`. Built-in/meta strategies can stay universal, while runs and user-created strategies should remain user-scoped in the Cassandra database. + +## Runtime Env + +Cassandra should consume: + +- `CASSANDRA_PUBLIC_BASE_URL=https://cassandra.bstein.dev` +- `CASSANDRA_OIDC_ISSUER=https://sso.bstein.dev/realms/cassandra` +- `CASSANDRA_OIDC_CLIENT_ID=cassandra-web` +- `CASSANDRA_OIDC_REQUIRED_GROUPS=alpha,cassandra-tester,admin` +- `CASSANDRA_OIDC_GROUPS_CLAIM=groups` +- `CASSANDRA_OIDC_ROLES_CLAIM=realm_access.roles` +- `DATABASE_URL` from `kv/data/atlas/cassandra/cassandra-db` +- `CASSANDRA_SESSION_SECRET` from `kv/data/atlas/cassandra/app-secrets` +- `CASSANDRA_BYOK_ENCRYPTION_KEY` from `kv/data/atlas/cassandra/app-secrets` + +User OpenAI API keys must stay in the Cassandra database encrypted with +`CASSANDRA_BYOK_ENCRYPTION_KEY`; do not store per-user BYOK secrets in Vault. + +Backend runtime secrets are synced from Vault by `cassandra-vault` into the generated Kubernetes Secret `cassandra-runtime-secrets`; no secret values are committed. The backend consumes that secret with `envFrom`. + +## Artifact Contract + +`cassandra-artifacts` is an RWO Longhorn PVC mounted into backend pods at `/data/cassandra-artifacts`. Backend pods own artifact writes and serving. Simulation Jobs should not mount or write directly to this PVC unless they are explicitly scheduled on Oceanus with the Cassandra toleration and the app has chosen a same-node direct-write model. Queue-mediated upload/copy through the backend remains the safer default until the app contract settles. + +Backend, simulation workers, and retention/cleanup workers must run on Oceanus/titan-23 when they need artifact access. Frontend pods must not mount `cassandra-artifacts`. + +## Simulation Jobs + +The backend service account can create, watch, and delete Jobs only inside the `cassandra` namespace. Simulation pods should use service account `cassandra-sim`, set `automountServiceAccountToken: false`, and use: + +```yaml +priorityClassName: cassandra-sim +nodeSelector: + cassandra.bstein.dev/node-pool: oceanus +tolerations: + - key: veles.bstein.dev/simulation + operator: Equal + value: "true" + effect: NoSchedule +``` + +The toleration intentionally references the existing Veles taint while Veles and +Cassandra run side by side. The node carries Cassandra labels for selection, but +adding a Cassandra taint waits until Veles no longer needs the same node. + +Retention/cleanup Jobs that touch artifacts should use the same node selector and toleration. If they do not need Kubernetes API access, use `cassandra-sim`; otherwise keep control-plane actions in the backend/controller and run artifact cleanup through a no-token worker. + +## Staged Operator Steps + +1. Join `titan-23`/Oceanus to Atlas as a worker. +2. Use Metis with `titan-23` in `METIS_FLASH_HOSTS`; the existing node secret placeholder uses `192.168.22.23`. +3. Confirm the node normalizer applies the Cassandra labels and taint. +4. Add Oceanus Longhorn disks at paths tagged by the Longhorn tag ensure job. +5. Let Vault policy reconciliation run, then unsuspend `cassandra-secrets-ensure-2`. +6. Unsuspend `cassandra-realm-ensure-1` in `services/keycloak` to create the realm/client secret, groups, and roles. +7. Create the Harbor `cassandra` project or robot access before image automation is enabled in production. +8. Let `cassandra-postgres` come up on the new `cassandra-db` PVC. +9. Unsuspend `cassandra-db-copy-from-veles-1` once to copy Veles Postgres into + Cassandra and run table/count/hash verification against the target. +10. Inspect new Cassandra Longhorn volumes and confirm each two-replica volume + has one titan-23 local replica plus one Asteria replica. If Longhorn places + replicas differently, fix placement before live use. +11. Copy artifacts from `veles-artifacts` to `cassandra-artifacts` and verify + file counts/bytes before enabling retention. +12. Smoke-test `https://cassandra.bstein.dev`, only then enable generator and + retention workers. +13. Redirect `veles.bstein.dev` only after Cassandra is validated. Do not delete + Veles resources until explicitly approved. + +## Copy Commands + +The DB copy job is suspended by default. After `cassandra-postgres` is ready: + +```bash +kubectl -n cassandra patch job cassandra-db-copy-from-veles-1 \ + --type=merge -p '{"spec":{"suspend":false}}' +kubectl -n cassandra logs job/cassandra-db-copy-from-veles-1 -f +``` + +The artifact copy is also opt-in. Start the read-only Veles exporter, run the +Cassandra importer, inspect its verification summary, then scale the exporter +back down: + +```bash +kubectl -n veles scale deploy/veles-artifact-export-for-cassandra --replicas=1 +kubectl -n veles rollout status deploy/veles-artifact-export-for-cassandra +kubectl -n cassandra patch job cassandra-artifact-copy-from-veles-1 \ + --type=merge -p '{"spec":{"suspend":false}}' +kubectl -n cassandra logs job/cassandra-artifact-copy-from-veles-1 -f +kubectl -n veles scale deploy/veles-artifact-export-for-cassandra --replicas=0 +``` + +The artifact importer writes verification details under +`/data/cassandra-artifacts/.cassandra-artifact-migration/`. If the Veles +artifact PVC changes during the copy, verification can fail correctly; rerun +after quiescing artifact writers or after a final delta-copy window. + +## Assumptions + +- `cassandra-artifacts` is RWO for alpha; simulation workers should either run + on Oceanus with the backend or stream logs to the backend, which owns writes. +- Cassandra storage classes request two Longhorn replicas with `best-effort` + data locality. This is intended to keep one replica local to titan-23 and one + replica on an Asteria disk, but actual placement must be inspected after PVC + provisioning. +- Longhorn default backup target is `s3://atlas-soteria@us-west-004/` with + credential secret `longhorn-backup-b2`. As of the migration prep, remote + backups are failing because the object-store cap is exceeded; local snapshots + still work, but remote backup protection is not healthy until that cap is + resolved. +- The Jenkins Cassandra job should publish: + `registry.bstein.dev/cassandra/cassandra-backend`, + `registry.bstein.dev/cassandra/cassandra-frontend`, + `registry.bstein.dev/cassandra/cassandra-sim-worker`, and + `registry.bstein.dev/cassandra/cassandra-generator-worker`. diff --git a/services/cassandra/artifacts-pvc.yaml b/services/cassandra/artifacts-pvc.yaml new file mode 100644 index 00000000..4b8d1901 --- /dev/null +++ b/services/cassandra/artifacts-pvc.yaml @@ -0,0 +1,32 @@ +# services/cassandra/artifacts-pvc.yaml +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: cassandra-artifacts + namespace: cassandra + labels: + app.kubernetes.io/name: cassandra + app.kubernetes.io/component: artifacts +spec: + accessModes: + - ReadWriteOnce + storageClassName: cassandra-artifacts + resources: + requests: + storage: 500Gi +--- +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: cassandra-engine-cache + namespace: cassandra + labels: + app.kubernetes.io/name: cassandra + app.kubernetes.io/component: engine-cache +spec: + accessModes: + - ReadWriteOnce + storageClassName: cassandra-artifacts + resources: + requests: + storage: 100Gi diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml new file mode 100644 index 00000000..6be9038f --- /dev/null +++ b/services/cassandra/backend-deployment.yaml @@ -0,0 +1,139 @@ +# services/cassandra/backend-deployment.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + name: cassandra-backend + namespace: cassandra + labels: + app: cassandra-backend +spec: + replicas: 1 + revisionHistoryLimit: 2 + strategy: + type: RollingUpdate + rollingUpdate: + maxSurge: 0 + maxUnavailable: 1 + selector: + matchLabels: + app: cassandra-backend + template: + metadata: + labels: + app: cassandra-backend + annotations: + cassandra.bstein.dev/redeploy: "2026-07-24-0.7.65-hygiene-generator-worker" + vault.hashicorp.com/agent-inject: "true" + vault.hashicorp.com/agent-init-first: "true" + vault.hashicorp.com/agent-pre-populate-only: "true" + vault.hashicorp.com/role: "cassandra" + vault.hashicorp.com/agent-inject-secret-cassandra-env.sh: "kv/data/atlas/cassandra/cassandra-db" + vault.hashicorp.com/agent-inject-template-cassandra-env.sh: | + {{- with secret "kv/data/atlas/cassandra/cassandra-db" }} + unset DATABASE_URL + export CASSANDRA_DATABASE_HOST="{{ .Data.data.POSTGRES_HOST }}" + export CASSANDRA_DATABASE_PORT="{{ .Data.data.POSTGRES_PORT }}" + export CASSANDRA_DATABASE_NAME="{{ .Data.data.POSTGRES_DB }}" + export CASSANDRA_DATABASE_USER="{{ .Data.data.POSTGRES_USER }}" + export CASSANDRA_DATABASE_PASSWORD="{{ .Data.data.POSTGRES_PASSWORD }}" + export CASSANDRA_DATABASE_SSLMODE="disable" + {{- end }} + {{- with secret "kv/data/atlas/cassandra/cassandra-oidc" }} + export CASSANDRA_OIDC_CLIENT_SECRET="{{ .Data.data.client_secret }}" + {{- end }} + {{- with secret "kv/data/atlas/cassandra/app-secrets" }} + export CASSANDRA_SESSION_SECRET="{{ .Data.data.CASSANDRA_SESSION_SECRET }}" + export CASSANDRA_BYOK_ENCRYPTION_KEY="{{ .Data.data.CASSANDRA_BYOK_ENCRYPTION_KEY }}" + {{- end }} + spec: + serviceAccountName: cassandra-backend + priorityClassName: cassandra-core + nodeSelector: + cassandra.bstein.dev/node-pool: oceanus + kubernetes.io/arch: amd64 + tolerations: + - key: veles.bstein.dev/simulation + operator: Equal + value: "true" + effect: NoSchedule + securityContext: + fsGroup: 10001 + fsGroupChangePolicy: OnRootMismatch + seccompProfile: + type: RuntimeDefault + initContainers: + - name: database-init + image: registry.bstein.dev/cassandra/cassandra-backend:0.7.65 # {"$imagepolicy": "cassandra:cassandra-backend"} + imagePullPolicy: Always + command: ["/bin/sh", "-c"] + args: + - | + set -eu + if [ -f /vault/secrets/cassandra-env.sh ]; then + . /vault/secrets/cassandra-env.sh + fi + exec cassandra-db --init --wait-seconds 120 + envFrom: + - configMapRef: + name: cassandra-config + resources: + requests: + cpu: 50m + memory: 128Mi + limits: + cpu: 250m + memory: 512Mi + containers: + - name: backend + image: registry.bstein.dev/cassandra/cassandra-backend:0.7.65 # {"$imagepolicy": "cassandra:cassandra-backend"} + imagePullPolicy: Always + command: ["/bin/sh", "-c"] + args: + - | + set -eu + if [ -f /vault/secrets/cassandra-env.sh ]; then + . /vault/secrets/cassandra-env.sh + fi + exec cassandra-web --host 0.0.0.0 --port 8796 --no-resume-queued + ports: + - name: http + containerPort: 8796 + protocol: TCP + envFrom: + - configMapRef: + name: cassandra-config + readinessProbe: + httpGet: + path: /api/v1/ready + port: http + initialDelaySeconds: 5 + periodSeconds: 10 + timeoutSeconds: 3 + livenessProbe: + httpGet: + path: /api/v1/live + port: http + initialDelaySeconds: 20 + periodSeconds: 20 + timeoutSeconds: 3 + resources: + requests: + cpu: 250m + memory: 2Gi + limits: + cpu: "1" + memory: 8Gi + securityContext: + runAsNonRoot: true + runAsUser: 10001 + runAsGroup: 10001 + allowPrivilegeEscalation: false + capabilities: + drop: ["ALL"] + volumeMounts: + - name: artifacts + mountPath: /data/cassandra-artifacts + volumes: + - name: artifacts + persistentVolumeClaim: + claimName: cassandra-artifacts diff --git a/services/cassandra/bootstrap-jobs/cassandra-secrets-ensure-job.yaml b/services/cassandra/bootstrap-jobs/cassandra-secrets-ensure-job.yaml new file mode 100644 index 00000000..60b1e5df --- /dev/null +++ b/services/cassandra/bootstrap-jobs/cassandra-secrets-ensure-job.yaml @@ -0,0 +1,142 @@ +# services/cassandra/bootstrap-jobs/cassandra-secrets-ensure-job.yaml +# One-off job for cassandra/cassandra-secrets-ensure-2. +# Purpose: seed Cassandra Vault paths before app/Postgres pods are scaled up. +# Keep suspended until the cassandra Vault role has reconciled, then unsuspend once. +apiVersion: batch/v1 +kind: Job +metadata: + name: cassandra-secrets-ensure-2 + namespace: cassandra +spec: + suspend: true + backoffLimit: 0 + ttlSecondsAfterFinished: 3600 + template: + spec: + serviceAccountName: cassandra-secrets-ensure + restartPolicy: Never + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: node-role.kubernetes.io/worker + operator: Exists + preferredDuringSchedulingIgnoredDuringExecution: + - weight: 100 + preference: + matchExpressions: + - key: kubernetes.io/arch + operator: In + values: ["arm64"] + containers: + - name: apply + image: bitnami/kubectl@sha256:554ab88b1858e8424c55de37ad417b16f2a0e65d1607aa0f3fe3ce9b9f10b131 + command: ["/bin/bash", "-c"] + args: + - | + set -euo pipefail + + vault_addr="${VAULT_ADDR:-http://vault.vault.svc.cluster.local:8200}" + vault_role="${VAULT_ROLE:-cassandra-secrets}" + jwt="$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)" + login_payload="$(jq -nc --arg jwt "${jwt}" --arg role "${vault_role}" '{jwt:$jwt, role:$role}')" + vault_token="$(curl -sS --request POST --data "${login_payload}" \ + "${vault_addr}/v1/auth/kubernetes/login" | jq -r '.auth.client_token')" + if [ -z "${vault_token}" ] || [ "${vault_token}" = "null" ]; then + echo "vault login failed" >&2 + exit 1 + fi + + read_secret() { + path="$1" + out="$2" + curl -sS -o "${out}" -w "%{http_code}" \ + -H "X-Vault-Token: ${vault_token}" \ + "${vault_addr}/v1/kv/data/atlas/${path}" || true + } + + write_secret() { + path="$1" + payload="$2" + out="$(mktemp)" + status="$(curl -sS -o "${out}" -w "%{http_code}" -X POST \ + -H "X-Vault-Token: ${vault_token}" \ + -H "Content-Type: application/json" \ + -d "${payload}" \ + "${vault_addr}/v1/kv/data/atlas/${path}")" + if [ "${status}" != "200" ] && [ "${status}" != "204" ]; then + echo "Vault write failed for ${path} (status ${status})" >&2 + cat "${out}" >&2 || true + exit 1 + fi + } + + rand_b64() { + bytes="$1" + openssl rand -base64 "${bytes}" | tr -d '\n' + } + + status="$(read_secret cassandra/cassandra-db /tmp/cassandra-db.json)" + if [ "${status}" = "200" ]; then + db_password="$(jq -r '.data.data.POSTGRES_PASSWORD // empty' /tmp/cassandra-db.json)" + elif [ "${status}" = "404" ]; then + db_password="" + else + echo "Vault read failed for cassandra-db (status ${status})" >&2 + cat /tmp/cassandra-db.json >&2 || true + exit 1 + fi + if [ -z "${db_password}" ]; then + db_password="$(rand_b64 36)" + fi + db_payload="$(jq -nc \ + --arg host "cassandra-postgres.cassandra.svc.cluster.local" \ + --arg port "5432" \ + --arg db "cassandra" \ + --arg user "cassandra" \ + --arg password "${db_password}" \ + '{data:{POSTGRES_HOST:$host,POSTGRES_PORT:$port,POSTGRES_DB:$db,POSTGRES_USER:$user,POSTGRES_PASSWORD:$password,DATABASE_URL:("postgresql://"+($user|@uri)+":"+($password|@uri)+"@"+$host+":"+$port+"/"+($db|@uri)+"?sslmode=disable")}}')" + write_secret cassandra/cassandra-db "${db_payload}" + + status="$(read_secret cassandra/app-secrets /tmp/app-secrets.json)" + if [ "${status}" = "200" ]; then + session_secret="$(jq -r '.data.data.CASSANDRA_SESSION_SECRET // empty' /tmp/app-secrets.json)" + byok_key="$(jq -r '.data.data.CASSANDRA_BYOK_ENCRYPTION_KEY // empty' /tmp/app-secrets.json)" + elif [ "${status}" = "404" ]; then + session_secret="" + byok_key="" + else + echo "Vault read failed for app-secrets (status ${status})" >&2 + cat /tmp/app-secrets.json >&2 || true + exit 1 + fi + if [ -z "${session_secret}" ]; then + session_secret="$(rand_b64 48)" + fi + if [ -z "${byok_key}" ]; then + byok_key="$(rand_b64 32)" + fi + app_payload="$(jq -nc \ + --arg session_secret "${session_secret}" \ + --arg byok_key "${byok_key}" \ + '{data:{CASSANDRA_SESSION_SECRET:$session_secret,CASSANDRA_BYOK_ENCRYPTION_KEY:$byok_key}}')" + write_secret cassandra/app-secrets "${app_payload}" + + postmark_status="$(read_secret shared/postmark-relay /tmp/postmark.json)" + if [ "${postmark_status}" = "200" ]; then + smtp_password="$(jq -r '.data.data.apikey // empty' /tmp/postmark.json)" + if [ -n "${smtp_password}" ]; then + smtp_payload="$(jq -nc \ + --arg host "mail.bstein.dev" \ + --arg port "587" \ + --arg user "${smtp_password}" \ + --arg password "${smtp_password}" \ + --arg from "no-reply-cassandra@bstein.dev" \ + --arg from_name "Cassandra" \ + '{data:{SMTP_HOST:$host,SMTP_PORT:$port,SMTP_USER:$user,SMTP_PASSWORD:$password,SMTP_FROM:$from,SMTP_FROM_NAME:$from_name,SMTP_STARTTLS:"true"}}')" + write_secret cassandra/smtp "${smtp_payload}" + fi + fi + + echo "Cassandra Vault paths ready: cassandra-db, app-secrets, smtp when Postmark relay exists" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml new file mode 100644 index 00000000..d250a90c --- /dev/null +++ b/services/cassandra/configmap.yaml @@ -0,0 +1,45 @@ +# services/cassandra/configmap.yaml +apiVersion: v1 +kind: ConfigMap +metadata: + name: cassandra-config + namespace: cassandra +data: + CASSANDRA_PROFILE: cluster + CASSANDRA_AUTH_MODE: oidc + CASSANDRA_SIM_RUNNER: kubernetes-job + CASSANDRA_PUBLIC_URL: https://cassandra.bstein.dev + CASSANDRA_PUBLIC_BASE_URL: https://cassandra.bstein.dev + CASSANDRA_ALPHA_LABEL: ALPHA + CASSANDRA_OIDC_ISSUER_URL: https://sso.bstein.dev/realms/cassandra + CASSANDRA_OIDC_ISSUER: https://sso.bstein.dev/realms/cassandra + CASSANDRA_OIDC_CLIENT_ID: cassandra-web + CASSANDRA_OIDC_ALLOWED_GROUPS: alpha,cassandra-tester,admin + CASSANDRA_OIDC_REQUIRED_GROUPS: alpha,cassandra-tester,admin + CASSANDRA_OIDC_ADMIN_GROUPS: admin + CASSANDRA_NAMESPACE: cassandra + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.7.65 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.7.65" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.7.65" + CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim + CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim + CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 + CASSANDRA_SIM_TOLERATIONS: veles.bstein.dev/simulation=true:NoSchedule + CASSANDRA_SIM_ACTIVE_DEADLINE_SECONDS: "7200" + CASSANDRA_SIM_TTL_SECONDS: "3600" + CASSANDRA_SIM_CPU_REQUEST: 500m + CASSANDRA_SIM_CPU_LIMIT: "2" + CASSANDRA_SIM_MEMORY_REQUEST: 1Gi + CASSANDRA_SIM_MEMORY_LIMIT: 4Gi + CASSANDRA_SIM_FS_GROUP: "10001" + CASSANDRA_MAX_ACTIVE_SIMS_PER_USER: "32" + CASSANDRA_MAX_ACTIVE_SIMS_GLOBAL: "32" + CASSANDRA_RETENTION_DAYS: "30" + CASSANDRA_LOG_ROOT: /data/cassandra-artifacts/logs + CASSANDRA_REPORT_ROOT: /data/cassandra-artifacts/reports + CASSANDRA_ARTIFACT_ROOT: /data/cassandra-artifacts/artifacts + CASSANDRA_SIM_ARTIFACT_PVC: cassandra-artifacts + CASSANDRA_SIM_ARTIFACT_MOUNT_PATH: /data/cassandra-artifacts + CASSANDRA_SIM_CODEX_CLI_SECRET_PROVIDER_CLASS: cassandra-codex-cli + CASSANDRA_SIM_CODEX_CLI_MOUNT_PATH: /var/run/cassandra-codex-cli + CASSANDRA_SIM_CODEX_CLI_HOME: /home/cassandra/.codex diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml new file mode 100644 index 00000000..7cdcdfc0 --- /dev/null +++ b/services/cassandra/frontend-deployment.yaml @@ -0,0 +1,80 @@ +# services/cassandra/frontend-deployment.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + name: cassandra-frontend + namespace: cassandra + labels: + app: cassandra-frontend +spec: + replicas: 2 + revisionHistoryLimit: 2 + selector: + matchLabels: + app: cassandra-frontend + template: + metadata: + labels: + app: cassandra-frontend + spec: + serviceAccountName: cassandra-frontend + priorityClassName: cassandra-core + automountServiceAccountToken: false + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: node-role.kubernetes.io/worker + operator: Exists + - key: hardware + operator: In + values: ["rpi5", "rpi4", "amd64"] + preferredDuringSchedulingIgnoredDuringExecution: + - weight: 100 + preference: + matchExpressions: + - key: atlas.bstein.dev/spillover + operator: DoesNotExist + - weight: 90 + preference: + matchExpressions: + - key: hardware + operator: In + values: ["rpi5"] + securityContext: + fsGroup: 101 + seccompProfile: + type: RuntimeDefault + containers: + - name: frontend + image: registry.bstein.dev/cassandra/cassandra-frontend:0.7.65 # {"$imagepolicy": "cassandra:cassandra-frontend"} + imagePullPolicy: Always + ports: + - name: http + containerPort: 8080 + protocol: TCP + readinessProbe: + httpGet: + path: / + port: http + initialDelaySeconds: 3 + periodSeconds: 10 + livenessProbe: + httpGet: + path: / + port: http + initialDelaySeconds: 20 + periodSeconds: 20 + resources: + requests: + cpu: 50m + memory: 64Mi + limits: + cpu: 250m + memory: 256Mi + securityContext: + runAsNonRoot: true + allowPrivilegeEscalation: false + capabilities: + drop: ["ALL"] diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml new file mode 100644 index 00000000..3e014134 --- /dev/null +++ b/services/cassandra/generator-deployment.yaml @@ -0,0 +1,84 @@ +# services/cassandra/generator-deployment.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + name: cassandra-generator-worker + namespace: cassandra + labels: + app: cassandra-generator-worker +spec: + replicas: 0 + revisionHistoryLimit: 2 + selector: + matchLabels: + app: cassandra-generator-worker + template: + metadata: + labels: + app: cassandra-generator-worker + annotations: + cassandra.bstein.dev/redeploy: "2026-07-24-0.7.65-hygiene-generator-worker" + vault.hashicorp.com/agent-inject: "true" + vault.hashicorp.com/agent-init-first: "true" + vault.hashicorp.com/agent-pre-populate-only: "true" + vault.hashicorp.com/role: "cassandra" + vault.hashicorp.com/agent-inject-secret-cassandra-env.sh: "kv/data/atlas/cassandra/cassandra-db" + vault.hashicorp.com/agent-inject-template-cassandra-env.sh: | + {{- with secret "kv/data/atlas/cassandra/cassandra-db" }} + unset DATABASE_URL + export CASSANDRA_DATABASE_HOST="{{ .Data.data.POSTGRES_HOST }}" + export CASSANDRA_DATABASE_PORT="{{ .Data.data.POSTGRES_PORT }}" + export CASSANDRA_DATABASE_NAME="{{ .Data.data.POSTGRES_DB }}" + export CASSANDRA_DATABASE_USER="{{ .Data.data.POSTGRES_USER }}" + export CASSANDRA_DATABASE_PASSWORD="{{ .Data.data.POSTGRES_PASSWORD }}" + export CASSANDRA_DATABASE_SSLMODE="disable" + {{- end }} + {{- with secret "kv/data/atlas/cassandra/app-secrets" }} + export CASSANDRA_SESSION_SECRET="{{ .Data.data.CASSANDRA_SESSION_SECRET }}" + export CASSANDRA_BYOK_ENCRYPTION_KEY="{{ .Data.data.CASSANDRA_BYOK_ENCRYPTION_KEY }}" + {{- end }} + spec: + serviceAccountName: cassandra-generator + priorityClassName: cassandra-core + nodeSelector: + cassandra.bstein.dev/node-pool: oceanus + kubernetes.io/arch: amd64 + tolerations: + - key: veles.bstein.dev/simulation + operator: Equal + value: "true" + effect: NoSchedule + securityContext: + fsGroup: 10001 + fsGroupChangePolicy: OnRootMismatch + seccompProfile: + type: RuntimeDefault + containers: + - name: generator + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.7.65 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + imagePullPolicy: Always + command: ["/bin/sh", "-c"] + args: + - | + set -eu + if [ -f /vault/secrets/cassandra-env.sh ]; then + . /vault/secrets/cassandra-env.sh + fi + exec cassandra-generation-worker --loop --idle-sleep-seconds 5 + envFrom: + - configMapRef: + name: cassandra-config + resources: + requests: + cpu: 100m + memory: 512Mi + limits: + cpu: "1" + memory: 2Gi + securityContext: + runAsNonRoot: true + runAsUser: 10001 + runAsGroup: 10001 + allowPrivilegeEscalation: false + capabilities: + drop: ["ALL"] diff --git a/services/cassandra/image.yaml b/services/cassandra/image.yaml new file mode 100644 index 00000000..5a1cabc7 --- /dev/null +++ b/services/cassandra/image.yaml @@ -0,0 +1,92 @@ +# services/cassandra/image.yaml +apiVersion: image.toolkit.fluxcd.io/v1 +kind: ImageRepository +metadata: + name: cassandra-backend + namespace: cassandra +spec: + image: registry.bstein.dev/cassandra/cassandra-backend + interval: 1m0s + secretRef: + name: harbor-regcred +--- +apiVersion: image.toolkit.fluxcd.io/v1 +kind: ImagePolicy +metadata: + name: cassandra-backend + namespace: cassandra +spec: + imageRepositoryRef: + name: cassandra-backend + policy: + semver: + range: ">=0.1.0-0" +--- +apiVersion: image.toolkit.fluxcd.io/v1 +kind: ImageRepository +metadata: + name: cassandra-frontend + namespace: cassandra +spec: + image: registry.bstein.dev/cassandra/cassandra-frontend + interval: 1m0s + secretRef: + name: harbor-regcred +--- +apiVersion: image.toolkit.fluxcd.io/v1 +kind: ImagePolicy +metadata: + name: cassandra-frontend + namespace: cassandra +spec: + imageRepositoryRef: + name: cassandra-frontend + policy: + semver: + range: ">=0.1.0-0" +--- +apiVersion: image.toolkit.fluxcd.io/v1 +kind: ImageRepository +metadata: + name: cassandra-generator-worker + namespace: cassandra +spec: + image: registry.bstein.dev/cassandra/cassandra-generator-worker + interval: 1m0s + secretRef: + name: harbor-regcred +--- +apiVersion: image.toolkit.fluxcd.io/v1 +kind: ImagePolicy +metadata: + name: cassandra-generator-worker + namespace: cassandra +spec: + imageRepositoryRef: + name: cassandra-generator-worker + policy: + semver: + range: ">=0.1.0-0" +--- +apiVersion: image.toolkit.fluxcd.io/v1 +kind: ImageRepository +metadata: + name: cassandra-sim-worker + namespace: cassandra +spec: + image: registry.bstein.dev/cassandra/cassandra-sim-worker + interval: 1m0s + secretRef: + name: harbor-regcred +--- +apiVersion: image.toolkit.fluxcd.io/v1 +kind: ImagePolicy +metadata: + name: cassandra-sim-worker + namespace: cassandra +spec: + imageRepositoryRef: + name: cassandra-sim-worker + policy: + semver: + range: ">=0.1.0-0" diff --git a/services/cassandra/ingress.yaml b/services/cassandra/ingress.yaml new file mode 100644 index 00000000..34421331 --- /dev/null +++ b/services/cassandra/ingress.yaml @@ -0,0 +1,47 @@ +# services/cassandra/ingress.yaml +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + name: cassandra + namespace: cassandra + annotations: + cert-manager.io/cluster-issuer: letsencrypt + traefik.ingress.kubernetes.io/router.entrypoints: websecure + traefik.ingress.kubernetes.io/router.tls: "true" +spec: + ingressClassName: traefik + tls: + - hosts: ["cassandra.bstein.dev"] + secretName: cassandra-tls + rules: + - host: cassandra.bstein.dev + http: + paths: + - path: /api + pathType: Prefix + backend: + service: + name: cassandra-backend + port: + number: 80 + - path: /events + pathType: Prefix + backend: + service: + name: cassandra-backend + port: + number: 80 + - path: /ws + pathType: Prefix + backend: + service: + name: cassandra-backend + port: + number: 80 + - path: / + pathType: Prefix + backend: + service: + name: cassandra-frontend + port: + number: 80 diff --git a/services/cassandra/kustomization.yaml b/services/cassandra/kustomization.yaml new file mode 100644 index 00000000..3679f1a1 --- /dev/null +++ b/services/cassandra/kustomization.yaml @@ -0,0 +1,26 @@ +# services/cassandra/kustomization.yaml +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: cassandra +resources: + - namespace.yaml + - serviceaccounts.yaml + - secretproviderclass.yaml + - vault-sync-deployment.yaml + - resourcequota.yaml + - limitrange.yaml + - configmap.yaml + - rbac.yaml + - artifacts-pvc.yaml + - postgres-service.yaml + - postgres-statefulset.yaml + - services.yaml + - backend-deployment.yaml + - generator-deployment.yaml + - frontend-deployment.yaml + - retention-cronjob.yaml + - image.yaml + - ingress.yaml + - bootstrap-jobs/cassandra-secrets-ensure-job.yaml + - migration-jobs/db-copy-veles-to-cassandra-job.yaml + - migration-jobs/artifact-copy-veles-to-cassandra-job.yaml diff --git a/services/cassandra/limitrange.yaml b/services/cassandra/limitrange.yaml new file mode 100644 index 00000000..b5f8c31f --- /dev/null +++ b/services/cassandra/limitrange.yaml @@ -0,0 +1,21 @@ +# services/cassandra/limitrange.yaml +apiVersion: v1 +kind: LimitRange +metadata: + name: cassandra-container-limits + namespace: cassandra +spec: + limits: + - type: Container + defaultRequest: + cpu: 100m + memory: 256Mi + default: + cpu: 500m + memory: 512Mi + min: + cpu: 10m + memory: 32Mi + max: + cpu: "16" + memory: 32Gi diff --git a/services/cassandra/migration-jobs/artifact-copy-veles-to-cassandra-job.yaml b/services/cassandra/migration-jobs/artifact-copy-veles-to-cassandra-job.yaml new file mode 100644 index 00000000..65f43438 --- /dev/null +++ b/services/cassandra/migration-jobs/artifact-copy-veles-to-cassandra-job.yaml @@ -0,0 +1,150 @@ +# services/cassandra/migration-jobs/artifact-copy-veles-to-cassandra-job.yaml +# Suspended by default. Run only after scaling the Veles artifact exporter to 1. +apiVersion: batch/v1 +kind: Job +metadata: + name: cassandra-artifact-copy-from-veles-1 + namespace: cassandra +spec: + suspend: true + backoffLimit: 0 + activeDeadlineSeconds: 43200 + ttlSecondsAfterFinished: 86400 + template: + spec: + serviceAccountName: cassandra-artifact-migration + automountServiceAccountToken: false + restartPolicy: Never + nodeSelector: + cassandra.bstein.dev/node-pool: oceanus + tolerations: + - key: veles.bstein.dev/simulation + operator: Equal + value: "true" + effect: NoSchedule + containers: + - name: copy-artifacts + image: python:3.12-alpine + imagePullPolicy: IfNotPresent + env: + - name: SOURCE_URL + value: http://veles-artifact-export-for-cassandra.veles.svc.cluster.local:8765 + - name: DEST_ROOT + value: /dest + - name: ALLOW_NONEMPTY_DEST + value: "0" + command: ["python", "-c"] + args: + - | + from __future__ import annotations + + from pathlib import Path + import hashlib + import json + import os + import tarfile + import urllib.request + + SOURCE_URL = os.environ["SOURCE_URL"].rstrip("/") + DEST = Path(os.environ.get("DEST_ROOT", "/dest")).resolve() + ALLOW_NONEMPTY = os.environ.get("ALLOW_NONEMPTY_DEST", "") in {"1", "true", "yes"} + EXCLUDE_TOP = {"lost+found", ".cassandra-artifact-migration"} + REPORT_DIR = DEST / ".cassandra-artifact-migration" + + def visible_entries() -> list[Path]: + return [entry for entry in DEST.iterdir() if entry.name not in EXCLUDE_TOP] + + def assert_safe_destination() -> None: + DEST.mkdir(parents=True, exist_ok=True) + entries = visible_entries() + if entries and not ALLOW_NONEMPTY: + names = ", ".join(entry.name for entry in entries[:10]) + raise SystemExit(f"destination is not empty; refusing to merge into existing data: {names}") + REPORT_DIR.mkdir(parents=True, exist_ok=True) + + def fetch_manifest() -> dict[str, object]: + with urllib.request.urlopen(f"{SOURCE_URL}/manifest.json", timeout=120) as response: + return json.loads(response.read().decode()) + + def safe_extract() -> None: + root_text = str(DEST) + with urllib.request.urlopen(f"{SOURCE_URL}/archive.tar", timeout=600) as response: + with tarfile.open(fileobj=response, mode="r|*") as archive: + for member in archive: + target = (DEST / member.name).resolve() + if target != DEST and not str(target).startswith(root_text + os.sep): + raise SystemExit(f"unsafe archive path: {member.name}") + archive.extract(member, path=DEST) + + def digest_file(path: Path) -> str: + digest = hashlib.sha256() + with path.open("rb") as handle: + for chunk in iter(lambda: handle.read(1024 * 1024), b""): + digest.update(chunk) + return digest.hexdigest() + + def destination_manifest() -> dict[str, object]: + files = [] + total_bytes = 0 + for path in sorted(DEST.rglob("*")): + if not path.is_file(): + continue + rel = path.relative_to(DEST).as_posix() + if rel.split("/", 1)[0] in EXCLUDE_TOP: + continue + size = path.stat().st_size + total_bytes += size + files.append({"path": rel, "size": size, "sha256": digest_file(path)}) + manifest_text = "\n".join( + f"{item['sha256']} {item['size']} {item['path']}" for item in files + ) + return { + "schema": "cassandra.artifact_manifest.v1", + "source": "cassandra-artifacts", + "file_count": len(files), + "total_bytes": total_bytes, + "manifest_sha256": hashlib.sha256(manifest_text.encode()).hexdigest(), + "files": files, + } + + def comparable(manifest: dict[str, object]) -> dict[str, object]: + return { + "file_count": manifest.get("file_count"), + "total_bytes": manifest.get("total_bytes"), + "manifest_sha256": manifest.get("manifest_sha256"), + "files": manifest.get("files"), + } + + assert_safe_destination() + source = fetch_manifest() + (REPORT_DIR / "source_manifest.json").write_text(json.dumps(source, indent=2, sort_keys=True)) + safe_extract() + dest = destination_manifest() + (REPORT_DIR / "destination_manifest.json").write_text(json.dumps(dest, indent=2, sort_keys=True)) + summary = { + "source_file_count": source.get("file_count"), + "destination_file_count": dest.get("file_count"), + "source_total_bytes": source.get("total_bytes"), + "destination_total_bytes": dest.get("total_bytes"), + "source_manifest_sha256": source.get("manifest_sha256"), + "destination_manifest_sha256": dest.get("manifest_sha256"), + "verified": comparable(source) == comparable(dest), + } + (REPORT_DIR / "copy_summary.json").write_text(json.dumps(summary, indent=2, sort_keys=True)) + if not summary["verified"]: + raise SystemExit(f"artifact copy verification failed: {summary}") + print(json.dumps(summary, sort_keys=True), flush=True) + resources: + requests: + cpu: 500m + memory: 512Mi + limits: + cpu: "2" + memory: 2Gi + volumeMounts: + - name: artifacts + mountPath: /dest + volumes: + - name: artifacts + persistentVolumeClaim: + claimName: cassandra-artifacts diff --git a/services/cassandra/migration-jobs/db-copy-veles-to-cassandra-job.yaml b/services/cassandra/migration-jobs/db-copy-veles-to-cassandra-job.yaml new file mode 100644 index 00000000..c9ff432b --- /dev/null +++ b/services/cassandra/migration-jobs/db-copy-veles-to-cassandra-job.yaml @@ -0,0 +1,120 @@ +# services/cassandra/migration-jobs/db-copy-veles-to-cassandra-job.yaml +# Suspended by default. Unsuspend after cassandra-postgres is ready and before +# enabling generator/retention workers. This copies from Veles to Cassandra and +# verifies table sets, row counts, and per-table content hashes. +apiVersion: batch/v1 +kind: Job +metadata: + name: cassandra-db-copy-from-veles-1 + namespace: cassandra +spec: + suspend: true + backoffLimit: 0 + ttlSecondsAfterFinished: 86400 + template: + metadata: + annotations: + vault.hashicorp.com/agent-inject: "true" + vault.hashicorp.com/agent-init-first: "true" + vault.hashicorp.com/agent-pre-populate-only: "true" + vault.hashicorp.com/role: "cassandra-migration" + vault.hashicorp.com/agent-inject-secret-source-db.sh: "kv/data/atlas/veles/veles-db" + vault.hashicorp.com/agent-inject-template-source-db.sh: | + {{- with secret "kv/data/atlas/veles/veles-db" }} + export SOURCE_DATABASE_URL="{{ .Data.data.DATABASE_URL }}" + {{- end }} + vault.hashicorp.com/agent-inject-secret-target-db.sh: "kv/data/atlas/cassandra/cassandra-db" + vault.hashicorp.com/agent-inject-template-target-db.sh: | + {{- with secret "kv/data/atlas/cassandra/cassandra-db" }} + export TARGET_DATABASE_URL="{{ .Data.data.DATABASE_URL }}" + {{- end }} + spec: + serviceAccountName: cassandra-db-migration + restartPolicy: Never + nodeSelector: + cassandra.bstein.dev/node-pool: oceanus + kubernetes.io/arch: amd64 + tolerations: + - key: veles.bstein.dev/simulation + operator: Equal + value: "true" + effect: NoSchedule + containers: + - name: copy-and-verify + image: postgres:15 + command: ["/bin/bash", "-c"] + args: + - | + set -euo pipefail + . /vault/secrets/source-db.sh + . /vault/secrets/target-db.sh + : "${SOURCE_DATABASE_URL:?missing source database url}" + : "${TARGET_DATABASE_URL:?missing target database url}" + + export PGCONNECT_TIMEOUT=10 + for attempt in $(seq 1 60); do + if pg_isready -d "${SOURCE_DATABASE_URL}" >/dev/null 2>&1 \ + && pg_isready -d "${TARGET_DATABASE_URL}" >/dev/null 2>&1; then + break + fi + if [ "${attempt}" = "60" ]; then + echo "source or target database did not become ready" >&2 + exit 1 + fi + sleep 5 + done + + dump_path=/tmp/veles-to-cassandra.dump + pg_dump --format=custom --no-owner --no-acl \ + --dbname="${SOURCE_DATABASE_URL}" \ + --file="${dump_path}" + pg_restore --clean --if-exists --no-owner --no-acl \ + --dbname="${TARGET_DATABASE_URL}" \ + "${dump_path}" + + table_sql="select schemaname || E'\t' || tablename from pg_tables where schemaname not in ('pg_catalog','information_schema') order by 1" + psql -XAt --dbname="${SOURCE_DATABASE_URL}" --command="${table_sql}" > /tmp/source.tables + psql -XAt --dbname="${TARGET_DATABASE_URL}" --command="${table_sql}" > /tmp/target.tables + diff -u /tmp/source.tables /tmp/target.tables + + checksum_sql() { + schema="$1" + table="$2" + printf '%s\n' \ + "SELECT format(" \ + " 'select count(*)::text || E''\t'' || coalesce(md5(string_agg(md5(row_to_json(t)::text), '''' order by md5(row_to_json(t)::text))), md5('''')) from %I.%I t'," \ + " :'schema'," \ + " :'table'" \ + ")\\gexec" > /tmp/checksum.sql + psql -XAt --set=ON_ERROR_STOP=1 \ + --set=schema="${schema}" \ + --set=table="${table}" \ + --dbname="$3" \ + --file=/tmp/checksum.sql + } + + failures=0 + while IFS="$(printf '\t')" read -r schema table; do + [ -n "${schema}" ] || continue + source_sum="$(checksum_sql "${schema}" "${table}" "${SOURCE_DATABASE_URL}")" + target_sum="$(checksum_sql "${schema}" "${table}" "${TARGET_DATABASE_URL}")" + if [ "${source_sum}" != "${target_sum}" ]; then + echo "checksum mismatch for ${schema}.${table}: source=${source_sum} target=${target_sum}" >&2 + failures=$((failures + 1)) + else + echo "verified ${schema}.${table}: ${source_sum}" + fi + done < /tmp/source.tables + + if [ "${failures}" -ne 0 ]; then + echo "database copy integrity verification failed for ${failures} table(s)" >&2 + exit 1 + fi + echo "database copy integrity verification passed" + resources: + requests: + cpu: 500m + memory: 1Gi + limits: + cpu: "2" + memory: 4Gi diff --git a/services/cassandra/namespace.yaml b/services/cassandra/namespace.yaml new file mode 100644 index 00000000..abdfc56f --- /dev/null +++ b/services/cassandra/namespace.yaml @@ -0,0 +1,8 @@ +# services/cassandra/namespace.yaml +apiVersion: v1 +kind: Namespace +metadata: + name: cassandra + labels: + app.kubernetes.io/name: cassandra + app.kubernetes.io/part-of: cassandra diff --git a/services/cassandra/postgres-service.yaml b/services/cassandra/postgres-service.yaml new file mode 100644 index 00000000..04c24b74 --- /dev/null +++ b/services/cassandra/postgres-service.yaml @@ -0,0 +1,17 @@ +# services/cassandra/postgres-service.yaml +apiVersion: v1 +kind: Service +metadata: + name: cassandra-postgres + namespace: cassandra + labels: + app: cassandra-postgres +spec: + clusterIP: None + ports: + - name: postgres + port: 5432 + protocol: TCP + targetPort: 5432 + selector: + app: cassandra-postgres diff --git a/services/cassandra/postgres-statefulset.yaml b/services/cassandra/postgres-statefulset.yaml new file mode 100644 index 00000000..de8affe5 --- /dev/null +++ b/services/cassandra/postgres-statefulset.yaml @@ -0,0 +1,86 @@ +# services/cassandra/postgres-statefulset.yaml +apiVersion: apps/v1 +kind: StatefulSet +metadata: + name: cassandra-postgres + namespace: cassandra + labels: + app: cassandra-postgres +spec: + serviceName: cassandra-postgres + replicas: 1 + selector: + matchLabels: + app: cassandra-postgres + persistentVolumeClaimRetentionPolicy: + whenDeleted: Retain + whenScaled: Retain + updateStrategy: + type: RollingUpdate + template: + metadata: + labels: + app: cassandra-postgres + annotations: + vault.hashicorp.com/agent-inject: "true" + vault.hashicorp.com/agent-pre-populate-only: "true" + vault.hashicorp.com/role: "cassandra" + vault.hashicorp.com/agent-inject-secret-postgres-password: "kv/data/atlas/cassandra/cassandra-db" + vault.hashicorp.com/agent-inject-template-postgres-password: | + {{- with secret "kv/data/atlas/cassandra/cassandra-db" -}} + {{ .Data.data.POSTGRES_PASSWORD }} + {{- end -}} + spec: + serviceAccountName: cassandra-postgres + priorityClassName: cassandra-core + nodeSelector: + cassandra.bstein.dev/node-pool: oceanus + tolerations: + - key: veles.bstein.dev/simulation + operator: Equal + value: "true" + effect: NoSchedule + securityContext: + fsGroup: 999 + seccompProfile: + type: RuntimeDefault + containers: + - name: postgres + image: postgres:15 + ports: + - name: postgres + containerPort: 5432 + protocol: TCP + env: + - name: PGDATA + value: /var/lib/postgresql/data/pgdata + - name: POSTGRES_USER + value: cassandra + - name: POSTGRES_PASSWORD_FILE + value: /vault/secrets/postgres-password + - name: POSTGRES_DB + value: cassandra + resources: + requests: + cpu: "2" + memory: 8Gi + limits: + cpu: "4" + memory: 16Gi + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - name: postgres-data + mountPath: /var/lib/postgresql/data + volumeClaimTemplates: + - metadata: + name: postgres-data + labels: + app: cassandra-postgres + cassandra.bstein.dev/backup: longhorn + spec: + accessModes: ["ReadWriteOnce"] + storageClassName: cassandra-db + resources: + requests: + storage: 100Gi diff --git a/services/cassandra/rbac.yaml b/services/cassandra/rbac.yaml new file mode 100644 index 00000000..101025f6 --- /dev/null +++ b/services/cassandra/rbac.yaml @@ -0,0 +1,36 @@ +# services/cassandra/rbac.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: cassandra-backend-jobs + namespace: cassandra +rules: + - apiGroups: ["batch"] + resources: ["jobs"] + verbs: ["create", "delete", "deletecollection", "get", "list", "patch", "watch"] + - apiGroups: [""] + resources: ["pods"] + verbs: ["delete", "get", "list", "watch"] + - apiGroups: [""] + resources: ["pods/log"] + verbs: ["get", "list", "watch"] + - apiGroups: [""] + resources: ["events"] + verbs: ["get", "list", "watch"] + - apiGroups: ["events.k8s.io"] + resources: ["events"] + verbs: ["get", "list", "watch"] +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: cassandra-backend-jobs + namespace: cassandra +subjects: + - kind: ServiceAccount + name: cassandra-backend + namespace: cassandra +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: cassandra-backend-jobs diff --git a/services/cassandra/resourcequota.yaml b/services/cassandra/resourcequota.yaml new file mode 100644 index 00000000..beb97c5a --- /dev/null +++ b/services/cassandra/resourcequota.yaml @@ -0,0 +1,54 @@ +# services/cassandra/resourcequota.yaml +apiVersion: v1 +kind: ResourceQuota +metadata: + name: cassandra-namespace-quota + namespace: cassandra +spec: + hard: + requests.cpu: "32" + requests.memory: 64Gi + limits.cpu: "96" + limits.memory: 192Gi + pods: "96" + count/jobs.batch: "100" + persistentvolumeclaims: "8" + requests.storage: 1Ti +--- +apiVersion: v1 +kind: ResourceQuota +metadata: + name: cassandra-core-quota + namespace: cassandra +spec: + hard: + requests.cpu: "4" + requests.memory: 16Gi + limits.cpu: "8" + limits.memory: 32Gi + pods: "12" + scopeSelector: + matchExpressions: + - scopeName: PriorityClass + operator: In + values: + - cassandra-core +--- +apiVersion: v1 +kind: ResourceQuota +metadata: + name: cassandra-sim-quota + namespace: cassandra +spec: + hard: + requests.cpu: "20" + requests.memory: 40Gi + limits.cpu: "80" + limits.memory: 160Gi + pods: "80" + scopeSelector: + matchExpressions: + - scopeName: PriorityClass + operator: In + values: + - cassandra-sim diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml new file mode 100644 index 00000000..1d2900d9 --- /dev/null +++ b/services/cassandra/retention-cronjob.yaml @@ -0,0 +1,68 @@ +# services/cassandra/retention-cronjob.yaml +apiVersion: batch/v1 +kind: CronJob +metadata: + name: cassandra-retention + namespace: cassandra + labels: + app: cassandra-retention +spec: + suspend: true + schedule: "17 4 * * *" + concurrencyPolicy: Forbid + successfulJobsHistoryLimit: 1 + failedJobsHistoryLimit: 3 + jobTemplate: + spec: + template: + metadata: + labels: + app: cassandra-retention + spec: + restartPolicy: Never + serviceAccountName: cassandra-retention + automountServiceAccountToken: false + priorityClassName: cassandra-core + nodeSelector: + cassandra.bstein.dev/node-pool: oceanus + kubernetes.io/arch: amd64 + tolerations: + - key: veles.bstein.dev/simulation + operator: Equal + value: "true" + effect: NoSchedule + securityContext: + fsGroup: 10001 + fsGroupChangePolicy: OnRootMismatch + seccompProfile: + type: RuntimeDefault + containers: + - name: retention + image: registry.bstein.dev/cassandra/cassandra-backend:0.7.65 # {"$imagepolicy": "cassandra:cassandra-backend"} + imagePullPolicy: IfNotPresent + command: ["cassandra-hygiene"] + args: ["--prune-artifacts"] + envFrom: + - configMapRef: + name: cassandra-config + volumeMounts: + - name: artifacts + mountPath: /data/cassandra-artifacts + resources: + requests: + cpu: 50m + memory: 128Mi + limits: + cpu: 250m + memory: 512Mi + securityContext: + runAsNonRoot: true + runAsUser: 10001 + runAsGroup: 10001 + allowPrivilegeEscalation: false + capabilities: + drop: ["ALL"] + volumes: + - name: artifacts + persistentVolumeClaim: + claimName: cassandra-artifacts diff --git a/services/cassandra/secretproviderclass.yaml b/services/cassandra/secretproviderclass.yaml new file mode 100644 index 00000000..b3a2db7b --- /dev/null +++ b/services/cassandra/secretproviderclass.yaml @@ -0,0 +1,70 @@ +# services/cassandra/secretproviderclass.yaml +apiVersion: secrets-store.csi.x-k8s.io/v1 +kind: SecretProviderClass +metadata: + name: cassandra-vault + namespace: cassandra +spec: + provider: vault + parameters: + vaultAddress: "http://vault.vault.svc.cluster.local:8200" + roleName: "cassandra" + objects: | + - objectName: "harbor-pull__dockerconfigjson" + secretPath: "kv/data/atlas/shared/harbor-pull" + secretKey: "dockerconfigjson" + - objectName: "cassandra-db__database-url" + secretPath: "kv/data/atlas/cassandra/cassandra-db" + secretKey: "DATABASE_URL" + - objectName: "cassandra-db__user" + secretPath: "kv/data/atlas/cassandra/cassandra-db" + secretKey: "POSTGRES_USER" + - objectName: "cassandra-db__password" + secretPath: "kv/data/atlas/cassandra/cassandra-db" + secretKey: "POSTGRES_PASSWORD" + - objectName: "cassandra-oidc__client-secret" + secretPath: "kv/data/atlas/cassandra/cassandra-oidc" + secretKey: "client_secret" + - objectName: "cassandra-app__session-secret" + secretPath: "kv/data/atlas/cassandra/app-secrets" + secretKey: "CASSANDRA_SESSION_SECRET" + - objectName: "cassandra-app__byok-encryption-key" + secretPath: "kv/data/atlas/cassandra/app-secrets" + secretKey: "CASSANDRA_BYOK_ENCRYPTION_KEY" + secretObjects: + - secretName: harbor-regcred + type: kubernetes.io/dockerconfigjson + data: + - objectName: harbor-pull__dockerconfigjson + key: .dockerconfigjson + - secretName: cassandra-runtime-secrets + type: Opaque + data: + - objectName: cassandra-db__database-url + key: DATABASE_URL + - objectName: cassandra-db__user + key: CASSANDRA_DATABASE_USER + - objectName: cassandra-db__password + key: CASSANDRA_DATABASE_PASSWORD + - objectName: cassandra-oidc__client-secret + key: CASSANDRA_OIDC_CLIENT_SECRET + - objectName: cassandra-app__session-secret + key: CASSANDRA_SESSION_SECRET + - objectName: cassandra-app__byok-encryption-key + key: CASSANDRA_BYOK_ENCRYPTION_KEY +--- +apiVersion: secrets-store.csi.x-k8s.io/v1 +kind: SecretProviderClass +metadata: + name: cassandra-codex-cli + namespace: cassandra +spec: + provider: vault + parameters: + vaultAddress: "http://vault.vault.svc.cluster.local:8200" + roleName: "cassandra-sim" + objects: | + - objectName: "auth.json" + secretPath: "kv/data/atlas/cassandra/codex-cli" + secretKey: "auth.json" + filePermission: 292 diff --git a/services/cassandra/serviceaccounts.yaml b/services/cassandra/serviceaccounts.yaml new file mode 100644 index 00000000..ec91a9e1 --- /dev/null +++ b/services/cassandra/serviceaccounts.yaml @@ -0,0 +1,76 @@ +# services/cassandra/serviceaccounts.yaml +apiVersion: v1 +kind: ServiceAccount +metadata: + name: cassandra-backend + namespace: cassandra +imagePullSecrets: + - name: harbor-regcred +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: cassandra-generator + namespace: cassandra +imagePullSecrets: + - name: harbor-regcred +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: cassandra-frontend + namespace: cassandra +automountServiceAccountToken: false +imagePullSecrets: + - name: harbor-regcred +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: cassandra-postgres + namespace: cassandra +imagePullSecrets: + - name: harbor-regcred +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: cassandra-retention + namespace: cassandra +automountServiceAccountToken: false +imagePullSecrets: + - name: harbor-regcred +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: cassandra-vault-sync + namespace: cassandra +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: cassandra-secrets-ensure + namespace: cassandra +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: cassandra-db-migration + namespace: cassandra +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: cassandra-artifact-migration + namespace: cassandra +automountServiceAccountToken: false +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: cassandra-sim + namespace: cassandra +automountServiceAccountToken: false +imagePullSecrets: + - name: harbor-regcred diff --git a/services/cassandra/services.yaml b/services/cassandra/services.yaml new file mode 100644 index 00000000..abe2871e --- /dev/null +++ b/services/cassandra/services.yaml @@ -0,0 +1,32 @@ +# services/cassandra/services.yaml +apiVersion: v1 +kind: Service +metadata: + name: cassandra-backend + namespace: cassandra + labels: + app: cassandra-backend +spec: + ports: + - name: http + port: 80 + protocol: TCP + targetPort: 8796 + selector: + app: cassandra-backend +--- +apiVersion: v1 +kind: Service +metadata: + name: cassandra-frontend + namespace: cassandra + labels: + app: cassandra-frontend +spec: + ports: + - name: http + port: 80 + protocol: TCP + targetPort: 8080 + selector: + app: cassandra-frontend diff --git a/services/cassandra/vault-sync-deployment.yaml b/services/cassandra/vault-sync-deployment.yaml new file mode 100644 index 00000000..7d9a1e65 --- /dev/null +++ b/services/cassandra/vault-sync-deployment.yaml @@ -0,0 +1,43 @@ +# services/cassandra/vault-sync-deployment.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + name: cassandra-vault-sync + namespace: cassandra + labels: + app: cassandra-vault-sync +spec: + replicas: 1 + selector: + matchLabels: + app: cassandra-vault-sync + template: + metadata: + labels: + app: cassandra-vault-sync + spec: + serviceAccountName: cassandra-vault-sync + containers: + - name: sync + image: alpine:3.20 + command: ["/bin/sh", "-c"] + args: + - "sleep infinity" + resources: + requests: + cpu: 10m + memory: 32Mi + limits: + cpu: 50m + memory: 64Mi + volumeMounts: + - name: vault-secrets + mountPath: /vault/secrets + readOnly: true + volumes: + - name: vault-secrets + csi: + driver: secrets-store.csi.k8s.io + readOnly: true + volumeAttributes: + secretProviderClass: cassandra-vault diff --git a/services/vault/scripts/vault_k8s_auth_configure.sh b/services/vault/scripts/vault_k8s_auth_configure.sh index b4116347..770b628d 100644 --- a/services/vault/scripts/vault_k8s_auth_configure.sh +++ b/services/vault/scripts/vault_k8s_auth_configure.sh @@ -260,6 +260,15 @@ write_policy_and_role "veles-sim" "veles" "veles-sim" \ write_policy_and_role "veles-secrets" "veles" "veles-secrets-ensure" \ "shared/postmark-relay" \ "veles/*" +write_policy_and_role "cassandra" "cassandra" "cassandra-backend,cassandra-generator,cassandra-postgres,cassandra-vault-sync" \ + "cassandra/* shared/harbor-pull shared/postmark-relay" "" +write_policy_and_role "cassandra-sim" "cassandra" "cassandra-sim" \ + "cassandra/codex-cli" "" +write_policy_and_role "cassandra-secrets" "cassandra" "cassandra-secrets-ensure" \ + "shared/postmark-relay" \ + "cassandra/*" +write_policy_and_role "cassandra-migration" "cassandra" "cassandra-db-migration" \ + "veles/veles-db cassandra/cassandra-db" "" write_policy_and_role "maintenance" "maintenance" "ariadne,maintenance-vault-sync,metis" \ "maintenance/ariadne-db maintenance/metis-oidc maintenance/soteria-oidc maintenance/metis-ssh-keys maintenance/metis-runtime portal/atlas-portal-db portal/bstein-dev-home-keycloak-admin mailu/mailu-db-secret mailu/mailu-initial-account-secret nextcloud/nextcloud-db nextcloud/nextcloud-admin health/wger-admin finance/firefly-secrets comms/mas-admin-client-runtime comms/atlasbot-credentials-runtime comms/synapse-db comms/synapse-admin vault/vault-oidc-config shared/harbor-pull shared/soteria-restic harbor/harbor-core" "" \ ' @@ -287,7 +296,7 @@ write_policy_and_role "vault" "vault" "vault" \ write_policy_and_role "sso-secrets" "sso" "mas-secrets-ensure" \ "shared/keycloak-admin shared/postmark-relay maintenance/metis-ssh-keys" \ - "harbor/harbor-oidc vault/vault-oidc-config comms/synapse-oidc logging/oauth2-proxy-logs-oidc finance/actual-oidc maintenance/metis-oidc maintenance/soteria-oidc maintenance/metis-ssh-keys veles/veles-oidc gitea/gitea-veles-oidc" \ + "harbor/harbor-oidc vault/vault-oidc-config comms/synapse-oidc logging/oauth2-proxy-logs-oidc finance/actual-oidc maintenance/metis-oidc maintenance/soteria-oidc maintenance/metis-ssh-keys veles/veles-oidc cassandra/cassandra-oidc gitea/gitea-veles-oidc gitea/gitea-cassandra-oidc" \ ' path "kv/data/atlas/nodes/*" { capabilities = ["create", "update", "read"] diff --git a/services/veles/kustomization.yaml b/services/veles/kustomization.yaml index 38db5252..8aacbd18 100644 --- a/services/veles/kustomization.yaml +++ b/services/veles/kustomization.yaml @@ -22,3 +22,4 @@ resources: - image.yaml - ingress.yaml - bootstrap-jobs/veles-secrets-ensure-job.yaml + - migration-jobs/cassandra-artifact-export.yaml diff --git a/services/veles/migration-jobs/cassandra-artifact-export.yaml b/services/veles/migration-jobs/cassandra-artifact-export.yaml new file mode 100644 index 00000000..1f12a261 --- /dev/null +++ b/services/veles/migration-jobs/cassandra-artifact-export.yaml @@ -0,0 +1,159 @@ +# services/veles/migration-jobs/cassandra-artifact-export.yaml +# Scale to one only during the Veles -> Cassandra artifact copy, then return to +# zero after the Cassandra import job verifies the copied content. +apiVersion: v1 +kind: Service +metadata: + name: veles-artifact-export-for-cassandra + namespace: veles +spec: + selector: + app: veles-artifact-export-for-cassandra + ports: + - name: http + port: 8765 + targetPort: http +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: veles-artifact-export-for-cassandra + namespace: veles +spec: + replicas: 0 + selector: + matchLabels: + app: veles-artifact-export-for-cassandra + template: + metadata: + labels: + app: veles-artifact-export-for-cassandra + spec: + automountServiceAccountToken: false + nodeSelector: + cassandra.bstein.dev/node-pool: oceanus + tolerations: + - key: veles.bstein.dev/simulation + operator: Equal + value: "true" + effect: NoSchedule + containers: + - name: exporter + image: python:3.12-alpine + imagePullPolicy: IfNotPresent + ports: + - name: http + containerPort: 8765 + env: + - name: SOURCE_ROOT + value: /source + command: ["python", "-c"] + args: + - | + from __future__ import annotations + + from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer + from pathlib import Path + import hashlib + import json + import os + import tarfile + + ROOT = Path(os.environ.get("SOURCE_ROOT", "/source")).resolve() + EXCLUDE_TOP = {"lost+found", ".cassandra-artifact-migration"} + + def iter_files(): + for path in sorted(ROOT.rglob("*")): + if not path.is_file(): + continue + rel = path.relative_to(ROOT).as_posix() + if rel.split("/", 1)[0] in EXCLUDE_TOP: + continue + yield path, rel + + def digest_file(path: Path) -> str: + digest = hashlib.sha256() + with path.open("rb") as handle: + for chunk in iter(lambda: handle.read(1024 * 1024), b""): + digest.update(chunk) + return digest.hexdigest() + + def build_manifest() -> dict[str, object]: + files = [] + total_bytes = 0 + for path, rel in iter_files(): + size = path.stat().st_size + total_bytes += size + files.append({"path": rel, "size": size, "sha256": digest_file(path)}) + manifest_text = "\n".join( + f"{item['sha256']} {item['size']} {item['path']}" for item in files + ) + return { + "schema": "cassandra.artifact_manifest.v1", + "source": "veles-artifacts", + "file_count": len(files), + "total_bytes": total_bytes, + "manifest_sha256": hashlib.sha256(manifest_text.encode()).hexdigest(), + "files": files, + } + + MANIFEST = build_manifest() + MANIFEST_PATHS = [str(item["path"]) for item in MANIFEST["files"]] + + class Handler(BaseHTTPRequestHandler): + def do_GET(self) -> None: + if self.path == "/healthz": + self.send_response(200) + self.end_headers() + self.wfile.write(b"ok\n") + return + if self.path == "/manifest.json": + payload = json.dumps(MANIFEST, sort_keys=True).encode() + self.send_response(200) + self.send_header("Content-Type", "application/json") + self.send_header("Content-Length", str(len(payload))) + self.end_headers() + self.wfile.write(payload) + return + if self.path == "/archive.tar": + self.send_response(200) + self.send_header("Content-Type", "application/x-tar") + self.end_headers() + with tarfile.open(fileobj=self.wfile, mode="w|") as archive: + for rel in MANIFEST_PATHS: + path = ROOT / rel + if not path.is_file(): + raise FileNotFoundError(rel) + with path.open("rb") as handle: + info = archive.gettarinfo(str(path), arcname=rel) + archive.addfile(info, handle) + return + self.send_response(404) + self.end_headers() + + def log_message(self, fmt: str, *args: object) -> None: + print(fmt % args, flush=True) + + print( + "ready file_count={file_count} total_bytes={total_bytes} manifest={manifest_sha256}".format( + **MANIFEST + ), + flush=True, + ) + ThreadingHTTPServer(("0.0.0.0", 8765), Handler).serve_forever() + resources: + requests: + cpu: 250m + memory: 512Mi + limits: + cpu: "2" + memory: 2Gi + volumeMounts: + - name: artifacts + mountPath: /source + readOnly: true + volumes: + - name: artifacts + persistentVolumeClaim: + claimName: veles-artifacts + readOnly: true From a155847915049f4c2b3458f23dff80164cb391aa Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 25 Jul 2026 00:29:03 -0300 Subject: [PATCH 046/991] feat(cassandra): add migration Grafana rollup --- .../core/longhorn-disk-tags-ensure-job.yaml | 2 +- .../grafana-dashboard-cassandra.yaml | 611 ++++++++++++++++++ services/monitoring/helmrelease.yaml | 10 + services/monitoring/kustomization.yaml | 1 + 4 files changed, 623 insertions(+), 1 deletion(-) create mode 100644 services/monitoring/grafana-dashboard-cassandra.yaml diff --git a/infrastructure/longhorn/core/longhorn-disk-tags-ensure-job.yaml b/infrastructure/longhorn/core/longhorn-disk-tags-ensure-job.yaml index 0df5a6ad..4d64d9a0 100644 --- a/infrastructure/longhorn/core/longhorn-disk-tags-ensure-job.yaml +++ b/infrastructure/longhorn/core/longhorn-disk-tags-ensure-job.yaml @@ -2,7 +2,7 @@ apiVersion: batch/v1 kind: Job metadata: - name: longhorn-disk-tags-ensure-3 + name: longhorn-disk-tags-ensure-4 namespace: longhorn-system spec: backoffLimit: 0 diff --git a/services/monitoring/grafana-dashboard-cassandra.yaml b/services/monitoring/grafana-dashboard-cassandra.yaml new file mode 100644 index 00000000..e8f59a43 --- /dev/null +++ b/services/monitoring/grafana-dashboard-cassandra.yaml @@ -0,0 +1,611 @@ +# services/monitoring/grafana-dashboard-cassandra.yaml +apiVersion: v1 +kind: ConfigMap +metadata: + name: grafana-dashboard-cassandra + labels: + grafana_dashboard: "1" +data: + cassandra-rollup.json: | + { + "uid": "cassandra-rollup", + "title": "Cassandra", + "folderUid": "atlas-internal", + "editable": true, + "tags": [ + "cassandra", + "veles", + "migration" + ], + "time": { + "from": "now-6h", + "to": "now" + }, + "refresh": "30s", + "schemaVersion": 39, + "panels": [ + { + "id": 1, + "type": "stat", + "title": "Cassandra Ready Containers", + "datasource": { + "type": "prometheus", + "uid": "atlas-vm" + }, + "gridPos": { + "h": 4, + "w": 6, + "x": 0, + "y": 0 + }, + "targets": [ + { + "expr": "sum(kube_pod_container_status_ready{namespace=\"cassandra\"}) or on() vector(0)", + "refId": "A" + } + ], + "fieldConfig": { + "defaults": { + "unit": "none", + "thresholds": { + "mode": "absolute", + "steps": [ + { + "color": "dark-red", + "value": null + }, + { + "color": "dark-yellow", + "value": 1 + }, + { + "color": "dark-green", + "value": 4 + } + ] + } + }, + "overrides": [] + }, + "options": { + "colorMode": "value", + "graphMode": "area", + "justifyMode": "center", + "reduceOptions": { + "calcs": [ + "lastNotNull" + ], + "fields": "", + "values": false + }, + "textMode": "value" + } + }, + { + "id": 2, + "type": "stat", + "title": "Legacy Veles Ready Containers", + "datasource": { + "type": "prometheus", + "uid": "atlas-vm" + }, + "gridPos": { + "h": 4, + "w": 6, + "x": 6, + "y": 0 + }, + "targets": [ + { + "expr": "sum(kube_pod_container_status_ready{namespace=\"veles\"}) or on() vector(0)", + "refId": "A" + } + ], + "fieldConfig": { + "defaults": { + "unit": "none", + "thresholds": { + "mode": "absolute", + "steps": [ + { + "color": "dark-red", + "value": null + }, + { + "color": "dark-yellow", + "value": 1 + }, + { + "color": "dark-green", + "value": 4 + } + ] + } + }, + "overrides": [] + }, + "options": { + "colorMode": "value", + "graphMode": "area", + "justifyMode": "center", + "reduceOptions": { + "calcs": [ + "lastNotNull" + ], + "fields": "", + "values": false + }, + "textMode": "value" + } + }, + { + "id": 3, + "type": "stat", + "title": "Cassandra + Veles Problem Pods", + "datasource": { + "type": "prometheus", + "uid": "atlas-vm" + }, + "gridPos": { + "h": 4, + "w": 6, + "x": 12, + "y": 0 + }, + "targets": [ + { + "expr": "sum(max by (namespace,pod) (kube_pod_status_phase{namespace=~\"cassandra|veles\",phase!~\"Running|Succeeded\"})) or on() vector(0)", + "refId": "A" + } + ], + "fieldConfig": { + "defaults": { + "unit": "none", + "thresholds": { + "mode": "absolute", + "steps": [ + { + "color": "dark-green", + "value": null + }, + { + "color": "dark-red", + "value": 1 + } + ] + } + }, + "overrides": [] + }, + "options": { + "colorMode": "value", + "graphMode": "area", + "justifyMode": "center", + "reduceOptions": { + "calcs": [ + "lastNotNull" + ], + "fields": "", + "values": false + }, + "textMode": "value" + } + }, + { + "id": 4, + "type": "stat", + "title": "Cassandra + Veles Restarts 1h", + "datasource": { + "type": "prometheus", + "uid": "atlas-vm" + }, + "gridPos": { + "h": 4, + "w": 6, + "x": 18, + "y": 0 + }, + "targets": [ + { + "expr": "sum(increase(kube_pod_container_status_restarts_total{namespace=~\"cassandra|veles\"}[1h])) or on() vector(0)", + "refId": "A" + } + ], + "fieldConfig": { + "defaults": { + "unit": "none", + "thresholds": { + "mode": "absolute", + "steps": [ + { + "color": "dark-green", + "value": null + }, + { + "color": "dark-yellow", + "value": 1 + }, + { + "color": "dark-red", + "value": 5 + } + ] + } + }, + "overrides": [] + }, + "options": { + "colorMode": "value", + "graphMode": "area", + "justifyMode": "center", + "reduceOptions": { + "calcs": [ + "lastNotNull" + ], + "fields": "", + "values": false + }, + "textMode": "value" + } + }, + { + "id": 5, + "type": "timeseries", + "title": "Ready Containers By Namespace", + "datasource": { + "type": "prometheus", + "uid": "atlas-vm" + }, + "gridPos": { + "h": 8, + "w": 12, + "x": 0, + "y": 4 + }, + "targets": [ + { + "expr": "sum by (namespace) (kube_pod_container_status_ready{namespace=~\"cassandra|veles\"})", + "legendFormat": "{{namespace}}", + "refId": "A" + } + ], + "fieldConfig": { + "defaults": { + "unit": "none" + }, + "overrides": [] + }, + "options": { + "legend": { + "displayMode": "table", + "placement": "bottom", + "showLegend": true + }, + "tooltip": { + "mode": "multi", + "sort": "none" + } + } + }, + { + "id": 6, + "type": "timeseries", + "title": "Problem Pods By Namespace", + "datasource": { + "type": "prometheus", + "uid": "atlas-vm" + }, + "gridPos": { + "h": 8, + "w": 12, + "x": 12, + "y": 4 + }, + "targets": [ + { + "expr": "sum by (namespace) (max by (namespace,pod) (kube_pod_status_phase{namespace=~\"cassandra|veles\",phase!~\"Running|Succeeded\"}))", + "legendFormat": "{{namespace}}", + "refId": "A" + } + ], + "fieldConfig": { + "defaults": { + "unit": "none" + }, + "overrides": [] + }, + "options": { + "legend": { + "displayMode": "table", + "placement": "bottom", + "showLegend": true + }, + "tooltip": { + "mode": "multi", + "sort": "none" + } + } + }, + { + "id": 7, + "type": "timeseries", + "title": "CPU By Namespace", + "datasource": { + "type": "prometheus", + "uid": "atlas-vm" + }, + "gridPos": { + "h": 8, + "w": 12, + "x": 0, + "y": 12 + }, + "targets": [ + { + "expr": "sum by (namespace) (rate(container_cpu_usage_seconds_total{namespace=~\"cassandra|veles\",container!=\"\",pod!=\"\"}[5m]))", + "legendFormat": "{{namespace}}", + "refId": "A" + } + ], + "fieldConfig": { + "defaults": { + "unit": "cores" + }, + "overrides": [] + }, + "options": { + "legend": { + "displayMode": "table", + "placement": "bottom", + "showLegend": true + }, + "tooltip": { + "mode": "multi", + "sort": "none" + } + } + }, + { + "id": 8, + "type": "timeseries", + "title": "Memory By Namespace", + "datasource": { + "type": "prometheus", + "uid": "atlas-vm" + }, + "gridPos": { + "h": 8, + "w": 12, + "x": 12, + "y": 12 + }, + "targets": [ + { + "expr": "sum by (namespace) (container_memory_working_set_bytes{namespace=~\"cassandra|veles\",container!=\"\",pod!=\"\"})", + "legendFormat": "{{namespace}}", + "refId": "A" + } + ], + "fieldConfig": { + "defaults": { + "unit": "bytes" + }, + "overrides": [] + }, + "options": { + "legend": { + "displayMode": "table", + "placement": "bottom", + "showLegend": true + }, + "tooltip": { + "mode": "multi", + "sort": "none" + } + } + }, + { + "id": 9, + "type": "bargauge", + "title": "PVC Used By Namespace", + "datasource": { + "type": "prometheus", + "uid": "atlas-vm" + }, + "gridPos": { + "h": 8, + "w": 12, + "x": 0, + "y": 20 + }, + "targets": [ + { + "expr": "sum by (namespace) (kubelet_volume_stats_used_bytes{namespace=~\"cassandra|veles\"})", + "legendFormat": "{{namespace}}", + "refId": "A" + } + ], + "fieldConfig": { + "defaults": { + "unit": "bytes" + }, + "overrides": [] + }, + "options": { + "displayMode": "gradient", + "minVizHeight": 10, + "minVizWidth": 0, + "orientation": "horizontal", + "reduceOptions": { + "calcs": [ + "lastNotNull" + ], + "fields": "", + "values": false + }, + "showUnfilled": true + } + }, + { + "id": 10, + "type": "timeseries", + "title": "PVC Usage Percent", + "datasource": { + "type": "prometheus", + "uid": "atlas-vm" + }, + "gridPos": { + "h": 8, + "w": 12, + "x": 12, + "y": 20 + }, + "targets": [ + { + "expr": "100 * sum by (namespace,persistentvolumeclaim) (kubelet_volume_stats_used_bytes{namespace=~\"cassandra|veles\"}) / sum by (namespace,persistentvolumeclaim) (kubelet_volume_stats_capacity_bytes{namespace=~\"cassandra|veles\"})", + "legendFormat": "{{namespace}} / {{persistentvolumeclaim}}", + "refId": "A" + } + ], + "fieldConfig": { + "defaults": { + "unit": "percent", + "thresholds": { + "mode": "absolute", + "steps": [ + { + "color": "dark-green", + "value": null + }, + { + "color": "dark-yellow", + "value": 70 + }, + { + "color": "dark-red", + "value": 85 + } + ] + } + }, + "overrides": [] + }, + "options": { + "legend": { + "displayMode": "table", + "placement": "bottom", + "showLegend": true + }, + "tooltip": { + "mode": "multi", + "sort": "none" + } + } + }, + { + "id": 11, + "type": "timeseries", + "title": "Migration Jobs", + "datasource": { + "type": "prometheus", + "uid": "atlas-vm" + }, + "gridPos": { + "h": 8, + "w": 12, + "x": 0, + "y": 28 + }, + "targets": [ + { + "expr": "sum by (namespace,job_name) (kube_job_status_failed{namespace=~\"cassandra|veles\",job_name=~\"cassandra-.*|veles-.*\"})", + "legendFormat": "failed {{namespace}} / {{job_name}}", + "refId": "A" + }, + { + "expr": "sum by (namespace,job_name) (kube_job_status_succeeded{namespace=~\"cassandra|veles\",job_name=~\"cassandra-.*|veles-.*\"})", + "legendFormat": "succeeded {{namespace}} / {{job_name}}", + "refId": "B" + } + ], + "fieldConfig": { + "defaults": { + "unit": "none" + }, + "overrides": [] + }, + "options": { + "legend": { + "displayMode": "table", + "placement": "bottom", + "showLegend": true + }, + "tooltip": { + "mode": "multi", + "sort": "none" + } + } + }, + { + "id": 12, + "type": "timeseries", + "title": "Titan-23 Root Filesystem", + "datasource": { + "type": "prometheus", + "uid": "atlas-vm" + }, + "gridPos": { + "h": 8, + "w": 12, + "x": 12, + "y": 28 + }, + "targets": [ + { + "expr": "100 - (node_filesystem_avail_bytes{mountpoint=\"/\",fstype!~\"tmpfs|overlay\"} / node_filesystem_size_bytes{mountpoint=\"/\",fstype!~\"tmpfs|overlay\"} * 100) * on(instance) group_left(nodename) node_uname_info{nodename=\"titan-23\"}", + "legendFormat": "titan-23 /", + "refId": "A" + }, + { + "expr": "100 - (node_filesystem_avail_bytes{mountpoint=\"/mnt/veles\",fstype!~\"tmpfs|overlay\"} / node_filesystem_size_bytes{mountpoint=\"/mnt/veles\",fstype!~\"tmpfs|overlay\"} * 100) * on(instance) group_left(nodename) node_uname_info{nodename=\"titan-23\"}", + "legendFormat": "titan-23 /mnt/veles", + "refId": "B" + } + ], + "fieldConfig": { + "defaults": { + "unit": "percent", + "thresholds": { + "mode": "absolute", + "steps": [ + { + "color": "dark-green", + "value": null + }, + { + "color": "dark-yellow", + "value": 70 + }, + { + "color": "dark-red", + "value": 85 + } + ] + } + }, + "overrides": [] + }, + "options": { + "legend": { + "displayMode": "table", + "placement": "bottom", + "showLegend": true + }, + "tooltip": { + "mode": "multi", + "sort": "none" + } + } + } + ] + } diff --git a/services/monitoring/helmrelease.yaml b/services/monitoring/helmrelease.yaml index 15c86eda..f976dbb5 100644 --- a/services/monitoring/helmrelease.yaml +++ b/services/monitoring/helmrelease.yaml @@ -600,6 +600,15 @@ spec: updateIntervalSeconds: 10 options: path: /var/lib/grafana/dashboards/power + - name: cassandra + orgId: 1 + folder: Atlas Internal + type: file + disableDeletion: false + editable: true + updateIntervalSeconds: 10 + options: + path: /var/lib/grafana/dashboards/cassandra dashboardsConfigMaps: overview: grafana-dashboard-overview overview-public: grafana-dashboard-overview @@ -612,6 +621,7 @@ spec: testing: grafana-dashboard-testing testing-public: grafana-dashboard-testing power: grafana-dashboard-power + cassandra: grafana-dashboard-cassandra extraConfigmapMounts: - name: grafana-folders mountPath: /etc/grafana/provisioning/folders diff --git a/services/monitoring/kustomization.yaml b/services/monitoring/kustomization.yaml index 16df6f3f..6bc0549a 100644 --- a/services/monitoring/kustomization.yaml +++ b/services/monitoring/kustomization.yaml @@ -14,6 +14,7 @@ resources: - grafana-dashboard-network.yaml - grafana-dashboard-gpu.yaml - grafana-dashboard-gitops.yaml + - grafana-dashboard-cassandra.yaml - grafana-dashboard-power.yaml - grafana-dashboard-mail.yaml - grafana-dashboard-testing.yaml From d24ef38f7a4e1e4259bf0eab1d727d77e0feb3b4 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 25 Jul 2026 00:52:21 -0300 Subject: [PATCH 047/991] feat(cassandra): formalize registry and Jenkins cutover --- .../cassandra-registry-ensure-job.yaml | 138 ++++++++++++++++++ services/harbor/kustomization.yaml | 1 + services/jenkins/configmap-jcasc.yaml | 6 +- 3 files changed, 142 insertions(+), 3 deletions(-) create mode 100644 services/harbor/bootstrap-jobs/cassandra-registry-ensure-job.yaml diff --git a/services/harbor/bootstrap-jobs/cassandra-registry-ensure-job.yaml b/services/harbor/bootstrap-jobs/cassandra-registry-ensure-job.yaml new file mode 100644 index 00000000..c5db9c53 --- /dev/null +++ b/services/harbor/bootstrap-jobs/cassandra-registry-ensure-job.yaml @@ -0,0 +1,138 @@ +# services/harbor/bootstrap-jobs/cassandra-registry-ensure-job.yaml +# One-off repair/audit job for the Cassandra Harbor migration. +# Keep suspended unless the Harbor project or robot scopes need to be recreated. +apiVersion: batch/v1 +kind: Job +metadata: + name: cassandra-registry-ensure-1 + namespace: harbor +spec: + suspend: true + backoffLimit: 1 + template: + metadata: + annotations: + vault.hashicorp.com/agent-inject: "true" + vault.hashicorp.com/agent-pre-populate-only: "true" + vault.hashicorp.com/role: "harbor" + vault.hashicorp.com/agent-inject-secret-harbor-admin.sh: "kv/data/atlas/harbor/harbor-core" + vault.hashicorp.com/agent-inject-template-harbor-admin.sh: | + {{- with secret "kv/data/atlas/harbor/harbor-core" }} + export HARBOR_ADMIN_PASSWORD="{{ .Data.data.harbor_admin_password }}" + {{- end }} + spec: + restartPolicy: Never + serviceAccountName: harbor-vault-sync + containers: + - name: ensure + image: python:3.11-alpine + command: ["python", "-c"] + args: + - | + import base64 + import json + import os + import urllib.error + import urllib.request + + secret_path = "/vault/secrets/harbor-admin.sh" + env = {} + with open(secret_path, "r", encoding="utf-8") as handle: + for line in handle: + line = line.strip() + if not line.startswith("export "): + continue + key, value = line[len("export ") :].split("=", 1) + env[key] = value.strip('"') + + password = env["HARBOR_ADMIN_PASSWORD"] + api = os.environ.get( + "HARBOR_API", + "http://harbor-core.harbor.svc.cluster.local/api/v2.0", + ).rstrip("/") + auth = base64.b64encode(f"admin:{password}".encode("utf-8")).decode("ascii") + + def request(method, path, payload=None, ok=(200,)): + data = None + headers = {"Authorization": f"Basic {auth}"} + if payload is not None: + data = json.dumps(payload).encode("utf-8") + headers["Content-Type"] = "application/json" + req = urllib.request.Request( + f"{api}{path}", + data=data, + method=method, + headers=headers, + ) + try: + with urllib.request.urlopen(req, timeout=30) as response: + body = response.read() + if response.status not in ok: + raise RuntimeError(f"{method} {path} returned {response.status}") + if not body: + return None + return json.loads(body.decode("utf-8")) + except urllib.error.HTTPError as exc: + detail = exc.read().decode("utf-8", errors="replace") + if exc.code in ok: + return None + raise RuntimeError(f"{method} {path} returned {exc.code}: {detail}") from exc + + projects = request("GET", "/projects?name=cassandra") + if not projects: + request( + "POST", + "/projects", + { + "project_name": "cassandra", + "metadata": { + "public": "false", + "auto_scan": "false", + "enable_content_trust": "false", + "prevent_vul": "false", + "reuse_sys_cve_allowlist": "true", + }, + }, + ok=(201, 409), + ) + + def ensure_permission(robot_name, access, description=None): + robots = request("GET", "/robots?page_size=100") + matches = [robot for robot in robots if robot.get("name") == robot_name] + if not matches: + raise RuntimeError(f"Harbor robot {robot_name} not found") + robot = request("GET", f"/robots/{matches[0]['id']}") + permissions = list(robot.get("permissions") or []) + if not any( + item.get("kind") == "project" and item.get("namespace") == "cassandra" + for item in permissions + ): + permissions.append( + {"kind": "project", "namespace": "cassandra", "access": access} + ) + payload = { + "name": robot["name"], + "level": robot["level"], + "disable": bool(robot.get("disable", False)), + "duration": int(robot.get("duration", -1)), + "permissions": permissions, + } + if description: + payload["description"] = description + elif robot.get("description"): + payload["description"] = robot["description"] + request("PUT", f"/robots/{robot['id']}", payload, ok=(200,)) + + ensure_permission( + "robot$pull-atlas", + [{"resource": "repository", "action": "pull"}], + ) + ensure_permission( + "robot$jenkins-pipelines", + [ + {"resource": "repository", "action": "pull"}, + {"resource": "repository", "action": "push"}, + ], + "Jenkins image push robot for bstein, veles, and cassandra pipelines", + ) + print("Cassandra Harbor project and robot scopes are present") diff --git a/services/harbor/kustomization.yaml b/services/harbor/kustomization.yaml index 3018b3ca..6a4ce002 100644 --- a/services/harbor/kustomization.yaml +++ b/services/harbor/kustomization.yaml @@ -12,6 +12,7 @@ resources: - certificate.yaml - helmrelease.yaml - vault-sync-deployment.yaml + - bootstrap-jobs/cassandra-registry-ensure-job.yaml - image.yaml configMapGenerator: - name: harbor-vault-entrypoint diff --git a/services/jenkins/configmap-jcasc.yaml b/services/jenkins/configmap-jcasc.yaml index c137b7db..0bee610d 100644 --- a/services/jenkins/configmap-jcasc.yaml +++ b/services/jenkins/configmap-jcasc.yaml @@ -429,15 +429,15 @@ data: } } } - pipelineJob('veles') { + pipelineJob('cassandra') { disabled(false) - description('Staged Veles alpha image pipeline. Backend/frontend should build linux/amd64 and linux/arm64; sim-worker may begin amd64-only if Forge dependencies require it.') + description('Staged Cassandra alpha image pipeline. Backend/frontend should build linux/amd64 and linux/arm64; sim-worker may begin amd64-only if Forge dependencies require it.') definition { cpsScm { scm { git { remote { - url('https://scm.bstein.dev/bstein/veles.git') + url('https://scm.bstein.dev/bstein/cassandra.git') credentials('gitea-pat') } branches('*/main') From b9d338cf777d1974af0964963d601db3298923ef Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 25 Jul 2026 01:11:34 -0300 Subject: [PATCH 048/991] chore(cassandra): deploy 0.7.66 schema init fix --- services/cassandra/backend-deployment.yaml | 6 +++--- services/cassandra/configmap.yaml | 6 +++--- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 5 files changed, 10 insertions(+), 10 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 6be9038f..927673c4 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-24-0.7.65-hygiene-generator-worker" + cassandra.bstein.dev/redeploy: "2026-07-25-0.7.66-schema-init" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" @@ -63,7 +63,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.7.65 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.7.66 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -85,7 +85,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.7.65 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.7.66 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index d250a90c..8ce36874 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -18,9 +18,9 @@ data: CASSANDRA_OIDC_REQUIRED_GROUPS: alpha,cassandra-tester,admin CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.7.65 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.7.65" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.7.65" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.7.66 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.7.66" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.7.66" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 7cdcdfc0..cc551d37 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.7.65 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.7.66 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index 3e014134..affe6175 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -17,7 +17,7 @@ spec: labels: app: cassandra-generator-worker annotations: - cassandra.bstein.dev/redeploy: "2026-07-24-0.7.65-hygiene-generator-worker" + cassandra.bstein.dev/redeploy: "2026-07-25-0.7.66-schema-init" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" @@ -55,7 +55,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.7.65 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.7.66 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 1d2900d9..e4c3ee61 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.7.65 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.7.66 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 6984d09c840dc817e4fcd504381397f8b1e12244 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 25 Jul 2026 01:15:45 -0300 Subject: [PATCH 049/991] chore(cassandra): run verified database copy --- .../migration-jobs/db-copy-veles-to-cassandra-job.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/migration-jobs/db-copy-veles-to-cassandra-job.yaml b/services/cassandra/migration-jobs/db-copy-veles-to-cassandra-job.yaml index c9ff432b..305983c0 100644 --- a/services/cassandra/migration-jobs/db-copy-veles-to-cassandra-job.yaml +++ b/services/cassandra/migration-jobs/db-copy-veles-to-cassandra-job.yaml @@ -5,10 +5,10 @@ apiVersion: batch/v1 kind: Job metadata: - name: cassandra-db-copy-from-veles-1 + name: cassandra-db-copy-from-veles-2 namespace: cassandra spec: - suspend: true + suspend: false backoffLimit: 0 ttlSecondsAfterFinished: 86400 template: From cc8c27aaf7d7329c9345451b6a522ff84403614a Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 25 Jul 2026 01:23:06 -0300 Subject: [PATCH 050/991] chore(cassandra): retry db copy with quiesced target --- services/cassandra/backend-deployment.yaml | 2 +- .../migration-jobs/db-copy-veles-to-cassandra-job.yaml | 6 ++++-- 2 files changed, 5 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 927673c4..2cb5b979 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -7,7 +7,7 @@ metadata: labels: app: cassandra-backend spec: - replicas: 1 + replicas: 0 revisionHistoryLimit: 2 strategy: type: RollingUpdate diff --git a/services/cassandra/migration-jobs/db-copy-veles-to-cassandra-job.yaml b/services/cassandra/migration-jobs/db-copy-veles-to-cassandra-job.yaml index 305983c0..6e68790c 100644 --- a/services/cassandra/migration-jobs/db-copy-veles-to-cassandra-job.yaml +++ b/services/cassandra/migration-jobs/db-copy-veles-to-cassandra-job.yaml @@ -5,7 +5,7 @@ apiVersion: batch/v1 kind: Job metadata: - name: cassandra-db-copy-from-veles-2 + name: cassandra-db-copy-from-veles-3 namespace: cassandra spec: suspend: false @@ -68,7 +68,9 @@ spec: pg_dump --format=custom --no-owner --no-acl \ --dbname="${SOURCE_DATABASE_URL}" \ --file="${dump_path}" - pg_restore --clean --if-exists --no-owner --no-acl \ + psql -X --set=ON_ERROR_STOP=1 --dbname="${TARGET_DATABASE_URL}" \ + --command="DROP SCHEMA IF EXISTS public CASCADE; CREATE SCHEMA public; GRANT ALL ON SCHEMA public TO cassandra; GRANT ALL ON SCHEMA public TO public;" + pg_restore --no-owner --no-acl \ --dbname="${TARGET_DATABASE_URL}" \ "${dump_path}" From 8b6f284cec86ae5f8c18555a9f21b735cf046cdf Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 25 Jul 2026 01:26:55 -0300 Subject: [PATCH 051/991] chore(cassandra): restore backend after verified db copy --- services/cassandra/backend-deployment.yaml | 2 +- .../migration-jobs/db-copy-veles-to-cassandra-job.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 2cb5b979..927673c4 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -7,7 +7,7 @@ metadata: labels: app: cassandra-backend spec: - replicas: 0 + replicas: 1 revisionHistoryLimit: 2 strategy: type: RollingUpdate diff --git a/services/cassandra/migration-jobs/db-copy-veles-to-cassandra-job.yaml b/services/cassandra/migration-jobs/db-copy-veles-to-cassandra-job.yaml index 6e68790c..a9c3f4c5 100644 --- a/services/cassandra/migration-jobs/db-copy-veles-to-cassandra-job.yaml +++ b/services/cassandra/migration-jobs/db-copy-veles-to-cassandra-job.yaml @@ -8,7 +8,7 @@ metadata: name: cassandra-db-copy-from-veles-3 namespace: cassandra spec: - suspend: false + suspend: true backoffLimit: 0 ttlSecondsAfterFinished: 86400 template: From 9b8f91b46f7d9f54d4731c43c4ee220e2c8876c2 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 25 Jul 2026 01:30:12 -0300 Subject: [PATCH 052/991] chore(cassandra): run verified artifact copy --- services/cassandra/backend-deployment.yaml | 2 +- .../artifact-copy-veles-to-cassandra-job.yaml | 28 +++++++++++++++++-- .../cassandra-artifact-export.yaml | 2 +- 3 files changed, 27 insertions(+), 5 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 927673c4..2cb5b979 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -7,7 +7,7 @@ metadata: labels: app: cassandra-backend spec: - replicas: 1 + replicas: 0 revisionHistoryLimit: 2 strategy: type: RollingUpdate diff --git a/services/cassandra/migration-jobs/artifact-copy-veles-to-cassandra-job.yaml b/services/cassandra/migration-jobs/artifact-copy-veles-to-cassandra-job.yaml index 65f43438..f2b49e88 100644 --- a/services/cassandra/migration-jobs/artifact-copy-veles-to-cassandra-job.yaml +++ b/services/cassandra/migration-jobs/artifact-copy-veles-to-cassandra-job.yaml @@ -3,10 +3,10 @@ apiVersion: batch/v1 kind: Job metadata: - name: cassandra-artifact-copy-from-veles-1 + name: cassandra-artifact-copy-from-veles-2 namespace: cassandra spec: - suspend: true + suspend: false backoffLimit: 0 activeDeadlineSeconds: 43200 ttlSecondsAfterFinished: 86400 @@ -33,6 +33,8 @@ spec: value: /dest - name: ALLOW_NONEMPTY_DEST value: "0" + - name: RESET_DESTINATION + value: "1" command: ["python", "-c"] args: - | @@ -42,12 +44,15 @@ spec: import hashlib import json import os + import shutil import tarfile + import time import urllib.request SOURCE_URL = os.environ["SOURCE_URL"].rstrip("/") DEST = Path(os.environ.get("DEST_ROOT", "/dest")).resolve() ALLOW_NONEMPTY = os.environ.get("ALLOW_NONEMPTY_DEST", "") in {"1", "true", "yes"} + RESET_DESTINATION = os.environ.get("RESET_DESTINATION", "") in {"1", "true", "yes"} EXCLUDE_TOP = {"lost+found", ".cassandra-artifact-migration"} REPORT_DIR = DEST / ".cassandra-artifact-migration" @@ -57,6 +62,13 @@ spec: def assert_safe_destination() -> None: DEST.mkdir(parents=True, exist_ok=True) entries = visible_entries() + if entries and RESET_DESTINATION: + for entry in entries: + if entry.is_dir(): + shutil.rmtree(entry) + else: + entry.unlink() + entries = visible_entries() if entries and not ALLOW_NONEMPTY: names = ", ".join(entry.name for entry in entries[:10]) raise SystemExit(f"destination is not empty; refusing to merge into existing data: {names}") @@ -66,6 +78,16 @@ spec: with urllib.request.urlopen(f"{SOURCE_URL}/manifest.json", timeout=120) as response: return json.loads(response.read().decode()) + def wait_for_manifest() -> dict[str, object]: + last_error = "" + for _attempt in range(90): + try: + return fetch_manifest() + except Exception as exc: + last_error = str(exc) + time.sleep(5) + raise SystemExit(f"source artifact exporter did not become ready: {last_error}") + def safe_extract() -> None: root_text = str(DEST) with urllib.request.urlopen(f"{SOURCE_URL}/archive.tar", timeout=600) as response: @@ -116,7 +138,7 @@ spec: } assert_safe_destination() - source = fetch_manifest() + source = wait_for_manifest() (REPORT_DIR / "source_manifest.json").write_text(json.dumps(source, indent=2, sort_keys=True)) safe_extract() dest = destination_manifest() diff --git a/services/veles/migration-jobs/cassandra-artifact-export.yaml b/services/veles/migration-jobs/cassandra-artifact-export.yaml index 1f12a261..41173f70 100644 --- a/services/veles/migration-jobs/cassandra-artifact-export.yaml +++ b/services/veles/migration-jobs/cassandra-artifact-export.yaml @@ -20,7 +20,7 @@ metadata: name: veles-artifact-export-for-cassandra namespace: veles spec: - replicas: 0 + replicas: 1 selector: matchLabels: app: veles-artifact-export-for-cassandra From 7fb0dc41602af0a88c0aee8bda5fd332327092b7 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 25 Jul 2026 01:37:02 -0300 Subject: [PATCH 053/991] chore(cassandra): federate sso and park artifact migration --- .../cassandra-ldap-federation-job.yaml | 370 ++++++++++++++++++ .../cassandra-realm-ensure-job.yaml | 4 +- services/cassandra-auth/kustomization.yaml | 1 + services/cassandra/backend-deployment.yaml | 2 +- .../artifact-copy-veles-to-cassandra-job.yaml | 2 +- .../cassandra-artifact-export.yaml | 2 +- 6 files changed, 376 insertions(+), 5 deletions(-) create mode 100644 services/cassandra-auth/bootstrap-jobs/cassandra-ldap-federation-job.yaml diff --git a/services/cassandra-auth/bootstrap-jobs/cassandra-ldap-federation-job.yaml b/services/cassandra-auth/bootstrap-jobs/cassandra-ldap-federation-job.yaml new file mode 100644 index 00000000..df73085b --- /dev/null +++ b/services/cassandra-auth/bootstrap-jobs/cassandra-ldap-federation-job.yaml @@ -0,0 +1,370 @@ +# services/cassandra-auth/bootstrap-jobs/cassandra-ldap-federation-job.yaml +# One-off job for sso/cassandra-ldap-federation-1. +# Purpose: attach the Cassandra Keycloak realm to the shared OpenLDAP directory. +# Run unsuspended for migration, then suspend/replace with a new job name for future runs. +apiVersion: batch/v1 +kind: Job +metadata: + name: cassandra-ldap-federation-1 + namespace: sso +spec: + ttlSecondsAfterFinished: 3600 + suspend: false + backoffLimit: 2 + template: + metadata: + annotations: + vault.hashicorp.com/agent-inject: "true" + vault.hashicorp.com/agent-pre-populate-only: "true" + vault.hashicorp.com/role: "sso" + vault.hashicorp.com/agent-inject-secret-keycloak-env.sh: "kv/data/atlas/shared/keycloak-admin" + vault.hashicorp.com/agent-inject-template-keycloak-env.sh: | + {{ with secret "kv/data/atlas/shared/keycloak-admin" }} + export KEYCLOAK_ADMIN="{{ .Data.data.username }}" + export KEYCLOAK_ADMIN_USER="{{ .Data.data.username }}" + export KEYCLOAK_ADMIN_PASSWORD="{{ .Data.data.password }}" + {{ end }} + {{ with secret "kv/data/atlas/sso/openldap-admin" }} + export LDAP_ADMIN_PASSWORD="{{ .Data.data.LDAP_ADMIN_PASSWORD }}" + export LDAP_CONFIG_PASSWORD="{{ .Data.data.LDAP_CONFIG_PASSWORD }}" + export LDAP_BIND_PASSWORD="${LDAP_ADMIN_PASSWORD}" + {{ end }} + spec: + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: hardware + operator: In + values: ["rpi5","rpi4"] + - key: node-role.kubernetes.io/worker + operator: Exists + restartPolicy: OnFailure + serviceAccountName: sso-vault + containers: + - name: configure + image: python:3.11-alpine + imagePullPolicy: IfNotPresent + env: + - name: KEYCLOAK_SERVER + value: http://keycloak.sso.svc.cluster.local + - name: KEYCLOAK_REALM + value: cassandra + - name: LDAP_URL + value: ldap://openldap.sso.svc.cluster.local:389 + - name: LDAP_BIND_DN + value: cn=admin,dc=bstein,dc=dev + - name: LDAP_USERS_DN + value: ou=users,dc=bstein,dc=dev + - name: LDAP_GROUPS_DN + value: ou=groups,dc=bstein,dc=dev + - name: VERIFY_USERS + value: veles-dev,cassandra-dev,daniel-test,viktor-test + command: ["/bin/sh", "-c"] + args: + - | + set -euo pipefail + . /vault/secrets/keycloak-env.sh + python - <<'PY' + import json + import os + import time + import urllib.error + import urllib.parse + import urllib.request + + base_url = os.environ["KEYCLOAK_SERVER"].rstrip("/") + realm = os.environ["KEYCLOAK_REALM"] + admin_user = os.environ["KEYCLOAK_ADMIN_USER"] + admin_password = os.environ["KEYCLOAK_ADMIN_PASSWORD"] + ldap_url = os.environ["LDAP_URL"] + ldap_bind_dn = os.environ["LDAP_BIND_DN"] + ldap_bind_password = os.environ["LDAP_BIND_PASSWORD"] + ldap_users_dn = os.environ["LDAP_USERS_DN"] + ldap_groups_dn = os.environ["LDAP_GROUPS_DN"] + + def request(method, url, token=None, payload=None, timeout=30): + data = None + headers = {} + if token: + headers["Authorization"] = f"Bearer {token}" + if payload is not None: + data = json.dumps(payload).encode() + headers["Content-Type"] = "application/json" + req = urllib.request.Request(url, data=data, headers=headers, method=method) + try: + with urllib.request.urlopen(req, timeout=timeout) as resp: + body = resp.read() + if not body: + return resp.status, None, dict(resp.headers) + return resp.status, json.loads(body.decode()), dict(resp.headers) + except urllib.error.HTTPError as exc: + raw = exc.read() + body = None + if raw: + try: + body = json.loads(raw.decode()) + except Exception: + body = {"raw": raw.decode(errors="replace")} + return exc.code, body, dict(exc.headers) + + def get_token(): + data = urllib.parse.urlencode( + { + "grant_type": "password", + "client_id": "admin-cli", + "username": admin_user, + "password": admin_password, + } + ).encode() + req = urllib.request.Request( + f"{base_url}/realms/master/protocol/openid-connect/token", + data=data, + headers={"Content-Type": "application/x-www-form-urlencoded"}, + method="POST", + ) + with urllib.request.urlopen(req, timeout=30) as resp: + return json.loads(resp.read().decode())["access_token"] + + token = None + for attempt in range(1, 31): + try: + token = get_token() + break + except Exception as exc: + if attempt == 30: + raise SystemExit(f"Keycloak token request failed: {exc}") + time.sleep(2) + assert token + + status, realm_rep, _ = request("GET", f"{base_url}/admin/realms/{realm}", token) + if status != 200 or not isinstance(realm_rep, dict) or not realm_rep.get("id"): + raise SystemExit(f"Unable to resolve realm id for {realm}: status={status}") + realm_id = realm_rep["id"] + + status, components, _ = request( + "GET", + f"{base_url}/admin/realms/{realm}/components", + token, + ) + if status != 200: + raise SystemExit(f"Unable to list realm components: status={status}") + components = components or [] + + for component in components: + if component.get("providerId") != "ldap": + continue + if component.get("providerType") != "org.keycloak.storage.UserStorageProvider": + continue + if component.get("parentId") == realm_id: + continue + cid = component.get("id") + if not cid: + continue + status, payload, _ = request( + "GET", + f"{base_url}/admin/realms/{realm}/components/{cid}", + token, + ) + if status != 200 or not isinstance(payload, dict): + raise SystemExit(f"Unable to fetch LDAP component {cid}: status={status}") + payload["parentId"] = realm_id + status, _, _ = request( + "PUT", + f"{base_url}/admin/realms/{realm}/components/{cid}", + token, + payload, + ) + if status not in (200, 204): + raise SystemExit(f"Unable to repair LDAP component {cid}: status={status}") + + status, storage_components, _ = request( + "GET", + f"{base_url}/admin/realms/{realm}/components?type=org.keycloak.storage.UserStorageProvider", + token, + ) + if status != 200: + raise SystemExit(f"Unable to list user-storage components: status={status}") + storage_components = storage_components or [] + + ldap_components = [ + c + for c in storage_components + if c.get("providerId") == "ldap" and c.get("id") + ] + candidates = [] + for component in ldap_components: + config = component.get("config") or {} + if component.get("name") in ("openldap", "ldap") and (config.get("connectionUrl") or [None])[0] == ldap_url: + candidates.append(component) + if not candidates: + candidates = [c for c in ldap_components if c.get("name") in ("openldap", "ldap")] + candidates.sort(key=lambda item: item.get("id", "")) + ldap_component = candidates[0] if candidates else None + ldap_component_id = ldap_component.get("id") if ldap_component else None + + desired = { + "name": "openldap", + "providerId": "ldap", + "providerType": "org.keycloak.storage.UserStorageProvider", + "parentId": realm_id, + "config": { + "enabled": ["true"], + "priority": ["0"], + "importEnabled": ["true"], + "editMode": ["WRITABLE"], + "syncRegistrations": ["true"], + "vendor": ["other"], + "connectionUrl": [ldap_url], + "bindDn": [ldap_bind_dn], + "bindCredential": [ldap_bind_password], + "authType": ["simple"], + "usersDn": [ldap_users_dn], + "searchScope": ["1"], + "pagination": ["true"], + "usernameLDAPAttribute": ["uid"], + "rdnLDAPAttribute": ["uid"], + "uuidLDAPAttribute": ["entryUUID"], + "userObjectClasses": ["inetOrgPerson, organizationalPerson, person, top"], + "trustEmail": ["true"], + "useTruststoreSpi": ["never"], + "connectionPooling": ["true"], + "cachePolicy": ["DEFAULT"], + "useKerberosForPasswordAuthentication": ["false"], + "allowKerberosAuthentication": ["false"], + }, + } + + if ldap_component_id: + desired["id"] = ldap_component_id + print(f"Updating Cassandra LDAP federation provider: {ldap_component_id}") + status, _, _ = request( + "PUT", + f"{base_url}/admin/realms/{realm}/components/{ldap_component_id}", + token, + desired, + ) + if status not in (200, 204): + raise SystemExit(f"LDAP provider update failed: status={status}") + else: + print("Creating Cassandra LDAP federation provider") + status, _, headers = request( + "POST", + f"{base_url}/admin/realms/{realm}/components", + token, + desired, + ) + if status not in (201, 204): + raise SystemExit(f"LDAP provider create failed: status={status}") + location = headers.get("Location", "") + ldap_component_id = location.rstrip("/").split("/")[-1] if location else None + + if not ldap_component_id: + raise SystemExit("Unable to determine Cassandra LDAP provider id") + + status, mapper_components, _ = request( + "GET", + f"{base_url}/admin/realms/{realm}/components?type=org.keycloak.storage.ldap.mappers.LDAPStorageMapper", + token, + ) + if status != 200: + raise SystemExit(f"Unable to list LDAP mappers: status={status}") + mapper_components = mapper_components or [] + + def upsert_mapper(name, provider_id, config): + existing = next( + ( + c + for c in mapper_components + if c.get("name") == name and c.get("parentId") == ldap_component_id + ), + None, + ) + payload = { + "name": name, + "providerId": provider_id, + "providerType": "org.keycloak.storage.ldap.mappers.LDAPStorageMapper", + "parentId": ldap_component_id, + "config": config, + } + if existing: + payload["id"] = existing["id"] + status, _, _ = request( + "PUT", + f"{base_url}/admin/realms/{realm}/components/{existing['id']}", + token, + payload, + ) + action = "Updated" + else: + status, _, _ = request( + "POST", + f"{base_url}/admin/realms/{realm}/components", + token, + payload, + ) + action = "Created" + if status not in (200, 201, 204): + raise SystemExit(f"Mapper {name} upsert failed: status={status}") + print(f"{action} Cassandra LDAP mapper: {name}") + + upsert_mapper( + "openldap-groups", + "group-ldap-mapper", + { + "groups.dn": [ldap_groups_dn], + "group.name.ldap.attribute": ["cn"], + "group.object.classes": ["groupOfNames"], + "membership.ldap.attribute": ["member"], + "membership.attribute.type": ["DN"], + "mode": ["LDAP_ONLY"], + "user.roles.retrieve.strategy": ["LOAD_GROUPS_BY_MEMBER_ATTRIBUTE"], + "preserve.group.inheritance": ["true"], + }, + ) + for name, ldap_attr, user_attr in ( + ("openldap-email", "mail", "email"), + ("openldap-first-name", "givenName", "firstName"), + ("openldap-last-name", "sn", "lastName"), + ): + upsert_mapper( + name, + "user-attribute-ldap-mapper", + { + "ldap.attribute": [ldap_attr], + "user.model.attribute": [user_attr], + "read.only": ["false"], + "always.read.value.from.ldap": ["false"], + "is.mandatory.in.ldap": ["false"], + }, + ) + + status, sync_body, _ = request( + "POST", + f"{base_url}/admin/realms/{realm}/user-storage/{ldap_component_id}/sync?action=triggerFullSync", + token, + timeout=120, + ) + if status in (200, 201, 204): + print(f"Cassandra LDAP full sync requested: {sync_body}") + else: + print(f"WARNING: Cassandra LDAP full sync returned status={status} body={sync_body}") + + for username in (item.strip() for item in os.environ.get("VERIFY_USERS", "").split(",")): + if not username: + continue + encoded = urllib.parse.quote(username) + status, users, _ = request( + "GET", + f"{base_url}/admin/realms/{realm}/users?username={encoded}&exact=true", + token, + ) + found = status == 200 and any( + str(user.get("username") or "").casefold() == username.casefold() + for user in users or [] + ) + print(f"Cassandra LDAP user check {username}: {'found' if found else 'missing'}") + + print("Cassandra LDAP federation ready") + PY diff --git a/services/cassandra-auth/bootstrap-jobs/cassandra-realm-ensure-job.yaml b/services/cassandra-auth/bootstrap-jobs/cassandra-realm-ensure-job.yaml index 3b3d10b3..72b064f5 100644 --- a/services/cassandra-auth/bootstrap-jobs/cassandra-realm-ensure-job.yaml +++ b/services/cassandra-auth/bootstrap-jobs/cassandra-realm-ensure-job.yaml @@ -5,7 +5,7 @@ apiVersion: batch/v1 kind: Job metadata: - name: cassandra-realm-ensure-1 + name: cassandra-realm-ensure-2 namespace: sso spec: suspend: true @@ -70,7 +70,7 @@ spec: - name: KEYCLOAK_SMTP_FROM_NAME value: Cassandra - name: CASSANDRA_PUBLIC_REPLAY_USERS - value: cassandra-dev,daniel-test,viktor-test + value: veles-dev,cassandra-dev,daniel-test,viktor-test command: ["/bin/sh", "-c"] args: - | diff --git a/services/cassandra-auth/kustomization.yaml b/services/cassandra-auth/kustomization.yaml index a84908f3..dd064b80 100644 --- a/services/cassandra-auth/kustomization.yaml +++ b/services/cassandra-auth/kustomization.yaml @@ -3,6 +3,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization namespace: sso resources: + - bootstrap-jobs/cassandra-ldap-federation-job.yaml - bootstrap-jobs/cassandra-realm-ensure-job.yaml - bootstrap-jobs/cassandra-gitea-oidc-secret-ensure-job.yaml configMapGenerator: diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 2cb5b979..927673c4 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -7,7 +7,7 @@ metadata: labels: app: cassandra-backend spec: - replicas: 0 + replicas: 1 revisionHistoryLimit: 2 strategy: type: RollingUpdate diff --git a/services/cassandra/migration-jobs/artifact-copy-veles-to-cassandra-job.yaml b/services/cassandra/migration-jobs/artifact-copy-veles-to-cassandra-job.yaml index f2b49e88..b6194e62 100644 --- a/services/cassandra/migration-jobs/artifact-copy-veles-to-cassandra-job.yaml +++ b/services/cassandra/migration-jobs/artifact-copy-veles-to-cassandra-job.yaml @@ -6,7 +6,7 @@ metadata: name: cassandra-artifact-copy-from-veles-2 namespace: cassandra spec: - suspend: false + suspend: true backoffLimit: 0 activeDeadlineSeconds: 43200 ttlSecondsAfterFinished: 86400 diff --git a/services/veles/migration-jobs/cassandra-artifact-export.yaml b/services/veles/migration-jobs/cassandra-artifact-export.yaml index 41173f70..1f12a261 100644 --- a/services/veles/migration-jobs/cassandra-artifact-export.yaml +++ b/services/veles/migration-jobs/cassandra-artifact-export.yaml @@ -20,7 +20,7 @@ metadata: name: veles-artifact-export-for-cassandra namespace: veles spec: - replicas: 1 + replicas: 0 selector: matchLabels: app: veles-artifact-export-for-cassandra From e440196104f88196f206334ca8501ea964486e99 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 25 Jul 2026 01:39:35 -0300 Subject: [PATCH 054/991] chore(cassandra): audit sso user migration --- .../cassandra-ldap-federation-job.yaml | 31 +++++++++++++++++-- 1 file changed, 29 insertions(+), 2 deletions(-) diff --git a/services/cassandra-auth/bootstrap-jobs/cassandra-ldap-federation-job.yaml b/services/cassandra-auth/bootstrap-jobs/cassandra-ldap-federation-job.yaml index df73085b..1590a7a7 100644 --- a/services/cassandra-auth/bootstrap-jobs/cassandra-ldap-federation-job.yaml +++ b/services/cassandra-auth/bootstrap-jobs/cassandra-ldap-federation-job.yaml @@ -1,11 +1,11 @@ # services/cassandra-auth/bootstrap-jobs/cassandra-ldap-federation-job.yaml -# One-off job for sso/cassandra-ldap-federation-1. +# One-off job for sso/cassandra-ldap-federation-2. # Purpose: attach the Cassandra Keycloak realm to the shared OpenLDAP directory. # Run unsuspended for migration, then suspend/replace with a new job name for future runs. apiVersion: batch/v1 kind: Job metadata: - name: cassandra-ldap-federation-1 + name: cassandra-ldap-federation-2 namespace: sso spec: ttlSecondsAfterFinished: 3600 @@ -366,5 +366,32 @@ spec: ) print(f"Cassandra LDAP user check {username}: {'found' if found else 'missing'}") + for audit_realm in ("veles", realm): + status, count, _ = request( + "GET", + f"{base_url}/admin/realms/{audit_realm}/users/count", + token, + ) + if status == 200: + print(f"SSO audit realm {audit_realm}: user_count={count}") + for term in (item.strip() for item in os.environ.get("VERIFY_USERS", "").split(",")): + if not term: + continue + encoded = urllib.parse.quote(term) + status, users, _ = request( + "GET", + f"{base_url}/admin/realms/{audit_realm}/users?search={encoded}", + token, + ) + users = users if status == 200 and isinstance(users, list) else [] + matches = [] + for user in users: + username = str(user.get("username") or "") + email = str(user.get("email") or "") + if term.casefold() in username.casefold() or term.casefold() in email.casefold(): + matches.append(username if not email else f"{username}<{email}>") + joined = ", ".join(matches[:8]) if matches else "none" + print(f"SSO audit realm {audit_realm} search {term}: {joined}") + print("Cassandra LDAP federation ready") PY From d9ddd264eaf688f34debf78056711d1cdb334750 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 25 Jul 2026 01:53:58 -0300 Subject: [PATCH 055/991] chore(cassandra): repair artifact pvc ownership --- services/cassandra/kustomization.yaml | 1 + .../artifact-permissions-job.yaml | 42 +++++++++++++++++++ 2 files changed, 43 insertions(+) create mode 100644 services/cassandra/migration-jobs/artifact-permissions-job.yaml diff --git a/services/cassandra/kustomization.yaml b/services/cassandra/kustomization.yaml index 3679f1a1..d289ba67 100644 --- a/services/cassandra/kustomization.yaml +++ b/services/cassandra/kustomization.yaml @@ -24,3 +24,4 @@ resources: - bootstrap-jobs/cassandra-secrets-ensure-job.yaml - migration-jobs/db-copy-veles-to-cassandra-job.yaml - migration-jobs/artifact-copy-veles-to-cassandra-job.yaml + - migration-jobs/artifact-permissions-job.yaml diff --git a/services/cassandra/migration-jobs/artifact-permissions-job.yaml b/services/cassandra/migration-jobs/artifact-permissions-job.yaml new file mode 100644 index 00000000..fd7fda72 --- /dev/null +++ b/services/cassandra/migration-jobs/artifact-permissions-job.yaml @@ -0,0 +1,42 @@ +# services/cassandra/migration-jobs/artifact-permissions-job.yaml +# One-off migration repair after copying artifacts from the Veles PVC. +apiVersion: batch/v1 +kind: Job +metadata: + name: cassandra-artifact-permissions-1 + namespace: cassandra +spec: + suspend: false + backoffLimit: 0 + ttlSecondsAfterFinished: 86400 + template: + spec: + serviceAccountName: cassandra-artifact-migration + automountServiceAccountToken: false + restartPolicy: Never + nodeSelector: + cassandra.bstein.dev/node-pool: oceanus + tolerations: + - key: veles.bstein.dev/simulation + operator: Equal + value: "true" + effect: NoSchedule + containers: + - name: permissions + image: alpine:3.20 + imagePullPolicy: IfNotPresent + command: ["/bin/sh", "-c"] + args: + - | + set -eu + chown -R 10001:10001 /data/cassandra-artifacts + find /data/cassandra-artifacts -type d -exec chmod 2775 {} + + find /data/cassandra-artifacts -type f -exec chmod 0664 {} + + printf 'artifact permission repair complete\n' + volumeMounts: + - name: artifacts + mountPath: /data/cassandra-artifacts + volumes: + - name: artifacts + persistentVolumeClaim: + claimName: cassandra-artifacts From ac3a7202f3d2189545517857919398b5e6b0916a Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 25 Jul 2026 01:56:20 -0300 Subject: [PATCH 056/991] chore(cassandra): rerun realm group refresh --- .../bootstrap-jobs/cassandra-realm-ensure-job.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra-auth/bootstrap-jobs/cassandra-realm-ensure-job.yaml b/services/cassandra-auth/bootstrap-jobs/cassandra-realm-ensure-job.yaml index 72b064f5..be123545 100644 --- a/services/cassandra-auth/bootstrap-jobs/cassandra-realm-ensure-job.yaml +++ b/services/cassandra-auth/bootstrap-jobs/cassandra-realm-ensure-job.yaml @@ -8,7 +8,7 @@ metadata: name: cassandra-realm-ensure-2 namespace: sso spec: - suspend: true + suspend: false backoffLimit: 0 ttlSecondsAfterFinished: 3600 template: From 4673c35a60c2070602c9e414ef681b3e64020ab6 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 25 Jul 2026 02:02:20 -0300 Subject: [PATCH 057/991] chore(cassandra): mirror sso tester groups --- .../cassandra-realm-ensure-job.yaml | 30 +++++++++++++++---- 1 file changed, 25 insertions(+), 5 deletions(-) diff --git a/services/cassandra-auth/bootstrap-jobs/cassandra-realm-ensure-job.yaml b/services/cassandra-auth/bootstrap-jobs/cassandra-realm-ensure-job.yaml index be123545..ea8a1126 100644 --- a/services/cassandra-auth/bootstrap-jobs/cassandra-realm-ensure-job.yaml +++ b/services/cassandra-auth/bootstrap-jobs/cassandra-realm-ensure-job.yaml @@ -1,11 +1,11 @@ # services/keycloak/bootstrap-jobs/cassandra-realm-ensure-job.yaml -# One-off job for sso/cassandra-realm-ensure-1. +# One-off job for sso/cassandra-realm-ensure-3. # Purpose: create the Cassandra realm, groups, OIDC client, SMTP settings, and Vault client secret. # Keep suspended until Cassandra Vault paths/policies have reconciled, then unsuspend once. apiVersion: batch/v1 kind: Job metadata: - name: cassandra-realm-ensure-2 + name: cassandra-realm-ensure-3 namespace: sso spec: suspend: false @@ -70,7 +70,7 @@ spec: - name: KEYCLOAK_SMTP_FROM_NAME value: Cassandra - name: CASSANDRA_PUBLIC_REPLAY_USERS - value: veles-dev,cassandra-dev,daniel-test,viktor-test + value: veles-dev,daniel-test,viktor-test command: ["/bin/sh", "-c"] args: - | @@ -260,15 +260,35 @@ spec: if status not in (200, 204): raise SystemExit(f"User group update failed for {username}: status={status} body={body}") - ensure_group("alpha") + alpha_group = ensure_group("alpha") ensure_group("admin") - ensure_group(os.environ["CASSANDRA_TESTER_GROUP"]) + tester_group = ensure_group(os.environ["CASSANDRA_TESTER_GROUP"]) public_replay_group = ensure_group("public-replay") + pilot_groups = { + "pilot-skill-proficient": ensure_group("pilot-skill-proficient"), + "pilot-skill-adept": ensure_group("pilot-skill-adept"), + "pilot-skill-veteran": ensure_group("pilot-skill-veteran"), + "pilot-skill-expert": ensure_group("pilot-skill-expert"), + "pilot-skill-master": ensure_group("pilot-skill-master"), + "all-pilot-skill-level": ensure_group("all-pilot-skill-level"), + "codex-cli-fallback": ensure_group("codex-cli-fallback"), + } for username in os.environ.get("CASSANDRA_PUBLIC_REPLAY_USERS", "").split(","): username = username.strip() if username: ensure_user_group(username, public_replay_group) + ensure_user_group("veles-dev", tester_group) + ensure_user_group("veles-dev", pilot_groups["all-pilot-skill-level"]) + ensure_user_group("veles-dev", pilot_groups["codex-cli-fallback"]) + for username in ("daniel-test", "viktor-test"): + ensure_user_group(username, alpha_group) + ensure_user_group(username, tester_group) + ensure_user_group(username, pilot_groups["pilot-skill-proficient"]) + ensure_user_group(username, pilot_groups["pilot-skill-adept"]) + ensure_user_group(username, pilot_groups["pilot-skill-veteran"]) + ensure_user_group(username, pilot_groups["codex-cli-fallback"]) + status, clients = request( "GET", f"{base_url}/admin/realms/{realm}/clients?clientId={urllib.parse.quote(client_id)}", From e1c18f7ae21e488725c064a31eb5efb1f5d7283e Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 25 Jul 2026 02:14:02 -0300 Subject: [PATCH 058/991] chore(cassandra): park migration oneoffs --- .../bootstrap-jobs/cassandra-ldap-federation-job.yaml | 6 +++--- .../bootstrap-jobs/cassandra-realm-ensure-job.yaml | 6 +++--- .../cassandra/migration-jobs/artifact-permissions-job.yaml | 4 ++-- 3 files changed, 8 insertions(+), 8 deletions(-) diff --git a/services/cassandra-auth/bootstrap-jobs/cassandra-ldap-federation-job.yaml b/services/cassandra-auth/bootstrap-jobs/cassandra-ldap-federation-job.yaml index 1590a7a7..c2896d7a 100644 --- a/services/cassandra-auth/bootstrap-jobs/cassandra-ldap-federation-job.yaml +++ b/services/cassandra-auth/bootstrap-jobs/cassandra-ldap-federation-job.yaml @@ -1,15 +1,15 @@ # services/cassandra-auth/bootstrap-jobs/cassandra-ldap-federation-job.yaml -# One-off job for sso/cassandra-ldap-federation-2. +# One-off job for sso/cassandra-ldap-federation-3. # Purpose: attach the Cassandra Keycloak realm to the shared OpenLDAP directory. # Run unsuspended for migration, then suspend/replace with a new job name for future runs. apiVersion: batch/v1 kind: Job metadata: - name: cassandra-ldap-federation-2 + name: cassandra-ldap-federation-3 namespace: sso spec: ttlSecondsAfterFinished: 3600 - suspend: false + suspend: true backoffLimit: 2 template: metadata: diff --git a/services/cassandra-auth/bootstrap-jobs/cassandra-realm-ensure-job.yaml b/services/cassandra-auth/bootstrap-jobs/cassandra-realm-ensure-job.yaml index ea8a1126..d359c434 100644 --- a/services/cassandra-auth/bootstrap-jobs/cassandra-realm-ensure-job.yaml +++ b/services/cassandra-auth/bootstrap-jobs/cassandra-realm-ensure-job.yaml @@ -1,14 +1,14 @@ # services/keycloak/bootstrap-jobs/cassandra-realm-ensure-job.yaml -# One-off job for sso/cassandra-realm-ensure-3. +# One-off job for sso/cassandra-realm-ensure-4. # Purpose: create the Cassandra realm, groups, OIDC client, SMTP settings, and Vault client secret. # Keep suspended until Cassandra Vault paths/policies have reconciled, then unsuspend once. apiVersion: batch/v1 kind: Job metadata: - name: cassandra-realm-ensure-3 + name: cassandra-realm-ensure-4 namespace: sso spec: - suspend: false + suspend: true backoffLimit: 0 ttlSecondsAfterFinished: 3600 template: diff --git a/services/cassandra/migration-jobs/artifact-permissions-job.yaml b/services/cassandra/migration-jobs/artifact-permissions-job.yaml index fd7fda72..6da4f715 100644 --- a/services/cassandra/migration-jobs/artifact-permissions-job.yaml +++ b/services/cassandra/migration-jobs/artifact-permissions-job.yaml @@ -3,10 +3,10 @@ apiVersion: batch/v1 kind: Job metadata: - name: cassandra-artifact-permissions-1 + name: cassandra-artifact-permissions-2 namespace: cassandra spec: - suspend: false + suspend: true backoffLimit: 0 ttlSecondsAfterFinished: 86400 template: From ebcb56eb44c99d9323f43c8206558cd19e2142c5 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 25 Jul 2026 05:15:47 +0000 Subject: [PATCH 059/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 750b8400..c1ffbcd7 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-360 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-361 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-248-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From dc76ad93d328d88bea562d4fa77868da310c4169 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 25 Jul 2026 02:28:56 -0300 Subject: [PATCH 060/991] fix(maintenance): sweep simulation node images --- services/maintenance/node-image-sweeper-daemonset.yaml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/services/maintenance/node-image-sweeper-daemonset.yaml b/services/maintenance/node-image-sweeper-daemonset.yaml index 9dc65f5b..2fdca51e 100644 --- a/services/maintenance/node-image-sweeper-daemonset.yaml +++ b/services/maintenance/node-image-sweeper-daemonset.yaml @@ -25,6 +25,14 @@ spec: - key: node-role.kubernetes.io/master operator: Exists effect: NoSchedule + - key: veles.bstein.dev/simulation + operator: Equal + value: "true" + effect: NoSchedule + - key: cassandra.bstein.dev/simulation + operator: Equal + value: "true" + effect: NoSchedule nodeSelector: kubernetes.io/os: linux containers: From 0b38388831426899c4206e02d072ff64f7e774da Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 25 Jul 2026 03:05:19 -0300 Subject: [PATCH 061/991] chore(cassandra): deploy 0.7.67 builder spine --- services/cassandra/backend-deployment.yaml | 6 +++--- services/cassandra/configmap.yaml | 6 +++--- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 5 files changed, 10 insertions(+), 10 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 927673c4..c0339570 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-25-0.7.66-schema-init" + cassandra.bstein.dev/redeploy: "2026-07-25-0.7.67-builder-spine" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" @@ -63,7 +63,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.7.66 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.7.67 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -85,7 +85,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.7.66 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.7.67 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 8ce36874..b456b3b6 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -18,9 +18,9 @@ data: CASSANDRA_OIDC_REQUIRED_GROUPS: alpha,cassandra-tester,admin CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.7.66 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.7.66" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.7.66" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.7.67 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.7.67" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.7.67" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index cc551d37..cc5a8775 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.7.66 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.7.67 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index affe6175..29b2c0c0 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -17,7 +17,7 @@ spec: labels: app: cassandra-generator-worker annotations: - cassandra.bstein.dev/redeploy: "2026-07-25-0.7.66-schema-init" + cassandra.bstein.dev/redeploy: "2026-07-25-0.7.67-builder-spine" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" @@ -55,7 +55,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.7.66 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.7.67 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index e4c3ee61..1bfbd804 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.7.66 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.7.67 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From bfabbd42e5ffb3d7f12adb0a845151768cdf6936 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 25 Jul 2026 04:03:49 -0300 Subject: [PATCH 062/991] chore(cassandra): deploy owner alias hotfix --- services/cassandra/backend-deployment.yaml | 6 +++--- services/cassandra/configmap.yaml | 1 + services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- services/veles/ingress.yaml | 1 + services/veles/kustomization.yaml | 1 + services/veles/redirect-middleware.yaml | 11 +++++++++++ 7 files changed, 19 insertions(+), 5 deletions(-) create mode 100644 services/veles/redirect-middleware.yaml diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index c0339570..d0d6fa7f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-25-0.7.67-builder-spine" + cassandra.bstein.dev/redeploy: "2026-07-25-0.7.68-owner-alias" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" @@ -63,7 +63,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.7.67 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.7.68 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -85,7 +85,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.7.67 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.7.68 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index b456b3b6..c4da7552 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -18,6 +18,7 @@ data: CASSANDRA_OIDC_REQUIRED_GROUPS: alpha,cassandra-tester,admin CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra + CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.7.67 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.7.67" CASSANDRA_GENERATOR_WORKER_VERSION: "0.7.67" diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index cc5a8775..13092eb6 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.7.67 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.7.68 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 1bfbd804..19fd9cc6 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.7.67 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.7.68 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] diff --git a/services/veles/ingress.yaml b/services/veles/ingress.yaml index ae2597f7..2cfa2ab6 100644 --- a/services/veles/ingress.yaml +++ b/services/veles/ingress.yaml @@ -7,6 +7,7 @@ metadata: annotations: cert-manager.io/cluster-issuer: letsencrypt traefik.ingress.kubernetes.io/router.entrypoints: websecure + traefik.ingress.kubernetes.io/router.middlewares: veles-veles-to-cassandra-redirect@kubernetescrd traefik.ingress.kubernetes.io/router.tls: "true" spec: ingressClassName: traefik diff --git a/services/veles/kustomization.yaml b/services/veles/kustomization.yaml index 8aacbd18..f1af10dc 100644 --- a/services/veles/kustomization.yaml +++ b/services/veles/kustomization.yaml @@ -20,6 +20,7 @@ resources: - frontend-deployment.yaml - retention-cronjob.yaml - image.yaml + - redirect-middleware.yaml - ingress.yaml - bootstrap-jobs/veles-secrets-ensure-job.yaml - migration-jobs/cassandra-artifact-export.yaml diff --git a/services/veles/redirect-middleware.yaml b/services/veles/redirect-middleware.yaml new file mode 100644 index 00000000..454ff0e4 --- /dev/null +++ b/services/veles/redirect-middleware.yaml @@ -0,0 +1,11 @@ +# services/veles/redirect-middleware.yaml +apiVersion: traefik.io/v1alpha1 +kind: Middleware +metadata: + name: veles-to-cassandra-redirect + namespace: veles +spec: + redirectRegex: + regex: ^https?://veles\.bstein\.dev(.*) + replacement: https://cassandra.bstein.dev${1} + permanent: true From ff6022de286d087d6020a17437163450a91d5824 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 25 Jul 2026 05:06:06 -0300 Subject: [PATCH 063/991] chore(cassandra): deploy 0.8.0 builder spine --- services/cassandra/backend-deployment.yaml | 6 +++--- services/cassandra/configmap.yaml | 6 +++--- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 5 files changed, 10 insertions(+), 10 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index d0d6fa7f..1fb4923e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-25-0.7.68-owner-alias" + cassandra.bstein.dev/redeploy: "2026-07-25-0.8.0-builder-spine" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" @@ -63,7 +63,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.7.68 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.0 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -85,7 +85,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.7.68 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.0 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index c4da7552..ffe14ba4 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,9 +19,9 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.7.67 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.7.67" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.7.67" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.0 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.0" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.0" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 13092eb6..4d9a2e44 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.7.68 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.0 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index 29b2c0c0..fffb07c6 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -17,7 +17,7 @@ spec: labels: app: cassandra-generator-worker annotations: - cassandra.bstein.dev/redeploy: "2026-07-25-0.7.67-builder-spine" + cassandra.bstein.dev/redeploy: "2026-07-25-0.8.0-builder-spine" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" @@ -55,7 +55,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.7.67 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.0 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 19fd9cc6..3042d7a6 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.7.68 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.0 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From fdc18c45929b5b7c6e341c7c27ff254655547cf3 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 25 Jul 2026 05:24:34 -0300 Subject: [PATCH 064/991] chore(cassandra): deploy 0.8.1 auth refresh --- services/cassandra/backend-deployment.yaml | 6 +++--- services/cassandra/configmap.yaml | 6 +++--- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 5 files changed, 10 insertions(+), 10 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 1fb4923e..6d41d590 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-25-0.8.0-builder-spine" + cassandra.bstein.dev/redeploy: "2026-07-25-0.8.1-auth-refresh" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" @@ -63,7 +63,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.0 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.1 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -85,7 +85,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.0 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.1 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index ffe14ba4..ff1c3396 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,9 +19,9 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.0 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.0" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.0" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.1 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.1" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.1" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 4d9a2e44..7876d2f2 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.0 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.1 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index fffb07c6..da9ac8f6 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -17,7 +17,7 @@ spec: labels: app: cassandra-generator-worker annotations: - cassandra.bstein.dev/redeploy: "2026-07-25-0.8.0-builder-spine" + cassandra.bstein.dev/redeploy: "2026-07-25-0.8.1-auth-refresh" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" @@ -55,7 +55,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.0 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.1 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 3042d7a6..0cb0bb13 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.0 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.1 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From f169ddea4e0ff9f3517b421ecffe1b9a3517d9dd Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 25 Jul 2026 05:59:03 -0300 Subject: [PATCH 065/991] chore(cassandra): deploy 0.8.2 builder spine --- services/cassandra/backend-deployment.yaml | 6 +++--- services/cassandra/configmap.yaml | 6 +++--- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 5 files changed, 10 insertions(+), 10 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 6d41d590..6d2a496f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-25-0.8.1-auth-refresh" + cassandra.bstein.dev/redeploy: "2026-07-25-0.8.2-builder-spine" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" @@ -63,7 +63,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.1 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.2 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -85,7 +85,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.1 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.2 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index ff1c3396..fab8e9ef 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,9 +19,9 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.1 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.1" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.1" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.2 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.2" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.2" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 7876d2f2..b6e31914 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.1 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.2 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index da9ac8f6..e5e1b73c 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -17,7 +17,7 @@ spec: labels: app: cassandra-generator-worker annotations: - cassandra.bstein.dev/redeploy: "2026-07-25-0.8.1-auth-refresh" + cassandra.bstein.dev/redeploy: "2026-07-25-0.8.2-builder-spine" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" @@ -55,7 +55,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.1 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.2 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 0cb0bb13..33424841 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.1 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.2 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From ee7800195a5b692e2c1d98996769494575aed0f4 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 25 Jul 2026 09:36:15 +0000 Subject: [PATCH 066/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 43f36a0a..5b27ae9f 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -22,7 +22,7 @@ images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend newTag: 0.1.1-418 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend - newTag: 0.1.1-418 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} + newTag: 0.1.1-419 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: - name: chat-ai-gateway namespace: bstein-dev-home From 5e02b4d42df07e0a6b4d1a8d36fd923051670c8c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 25 Jul 2026 09:36:19 +0000 Subject: [PATCH 067/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 5b27ae9f..4b51d2aa 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -20,7 +20,7 @@ resources: - ingress.yaml images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend - newTag: 0.1.1-418 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} + newTag: 0.1.1-419 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend newTag: 0.1.1-419 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: From a666c6c0adced9437f9e3c384abd26874027e2d8 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 25 Jul 2026 08:16:35 -0300 Subject: [PATCH 068/991] Preserve Cassandra legacy BYOK during cutover --- services/cassandra/backend-deployment.yaml | 3 +++ .../cassandra-secrets-ensure-job.yaml | 15 ++++++++++++++- services/cassandra/generator-deployment.yaml | 3 +++ services/cassandra/secretproviderclass.yaml | 5 +++++ .../vault/scripts/vault_k8s_auth_configure.sh | 2 +- 5 files changed, 26 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 6d2a496f..2263b409 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -44,6 +44,9 @@ spec: {{- with secret "kv/data/atlas/cassandra/app-secrets" }} export CASSANDRA_SESSION_SECRET="{{ .Data.data.CASSANDRA_SESSION_SECRET }}" export CASSANDRA_BYOK_ENCRYPTION_KEY="{{ .Data.data.CASSANDRA_BYOK_ENCRYPTION_KEY }}" + {{- if .Data.data.VELES_BYOK_ENCRYPTION_KEY }} + export VELES_BYOK_ENCRYPTION_KEY="{{ .Data.data.VELES_BYOK_ENCRYPTION_KEY }}" + {{- end }} {{- end }} spec: serviceAccountName: cassandra-backend diff --git a/services/cassandra/bootstrap-jobs/cassandra-secrets-ensure-job.yaml b/services/cassandra/bootstrap-jobs/cassandra-secrets-ensure-job.yaml index 60b1e5df..29f52a73 100644 --- a/services/cassandra/bootstrap-jobs/cassandra-secrets-ensure-job.yaml +++ b/services/cassandra/bootstrap-jobs/cassandra-secrets-ensure-job.yaml @@ -103,14 +103,25 @@ spec: if [ "${status}" = "200" ]; then session_secret="$(jq -r '.data.data.CASSANDRA_SESSION_SECRET // empty' /tmp/app-secrets.json)" byok_key="$(jq -r '.data.data.CASSANDRA_BYOK_ENCRYPTION_KEY // empty' /tmp/app-secrets.json)" + legacy_byok_key="$(jq -r '.data.data.VELES_BYOK_ENCRYPTION_KEY // empty' /tmp/app-secrets.json)" elif [ "${status}" = "404" ]; then session_secret="" byok_key="" + legacy_byok_key="" else echo "Vault read failed for app-secrets (status ${status})" >&2 cat /tmp/app-secrets.json >&2 || true exit 1 fi + if [ -z "${legacy_byok_key}" ]; then + legacy_status="$(read_secret veles/app-secrets /tmp/veles-app-secrets.json)" + if [ "${legacy_status}" = "200" ]; then + legacy_byok_key="$(jq -r '.data.data.VELES_BYOK_ENCRYPTION_KEY // empty' /tmp/veles-app-secrets.json)" + elif [ "${legacy_status}" != "404" ]; then + echo "Vault read failed for veles/app-secrets (status ${legacy_status})" >&2 + exit 1 + fi + fi if [ -z "${session_secret}" ]; then session_secret="$(rand_b64 48)" fi @@ -120,7 +131,9 @@ spec: app_payload="$(jq -nc \ --arg session_secret "${session_secret}" \ --arg byok_key "${byok_key}" \ - '{data:{CASSANDRA_SESSION_SECRET:$session_secret,CASSANDRA_BYOK_ENCRYPTION_KEY:$byok_key}}')" + --arg legacy_byok_key "${legacy_byok_key}" \ + '{data:({CASSANDRA_SESSION_SECRET:$session_secret,CASSANDRA_BYOK_ENCRYPTION_KEY:$byok_key} + + (if $legacy_byok_key != "" then {VELES_BYOK_ENCRYPTION_KEY:$legacy_byok_key} else {} end))}')" write_secret cassandra/app-secrets "${app_payload}" postmark_status="$(read_secret shared/postmark-relay /tmp/postmark.json)" diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index e5e1b73c..35632354 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -36,6 +36,9 @@ spec: {{- with secret "kv/data/atlas/cassandra/app-secrets" }} export CASSANDRA_SESSION_SECRET="{{ .Data.data.CASSANDRA_SESSION_SECRET }}" export CASSANDRA_BYOK_ENCRYPTION_KEY="{{ .Data.data.CASSANDRA_BYOK_ENCRYPTION_KEY }}" + {{- if .Data.data.VELES_BYOK_ENCRYPTION_KEY }} + export VELES_BYOK_ENCRYPTION_KEY="{{ .Data.data.VELES_BYOK_ENCRYPTION_KEY }}" + {{- end }} {{- end }} spec: serviceAccountName: cassandra-generator diff --git a/services/cassandra/secretproviderclass.yaml b/services/cassandra/secretproviderclass.yaml index b3a2db7b..a1a0f483 100644 --- a/services/cassandra/secretproviderclass.yaml +++ b/services/cassandra/secretproviderclass.yaml @@ -31,6 +31,9 @@ spec: - objectName: "cassandra-app__byok-encryption-key" secretPath: "kv/data/atlas/cassandra/app-secrets" secretKey: "CASSANDRA_BYOK_ENCRYPTION_KEY" + - objectName: "cassandra-app__legacy-byok-encryption-key" + secretPath: "kv/data/atlas/cassandra/app-secrets" + secretKey: "VELES_BYOK_ENCRYPTION_KEY" secretObjects: - secretName: harbor-regcred type: kubernetes.io/dockerconfigjson @@ -52,6 +55,8 @@ spec: key: CASSANDRA_SESSION_SECRET - objectName: cassandra-app__byok-encryption-key key: CASSANDRA_BYOK_ENCRYPTION_KEY + - objectName: cassandra-app__legacy-byok-encryption-key + key: VELES_BYOK_ENCRYPTION_KEY --- apiVersion: secrets-store.csi.x-k8s.io/v1 kind: SecretProviderClass diff --git a/services/vault/scripts/vault_k8s_auth_configure.sh b/services/vault/scripts/vault_k8s_auth_configure.sh index 770b628d..d0876b6e 100644 --- a/services/vault/scripts/vault_k8s_auth_configure.sh +++ b/services/vault/scripts/vault_k8s_auth_configure.sh @@ -265,7 +265,7 @@ write_policy_and_role "cassandra" "cassandra" "cassandra-backend,cassandra-gener write_policy_and_role "cassandra-sim" "cassandra" "cassandra-sim" \ "cassandra/codex-cli" "" write_policy_and_role "cassandra-secrets" "cassandra" "cassandra-secrets-ensure" \ - "shared/postmark-relay" \ + "shared/postmark-relay veles/app-secrets" \ "cassandra/*" write_policy_and_role "cassandra-migration" "cassandra" "cassandra-db-migration" \ "veles/veles-db cassandra/cassandra-db" "" From c1b9e0a5fd4a841dcfa6c6006f6e4f0ab5025b83 Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Sat, 25 Jul 2026 08:21:52 -0300 Subject: [PATCH 069/991] Pin Cassandra cutover deployment to 0.8.5 --- services/cassandra/backend-deployment.yaml | 4 ++-- .../bootstrap-jobs/cassandra-secrets-ensure-job.yaml | 2 +- services/cassandra/configmap.yaml | 6 +++--- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 6 files changed, 9 insertions(+), 9 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 2263b409..ee3b1d8c 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.2 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.5 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.2 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.5 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/bootstrap-jobs/cassandra-secrets-ensure-job.yaml b/services/cassandra/bootstrap-jobs/cassandra-secrets-ensure-job.yaml index 29f52a73..7c4b3f06 100644 --- a/services/cassandra/bootstrap-jobs/cassandra-secrets-ensure-job.yaml +++ b/services/cassandra/bootstrap-jobs/cassandra-secrets-ensure-job.yaml @@ -5,7 +5,7 @@ apiVersion: batch/v1 kind: Job metadata: - name: cassandra-secrets-ensure-2 + name: cassandra-secrets-ensure-3 namespace: cassandra spec: suspend: true diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index fab8e9ef..4a0e42b7 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,9 +19,9 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.2 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.2" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.2" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.5 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.5" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.5" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index b6e31914..511d2bac 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.2 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.5 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index 35632354..faf59fdb 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.2 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.5 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 33424841..ccd57c09 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.2 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.5 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 165f80fb05dd94626aeb97e238635056b30d3875 Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Sat, 25 Jul 2026 09:03:03 -0300 Subject: [PATCH 070/991] Deploy Cassandra 0.8.6 --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/configmap.yaml | 6 +++--- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index ee3b1d8c..b3ebd5b6 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.5 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.6 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.5 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.6 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 4a0e42b7..25d148d0 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,9 +19,9 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.5 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.5" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.5" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.6 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.6" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.6" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 511d2bac..4d9bee65 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.5 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.6 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index faf59fdb..6bd65ffa 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.5 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.6 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index ccd57c09..20eea3e5 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.5 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.6 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 2b37f490dc8fd73e9b4c85383705fdcd91c48f74 Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Sat, 25 Jul 2026 09:19:32 -0300 Subject: [PATCH 071/991] Deploy Cassandra 0.8.7 --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/configmap.yaml | 6 +++--- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index b3ebd5b6..c379530e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.6 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.7 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.6 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.7 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 25d148d0..e0df64fb 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,9 +19,9 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.6 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.6" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.6" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.7 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.7" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.7" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 4d9bee65..c04bd273 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.6 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.7 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index 6bd65ffa..753685f5 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.6 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.7 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 20eea3e5..929dcb44 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.6 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.7 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From c54dd77a0c7432b40ad7034ef1549bc344d52003 Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Sat, 25 Jul 2026 09:38:43 -0300 Subject: [PATCH 072/991] Deploy Cassandra 0.8.8 --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/configmap.yaml | 6 +++--- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index c379530e..aeab35a7 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.7 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.8 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.7 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.8 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index e0df64fb..fb4e9161 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,9 +19,9 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.7 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.7" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.7" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.8 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.8" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.8" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index c04bd273..7c9d3ddc 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.7 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.8 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index 753685f5..fedd846e 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.7 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.8 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 929dcb44..4c2fe1a9 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.7 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.8 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 31bce0d4f709619c4d768712445f8c8876cf8a47 Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Sat, 25 Jul 2026 09:57:43 -0300 Subject: [PATCH 073/991] Deploy Cassandra 0.8.9 --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/configmap.yaml | 6 +++--- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index aeab35a7..20c54a03 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.8 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.9 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.8 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.9 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index fb4e9161..322a3ee4 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,9 +19,9 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.8 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.8" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.8" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.9 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.9" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.9" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 7c9d3ddc..8b428c88 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.8 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.9 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index fedd846e..a634da2a 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.8 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.9 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 4c2fe1a9..251dd3be 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.8 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.9 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 17d1b50b6577b422a39461f3de021675e5c35322 Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Sat, 25 Jul 2026 10:22:21 -0300 Subject: [PATCH 074/991] Deploy Cassandra 0.8.10 --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/configmap.yaml | 6 +++--- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 20c54a03..d4144b16 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.9 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.10 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.9 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.10 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 322a3ee4..a3d4b8d6 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,9 +19,9 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.9 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.9" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.9" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.10 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.10" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.10" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 8b428c88..9582e257 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.9 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.10 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index a634da2a..b4c397e5 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.9 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.10 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 251dd3be..3a19a957 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.9 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.10 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 0beb81442d6a7cff54c98a4357313d9a10a763f1 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 25 Jul 2026 13:38:46 +0000 Subject: [PATCH 075/991] chore(maintenance): automated image update --- services/maintenance/metis-configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 77b9592b..0efd611b 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -15,7 +15,7 @@ data: METIS_MAX_DEVICE_BYTES: "1000000000000" METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" - METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-248-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} + METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-249-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-248-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis From bc75122a84d4b1320478f52ee307cdd9d5bfedb6 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 25 Jul 2026 13:40:46 +0000 Subject: [PATCH 076/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-amd64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-amd64-daemonset.yaml b/services/maintenance/metis-sentinel-amd64-daemonset.yaml index 50d0e89a..0d5284e8 100644 --- a/services/maintenance/metis-sentinel-amd64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-amd64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: amd64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-248-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-249-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} imagePullPolicy: Always envFrom: - configMapRef: From a27bf791513e276641ce2bf04b8f14544a536d73 Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Sat, 25 Jul 2026 10:45:39 -0300 Subject: [PATCH 077/991] Deploy Cassandra 0.8.11 --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/configmap.yaml | 6 +++--- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index d4144b16..09a336e0 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.10 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.11 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.10 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.11 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index a3d4b8d6..83465fed 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,9 +19,9 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.10 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.10" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.10" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.11 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.11" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.11" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 9582e257..6b2ff1f6 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.10 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.11 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index b4c397e5..25032ce5 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.10 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.11 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 3a19a957..b51e4054 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.10 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.11 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 6f988ef90098096638cf6ee9b89410fcea358f2b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 25 Jul 2026 13:45:57 +0000 Subject: [PATCH 078/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- services/maintenance/metis-configmap.yaml | 2 +- services/maintenance/metis-sentinel-arm64-daemonset.yaml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index c1ffbcd7..26a96975 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -54,7 +54,7 @@ images: - name: registry.bstein.dev/bstein/ariadne newTag: 0.1.0-361 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis - newTag: 0.1.0-248-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} + newTag: 0.1.0-249-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria newTag: 0.1.0-120 # {"$imagepolicy": "maintenance:soteria:tag"} configMapGenerator: diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 0efd611b..5424a97f 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -16,7 +16,7 @@ data: METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-249-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} - METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-248-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} + METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-249-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0 diff --git a/services/maintenance/metis-sentinel-arm64-daemonset.yaml b/services/maintenance/metis-sentinel-arm64-daemonset.yaml index 198c8fdc..4c9ccd5d 100644 --- a/services/maintenance/metis-sentinel-arm64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-arm64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: arm64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-248-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-249-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} imagePullPolicy: Always envFrom: - configMapRef: From 4140df91c3180df5104eaf69860fc344b05c82b0 Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Sat, 25 Jul 2026 10:50:58 -0300 Subject: [PATCH 079/991] Alias Cassandra realm user to preserved Veles owner --- services/cassandra/configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 83465fed..2fcb0193 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -18,7 +18,7 @@ data: CASSANDRA_OIDC_REQUIRED_GROUPS: alpha,cassandra-tester,admin CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra - CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6 + CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.11 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.11" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.11" From 23814cb884f529f2b90ef4ae3b9ec2c1f414cb74 Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Sat, 25 Jul 2026 11:11:21 -0300 Subject: [PATCH 080/991] Deploy Cassandra 0.8.12 --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/configmap.yaml | 6 +++--- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 09a336e0..ae00cd70 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.11 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.12 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.11 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.12 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 2fcb0193..e77b297f 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,9 +19,9 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.11 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.11" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.11" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.12 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.12" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.12" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 6b2ff1f6..8642bba1 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.11 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.12 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index 25032ce5..72c6d3ef 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.11 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.12 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index b51e4054..2222bc06 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.11 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.12 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 9708ebff77fe59bf2e012510ae5da31733d1e97f Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Sat, 25 Jul 2026 11:43:10 -0300 Subject: [PATCH 081/991] Deploy Cassandra 0.8.13 --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/configmap.yaml | 6 +++--- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index ae00cd70..f290663b 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.12 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.13 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.12 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.13 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index e77b297f..f4c3de3c 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,9 +19,9 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.12 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.12" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.12" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.13 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.13" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.13" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 8642bba1..13c44c78 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.12 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.13 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index 72c6d3ef..dab09e33 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.12 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.13 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 2222bc06..b24989ac 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.12 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.13 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 2d5f8550d84029300a7b0be84a21e03a1ef0d22e Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Sat, 25 Jul 2026 12:10:15 -0300 Subject: [PATCH 082/991] Deploy Cassandra 0.8.14 --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/configmap.yaml | 6 +++--- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index f290663b..d8d3c50a 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.13 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.14 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.13 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.14 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index f4c3de3c..4d904b01 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,9 +19,9 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.13 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.13" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.13" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.14 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.14" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.14" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 13c44c78..5d4f09ee 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.13 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.14 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index dab09e33..9a6b134d 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.13 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.14 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index b24989ac..7d58be1d 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.13 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.14 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From df4cf6af3d5ac49089124bbfa935e6ecb50acd8c Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Sat, 25 Jul 2026 12:31:10 -0300 Subject: [PATCH 083/991] Deploy Cassandra 0.8.15 --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/configmap.yaml | 6 +++--- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index d8d3c50a..f81cb51e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.14 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.15 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.14 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.15 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 4d904b01..80c5dfd9 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,9 +19,9 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.14 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.14" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.14" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.15 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.15" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.15" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 5d4f09ee..622dd397 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.14 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.15 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index 9a6b134d..63ac9731 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.14 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.15 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 7d58be1d..456561d2 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.14 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.15 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 5e84e0b2cad5a15bff99f48a8c848f0f6c04680c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 25 Jul 2026 17:14:47 +0000 Subject: [PATCH 084/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 26a96975..d557cb59 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-361 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-362 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-249-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From ea699166b432bdcbc27bd78ee25260687ccbc947 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 25 Jul 2026 21:35:45 +0000 Subject: [PATCH 085/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 4b51d2aa..d8157feb 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -20,7 +20,7 @@ resources: - ingress.yaml images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend - newTag: 0.1.1-419 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} + newTag: 0.1.1-420 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend newTag: 0.1.1-419 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: From 366f700ab344d1db2de8d70ecc794f2944bee10e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 25 Jul 2026 21:36:38 +0000 Subject: [PATCH 086/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index d8157feb..ad8fa5a8 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -22,7 +22,7 @@ images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend newTag: 0.1.1-420 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend - newTag: 0.1.1-419 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} + newTag: 0.1.1-420 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: - name: chat-ai-gateway namespace: bstein-dev-home From 4f43513af7caf508da4bdf0d6dad5eadabde2f7f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 26 Jul 2026 01:37:12 +0000 Subject: [PATCH 087/991] chore(maintenance): automated image update --- services/maintenance/metis-configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 5424a97f..b9830769 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -15,7 +15,7 @@ data: METIS_MAX_DEVICE_BYTES: "1000000000000" METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" - METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-249-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} + METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-250-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-249-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis From 066adbad1d022cceba742fa85092b7aec7f6b8a0 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 26 Jul 2026 01:40:11 +0000 Subject: [PATCH 088/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-amd64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-amd64-daemonset.yaml b/services/maintenance/metis-sentinel-amd64-daemonset.yaml index 0d5284e8..800aa7ff 100644 --- a/services/maintenance/metis-sentinel-amd64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-amd64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: amd64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-249-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-250-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} imagePullPolicy: Always envFrom: - configMapRef: From fd18d803d95398ae897ad1924feeadcf2eea1b08 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 26 Jul 2026 01:44:14 +0000 Subject: [PATCH 089/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- services/maintenance/metis-configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index d557cb59..9f6094f8 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -54,7 +54,7 @@ images: - name: registry.bstein.dev/bstein/ariadne newTag: 0.1.0-362 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis - newTag: 0.1.0-249-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} + newTag: 0.1.0-250-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria newTag: 0.1.0-120 # {"$imagepolicy": "maintenance:soteria:tag"} configMapGenerator: diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index b9830769..c2789349 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -16,7 +16,7 @@ data: METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-250-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} - METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-249-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} + METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-250-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0 From f536ae358d1ce69485a62f511c1e9c2d15819ad9 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 26 Jul 2026 01:45:13 +0000 Subject: [PATCH 090/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-arm64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-arm64-daemonset.yaml b/services/maintenance/metis-sentinel-arm64-daemonset.yaml index 4c9ccd5d..69f4c8f3 100644 --- a/services/maintenance/metis-sentinel-arm64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-arm64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: arm64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-249-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-250-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} imagePullPolicy: Always envFrom: - configMapRef: From efde2a4fcbeeb553082ee3091e43b7def751ec54 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 26 Jul 2026 05:14:52 +0000 Subject: [PATCH 091/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 9f6094f8..7a853ccc 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-362 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-363 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-250-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From 01f0268ea6bdb00731ae17e395b0ade97a19df2c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 26 Jul 2026 09:56:54 +0000 Subject: [PATCH 092/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index ad8fa5a8..16390e9b 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -20,7 +20,7 @@ resources: - ingress.yaml images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend - newTag: 0.1.1-420 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} + newTag: 0.1.1-421 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend newTag: 0.1.1-420 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: From 1af91f07506b45379f360ffb61ae9bdc7b0d7bed Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 26 Jul 2026 09:58:54 +0000 Subject: [PATCH 093/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 16390e9b..1fb1c4f3 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -22,7 +22,7 @@ images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend newTag: 0.1.1-421 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend - newTag: 0.1.1-420 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} + newTag: 0.1.1-421 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: - name: chat-ai-gateway namespace: bstein-dev-home From f038e7c67530df391fdb315bf05762f5a2c90746 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 26 Jul 2026 08:03:14 -0300 Subject: [PATCH 094/991] chore(cassandra): deploy 0.8.16 --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/configmap.yaml | 6 +++--- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index f81cb51e..a637684b 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.15 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.16 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.15 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.16 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 80c5dfd9..193e1645 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,9 +19,9 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.15 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.15" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.15" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.16 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.16" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.16" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 622dd397..069ec28f 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.15 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.16 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index 63ac9731..e679ab8b 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.15 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.16 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 456561d2..31f0a0bf 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.15 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.16 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 16ee73d5407a4aa5c26b7c6dca537a499020b5c7 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 26 Jul 2026 09:18:13 -0300 Subject: [PATCH 095/991] chore(cassandra): deploy 0.8.17 --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/configmap.yaml | 6 +++--- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index a637684b..f60fd3d4 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.16 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.17 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.16 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.17 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 193e1645..947a7171 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,9 +19,9 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.16 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.16" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.16" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.17 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.17" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.17" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 069ec28f..111a162a 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.16 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.17 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index e679ab8b..21d63006 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.16 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.17 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 31f0a0bf..d290ecce 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.16 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.17 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From c4a8887f75463cde0fdd6480c4f22d42c80b2156 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 26 Jul 2026 13:38:15 +0000 Subject: [PATCH 096/991] chore(maintenance): automated image update --- services/maintenance/metis-configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index c2789349..0716a559 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -15,7 +15,7 @@ data: METIS_MAX_DEVICE_BYTES: "1000000000000" METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" - METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-250-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} + METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-251-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-250-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis From a585bdb4e939c4bb2f3c77e3b18f1972b9eaeaca Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 26 Jul 2026 13:39:56 +0000 Subject: [PATCH 097/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-amd64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-amd64-daemonset.yaml b/services/maintenance/metis-sentinel-amd64-daemonset.yaml index 800aa7ff..4673be69 100644 --- a/services/maintenance/metis-sentinel-amd64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-amd64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: amd64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-250-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-251-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} imagePullPolicy: Always envFrom: - configMapRef: From 8364492836688de8131e59d49a6ff9a34182ac3f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 26 Jul 2026 13:44:16 +0000 Subject: [PATCH 098/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- services/maintenance/metis-configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 7a853ccc..d6c502a8 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -54,7 +54,7 @@ images: - name: registry.bstein.dev/bstein/ariadne newTag: 0.1.0-363 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis - newTag: 0.1.0-250-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} + newTag: 0.1.0-251-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria newTag: 0.1.0-120 # {"$imagepolicy": "maintenance:soteria:tag"} configMapGenerator: diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 0716a559..a0883913 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -16,7 +16,7 @@ data: METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-251-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} - METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-250-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} + METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-251-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0 From 94031cc0a4ab11e9d0a199cc461cc8c8d2093a25 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 26 Jul 2026 13:44:58 +0000 Subject: [PATCH 099/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-arm64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-arm64-daemonset.yaml b/services/maintenance/metis-sentinel-arm64-daemonset.yaml index 69f4c8f3..1e283936 100644 --- a/services/maintenance/metis-sentinel-arm64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-arm64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: arm64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-250-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-251-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} imagePullPolicy: Always envFrom: - configMapRef: From bbf90b62d559b5d66f68885c3c75ded38bc57563 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 26 Jul 2026 17:14:45 +0000 Subject: [PATCH 100/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index d6c502a8..3c407f46 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-363 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-364 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-251-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From 0371eefa838b8306d1ba057a805583379b8b1fab Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Sun, 26 Jul 2026 17:07:43 -0300 Subject: [PATCH 101/991] Deploy Cassandra 0.8.18 --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/configmap.yaml | 6 +++--- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index f60fd3d4..2a0c63c8 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.17 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.18 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.17 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.18 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 947a7171..eee9bf15 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,9 +19,9 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.17 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.17" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.17" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.18 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.18" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.18" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 111a162a..dfebd421 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.17 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.18 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index 21d63006..6a5b3ea1 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.17 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.18 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index d290ecce..2edc7646 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.17 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.18 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 3daae269312f747c60333b9ef296f2a60c1e2e77 Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Sun, 26 Jul 2026 17:25:21 -0300 Subject: [PATCH 102/991] Deploy Cassandra 0.8.19 --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/configmap.yaml | 6 +++--- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 2a0c63c8..d57ac328 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.18 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.19 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.18 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.19 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index eee9bf15..14c19458 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,9 +19,9 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.18 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.18" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.18" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.19 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.19" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.19" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index dfebd421..30c0eccd 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.18 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.19 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index 6a5b3ea1..43ba924e 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.18 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.19 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 2edc7646..47987ce6 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.18 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.19 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From c9c74d7d94813954c85dc5337a31cd7e842ebdeb Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 26 Jul 2026 21:46:00 +0000 Subject: [PATCH 103/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 1fb1c4f3..7960f94c 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -20,7 +20,7 @@ resources: - ingress.yaml images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend - newTag: 0.1.1-421 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} + newTag: 0.1.1-422 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend newTag: 0.1.1-421 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: From 3466788a01c262aca0913e1a3f4e3903e3b60e43 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 26 Jul 2026 21:48:03 +0000 Subject: [PATCH 104/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 7960f94c..7c8b1dac 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -22,7 +22,7 @@ images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend newTag: 0.1.1-422 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend - newTag: 0.1.1-421 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} + newTag: 0.1.1-422 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: - name: chat-ai-gateway namespace: bstein-dev-home From 97ae77ec94be1e66eee9e1abe09e141a27d56c1e Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 26 Jul 2026 19:33:59 -0300 Subject: [PATCH 105/991] Deploy Cassandra 0.8.20 --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/configmap.yaml | 6 +++--- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index d57ac328..a988404a 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.19 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.20 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.19 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.20 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 14c19458..62da3100 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,9 +19,9 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.19 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.19" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.19" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.20 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.20" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.20" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 30c0eccd..41602b2a 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.19 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.20 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index 43ba924e..a0acefe6 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.19 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.20 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 47987ce6..caa1aecd 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.19 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.20 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From c5e1ec7a0ad93ffbb6548aa03f96feff69eaf60e Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 26 Jul 2026 21:49:49 -0300 Subject: [PATCH 106/991] Deploy Cassandra 0.8.21 --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/configmap.yaml | 6 +++--- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index a988404a..f15b5b0c 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.20 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.21 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.20 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.21 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 62da3100..169f73a3 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,9 +19,9 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.20 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.20" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.20" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.21 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.21" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.21" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 41602b2a..17c51a5a 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.20 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.21 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index a0acefe6..01d8d6cf 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.20 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.21 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index caa1aecd..2e24efaa 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.20 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.21 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 161babc748a661cb378c6d39b2679bfeef97363a Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 26 Jul 2026 22:06:21 -0300 Subject: [PATCH 107/991] Deploy Cassandra 0.8.22 --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/configmap.yaml | 6 +++--- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index f15b5b0c..3d6b369f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.21 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.22 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.21 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.22 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 169f73a3..07e39f7b 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,9 +19,9 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.21 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.21" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.21" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.22 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.22" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.22" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 17c51a5a..8d8e0afe 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.21 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.22 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index 01d8d6cf..a37ede6a 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.21 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.22 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 2e24efaa..b82b3489 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.21 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.22 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 3fb459912a6c4e7da8172d5cd7bbf69ff059fcc8 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 26 Jul 2026 22:26:42 -0300 Subject: [PATCH 108/991] Deploy Cassandra 0.8.23 --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/configmap.yaml | 6 +++--- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 3d6b369f..abd7347f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.22 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.23 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.22 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.23 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 07e39f7b..2e488eea 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,9 +19,9 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.22 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.22" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.22" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.23 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.23" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.23" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 8d8e0afe..1c50a4ca 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.22 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.23 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index a37ede6a..3af22f96 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.22 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.23 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index b82b3489..6649995c 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.22 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.23 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From ca62981a86a71a53df642de371bbcc82828344b9 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 01:31:23 +0000 Subject: [PATCH 109/991] chore(maintenance): automated image update --- services/maintenance/metis-configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index a0883913..457a8b96 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -15,7 +15,7 @@ data: METIS_MAX_DEVICE_BYTES: "1000000000000" METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" - METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-251-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} + METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-252-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-251-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis From 09aeeb275831a0b55bf27689f0dfe519589623e5 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 01:33:28 +0000 Subject: [PATCH 110/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-amd64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-amd64-daemonset.yaml b/services/maintenance/metis-sentinel-amd64-daemonset.yaml index 4673be69..2c87fcb7 100644 --- a/services/maintenance/metis-sentinel-amd64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-amd64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: amd64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-251-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-252-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} imagePullPolicy: Always envFrom: - configMapRef: From e28209e700d461fbb0cfe46f8b7cbc0deb2a5863 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 01:35:28 +0000 Subject: [PATCH 111/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- services/maintenance/metis-configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 3c407f46..cf5b2839 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -54,7 +54,7 @@ images: - name: registry.bstein.dev/bstein/ariadne newTag: 0.1.0-364 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis - newTag: 0.1.0-251-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} + newTag: 0.1.0-252-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria newTag: 0.1.0-120 # {"$imagepolicy": "maintenance:soteria:tag"} configMapGenerator: diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 457a8b96..a3f5a6ff 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -16,7 +16,7 @@ data: METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-252-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} - METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-251-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} + METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-252-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0 From 76ad693fc9f0f624c791e38c7c94b0863d3bf971 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 01:35:32 +0000 Subject: [PATCH 112/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-arm64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-arm64-daemonset.yaml b/services/maintenance/metis-sentinel-arm64-daemonset.yaml index 1e283936..fd5e9a9f 100644 --- a/services/maintenance/metis-sentinel-arm64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-arm64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: arm64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-251-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-252-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} imagePullPolicy: Always envFrom: - configMapRef: From 96e8b1079af8f6581afcbb574d343586ac1d0647 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 26 Jul 2026 23:10:56 -0300 Subject: [PATCH 113/991] Deploy Cassandra 0.8.24 --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/configmap.yaml | 6 +++--- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index abd7347f..7c4ebd17 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.23 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.24 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.23 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.24 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 2e488eea..f3058e5d 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,9 +19,9 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.23 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.23" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.23" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.24 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.24" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.24" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 1c50a4ca..aa7905f0 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.23 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.24 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index 3af22f96..11356147 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.23 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.24 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 6649995c..085cc26c 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.23 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.24 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 4a989e924390996856e4e7c1e70a86ec932b9cc9 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 26 Jul 2026 23:14:49 -0300 Subject: [PATCH 114/991] cassandra: run generator worker --- services/cassandra/generator-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index 11356147..24cff866 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -7,7 +7,7 @@ metadata: labels: app: cassandra-generator-worker spec: - replicas: 0 + replicas: 1 revisionHistoryLimit: 2 selector: matchLabels: From 048bc9633634458210ada9a6a9ab3a2cfbd5608d Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 27 Jul 2026 01:08:24 -0300 Subject: [PATCH 115/991] Deploy Cassandra 0.8.25 --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/configmap.yaml | 6 +++--- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 7c4ebd17..533444ea 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.24 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.25 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.24 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.25 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index f3058e5d..6e9736ce 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,9 +19,9 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.24 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.24" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.24" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.25 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.25" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.25" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index aa7905f0..1f36747c 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.24 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.25 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index 24cff866..ff27046d 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.24 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.25 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 085cc26c..abb4a7eb 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.24 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.25 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 418442e7784892aacc056bfe3e23e1bfe2946ac7 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 05:15:45 +0000 Subject: [PATCH 116/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index cf5b2839..58bb6a62 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-364 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-365 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-252-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From af47155a39e35ef5662ff672d6dd81404b98ef96 Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Mon, 27 Jul 2026 02:33:04 -0300 Subject: [PATCH 117/991] Deploy Cassandra 0.8.26 --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/configmap.yaml | 6 +++--- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 533444ea..4ea66a66 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.25 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.26 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.25 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.26 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 6e9736ce..ccdcfc50 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,9 +19,9 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.25 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.25" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.25" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.26 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.26" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.26" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 1f36747c..81fd3c9c 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.25 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.26 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index ff27046d..5166d24e 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.25 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.26 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index abb4a7eb..3c57479e 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.25 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.26 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 657c4fe2529eb59a4d20678a0050db2a1716c567 Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Mon, 27 Jul 2026 02:58:47 -0300 Subject: [PATCH 118/991] Deploy Cassandra 0.8.27 --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/configmap.yaml | 6 +++--- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 4ea66a66..c97bc2bd 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.26 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.27 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.26 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.27 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index ccdcfc50..dd22000d 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,9 +19,9 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.26 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.26" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.26" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.27 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.27" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.27" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 81fd3c9c..b9b2c2ab 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.26 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.27 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index 5166d24e..750f6012 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.26 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.27 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 3c57479e..1dcf41bc 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.26 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.27 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From ced03c3057b9f5be548f6230a8ec7161de011814 Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Mon, 27 Jul 2026 03:22:43 -0300 Subject: [PATCH 119/991] Deploy Cassandra 0.8.28 --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/configmap.yaml | 6 +++--- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index c97bc2bd..1015bf45 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.27 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.28 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.27 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.28 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index dd22000d..e1ae0afe 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,9 +19,9 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.27 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.27" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.27" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.28 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.28" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.28" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index b9b2c2ab..a440e54d 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.27 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.28 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index 750f6012..ae1fe24b 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.27 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.28 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 1dcf41bc..ee0d8723 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.27 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.28 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From e760eb5300b5586b7e7a6b3e97aaedb7a3669f43 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 09:39:04 +0000 Subject: [PATCH 120/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 7c8b1dac..6c2e98e7 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -20,7 +20,7 @@ resources: - ingress.yaml images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend - newTag: 0.1.1-422 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} + newTag: 0.1.1-423 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend newTag: 0.1.1-422 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: From 1a652ae9bb9f916286c774105dfd7ae39a1eb93e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 09:41:04 +0000 Subject: [PATCH 121/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 6c2e98e7..d7dd19c4 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -22,7 +22,7 @@ images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend newTag: 0.1.1-423 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend - newTag: 0.1.1-422 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} + newTag: 0.1.1-423 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: - name: chat-ai-gateway namespace: bstein-dev-home From 5d959dc998fffb9769300c77368eec2d2990ba59 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 13:32:11 +0000 Subject: [PATCH 122/991] chore(maintenance): automated image update --- services/maintenance/metis-configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index a3f5a6ff..7b0024e5 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -15,7 +15,7 @@ data: METIS_MAX_DEVICE_BYTES: "1000000000000" METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" - METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-252-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} + METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-253-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-252-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis From bfe9cd508b0362f6066d3cbf79227edbed5406f3 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 13:35:11 +0000 Subject: [PATCH 123/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-amd64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-amd64-daemonset.yaml b/services/maintenance/metis-sentinel-amd64-daemonset.yaml index 2c87fcb7..d180527a 100644 --- a/services/maintenance/metis-sentinel-amd64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-amd64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: amd64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-252-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-253-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} imagePullPolicy: Always envFrom: - configMapRef: From 259aa68502d9bf7fd27862a2912fb40938eb7bc9 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 13:37:13 +0000 Subject: [PATCH 124/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- services/maintenance/metis-configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 58bb6a62..08bdc6d3 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -54,7 +54,7 @@ images: - name: registry.bstein.dev/bstein/ariadne newTag: 0.1.0-365 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis - newTag: 0.1.0-252-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} + newTag: 0.1.0-253-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria newTag: 0.1.0-120 # {"$imagepolicy": "maintenance:soteria:tag"} configMapGenerator: diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 7b0024e5..6a3161c1 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -16,7 +16,7 @@ data: METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-253-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} - METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-252-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} + METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-253-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0 From 537f1fe78503c42f336f18969a7dc8d07f898d8e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 13:38:13 +0000 Subject: [PATCH 125/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-arm64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-arm64-daemonset.yaml b/services/maintenance/metis-sentinel-arm64-daemonset.yaml index fd5e9a9f..2c01cc41 100644 --- a/services/maintenance/metis-sentinel-arm64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-arm64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: arm64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-252-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-253-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} imagePullPolicy: Always envFrom: - configMapRef: From 083a013921ba063fcd25141bb2bef5f397863f4e Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 27 Jul 2026 12:07:43 -0300 Subject: [PATCH 126/991] Wire Cassandra generator Codex fallback --- services/cassandra/generator-deployment.yaml | 32 ++++++++++++++++++++ services/cassandra/secretproviderclass.yaml | 16 ++++++++++ 2 files changed, 48 insertions(+) diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index ae1fe24b..157eb427 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -71,6 +71,23 @@ spec: envFrom: - configMapRef: name: cassandra-config + env: + - name: CASSANDRA_STRATEGY_SPEC_USE_CODEX + value: "1" + - name: CASSANDRA_STRATEGY_AUTHORING_CODEX_BIN + value: codex + - name: CASSANDRA_STRATEGY_AUTHORING_CODEX_MODEL + value: gpt-5.3-codex-spark + - name: CASSANDRA_STRATEGY_AUTHORING_CODEX_REASONING + value: low + - name: CASSANDRA_STRATEGY_SPEC_TIMEOUT + value: "900" + - name: CASSANDRA_CODEX_CLI_AUTH_MOUNT_PATH + value: /var/run/cassandra-codex-cli + - name: CASSANDRA_CODEX_CLI_LOGIN_FILE + value: login.json + - name: CODEX_HOME + value: /home/cassandra/.codex resources: requests: cpu: 100m @@ -85,3 +102,18 @@ spec: allowPrivilegeEscalation: false capabilities: drop: ["ALL"] + volumeMounts: + - name: codex-cli + mountPath: /var/run/cassandra-codex-cli + readOnly: true + - name: codex-home + mountPath: /home/cassandra/.codex + volumes: + - name: codex-cli + csi: + driver: secrets-store.csi.k8s.io + readOnly: true + volumeAttributes: + secretProviderClass: cassandra-generator-codex-cli + - name: codex-home + emptyDir: {} diff --git a/services/cassandra/secretproviderclass.yaml b/services/cassandra/secretproviderclass.yaml index a1a0f483..853f3dea 100644 --- a/services/cassandra/secretproviderclass.yaml +++ b/services/cassandra/secretproviderclass.yaml @@ -73,3 +73,19 @@ spec: secretPath: "kv/data/atlas/cassandra/codex-cli" secretKey: "auth.json" filePermission: 292 +--- +apiVersion: secrets-store.csi.x-k8s.io/v1 +kind: SecretProviderClass +metadata: + name: cassandra-generator-codex-cli + namespace: cassandra +spec: + provider: vault + parameters: + vaultAddress: "http://vault.vault.svc.cluster.local:8200" + roleName: "cassandra" + objects: | + - objectName: "auth.json" + secretPath: "kv/data/atlas/cassandra/codex-cli" + secretKey: "auth.json" + filePermission: 292 From eb7147002388da28e003ba7446ebdbebda4a525f Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 27 Jul 2026 12:14:57 -0300 Subject: [PATCH 127/991] Enable Cassandra image automation --- clusters/atlas/flux-system/applications/kustomization.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/clusters/atlas/flux-system/applications/kustomization.yaml b/clusters/atlas/flux-system/applications/kustomization.yaml index b4b3a034..b5ca2378 100644 --- a/clusters/atlas/flux-system/applications/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/kustomization.yaml @@ -31,6 +31,7 @@ resources: - game-stream/kustomization.yaml - cassandra-auth/kustomization.yaml - cassandra/kustomization.yaml + - cassandra/image-automation.yaml - veles/kustomization.yaml - typhon/kustomization.yaml - nextcloud/kustomization.yaml From 14cc8af5e859a023367c39de9953ae1739385c42 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 15:15:43 +0000 Subject: [PATCH 128/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 1015bf45..e9c84df0 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.28 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.29 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.28 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.29 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index a440e54d..dcbff16d 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.28 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.29 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index ee0d8723..521d49df 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.28 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.29 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From ce8151f0a7b3c38967c27cb3c973f2397fb5339b Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 27 Jul 2026 12:33:31 -0300 Subject: [PATCH 129/991] Expand Harbor registry storage --- services/harbor/pvc.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/harbor/pvc.yaml b/services/harbor/pvc.yaml index e70cb81a..a34ec463 100644 --- a/services/harbor/pvc.yaml +++ b/services/harbor/pvc.yaml @@ -8,7 +8,7 @@ spec: accessModes: [ "ReadWriteOnce" ] resources: requests: - storage: 450Gi + storage: 600Gi storageClassName: astreae --- apiVersion: v1 From 38a903705efe39d9df6889581f8e1fcbb0aec184 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 15:41:49 +0000 Subject: [PATCH 130/991] chore(cassandra): automated image update --- services/cassandra/configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index e1ae0afe..acb91272 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.28 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.29 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.28" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.28" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From ee37b10822e46b1763700b101d203616be5e5914 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 15:47:55 +0000 Subject: [PATCH 131/991] chore(cassandra): automated image update --- services/cassandra/generator-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index 157eb427..afc6b3fe 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.28 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.29 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: From 0a285775401f2fad5416898f4e2aa11cb5990f9d Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 16:26:34 +0000 Subject: [PATCH 132/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index e9c84df0..1239dd7d 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.29 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.30 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.29 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.30 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 521d49df..83924b0c 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.29 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.30 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 04ca7cc6123812c267fb8cd8a1005859d7b934a5 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 16:28:02 +0000 Subject: [PATCH 133/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index dcbff16d..079d64c9 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.29 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.30 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From e0b5978bfa611a020cc6dfa66530805850f2c909 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 16:34:15 +0000 Subject: [PATCH 134/991] chore(cassandra): automated image update --- services/cassandra/configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index acb91272..aa405170 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.29 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.30 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.28" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.28" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From df6c44748155800fd6f75ef7fc2b8f5de43a534c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 16:37:19 +0000 Subject: [PATCH 135/991] chore(cassandra): automated image update --- services/cassandra/generator-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index afc6b3fe..4c47772e 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.29 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.30 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: From 22dfd50830d44f0a0641a61509ea2a32f4c3a2fa Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 27 Jul 2026 13:37:53 -0300 Subject: [PATCH 136/991] Deploy Cassandra 0.8.30 --- services/cassandra/configmap.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index aa405170..de706991 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,8 +20,8 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.30 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.28" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.28" + CASSANDRA_SIM_WORKER_VERSION: "0.8.30" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.30" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 From 1d04c16af554a79b1bffc9c057453c563beb0da0 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 16:52:30 +0000 Subject: [PATCH 137/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 1239dd7d..2bac0ec7 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.30 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.31 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.30 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.31 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 83924b0c..5ce778ac 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.30 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.31 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 46060ec68918125e55d94ab72d1fcfc8fca8393d Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 16:53:30 +0000 Subject: [PATCH 138/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 079d64c9..22391150 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.30 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.31 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From cfab1525886bb5994bdc183c31ac4c92f444e7b0 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 17:15:52 +0000 Subject: [PATCH 139/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 08bdc6d3..66e8c1f8 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-365 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-366 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-253-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From ac40f066e6332b4cce15f9e040f49e779d0c737b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 17:16:01 +0000 Subject: [PATCH 140/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 2bac0ec7..51ac33fe 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.31 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.32 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.31 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.32 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 5ce778ac..8c143aba 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.31 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.32 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From a0a8d9250c5696cf47fbf19c3bdc942152e36efc Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 17:16:53 +0000 Subject: [PATCH 141/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 22391150..830b6567 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.31 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.32 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From c62896d0b2e0e72906dada4dc813c3997563fa4e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 17:23:53 +0000 Subject: [PATCH 142/991] chore(cassandra): automated image update --- services/cassandra/generator-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index 4c47772e..b53d3d21 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.30 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.32 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: From cf8597975c59186e43972787e01e8227ad6d692d Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 27 Jul 2026 14:28:29 -0300 Subject: [PATCH 143/991] Deploy Cassandra generator 0.8.32 --- services/cassandra/configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index de706991..b0d7436d 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,7 +21,7 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.30 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.30" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.30" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.32" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 From 1382bd5e72d4bf90788c742df6f9efae83ceef03 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 18:06:36 +0000 Subject: [PATCH 144/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 51ac33fe..cabbc03c 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.32 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.33 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.32 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.33 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 8c143aba..cbbde0d6 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.32 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.33 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 4d024c7c220fee488bca63261a3eca21b7fcc25e Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 27 Jul 2026 15:15:46 -0300 Subject: [PATCH 145/991] Deploy Cassandra sim 0.8.33 --- services/cassandra/configmap.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index b0d7436d..fa32e3ea 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,8 +19,8 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.30 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.30" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.33 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.33" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.32" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 0f31f7f837ea10cb995b69e25ffed04f46eb3051 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 19:52:13 +0000 Subject: [PATCH 146/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index cabbc03c..92fa4ff1 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.33 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.36 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.33 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.36 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 830b6567..e30ea788 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.32 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.36 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index cbbde0d6..991343f2 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.33 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.36 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 459e442fd5d9be7b565e7e429892fd2afe9514ec Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 19:57:16 +0000 Subject: [PATCH 147/991] chore(cassandra): automated image update --- services/cassandra/configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index fa32e3ea..0245e7c7 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.33 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.36 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.33" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.32" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From b50000e310fb9e350a9d8a8ffabf847aa899755b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 19:59:16 +0000 Subject: [PATCH 148/991] chore(cassandra): automated image update --- services/cassandra/generator-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index b53d3d21..de9b7cd4 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.32 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.36 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: From a0bfbd4a431b875ce7cd1d4c4186c29dd1c5ca3e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 20:15:43 +0000 Subject: [PATCH 149/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 92fa4ff1..4676363a 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.36 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.37 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.36 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.37 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 991343f2..af09b1b0 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.36 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.37 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 7f43a6cdcd5f9177cf5fdce87129853820b95cd4 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 20:16:43 +0000 Subject: [PATCH 150/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index e30ea788..62061525 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.36 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.37 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 6353292db1271e195cd55d23b5b57e2f13b24c00 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 20:27:50 +0000 Subject: [PATCH 151/991] chore(cassandra): automated image update --- services/cassandra/configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 0245e7c7..3a204832 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.36 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.37 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.33" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.32" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 1c68538afef1ac4e0d809ae04381eb1f5a2601ef Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 20:29:50 +0000 Subject: [PATCH 152/991] chore(cassandra): automated image update --- services/cassandra/generator-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index de9b7cd4..3306fa02 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.36 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.37 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: From d333e9161487267e40ffe1155473e4c9d50b0277 Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 27 Jul 2026 17:34:57 -0300 Subject: [PATCH 153/991] fix(cassandra): expose generator worker image version --- services/cassandra/configmap.yaml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 3a204832..ceae7d8c 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,8 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.37 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.33" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.32" + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.37 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 From 3213e3e22ec4684bffaa7cc89b6e88bc305548d6 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 20:45:26 +0000 Subject: [PATCH 154/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 4676363a..692c1c7c 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.37 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.38 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.37 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.38 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index af09b1b0..05e58138 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.37 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.38 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 50eba5c206ab020b176b0203d71ac0a3755a509f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 20:46:28 +0000 Subject: [PATCH 155/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 62061525..00b8da3c 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.37 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.38 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From a1431ff4afe7609847cc8e1151865f94c71f34da Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 20:49:27 +0000 Subject: [PATCH 156/991] chore(cassandra): automated image update --- services/cassandra/configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index ceae7d8c..9d3a9fbb 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.37 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.38 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.37 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 59d963ad8025dadf756af391eb1b24db85f63b4a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 20:51:28 +0000 Subject: [PATCH 157/991] chore(cassandra): automated image update --- services/cassandra/configmap.yaml | 2 +- services/cassandra/generator-deployment.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 9d3a9fbb..8a3afee1 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.38 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.37 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.38 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index 3306fa02..06e3a9a0 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.37 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.38 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: From 1d4f7af201083f5b978ec47f1e56852d4657f058 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 21:41:14 +0000 Subject: [PATCH 158/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index d7dd19c4..8163c02f 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -20,7 +20,7 @@ resources: - ingress.yaml images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend - newTag: 0.1.1-423 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} + newTag: 0.1.1-424 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend newTag: 0.1.1-423 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: From 1d46596138b14369c49720d9b20164e49ecc831e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 21:42:15 +0000 Subject: [PATCH 159/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 8163c02f..a2133d29 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -22,7 +22,7 @@ images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend newTag: 0.1.1-424 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend - newTag: 0.1.1-423 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} + newTag: 0.1.1-424 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: - name: chat-ai-gateway namespace: bstein-dev-home From 36e040dc84636ca9834ac6ae5fca5829a017e39c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 22:32:21 +0000 Subject: [PATCH 160/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 00b8da3c..9106b204 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.38 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.39 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From d0a4cc97a0b9b94b987d4ad6152af2deb7453d65 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 22:32:26 +0000 Subject: [PATCH 161/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 692c1c7c..e5f9fb09 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.38 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.39 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.38 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.39 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 05e58138..138aa760 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.38 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.39 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From a87c04be8ecd49144a3707c9fbbcab2d68f6a2f5 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 22:37:26 +0000 Subject: [PATCH 162/991] chore(cassandra): automated image update --- services/cassandra/configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 8a3afee1..eb2cd6d3 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.38 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.39 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.38 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 2eed5d8d7fd9dc1597a31918125cef3bb0f9bb1c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 22:39:27 +0000 Subject: [PATCH 163/991] chore(cassandra): automated image update --- services/cassandra/configmap.yaml | 2 +- services/cassandra/generator-deployment.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index eb2cd6d3..444ac5c7 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.39 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.38 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.39 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index 06e3a9a0..114e90f4 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.38 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.39 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: From 884d0b28b2c24e5d78be4c9f1c032f376e6fa6a3 Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 27 Jul 2026 19:42:53 -0300 Subject: [PATCH 164/991] chore(cassandra): reload backend worker image config --- services/cassandra/backend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index e5f9fb09..0c978fb6 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-25-0.8.2-builder-spine" + cassandra.bstein.dev/redeploy: "2026-07-27-0.8.39-worker-env" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" From c8d5d5f28ca002697ef93998a3d0012ffdc7f930 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 23:05:48 +0000 Subject: [PATCH 165/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 0c978fb6..4e34e569 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.39 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.40 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.39 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.40 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 138aa760..4259c188 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.39 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.40 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From e51e60742b753d999a008a7bcc6a02f62b3d084e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 23:05:51 +0000 Subject: [PATCH 166/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 9106b204..2f547a93 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.39 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.40 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From b2ae9fef53b05d7a1f3212e9edebf8a6987c1cd6 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 23:50:23 +0000 Subject: [PATCH 167/991] chore(cassandra): automated image update --- services/cassandra/configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 444ac5c7..2789bb57 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.39 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.40 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.39 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 04b32360894ed24c518ee1fe59f52bb98d627e73 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 27 Jul 2026 23:52:27 +0000 Subject: [PATCH 168/991] chore(cassandra): automated image update --- services/cassandra/configmap.yaml | 2 +- services/cassandra/generator-deployment.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 2789bb57..d4c1884d 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.40 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.39 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.40 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index 114e90f4..0cabeea4 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.39 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.40 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: From 2b873a5d5c559e15728d6db797d2a0175c5474ab Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 00:25:28 +0000 Subject: [PATCH 169/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 2f547a93..8715f8da 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.40 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.41 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 3c13e10379113e1f236f4ecf60b0e9663a31e14f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 00:25:53 +0000 Subject: [PATCH 170/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 4e34e569..1f74aea1 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.40 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.41 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.40 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.41 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 4259c188..9ebb3d9f 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.40 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.41 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From a9ed455dc16a754115f0cd2b212da21438b63b74 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 00:34:29 +0000 Subject: [PATCH 171/991] chore(cassandra): automated image update --- services/cassandra/configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index d4c1884d..f51a93e7 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.40 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.41 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.40 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From e25641ce8fe4e34ed38b3dc5aa65bd5e57a3b8c6 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 00:35:37 +0000 Subject: [PATCH 172/991] chore(cassandra): automated image update --- services/cassandra/configmap.yaml | 2 +- services/cassandra/generator-deployment.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index f51a93e7..e17ec611 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.41 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.40 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.41 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml index 0cabeea4..10064d93 100644 --- a/services/cassandra/generator-deployment.yaml +++ b/services/cassandra/generator-deployment.yaml @@ -58,7 +58,7 @@ spec: type: RuntimeDefault containers: - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.40 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.41 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: From a74c16e4fa22858c573483446207cd0c04d81975 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 01:34:21 +0000 Subject: [PATCH 173/991] chore(maintenance): automated image update --- services/maintenance/metis-configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 6a3161c1..3b3c5950 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -15,7 +15,7 @@ data: METIS_MAX_DEVICE_BYTES: "1000000000000" METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" - METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-253-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} + METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-254-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-253-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis From cd9780e2bb4011c4af6cce33da8e4cf819849008 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 01:36:21 +0000 Subject: [PATCH 174/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-amd64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-amd64-daemonset.yaml b/services/maintenance/metis-sentinel-amd64-daemonset.yaml index d180527a..7568c13a 100644 --- a/services/maintenance/metis-sentinel-amd64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-amd64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: amd64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-253-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-254-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} imagePullPolicy: Always envFrom: - configMapRef: From 6830bc0746f91537d13559c450c9a89e3eda978e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 01:39:24 +0000 Subject: [PATCH 175/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- services/maintenance/metis-configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 66e8c1f8..d7ce4043 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -54,7 +54,7 @@ images: - name: registry.bstein.dev/bstein/ariadne newTag: 0.1.0-366 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis - newTag: 0.1.0-253-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} + newTag: 0.1.0-254-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria newTag: 0.1.0-120 # {"$imagepolicy": "maintenance:soteria:tag"} configMapGenerator: diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 3b3c5950..25a3a283 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -16,7 +16,7 @@ data: METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-254-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} - METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-253-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} + METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-254-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0 From 77d14db61d48771fdc4c5aafb4be236bcc26823b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 01:40:30 +0000 Subject: [PATCH 176/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-arm64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-arm64-daemonset.yaml b/services/maintenance/metis-sentinel-arm64-daemonset.yaml index 2c01cc41..805c3ec3 100644 --- a/services/maintenance/metis-sentinel-arm64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-arm64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: arm64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-253-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-254-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} imagePullPolicy: Always envFrom: - configMapRef: From 222dc71362c290ba469ae51d33edb534d5630601 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 02:44:31 +0000 Subject: [PATCH 177/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 1f74aea1..5aa3e1a4 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.41 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.42 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.41 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.42 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 9ebb3d9f..9243940a 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.41 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.42 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 7fca4865fd530249f305de29224b86c5b1d6b3ef Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 27 Jul 2026 23:44:02 -0300 Subject: [PATCH 178/991] chore(cassandra): deploy 0.8.42 ephemeral generator --- services/cassandra/configmap.yaml | 18 ++- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/generator-deployment.yaml | 119 ------------------- services/cassandra/kustomization.yaml | 1 - 4 files changed, 17 insertions(+), 123 deletions(-) delete mode 100644 services/cassandra/generator-deployment.yaml diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index e17ec611..4d8f376d 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,19 +19,30 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.41 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.41 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.42 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.42 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim + CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim + CASSANDRA_GENERATOR_WORKER_PRIORITY_CLASS: cassandra-core CASSANDRA_SIM_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 + CASSANDRA_GENERATOR_WORKER_NODE_SELECTOR: cassandra.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 CASSANDRA_SIM_TOLERATIONS: veles.bstein.dev/simulation=true:NoSchedule + CASSANDRA_GENERATOR_WORKER_TOLERATIONS: veles.bstein.dev/simulation=true:NoSchedule CASSANDRA_SIM_ACTIVE_DEADLINE_SECONDS: "7200" + CASSANDRA_GENERATOR_WORKER_ACTIVE_DEADLINE_SECONDS: "1800" CASSANDRA_SIM_TTL_SECONDS: "3600" + CASSANDRA_GENERATOR_WORKER_TTL_SECONDS: "600" CASSANDRA_SIM_CPU_REQUEST: 500m CASSANDRA_SIM_CPU_LIMIT: "2" CASSANDRA_SIM_MEMORY_REQUEST: 1Gi CASSANDRA_SIM_MEMORY_LIMIT: 4Gi + CASSANDRA_GENERATOR_WORKER_CPU_REQUEST: 100m + CASSANDRA_GENERATOR_WORKER_CPU_LIMIT: "1" + CASSANDRA_GENERATOR_WORKER_MEMORY_REQUEST: 512Mi + CASSANDRA_GENERATOR_WORKER_MEMORY_LIMIT: 2Gi CASSANDRA_SIM_FS_GROUP: "10001" + CASSANDRA_GENERATOR_WORKER_FS_GROUP: "10001" CASSANDRA_MAX_ACTIVE_SIMS_PER_USER: "32" CASSANDRA_MAX_ACTIVE_SIMS_GLOBAL: "32" CASSANDRA_RETENTION_DAYS: "30" @@ -43,3 +54,6 @@ data: CASSANDRA_SIM_CODEX_CLI_SECRET_PROVIDER_CLASS: cassandra-codex-cli CASSANDRA_SIM_CODEX_CLI_MOUNT_PATH: /var/run/cassandra-codex-cli CASSANDRA_SIM_CODEX_CLI_HOME: /home/cassandra/.codex + CASSANDRA_GENERATOR_WORKER_CODEX_CLI_SECRET_PROVIDER_CLASS: cassandra-generator-codex-cli + CASSANDRA_GENERATOR_WORKER_CODEX_CLI_MOUNT_PATH: /var/run/cassandra-codex-cli + CASSANDRA_GENERATOR_WORKER_CODEX_CLI_HOME: /home/cassandra/.codex diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 8715f8da..401b0fd7 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.41 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.42 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/generator-deployment.yaml b/services/cassandra/generator-deployment.yaml deleted file mode 100644 index 10064d93..00000000 --- a/services/cassandra/generator-deployment.yaml +++ /dev/null @@ -1,119 +0,0 @@ -# services/cassandra/generator-deployment.yaml -apiVersion: apps/v1 -kind: Deployment -metadata: - name: cassandra-generator-worker - namespace: cassandra - labels: - app: cassandra-generator-worker -spec: - replicas: 1 - revisionHistoryLimit: 2 - selector: - matchLabels: - app: cassandra-generator-worker - template: - metadata: - labels: - app: cassandra-generator-worker - annotations: - cassandra.bstein.dev/redeploy: "2026-07-25-0.8.2-builder-spine" - vault.hashicorp.com/agent-inject: "true" - vault.hashicorp.com/agent-init-first: "true" - vault.hashicorp.com/agent-pre-populate-only: "true" - vault.hashicorp.com/role: "cassandra" - vault.hashicorp.com/agent-inject-secret-cassandra-env.sh: "kv/data/atlas/cassandra/cassandra-db" - vault.hashicorp.com/agent-inject-template-cassandra-env.sh: | - {{- with secret "kv/data/atlas/cassandra/cassandra-db" }} - unset DATABASE_URL - export CASSANDRA_DATABASE_HOST="{{ .Data.data.POSTGRES_HOST }}" - export CASSANDRA_DATABASE_PORT="{{ .Data.data.POSTGRES_PORT }}" - export CASSANDRA_DATABASE_NAME="{{ .Data.data.POSTGRES_DB }}" - export CASSANDRA_DATABASE_USER="{{ .Data.data.POSTGRES_USER }}" - export CASSANDRA_DATABASE_PASSWORD="{{ .Data.data.POSTGRES_PASSWORD }}" - export CASSANDRA_DATABASE_SSLMODE="disable" - {{- end }} - {{- with secret "kv/data/atlas/cassandra/app-secrets" }} - export CASSANDRA_SESSION_SECRET="{{ .Data.data.CASSANDRA_SESSION_SECRET }}" - export CASSANDRA_BYOK_ENCRYPTION_KEY="{{ .Data.data.CASSANDRA_BYOK_ENCRYPTION_KEY }}" - {{- if .Data.data.VELES_BYOK_ENCRYPTION_KEY }} - export VELES_BYOK_ENCRYPTION_KEY="{{ .Data.data.VELES_BYOK_ENCRYPTION_KEY }}" - {{- end }} - {{- end }} - spec: - serviceAccountName: cassandra-generator - priorityClassName: cassandra-core - nodeSelector: - cassandra.bstein.dev/node-pool: oceanus - kubernetes.io/arch: amd64 - tolerations: - - key: veles.bstein.dev/simulation - operator: Equal - value: "true" - effect: NoSchedule - securityContext: - fsGroup: 10001 - fsGroupChangePolicy: OnRootMismatch - seccompProfile: - type: RuntimeDefault - containers: - - name: generator - image: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.41 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - imagePullPolicy: Always - command: ["/bin/sh", "-c"] - args: - - | - set -eu - if [ -f /vault/secrets/cassandra-env.sh ]; then - . /vault/secrets/cassandra-env.sh - fi - exec cassandra-generation-worker --loop --idle-sleep-seconds 5 - envFrom: - - configMapRef: - name: cassandra-config - env: - - name: CASSANDRA_STRATEGY_SPEC_USE_CODEX - value: "1" - - name: CASSANDRA_STRATEGY_AUTHORING_CODEX_BIN - value: codex - - name: CASSANDRA_STRATEGY_AUTHORING_CODEX_MODEL - value: gpt-5.3-codex-spark - - name: CASSANDRA_STRATEGY_AUTHORING_CODEX_REASONING - value: low - - name: CASSANDRA_STRATEGY_SPEC_TIMEOUT - value: "900" - - name: CASSANDRA_CODEX_CLI_AUTH_MOUNT_PATH - value: /var/run/cassandra-codex-cli - - name: CASSANDRA_CODEX_CLI_LOGIN_FILE - value: login.json - - name: CODEX_HOME - value: /home/cassandra/.codex - resources: - requests: - cpu: 100m - memory: 512Mi - limits: - cpu: "1" - memory: 2Gi - securityContext: - runAsNonRoot: true - runAsUser: 10001 - runAsGroup: 10001 - allowPrivilegeEscalation: false - capabilities: - drop: ["ALL"] - volumeMounts: - - name: codex-cli - mountPath: /var/run/cassandra-codex-cli - readOnly: true - - name: codex-home - mountPath: /home/cassandra/.codex - volumes: - - name: codex-cli - csi: - driver: secrets-store.csi.k8s.io - readOnly: true - volumeAttributes: - secretProviderClass: cassandra-generator-codex-cli - - name: codex-home - emptyDir: {} diff --git a/services/cassandra/kustomization.yaml b/services/cassandra/kustomization.yaml index d289ba67..61c33ff8 100644 --- a/services/cassandra/kustomization.yaml +++ b/services/cassandra/kustomization.yaml @@ -16,7 +16,6 @@ resources: - postgres-statefulset.yaml - services.yaml - backend-deployment.yaml - - generator-deployment.yaml - frontend-deployment.yaml - retention-cronjob.yaml - image.yaml From f974ae22ab35be571b46489a3458fa5ef909ae19 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 02:45:30 +0000 Subject: [PATCH 179/991] chore(cassandra): automated image update --- services/cassandra/configmap.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 4d8f376d..92628c23 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,8 +19,8 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.42 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.42 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.41 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.41 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 8ad0a824e6c5e6c04175c6539f0bff7f1929a90d Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 02:49:45 +0000 Subject: [PATCH 180/991] chore(cassandra): automated image update --- services/cassandra/configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 92628c23..0e0652b5 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.41 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.42 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.41 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From b7879a36e673eb85b045954b0edc01122adddb14 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 02:50:46 +0000 Subject: [PATCH 181/991] chore(cassandra): automated image update --- services/cassandra/configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 0e0652b5..4d8f376d 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.42 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.41 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.42 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From ee5ad401c78f8457eaa1c6645ba4609c375be4a6 Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 27 Jul 2026 23:55:31 -0300 Subject: [PATCH 182/991] chore(cassandra): mark 0.8.42 backend redeploy --- services/cassandra/backend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 5aa3e1a4..cc5d6a32 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-27-0.8.39-worker-env" + cassandra.bstein.dev/redeploy: "2026-07-27-0.8.42-ephemeral-generator" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" From db0f8fccf7c699477ab09ae98c695213b4331c24 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 03:30:01 +0000 Subject: [PATCH 183/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index cc5d6a32..b4eccad6 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.42 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.43 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.42 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.43 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 9243940a..64662860 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.42 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.43 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From e75b5ea620aad01c40cd158c9abe8623769e5aac Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 03:30:44 +0000 Subject: [PATCH 184/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 401b0fd7..834c7a0d 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.42 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.43 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 1963dd81645569543f1a4f9d5983fbc7b229f616 Mon Sep 17 00:00:00 2001 From: jenkins Date: Tue, 28 Jul 2026 00:28:58 -0300 Subject: [PATCH 185/991] chore(cassandra): deploy 0.8.43 compass analysis --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index b4eccad6..c95ef06b 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-27-0.8.42-ephemeral-generator" + cassandra.bstein.dev/redeploy: "2026-07-27-0.8.43-compass-analysis" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 4d8f376d..6c020ac9 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,8 +19,8 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.42 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.42 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.43 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.43 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 99ef9e245f1e07130c3731439319d22dfd3aa7f5 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 03:32:31 +0000 Subject: [PATCH 186/991] chore(cassandra): automated image update --- services/cassandra/configmap.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 6c020ac9..4d8f376d 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,8 +19,8 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.43 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.43 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.42 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.42 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From f6ee0dde6105af8413616de40304708c37eba749 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 03:33:46 +0000 Subject: [PATCH 187/991] chore(cassandra): automated image update --- services/cassandra/configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 4d8f376d..8ec32163 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.42 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.43 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.42 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From d2f8fc947887f2e3b8c8dba1d04b6b972be5cd60 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 03:35:21 +0000 Subject: [PATCH 188/991] chore(cassandra): automated image update --- services/cassandra/configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 8ec32163..6c020ac9 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.43 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.42 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.43 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 96c0715606c481f3d95047c7761faeb744639c8d Mon Sep 17 00:00:00 2001 From: jenkins Date: Tue, 28 Jul 2026 01:07:02 -0300 Subject: [PATCH 189/991] chore(cassandra): deploy 0.8.44 generator repair --- services/cassandra/backend-deployment.yaml | 6 +++--- services/cassandra/configmap.yaml | 4 ++-- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 4 files changed, 7 insertions(+), 7 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index c95ef06b..f4b20072 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-27-0.8.43-compass-analysis" + cassandra.bstein.dev/redeploy: "2026-07-28-0.8.44-generator-repair" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.43 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.44 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.43 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.44 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 6c020ac9..8d93b812 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,8 +19,8 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.43 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.43 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.44 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.44 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 834c7a0d..ba695ba8 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.43 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.44 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 64662860..ae71c674 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.43 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.44 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From b03fa8d91af24be1fcdc94a216b068cf8b1eb26e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 04:09:50 +0000 Subject: [PATCH 190/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/configmap.yaml | 4 ++-- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 4 files changed, 6 insertions(+), 6 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index f4b20072..6588fc6e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.44 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.43 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.44 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.43 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 8d93b812..6c020ac9 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,8 +19,8 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.44 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.44 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.43 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.43 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index ba695ba8..834c7a0d 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.44 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.43 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index ae71c674..64662860 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.44 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.43 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 41185fa85da2288042ad0c9b3c573de21ba8e16f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 04:30:06 +0000 Subject: [PATCH 191/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 6588fc6e..f76f14fc 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.43 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.45 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.43 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.45 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 834c7a0d..a7509382 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.43 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.45 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 64662860..1f34f20f 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.43 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.45 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 079b986f59793e8e0c6c8a2a34e56a5f7054986f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 04:34:07 +0000 Subject: [PATCH 192/991] chore(cassandra): automated image update --- services/cassandra/configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 6c020ac9..f577f44d 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.43 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.45 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.43 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From a65d9d102bfb89f45a310e21251f38fd207b2f54 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 04:35:26 +0000 Subject: [PATCH 193/991] chore(cassandra): automated image update --- services/cassandra/configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index f577f44d..176972bf 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.45 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.43 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.45 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 1f96fc6a9c95fb8c75a9e5c1e5de764ef9b89d8a Mon Sep 17 00:00:00 2001 From: jenkins Date: Tue, 28 Jul 2026 01:38:00 -0300 Subject: [PATCH 194/991] chore(cassandra): roll 0.8.45 generator repair --- services/cassandra/backend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index f76f14fc..9157d8d3 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-28-0.8.44-generator-repair" + cassandra.bstein.dev/redeploy: "2026-07-28-0.8.45-generator-repair" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" From 70ac4f8b25bc8a71b5839c38b60f8cf78eb2d88e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 05:14:31 +0000 Subject: [PATCH 195/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index d7ce4043..812edcfa 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-366 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-367 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-254-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From 1b21d0e1383c23e6508a1eec4eb72e2d1eba06de Mon Sep 17 00:00:00 2001 From: jenkins Date: Tue, 28 Jul 2026 04:07:51 -0300 Subject: [PATCH 196/991] chore(cassandra): roll 0.8.46 v3 guide repair --- services/cassandra/backend-deployment.yaml | 6 +++--- services/cassandra/configmap.yaml | 4 ++-- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 4 files changed, 7 insertions(+), 7 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 9157d8d3..e5940ed0 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-28-0.8.45-generator-repair" + cassandra.bstein.dev/redeploy: "2026-07-28-0.8.46-v3-guide-repair" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.45 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.46 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.45 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.46 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 176972bf..b7574285 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,8 +19,8 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.45 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.45 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.46 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.46 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index a7509382..46400d90 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.45 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.46 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 1f34f20f..74eb7036 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.45 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.46 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 1b1df36891cf5fb95a22be1121d56a9729f2e19a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 07:09:26 +0000 Subject: [PATCH 197/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/configmap.yaml | 4 ++-- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 4 files changed, 6 insertions(+), 6 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index e5940ed0..683379e1 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.46 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.45 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.46 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.45 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index b7574285..176972bf 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,8 +19,8 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.46 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.46 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.45 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.45 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 46400d90..a7509382 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.46 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.45 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 74eb7036..1f34f20f 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.46 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.45 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 8eb5c8af5b7434d408d37ee55809e8ac1a35d084 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 07:09:30 +0000 Subject: [PATCH 198/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 683379e1..e5940ed0 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.45 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.46 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.45 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.46 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 1f34f20f..74eb7036 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.45 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.46 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 4919012365f8a27c69fb901b47bd3a46fcf43b4c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 07:10:29 +0000 Subject: [PATCH 199/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index a7509382..46400d90 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.45 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.46 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 4b5c52f9310ba6bf90061130e73664887ec1b6ec Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 07:14:30 +0000 Subject: [PATCH 200/991] chore(cassandra): automated image update --- services/cassandra/configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 176972bf..841bbad6 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.45 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.46 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.45 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From abe96934f39554274c22754b96224f6c7722fd11 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 07:15:44 +0000 Subject: [PATCH 201/991] chore(cassandra): automated image update --- services/cassandra/configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 841bbad6..b7574285 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.46 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.45 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.46 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 5036639a1ac004970005c532c354af700141da12 Mon Sep 17 00:00:00 2001 From: jenkins Date: Tue, 28 Jul 2026 04:24:27 -0300 Subject: [PATCH 202/991] fix(cassandra): roll backend on worker image updates --- services/cassandra/backend-deployment.yaml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index e5940ed0..8b80a1dd 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -102,6 +102,11 @@ spec: - name: http containerPort: 8796 protocol: TCP + env: + - name: CASSANDRA_SIM_IMAGE + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.46 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + - name: CASSANDRA_GENERATOR_WORKER_IMAGE + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.46 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config From 053181a8cfc3142b9daa396b0a4418d7e32932db Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 07:48:22 +0000 Subject: [PATCH 203/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 8b80a1dd..e1ab1034 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.46 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.47 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.46 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.47 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 74eb7036..805840de 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.46 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.47 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 3157c5d4a54a33f54dbbc987b22f4a377cb7d15c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 07:49:50 +0000 Subject: [PATCH 204/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 46400d90..3fc98bf8 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.46 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.47 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From f7c3130dd5314f2779c74bdb140ffbbd412766f8 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 07:53:04 +0000 Subject: [PATCH 205/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index e1ab1034..49d12ab9 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.46 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.47 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.46 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index b7574285..b802c227 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.46 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.47 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.46 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From 2847a912c70544974044c74abfa195d2cf45c81f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 07:54:04 +0000 Subject: [PATCH 206/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 49d12ab9..19bf0190 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.47 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.46 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.47 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index b802c227..12f4ffc7 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.47 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.46 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.47 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 42b2ca6ad505de6cce00ed6e0f0d2b9fede640b7 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 08:17:18 +0000 Subject: [PATCH 207/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 19bf0190..2b966d3f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.47 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.48 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.47 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.48 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 805840de..0ca2bf27 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.47 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.48 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From b39d7495e6279bd4e55f2195e5818f795b8d7360 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 08:18:18 +0000 Subject: [PATCH 208/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 3fc98bf8..4e524cdd 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.47 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.48 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 6aa09801334c3eb514a9bbe6034e1787fe6cd305 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 08:20:49 +0000 Subject: [PATCH 209/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 2b966d3f..a24b697b 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.47 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.48 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.47 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 12f4ffc7..7efb9969 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.47 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.48 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.47 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From 3e3285273251d28f526166a1262677dbe3e32475 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 08:23:56 +0000 Subject: [PATCH 210/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index a24b697b..f15af897 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.48 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.47 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.48 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 7efb9969..79bcee2b 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.48 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.47 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.48 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From b86ecc07d35e1c14ae9c0cdd175bb9acecb52029 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 09:31:59 +0000 Subject: [PATCH 211/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index f15af897..516be111 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.48 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.49 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.48 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.49 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 4e524cdd..2087b4eb 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.48 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.49 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 0ca2bf27..12936ef8 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.48 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.49 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 31ff2aa975829d2b05669ec409e08867bdd5d283 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 09:34:59 +0000 Subject: [PATCH 212/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 516be111..69a6da28 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.48 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.49 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.48 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 79bcee2b..d54260fa 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.48 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.49 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.48 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From 2d7825a674780e7abbfb5a613bbd8fd6caa7c0a8 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 09:37:00 +0000 Subject: [PATCH 213/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 69a6da28..52b864eb 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.49 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.48 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.49 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index d54260fa..015bd1bc 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.49 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.48 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.49 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From ed9dc84ab0c8086a62a7b74a2a9d44bab06bf817 Mon Sep 17 00:00:00 2001 From: jenkins Date: Tue, 28 Jul 2026 06:33:02 -0300 Subject: [PATCH 214/991] Deploy cassandra 0.8.49 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 52b864eb..e75320c9 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-28-0.8.46-v3-guide-repair" + cassandra.bstein.dev/redeploy: "2026-07-28-0.8.49-commander-compass" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 015bd1bc..b750b19a 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,6 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.49 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.49 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.49" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.49" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From edbe26f746fba25da8901ba1427854a98900b068 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 09:42:05 +0000 Subject: [PATCH 215/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index a2133d29..ac947516 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -20,7 +20,7 @@ resources: - ingress.yaml images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend - newTag: 0.1.1-424 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} + newTag: 0.1.1-425 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend newTag: 0.1.1-424 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: From 91ae5a412b9051c5c51521864ddd3a8dab39a70d Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 09:44:19 +0000 Subject: [PATCH 216/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index ac947516..f9a4f05b 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -22,7 +22,7 @@ images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend newTag: 0.1.1-425 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend - newTag: 0.1.1-424 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} + newTag: 0.1.1-425 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: - name: chat-ai-gateway namespace: bstein-dev-home From f250801e74b14b4d90a9620742c43f58dd8546ad Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 10:57:59 +0000 Subject: [PATCH 217/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index e75320c9..eed43546 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.49 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.50 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.49 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.50 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 2087b4eb..e2231be7 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.49 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.50 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 12936ef8..463e1d00 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.49 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.50 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 67e4ca65bd1604472589c412266f96b645ef6b56 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 11:00:59 +0000 Subject: [PATCH 218/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index eed43546..eb553170 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.49 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.50 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.49 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index b750b19a..f3bbe168 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.49 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.50 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.49 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.49" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.49" From 360ca56e282d1a62b60233410fe5396f5bf39f35 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 11:03:13 +0000 Subject: [PATCH 219/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index eb553170..47c4b411 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.50 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.49 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.50 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index f3bbe168..911a7578 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.50 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.49 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.50 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.49" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.49" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From a93d8148e5b44eb616ea4464516c9e602a1f3e40 Mon Sep 17 00:00:00 2001 From: jenkins Date: Tue, 28 Jul 2026 08:02:15 -0300 Subject: [PATCH 220/991] Deploy Cassandra 0.8.50 worker tags --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 47c4b411..296249b7 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-28-0.8.49-commander-compass" + cassandra.bstein.dev/redeploy: "2026-07-28-0.8.50-lab-tools" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 911a7578..466c3cb5 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.50 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.50 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.49" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.49" + CASSANDRA_SIM_WORKER_VERSION: "0.8.50" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.50" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 261d7143b834925b173f1ef2cdbf7c4c0599c636 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 12:27:21 +0000 Subject: [PATCH 221/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 296249b7..d2d34502 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.50 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.51 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.50 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.51 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 463e1d00..4a20c596 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.50 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.51 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 00bf134f66e8f483479a4fce43a2b0f818117707 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 12:27:25 +0000 Subject: [PATCH 222/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index e2231be7..84dad64f 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.50 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.51 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From ea4395d8e08ad5f298a3b4c2eca025a26e569852 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 12:30:30 +0000 Subject: [PATCH 223/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index d2d34502..df54ca0a 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.50 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.51 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.50 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 466c3cb5..20477443 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.50 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.51 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.50 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.50" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.50" From eff20f6fd0939eb4568ce6acebfba02a82caa38e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 12:31:30 +0000 Subject: [PATCH 224/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index df54ca0a..720d604f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.51 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.50 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.51 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 20477443..66ac8620 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.51 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.50 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.51 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.50" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.50" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From c1a90855fe4c186550ef79bfb3ad32bca9798407 Mon Sep 17 00:00:00 2001 From: jenkins Date: Tue, 28 Jul 2026 09:36:55 -0300 Subject: [PATCH 225/991] chore(cassandra): finish 0.8.51 rollout metadata --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 720d604f..d1c80b6a 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-28-0.8.50-lab-tools" + cassandra.bstein.dev/redeploy: "2026-07-28-0.8.51-jobs-compact" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 66ac8620..6c535547 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.51 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.51 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.50" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.50" + CASSANDRA_SIM_WORKER_VERSION: "0.8.51" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.51" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From c86fd34b4508e46820acaec6158612fa29d5f95a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 13:36:40 +0000 Subject: [PATCH 226/991] chore(maintenance): automated image update --- services/maintenance/metis-configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 25a3a283..6b446aa3 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -15,7 +15,7 @@ data: METIS_MAX_DEVICE_BYTES: "1000000000000" METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" - METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-254-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} + METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-255-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-254-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis From e62918c3a4956b473b2816a46b7614c1cd894a6b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 13:39:18 +0000 Subject: [PATCH 227/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-amd64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-amd64-daemonset.yaml b/services/maintenance/metis-sentinel-amd64-daemonset.yaml index 7568c13a..90f78590 100644 --- a/services/maintenance/metis-sentinel-amd64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-amd64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: amd64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-254-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-255-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} imagePullPolicy: Always envFrom: - configMapRef: From dff3d10826982ab483e89183c0de12fb98d3f112 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 13:42:50 +0000 Subject: [PATCH 228/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- services/maintenance/metis-configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 812edcfa..f8c7ee93 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -54,7 +54,7 @@ images: - name: registry.bstein.dev/bstein/ariadne newTag: 0.1.0-367 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis - newTag: 0.1.0-254-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} + newTag: 0.1.0-255-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria newTag: 0.1.0-120 # {"$imagepolicy": "maintenance:soteria:tag"} configMapGenerator: diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 6b446aa3..12d92919 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -16,7 +16,7 @@ data: METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-255-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} - METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-254-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} + METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-255-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0 From 9820dfc9e4c743f38d08d49022c735784316fc8b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 13:43:19 +0000 Subject: [PATCH 229/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-arm64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-arm64-daemonset.yaml b/services/maintenance/metis-sentinel-arm64-daemonset.yaml index 805c3ec3..f8eb29c7 100644 --- a/services/maintenance/metis-sentinel-arm64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-arm64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: arm64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-254-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-255-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} imagePullPolicy: Always envFrom: - configMapRef: From 3505b1dd4a80236fa48c9b3ce79f1299c2d959f1 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 17:14:34 +0000 Subject: [PATCH 230/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index f8c7ee93..c6a1c3b2 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-367 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-368 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-255-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From 89a54ab783f9e94134d8c66a3e19457d66c9e60b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 21:44:29 +0000 Subject: [PATCH 231/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index f9a4f05b..530bd569 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -20,7 +20,7 @@ resources: - ingress.yaml images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend - newTag: 0.1.1-425 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} + newTag: 0.1.1-426 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend newTag: 0.1.1-425 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: From ef1b28fdac82d8789ee83165020e52c7cf44710c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 28 Jul 2026 21:46:35 +0000 Subject: [PATCH 232/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 530bd569..a7fb08b9 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -22,7 +22,7 @@ images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend newTag: 0.1.1-426 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend - newTag: 0.1.1-425 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} + newTag: 0.1.1-426 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: - name: chat-ai-gateway namespace: bstein-dev-home From 2d73a5bf636b4393639470b7d8fd06351a7a65f7 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 01:37:40 +0000 Subject: [PATCH 233/991] chore(maintenance): automated image update --- services/maintenance/metis-configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 12d92919..22c2a9b3 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -15,7 +15,7 @@ data: METIS_MAX_DEVICE_BYTES: "1000000000000" METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" - METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-255-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} + METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-256-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-255-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis From 5bdb83659cb581a96ba8f93588d7f6e02e2ef546 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 01:39:52 +0000 Subject: [PATCH 234/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-amd64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-amd64-daemonset.yaml b/services/maintenance/metis-sentinel-amd64-daemonset.yaml index 90f78590..489c99bb 100644 --- a/services/maintenance/metis-sentinel-amd64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-amd64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: amd64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-255-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-256-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} imagePullPolicy: Always envFrom: - configMapRef: From 3276d98127be24ab67292d9350ae19bd21d02f61 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 01:44:01 +0000 Subject: [PATCH 235/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- services/maintenance/metis-configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index c6a1c3b2..5f51d65b 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -54,7 +54,7 @@ images: - name: registry.bstein.dev/bstein/ariadne newTag: 0.1.0-368 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis - newTag: 0.1.0-255-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} + newTag: 0.1.0-256-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria newTag: 0.1.0-120 # {"$imagepolicy": "maintenance:soteria:tag"} configMapGenerator: diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 22c2a9b3..bbf980fa 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -16,7 +16,7 @@ data: METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-256-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} - METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-255-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} + METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-256-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0 From 2c4528efb9d60adc8a70ad2a7eb391f2dcdd725b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 01:45:01 +0000 Subject: [PATCH 236/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-arm64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-arm64-daemonset.yaml b/services/maintenance/metis-sentinel-arm64-daemonset.yaml index f8eb29c7..e473b410 100644 --- a/services/maintenance/metis-sentinel-arm64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-arm64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: arm64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-255-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-256-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} imagePullPolicy: Always envFrom: - configMapRef: From 3c73ed6150d3e4b5f56c176908e672f248f59ffe Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 04:16:01 +0000 Subject: [PATCH 237/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 84dad64f..e6e2fb11 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.51 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.52 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From c6db3a01d56972ac8eb0dcffc5ec208dd3582914 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 04:16:05 +0000 Subject: [PATCH 238/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index d1c80b6a..c51449f4 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.51 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.52 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.51 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.52 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 4a20c596..49285933 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.51 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.52 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From feff05369426f1e718a682da6f843c53fca21a0b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 04:19:08 +0000 Subject: [PATCH 239/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index c51449f4..a3effc18 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.51 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.52 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.51 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 6c535547..06d7deb1 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.51 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.52 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.51 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.51" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.51" From 8a5e150b2e9f3eb3dbd430bba5c894f37dc302e3 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 04:20:58 +0000 Subject: [PATCH 240/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index a3effc18..28ea5d04 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.52 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.51 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.52 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 06d7deb1..8f9a8d6c 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.52 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.51 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.52 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.51" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.51" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 76373fbba29bf9fe81b0a171a2d7516be78658c9 Mon Sep 17 00:00:00 2001 From: jenkins Date: Wed, 29 Jul 2026 01:24:26 -0300 Subject: [PATCH 241/991] Deploy Cassandra 0.8.52 worker tags --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 28ea5d04..175ce30e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-28-0.8.51-jobs-compact" + cassandra.bstein.dev/redeploy: "2026-07-29-0.8.52-lab-progress" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 8f9a8d6c..0d3cb9ae 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.52 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.52 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.51" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.51" + CASSANDRA_SIM_WORKER_VERSION: "0.8.52" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.52" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 1048ce2ee8edf5bb9bb9ee3bb1d9055ad9b70163 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 04:43:30 +0000 Subject: [PATCH 242/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 175ce30e..6118f462 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.52 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.53 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.52 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.53 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 49285933..0828e8ca 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.52 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.53 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 43ee66b9e060e9f2fbbac423e5596e8fa2870a7e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 04:43:34 +0000 Subject: [PATCH 243/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index e6e2fb11..565a8d33 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.52 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.53 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 7d8f6b96fd6c47c734387a86d63b9f20959da7be Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 04:48:01 +0000 Subject: [PATCH 244/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 6118f462..82d12a76 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.52 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.53 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.52 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 0d3cb9ae..297cc318 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.52 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.53 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.52 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.52" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.52" From 7b237f43373c0ae9cc47ca2db801bb1ef89ee048 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 04:49:42 +0000 Subject: [PATCH 245/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 82d12a76..2e843043 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.53 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.52 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.53 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 297cc318..660d8df8 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.53 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.52 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.53 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.52" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.52" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From a1105ca9e099f7cf4698e6ed5bf4db0c4620b372 Mon Sep 17 00:00:00 2001 From: jenkins Date: Wed, 29 Jul 2026 01:51:39 -0300 Subject: [PATCH 246/991] Deploy Cassandra 0.8.53 worker tags --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 2e843043..8c12a3f1 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-29-0.8.52-lab-progress" + cassandra.bstein.dev/redeploy: "2026-07-29-0.8.53-compass-fallback" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 660d8df8..0caa8bce 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.53 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.53 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.52" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.52" + CASSANDRA_SIM_WORKER_VERSION: "0.8.53" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.53" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 743b20cf8018b1edda4ff850b35a9fb212b9dc13 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 05:12:27 +0000 Subject: [PATCH 247/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 8c12a3f1..018e7c15 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.53 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.54 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.53 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.54 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 0828e8ca..44339edc 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.53 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.54 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From fa3302ee4d3e0f502d1816eb23013f6a202b9cb8 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 05:12:32 +0000 Subject: [PATCH 248/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 565a8d33..ae3d326a 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.53 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.54 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From ed2ddf942a9deb52ac19c1ed20fe82a3ff48aeaf Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 05:15:00 +0000 Subject: [PATCH 249/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 5f51d65b..29840619 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-368 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-369 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-256-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From 3e228cf8bae05580c9dcc714a3f2f6552ec6ed1c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 05:15:37 +0000 Subject: [PATCH 250/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 018e7c15..4009e5b4 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.53 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.54 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.53 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 0caa8bce..66ab7f50 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.53 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.54 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.53 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.53" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.53" From 33f0a4fe76980c5f54a9fe0924bd170f936bfba4 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 05:16:52 +0000 Subject: [PATCH 251/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 4009e5b4..365df7d3 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.54 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.53 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.54 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 66ab7f50..23efd8ec 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.54 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.53 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.54 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.53" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.53" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From b58584baa71a30dd0eccf0a84f7d1d1448c2baea Mon Sep 17 00:00:00 2001 From: jenkins Date: Wed, 29 Jul 2026 02:19:17 -0300 Subject: [PATCH 252/991] Deploy Cassandra 0.8.54 worker tags --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 365df7d3..0424b77e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-29-0.8.53-compass-fallback" + cassandra.bstein.dev/redeploy: "2026-07-29-0.8.54-compass-roster" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 23efd8ec..305d9e5d 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.54 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.54 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.53" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.53" + CASSANDRA_SIM_WORKER_VERSION: "0.8.54" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.54" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 31504b09ef885bd5c89deebb7bf384f301459dd6 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 05:50:48 +0000 Subject: [PATCH 253/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 0424b77e..303e2b94 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.54 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.55 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.54 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.55 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 44339edc..c7264f25 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.54 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.55 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 48be9bec5f16e63dde0f5f59e710389150deb834 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 05:51:02 +0000 Subject: [PATCH 254/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index ae3d326a..c747ac17 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.54 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.55 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 1f3d1850f236445cdf442f93a187680fdec4c287 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 05:54:41 +0000 Subject: [PATCH 255/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 303e2b94..9c6c7115 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.54 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.55 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.54 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 305d9e5d..f4299265 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.54 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.55 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.54 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.54" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.54" From 6499907c83c6984f0737bf723296add7bc26f026 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 05:55:56 +0000 Subject: [PATCH 256/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 9c6c7115..32dc609d 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.55 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.54 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.55 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index f4299265..eea69269 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.55 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.54 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.55 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.54" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.54" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From faeded7fd5f2381862d5110b5fbab8fc663b1f4e Mon Sep 17 00:00:00 2001 From: jenkins Date: Wed, 29 Jul 2026 02:57:20 -0300 Subject: [PATCH 257/991] Deploy Cassandra 0.8.55 worker tags --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 32dc609d..496c37c1 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-29-0.8.54-compass-roster" + cassandra.bstein.dev/redeploy: "2026-07-29-0.8.55-lab-proof-fixes" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index eea69269..84f8b256 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.55 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.55 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.54" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.54" + CASSANDRA_SIM_WORKER_VERSION: "0.8.55" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.55" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From b92f2fd315b91bf48c05933d9f81c017d421941e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 06:42:01 +0000 Subject: [PATCH 258/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 496c37c1..7f91c280 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.55 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.56 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.55 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.56 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index c7264f25..7a3d33ff 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.55 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.56 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From eb4b290f7f5fefc0c45d1742299729da96345714 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 06:43:06 +0000 Subject: [PATCH 259/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index c747ac17..f2d525c5 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.55 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.56 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From bbca10b7112f7c03efb33f6395162b6fcc1816ff Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 06:46:15 +0000 Subject: [PATCH 260/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 7f91c280..c4a8453d 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.55 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.56 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.55 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 84f8b256..24ef5bef 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.55 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.56 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.55 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.55" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.55" From 99778fdc9869beeed77502b88a56f1ccbc1a1f0c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 06:47:20 +0000 Subject: [PATCH 261/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index c4a8453d..54742c53 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.56 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.55 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.56 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 24ef5bef..7e235341 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.56 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.55 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.56 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.55" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.55" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From b6bbb2cdfd435a8643ef44f486aa22523cb4b2c7 Mon Sep 17 00:00:00 2001 From: jenkins Date: Wed, 29 Jul 2026 03:49:36 -0300 Subject: [PATCH 262/991] Deploy Cassandra 0.8.56 Runs filter fast path --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 54742c53..2f6ff1f8 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-29-0.8.55-lab-proof-fixes" + cassandra.bstein.dev/redeploy: "2026-07-29-0.8.56-runs-fast-path" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 7e235341..b969476e 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.56 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.56 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.55" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.55" + CASSANDRA_SIM_WORKER_VERSION: "0.8.56" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.56" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From fa525aec558517bf3a438d540bd95fb9fe62e025 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 09:45:07 +0000 Subject: [PATCH 263/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index a7fb08b9..b4e7eb3a 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -20,7 +20,7 @@ resources: - ingress.yaml images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend - newTag: 0.1.1-426 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} + newTag: 0.1.1-427 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend newTag: 0.1.1-426 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: From 7e955eeffb4cc67fefe5364140a5d217a428d3d0 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 09:48:07 +0000 Subject: [PATCH 264/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index b4e7eb3a..c302ae0e 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -22,7 +22,7 @@ images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend newTag: 0.1.1-427 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend - newTag: 0.1.1-426 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} + newTag: 0.1.1-427 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: - name: chat-ai-gateway namespace: bstein-dev-home From 38c130bb0bc403b09daad7941cfabbf4a84bfdb4 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 13:37:55 +0000 Subject: [PATCH 265/991] chore(maintenance): automated image update --- services/maintenance/metis-configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index bbf980fa..7e18208a 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -15,7 +15,7 @@ data: METIS_MAX_DEVICE_BYTES: "1000000000000" METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" - METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-256-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} + METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-257-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-256-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis From 1897eea4a44dd3265f41e771b27e73260d6723e7 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 13:39:56 +0000 Subject: [PATCH 266/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-amd64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-amd64-daemonset.yaml b/services/maintenance/metis-sentinel-amd64-daemonset.yaml index 489c99bb..69ad98e9 100644 --- a/services/maintenance/metis-sentinel-amd64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-amd64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: amd64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-256-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-257-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} imagePullPolicy: Always envFrom: - configMapRef: From 77359fa4e80a7775386ae0dfcc82b1913a081a78 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 13:44:17 +0000 Subject: [PATCH 267/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- services/maintenance/metis-configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 29840619..21600c07 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -54,7 +54,7 @@ images: - name: registry.bstein.dev/bstein/ariadne newTag: 0.1.0-369 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis - newTag: 0.1.0-256-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} + newTag: 0.1.0-257-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria newTag: 0.1.0-120 # {"$imagepolicy": "maintenance:soteria:tag"} configMapGenerator: diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 7e18208a..55177bb7 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -16,7 +16,7 @@ data: METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-257-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} - METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-256-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} + METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-257-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0 From fc7b6080dffb27adf0e5d402eb836e1c5aac0a92 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 13:45:17 +0000 Subject: [PATCH 268/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-arm64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-arm64-daemonset.yaml b/services/maintenance/metis-sentinel-arm64-daemonset.yaml index e473b410..21fefa7c 100644 --- a/services/maintenance/metis-sentinel-arm64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-arm64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: arm64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-256-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-257-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} imagePullPolicy: Always envFrom: - configMapRef: From fcd00047660078a9de6fd8e2870df46f6b377fa0 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 14:16:18 +0000 Subject: [PATCH 269/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index f2d525c5..3e7aceff 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.56 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.57 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 8838ebbc351e3f375dbca0f27be00361b78486d3 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 14:16:22 +0000 Subject: [PATCH 270/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 2f6ff1f8..59c4cca8 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.56 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.57 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.56 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.57 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 7a3d33ff..f61749b5 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.56 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.57 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 6727f272d9bea08d1c7beb1e6af567448d906602 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 14:19:32 +0000 Subject: [PATCH 271/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 59c4cca8..abcc18bf 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.56 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.57 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.56 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index b969476e..4d4be085 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.56 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.57 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.56 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.56" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.56" From 264ec66c696d905cc85b0ad172e4432b7514f90a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 14:22:35 +0000 Subject: [PATCH 272/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index abcc18bf..fbdba5b1 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.57 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.56 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.57 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 4d4be085..23194a64 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.57 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.56 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.57 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.56" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.56" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 726f9ed949fc765c8efdb89ab80db60bbae5e1e0 Mon Sep 17 00:00:00 2001 From: jenkins Date: Wed, 29 Jul 2026 11:23:49 -0300 Subject: [PATCH 273/991] Deploy Cassandra 0.8.57 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index fbdba5b1..4e1ea3ac 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-29-0.8.56-runs-fast-path" + cassandra.bstein.dev/redeploy: "2026-07-29-0.8.57-lab-ui-batch" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 23194a64..7a5b096a 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.57 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.57 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.56" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.56" + CASSANDRA_SIM_WORKER_VERSION: "0.8.57" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.57" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From f5cdab494d1d5c5e000e987f27f50953358a6d1a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 16:41:31 +0000 Subject: [PATCH 274/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 4e1ea3ac..74b4eba4 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.57 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.58 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.57 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.58 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index f61749b5..3420538b 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.57 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.58 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From f29d65d4a35a653357a2d51b8e389b4b7c73ff50 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 16:42:31 +0000 Subject: [PATCH 275/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 3e7aceff..bf2555f3 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.57 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.58 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 1e76778f4a79df136dcff9c398cef956ff5eb8b8 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 16:45:53 +0000 Subject: [PATCH 276/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 74b4eba4..e74267ff 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.57 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.58 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.57 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 7a5b096a..fab158ef 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.57 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.58 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.57 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.57" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.57" From 9a49e1fa5a776d3677ace2ac470d96d1a0808c5b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 16:47:08 +0000 Subject: [PATCH 277/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index e74267ff..534efaec 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.58 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.57 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.58 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index fab158ef..1960406e 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.58 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.57 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.58 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.57" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.57" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 3528c011717e81ae72cfb8bf540a2770f0541530 Mon Sep 17 00:00:00 2001 From: jenkins Date: Wed, 29 Jul 2026 13:46:41 -0300 Subject: [PATCH 278/991] Deploy Cassandra 0.8.58 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 534efaec..5e8f6b27 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-29-0.8.57-lab-ui-batch" + cassandra.bstein.dev/redeploy: "2026-07-29-0.8.58-lab-ui-follow-through" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 1960406e..8b3227fd 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.58 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.58 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.57" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.57" + CASSANDRA_SIM_WORKER_VERSION: "0.8.58" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.58" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From f67adfc113c826630736731f2a7e44cef4db51a4 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 17:14:48 +0000 Subject: [PATCH 279/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 21600c07..5021b066 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-369 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-370 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-257-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From 0686a4fb20328fe6dd9680877206bf4c2ee26dfb Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 17:15:00 +0000 Subject: [PATCH 280/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 5e8f6b27..3c3c0a6b 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.58 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.59 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.58 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.59 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 3420538b..f10086aa 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.58 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.59 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From f870ca4d4a5a663a86f1a62785b58eaccd55125a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 17:15:58 +0000 Subject: [PATCH 281/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index bf2555f3..41f46448 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.58 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.59 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From f7ca47d19b0f1be806dc496d7cc4101405dd163c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 17:19:05 +0000 Subject: [PATCH 282/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 3c3c0a6b..4928f70d 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.58 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.59 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.58 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 8b3227fd..e823a0c4 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.58 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.59 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.58 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.58" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.58" From 14dcac0121f2fc505a59f01930a91d4c6ce8977b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 17:21:08 +0000 Subject: [PATCH 283/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 4928f70d..69b2a574 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.59 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.58 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.59 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index e823a0c4..56e53b6f 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.59 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.58 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.59 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.58" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.58" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From c60818709461c01e37dba0505a4378e67cf49221 Mon Sep 17 00:00:00 2001 From: jenkins Date: Wed, 29 Jul 2026 14:21:41 -0300 Subject: [PATCH 284/991] Deploy Cassandra 0.8.59 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 69b2a574..503a4f24 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-29-0.8.58-lab-ui-follow-through" + cassandra.bstein.dev/redeploy: "2026-07-29-0.8.59-compass-tab-persistence" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 56e53b6f..d0fccc5c 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.59 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.59 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.58" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.58" + CASSANDRA_SIM_WORKER_VERSION: "0.8.59" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.59" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 662d8a016d7caa74dc8d78d5bdfb7d6144cadadc Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 17:32:28 +0000 Subject: [PATCH 285/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 503a4f24..a0c11a74 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.59 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.60 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.59 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.60 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index f10086aa..bd365afb 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.59 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.60 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 251cd9f41b07514e677a907dfb4ce921100d8c30 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 17:33:28 +0000 Subject: [PATCH 286/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 41f46448..fddcf233 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.59 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.60 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 3485d239d3f1f12436e6c19e5bd80d99e531119d Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 17:36:34 +0000 Subject: [PATCH 287/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index a0c11a74..82179be8 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.59 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.60 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.59 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index d0fccc5c..73c0d4d4 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.59 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.60 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.59 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.59" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.59" From 117e15de1f71bbf91becf526acaea5275ec0fd66 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 17:37:34 +0000 Subject: [PATCH 288/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 82179be8..2e680de0 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.60 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.59 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.60 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 73c0d4d4..3a83100b 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.60 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.59 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.60 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.59" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.59" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From a5656291403abf5482d5a29cf17bc82e77a92b1b Mon Sep 17 00:00:00 2001 From: jenkins Date: Wed, 29 Jul 2026 14:39:52 -0300 Subject: [PATCH 289/991] Deploy Cassandra 0.8.60 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 2e680de0..21248532 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-29-0.8.59-compass-tab-persistence" + cassandra.bstein.dev/redeploy: "2026-07-29-0.8.60-empty-lab-compass-default" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 3a83100b..91805a5d 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.60 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.60 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.59" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.59" + CASSANDRA_SIM_WORKER_VERSION: "0.8.60" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.60" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From e37d0f69ea0b5f4f0d20f141862a6e9f041945b0 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 17:52:59 +0000 Subject: [PATCH 290/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index fddcf233..f46b3e41 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.60 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.61 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 9bfcc4d42c00cf677ce196ef7e089bc1851bde26 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 17:53:04 +0000 Subject: [PATCH 291/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 21248532..69ecedfe 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.60 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.61 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.60 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.61 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index bd365afb..a0861e34 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.60 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.61 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 41161ec4c795eb986a62c68fbdeab031a4d447b6 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 17:57:00 +0000 Subject: [PATCH 292/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 69ecedfe..82e6ce34 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.60 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.61 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.60 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 91805a5d..8df7e6dc 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.60 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.61 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.60 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.60" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.60" From aa9126bb497fbdd267692b7f73bbbe2c955313d6 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 17:58:01 +0000 Subject: [PATCH 293/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 82e6ce34..2dc68870 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.61 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.60 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.61 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 8df7e6dc..6a6fd5ed 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.61 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.60 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.61 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.60" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.60" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 1584fb9df7d280c47ffa2eb9358888ca259c437e Mon Sep 17 00:00:00 2001 From: jenkins Date: Wed, 29 Jul 2026 15:00:25 -0300 Subject: [PATCH 294/991] Deploy Cassandra 0.8.61 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 2dc68870..fdc850b4 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-29-0.8.60-empty-lab-compass-default" + cassandra.bstein.dev/redeploy: "2026-07-29-0.8.61-restore-keeps-compass-default" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 6a6fd5ed..d264af81 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.61 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.61 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.60" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.60" + CASSANDRA_SIM_WORKER_VERSION: "0.8.61" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.61" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 9474082b8bc3f1d427ed752ee5883f3bfe19e0d2 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 18:15:33 +0000 Subject: [PATCH 295/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index f46b3e41..bd6d8312 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.61 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.62 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 7295859cbeeef7528d557e1879994383710e193c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 18:15:38 +0000 Subject: [PATCH 296/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index fdc850b4..eb8611eb 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.61 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.62 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.61 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.62 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index a0861e34..206533f0 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.61 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.62 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From bbb1d73aeb5de79b42e6b494a80e22a5280c697e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 18:20:51 +0000 Subject: [PATCH 297/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index eb8611eb..dc12c7ce 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.61 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.62 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.61 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index d264af81..61d83e47 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.61 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.62 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.61 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.61" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.61" From eea48c0ff31e139ed7ef5b5e1e3710e9f553ed65 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 18:21:51 +0000 Subject: [PATCH 298/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index dc12c7ce..8399d31e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.62 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.61 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.62 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 61d83e47..bc52d729 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.62 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.61 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.62 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.61" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.61" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From f9ccfc910418426b9b8948a28f48c436ec56964b Mon Sep 17 00:00:00 2001 From: jenkins Date: Wed, 29 Jul 2026 15:24:11 -0300 Subject: [PATCH 299/991] Deploy Cassandra 0.8.62 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 8399d31e..359904fa 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-29-0.8.61-restore-keeps-compass-default" + cassandra.bstein.dev/redeploy: "2026-07-29-0.8.62-math-panel-scroll" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index bc52d729..35cb32b5 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.62 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.62 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.61" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.61" + CASSANDRA_SIM_WORKER_VERSION: "0.8.62" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.62" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 94ec2d7bf2cd5d221c2f509526bc292116b76ad0 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 20:02:06 +0000 Subject: [PATCH 300/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 359904fa..545a3d24 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.62 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.63 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.62 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.63 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 206533f0..fb49dee7 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.62 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.63 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 6dc3520c46b5b72c12e36b9696f5f5e7e92d545d Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 20:02:11 +0000 Subject: [PATCH 301/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index bd6d8312..19443432 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.62 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.63 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From c9272e361c541ca4dcae8e8c81797743d770439d Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 20:07:06 +0000 Subject: [PATCH 302/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 545a3d24..e5006c16 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.62 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.63 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.62 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 35cb32b5..ebf597e1 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.62 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.63 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.62 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.62" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.62" From 86f56465f48c593d36f5bd10abf336ff9a333e75 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 20:08:06 +0000 Subject: [PATCH 303/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index e5006c16..f566597b 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.63 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.62 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.63 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index ebf597e1..a5c6b675 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.63 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.62 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.63 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.62" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.62" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From b8ccec18029ff6bf57c913bc8fe06f15270d7f5e Mon Sep 17 00:00:00 2001 From: jenkins Date: Wed, 29 Jul 2026 17:10:55 -0300 Subject: [PATCH 304/991] Deploy Cassandra 0.8.63 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index f566597b..a2d21a2e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-29-0.8.62-math-panel-scroll" + cassandra.bstein.dev/redeploy: "2026-07-29-0.8.63-lab-ui-follow-through" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index a5c6b675..69a49140 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.63 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.63 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.62" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.62" + CASSANDRA_SIM_WORKER_VERSION: "0.8.63" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.63" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 94fa91c36abdae3ed88564d29050a7d86fae98de Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 21:25:31 +0000 Subject: [PATCH 305/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index a2d21a2e..ba667175 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.63 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.64 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.63 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.64 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index fb49dee7..4419e38d 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.63 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.64 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 882e0fbd1d67f76b8b6919616b44ae376a113329 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 21:26:31 +0000 Subject: [PATCH 306/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 19443432..9bacda75 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.63 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.64 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 769efb533750d8c8b128f007769001b55534173f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 21:30:05 +0000 Subject: [PATCH 307/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index ba667175..fac8197d 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.63 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.64 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.63 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 69a49140..59c39f4e 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.63 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.64 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.63 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.63" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.63" From 4ab8d171eca69821f07507ec1d8e29179843a61b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 21:31:05 +0000 Subject: [PATCH 308/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index fac8197d..33877855 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.64 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.63 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.64 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 59c39f4e..33a6da3a 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.64 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.63 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.64 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.63" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.63" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 60e4bf6f31b0ef28365e9998036e8b36cf1c4f0d Mon Sep 17 00:00:00 2001 From: jenkins Date: Wed, 29 Jul 2026 18:32:18 -0300 Subject: [PATCH 309/991] Deploy Cassandra 0.8.64 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 33877855..989d774f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-29-0.8.63-lab-ui-follow-through" + cassandra.bstein.dev/redeploy: "2026-07-29-0.8.64-card-image-rendering" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 33a6da3a..b5f17b31 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.64 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.64 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.63" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.63" + CASSANDRA_SIM_WORKER_VERSION: "0.8.64" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.64" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From c7d5521ca159dd15b42873d5f078bbbe2b105e0c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 21:46:29 +0000 Subject: [PATCH 310/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index c302ae0e..5309cbaa 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -20,7 +20,7 @@ resources: - ingress.yaml images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend - newTag: 0.1.1-427 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} + newTag: 0.1.1-428 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend newTag: 0.1.1-427 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: From 58da7bcfcf80e4d69a428f35cfdcb30225143f57 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 21:48:58 +0000 Subject: [PATCH 311/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 5309cbaa..c5b7ca42 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -22,7 +22,7 @@ images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend newTag: 0.1.1-428 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend - newTag: 0.1.1-427 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} + newTag: 0.1.1-428 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: - name: chat-ai-gateway namespace: bstein-dev-home From f0b6611cef60ac8218768f24b0200102ee0e7690 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 22:05:26 +0000 Subject: [PATCH 312/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 989d774f..4f232bc7 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.64 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.65 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.64 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.65 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 4419e38d..9be84919 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.64 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.65 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 5204800860b0342d043302034da52fc29ffddf4a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 22:05:29 +0000 Subject: [PATCH 313/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 9bacda75..44113ca0 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.64 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.65 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From c71249b84e4d5e129996858583dc997d9f318f8b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 22:09:51 +0000 Subject: [PATCH 314/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 4f232bc7..c5d3ee90 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.64 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.65 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.64 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index b5f17b31..0903b3a7 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.64 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.65 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.64 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.64" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.64" From e062ef7584db904f886a4f3c8be669ac1868bf92 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 22:11:52 +0000 Subject: [PATCH 315/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index c5d3ee90..d21e7d51 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.65 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.64 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.65 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 0903b3a7..d288f7b3 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.65 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.64 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.65 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.64" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.64" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 3db7d43cfdedefe0e9f9d8cd88b71ca8b005ce21 Mon Sep 17 00:00:00 2001 From: jenkins Date: Wed, 29 Jul 2026 19:12:20 -0300 Subject: [PATCH 316/991] Deploy Cassandra 0.8.65 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index d21e7d51..34d816e0 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-29-0.8.64-card-image-rendering" + cassandra.bstein.dev/redeploy: "2026-07-29-0.8.65-search-face-enrichment" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index d288f7b3..76ad330c 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.65 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.65 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.64" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.64" + CASSANDRA_SIM_WORKER_VERSION: "0.8.65" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.65" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 41777c212eff581566e4fe33f1524b13861655ea Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 22:46:40 +0000 Subject: [PATCH 317/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 34d816e0..8fcaadc8 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.65 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.66 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.65 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.66 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 9be84919..1d4cc2f6 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.65 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.66 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From de09c930b9e5478112c315da2f1e21666e6c5fd3 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 22:47:40 +0000 Subject: [PATCH 318/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 44113ca0..d1dcde8d 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.65 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.66 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 8655fbac6a9a986d51bd15f3c922c08eb582a32a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 22:50:48 +0000 Subject: [PATCH 319/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 8fcaadc8..e481e07c 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.65 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.66 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.65 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 76ad330c..84d3e53e 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.65 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.66 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.65 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.65" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.65" From b1cd6a45e57ebcaeaa12540466f514808b4c4883 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 22:52:10 +0000 Subject: [PATCH 320/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index e481e07c..b4e9b65e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.66 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.65 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.66 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 84d3e53e..ebdbe355 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.66 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.65 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.66 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.65" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.65" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 354f4ea1b2d0b2fc37ce2940435595545870c2e2 Mon Sep 17 00:00:00 2001 From: jenkins Date: Wed, 29 Jul 2026 19:53:00 -0300 Subject: [PATCH 321/991] Deploy Cassandra 0.8.66 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index b4e9b65e..9d06be1f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-29-0.8.65-search-face-enrichment" + cassandra.bstein.dev/redeploy: "2026-07-29-0.8.66-strategy-list-compaction" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index ebdbe355..d88bcb62 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.66 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.66 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.65" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.65" + CASSANDRA_SIM_WORKER_VERSION: "0.8.66" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.66" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From dc14de1d708bbaae8646e8abcd8f3bbe348047b0 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 23:06:07 +0000 Subject: [PATCH 322/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 9d06be1f..181b184c 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.66 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.67 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.66 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.67 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 1d4cc2f6..66b8b0c2 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.66 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.67 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From e8ce9bbfd49556285589266bd04160c00215ae2c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 23:07:07 +0000 Subject: [PATCH 323/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index d1dcde8d..338055a4 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.66 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.67 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From b9393135c7607d33dc87f2ea060b625f60e7eddd Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 23:12:21 +0000 Subject: [PATCH 324/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 181b184c..8eb579ba 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.66 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.67 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.66 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index d88bcb62..50e51f54 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.66 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.67 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.66 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.66" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.66" From ad80e5976fac66da79752a3f4e9fe5f287cb7a86 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 23:13:28 +0000 Subject: [PATCH 325/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 8eb579ba..7b3bb20b 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.67 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.66 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.67 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 50e51f54..945cbeaf 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.67 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.66 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.67 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.66" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.66" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From e2cb76de643af77db05a892f5937ba0a01656489 Mon Sep 17 00:00:00 2001 From: jenkins Date: Wed, 29 Jul 2026 20:14:13 -0300 Subject: [PATCH 326/991] Deploy Cassandra 0.8.67 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 7b3bb20b..a1512dff 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-29-0.8.66-strategy-list-compaction" + cassandra.bstein.dev/redeploy: "2026-07-29-0.8.67-route-choice-hydration" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 945cbeaf..7d76210c 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.67 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.67 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.66" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.66" + CASSANDRA_SIM_WORKER_VERSION: "0.8.67" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.67" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 8b877ce9e245142c11da58719ee5ff7c2444a570 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 23:27:21 +0000 Subject: [PATCH 327/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index a1512dff..e220e207 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.67 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.68 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.67 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.68 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 66b8b0c2..f1e35276 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.67 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.68 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 325a906a88648bcbdf46dfef08e55468dc0c2f81 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 23:27:32 +0000 Subject: [PATCH 328/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 338055a4..91b7e60a 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.67 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.68 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 9d52082cd0c0828df008a4b8b1a0a1122adf9aa8 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 23:30:48 +0000 Subject: [PATCH 329/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index e220e207..a68ddfc7 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.67 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.68 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.67 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 7d76210c..e49762b6 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.67 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.68 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.67 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.67" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.67" From fc0b0f93ef611057b8ce71a0d569832792066263 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 23:31:56 +0000 Subject: [PATCH 330/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index a68ddfc7..ea30fc0f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.68 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.67 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.68 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index e49762b6..a19bf762 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.68 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.67 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.68 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.67" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.67" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 09f55e281a05c85f64a228e10f61e2231159362b Mon Sep 17 00:00:00 2001 From: jenkins Date: Wed, 29 Jul 2026 20:33:27 -0300 Subject: [PATCH 331/991] Deploy Cassandra 0.8.68 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index ea30fc0f..d74d28c5 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-29-0.8.67-route-choice-hydration" + cassandra.bstein.dev/redeploy: "2026-07-29-0.8.68-list-metadata-whitelist" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index a19bf762..a03d7826 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.68 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.68 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.67" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.67" + CASSANDRA_SIM_WORKER_VERSION: "0.8.68" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.68" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 6f8e46f8876c6ad793acba31a90dd9007b3497c5 Mon Sep 17 00:00:00 2001 From: jenkins Date: Wed, 29 Jul 2026 20:47:15 -0300 Subject: [PATCH 332/991] Deploy Cassandra 0.8.69 --- services/cassandra/backend-deployment.yaml | 10 +++++----- services/cassandra/configmap.yaml | 8 ++++---- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 4 files changed, 11 insertions(+), 11 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index d74d28c5..d6eadecc 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-29-0.8.68-list-metadata-whitelist" + cassandra.bstein.dev/redeploy: "2026-07-29-0.8.69-route-choice-direct-load" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.68 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.69 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.68 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.69 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -104,9 +104,9 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.68 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.69 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.68 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.69 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index a03d7826..35f3df25 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,10 +19,10 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.68 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.68 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.68" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.68" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.69 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.69 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.69" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.69" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 91b7e60a..fa4931de 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.68 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.69 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index f1e35276..f2555025 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.68 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.69 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From a6dc7a2272759745faefd3611952bd5a5531f6b4 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 23:48:20 +0000 Subject: [PATCH 333/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 8 ++++---- services/cassandra/configmap.yaml | 4 ++-- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 4 files changed, 8 insertions(+), 8 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index d6eadecc..d6ca5567 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.69 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.68 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.69 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.68 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -104,9 +104,9 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.69 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.68 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.69 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.68 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 35f3df25..e321afb1 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,8 +19,8 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.69 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.69 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.68 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.68 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.69" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.69" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index fa4931de..91b7e60a 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.69 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.68 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index f2555025..f1e35276 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.69 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.68 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 217ecfe9ca9d988db564eb986d5e199afad0f02e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 23:48:31 +0000 Subject: [PATCH 334/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index d6ca5567..8bba6b16 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.68 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.69 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.68 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.69 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index f1e35276..f2555025 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.68 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.69 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From e164d8074df98aef9d04eb29c0c9efa8279a5388 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 23:49:31 +0000 Subject: [PATCH 335/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 91b7e60a..fa4931de 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.68 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.69 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From f890075d1fc4e5add2a4c9a2ad9333e9ae39959c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 23:52:33 +0000 Subject: [PATCH 336/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 8bba6b16..7e4f7771 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.68 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.69 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.68 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index e321afb1..3c056b2b 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.68 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.69 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.68 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.69" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.69" From 644ed3c4406cbac2c9576cc50e0ea449ef45dbc9 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 29 Jul 2026 23:53:39 +0000 Subject: [PATCH 337/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 7e4f7771..d6eadecc 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.69 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.68 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.69 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 3c056b2b..35f3df25 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.69 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.68 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.69 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.69" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.69" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 187cc06643b5340e96943ff064f5fff3ccaed5b9 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 00:13:46 +0000 Subject: [PATCH 338/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index d6eadecc..833e47b3 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.69 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.70 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.69 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.70 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index f2555025..71ecae07 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.69 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.70 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From a349e627bc373346292a3ba43701e4b0e05159c1 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 00:14:45 +0000 Subject: [PATCH 339/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index fa4931de..219c72b8 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.69 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.70 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From fcafbc0fcfda56b99e30a5c6bc01c8fb730fe306 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 00:18:00 +0000 Subject: [PATCH 340/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 833e47b3..2ec36d5f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.69 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.70 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.69 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 35f3df25..34ba8800 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.69 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.70 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.69 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.69" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.69" From 9e091f77d4d43af04b4eb7ad3ace4e68e3c29365 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 00:20:01 +0000 Subject: [PATCH 341/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 2ec36d5f..8becc359 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.70 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.69 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.70 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 34ba8800..d2416211 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.70 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.69 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.70 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.69" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.69" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From d5ea7d08aa6b8d4390c783bd99fe6981098b21d6 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 00:22:00 +0000 Subject: [PATCH 342/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 8becc359..32901622 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.70 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.71 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.70 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.71 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 71ecae07..96dcdb0c 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.70 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.71 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 45fcd4f47734f0719f1d2c63651dfe82b178445c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 00:23:02 +0000 Subject: [PATCH 343/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 219c72b8..fdfcc0bd 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.70 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.71 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 94006b5d60452f963c4fae300a4fe10c658f6c0f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 00:26:06 +0000 Subject: [PATCH 344/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 32901622..4512449f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.70 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.71 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.70 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index d2416211..294eeaca 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.70 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.71 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.70 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.69" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.69" From de36d8c0e4a4a4ef21c76ea0866b5982616ce545 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 00:28:09 +0000 Subject: [PATCH 345/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 4512449f..f8df0e77 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.71 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.70 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.71 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 294eeaca..dd59f48b 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.71 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.70 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.71 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.69" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.69" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 99e0f6fa0f3a5ef21f24d4ea0a5ac9a1c14c7601 Mon Sep 17 00:00:00 2001 From: jenkins Date: Wed, 29 Jul 2026 21:28:37 -0300 Subject: [PATCH 346/991] Deploy Cassandra 0.8.71 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index f8df0e77..ce0a43be 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-29-0.8.69-route-choice-direct-load" + cassandra.bstein.dev/redeploy: "2026-07-29-0.8.71-lab-first-paint" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index dd59f48b..65da9e44 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.71 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.71 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.69" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.69" + CASSANDRA_SIM_WORKER_VERSION: "0.8.71" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.71" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 67e6f72c8d8f35e21bac15108b206ec8c0aabf43 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 00:50:57 +0000 Subject: [PATCH 347/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index ce0a43be..0cc748d5 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.71 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.72 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.71 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.72 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 96dcdb0c..a58573f4 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.71 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.72 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From e415be9f4d4401726fa548963e6a3f7914d5aa32 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 00:51:57 +0000 Subject: [PATCH 348/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index fdfcc0bd..87509a72 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.71 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.72 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 197ff3980eb286f4b6a16c8511892b3fce086478 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 00:54:57 +0000 Subject: [PATCH 349/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 0cc748d5..b6bad572 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.71 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.72 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.71 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 65da9e44..130604f9 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.71 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.72 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.71 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.71" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.71" From 69df21cf913afe2287bdf905f68ba06f2e078faa Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 00:55:57 +0000 Subject: [PATCH 350/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index b6bad572..06811d8c 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.72 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.71 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.72 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 130604f9..060515fe 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.72 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.71 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.72 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.71" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.71" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 87ee15f5a7397e92e671624f4814b79fed40f135 Mon Sep 17 00:00:00 2001 From: jenkins Date: Wed, 29 Jul 2026 21:57:15 -0300 Subject: [PATCH 351/991] Deploy Cassandra 0.8.72 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 06811d8c..0e2e93b8 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-29-0.8.71-lab-first-paint" + cassandra.bstein.dev/redeploy: "2026-07-29-0.8.72-lab-detail-first-paint" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 060515fe..77684485 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.72 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.72 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.71" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.71" + CASSANDRA_SIM_WORKER_VERSION: "0.8.72" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.72" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 69d18e75b7835f7ce589731a7854502df9a24419 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 01:22:03 +0000 Subject: [PATCH 352/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 0e2e93b8..07739bdc 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.72 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.73 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.72 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.73 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index a58573f4..2999481e 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.72 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.73 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 6937d0b25fedad4cd8f8e672e9f34701b5eab22b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 01:22:27 +0000 Subject: [PATCH 353/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 87509a72..6a128a3d 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.72 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.73 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 7bc4f2f9873044c1a8762f7b873dc6859994aa2d Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 01:27:32 +0000 Subject: [PATCH 354/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 07739bdc..31f06f69 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.72 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.73 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.72 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 77684485..e85a37e1 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.72 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.73 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.72 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.72" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.72" From b3859b21d8dc86a65b45eafda98efb06e205e63f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 01:28:59 +0000 Subject: [PATCH 355/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 31f06f69..b77490e5 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.73 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.72 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.73 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index e85a37e1..4ce03a3c 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.73 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.72 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.73 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.72" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.72" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 378dab36d64430d02ef10c32ca7a0883eb801040 Mon Sep 17 00:00:00 2001 From: jenkins Date: Wed, 29 Jul 2026 22:30:14 -0300 Subject: [PATCH 356/991] Deploy Cassandra 0.8.73 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index b77490e5..d8628682 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-29-0.8.72-lab-detail-first-paint" + cassandra.bstein.dev/redeploy: "2026-07-29-0.8.73-lab-proxy-lazy-mount" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 4ce03a3c..9c289d15 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.73 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.73 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.72" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.72" + CASSANDRA_SIM_WORKER_VERSION: "0.8.73" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.73" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 4753f106f1cdc9e314b3c2d77a71e688a5c19a3b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 01:38:33 +0000 Subject: [PATCH 357/991] chore(maintenance): automated image update --- services/maintenance/metis-configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 55177bb7..0c9219bd 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -15,7 +15,7 @@ data: METIS_MAX_DEVICE_BYTES: "1000000000000" METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" - METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-257-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} + METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-258-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-257-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis From 89d345e25df9d755f684f6e6840afa9784990716 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 01:41:36 +0000 Subject: [PATCH 358/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-amd64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-amd64-daemonset.yaml b/services/maintenance/metis-sentinel-amd64-daemonset.yaml index 69ad98e9..5f8d17d8 100644 --- a/services/maintenance/metis-sentinel-amd64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-amd64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: amd64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-257-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-258-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} imagePullPolicy: Always envFrom: - configMapRef: From 909b1de0d454c7cdc1151f58826e80cf80a93d48 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 01:45:55 +0000 Subject: [PATCH 359/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- services/maintenance/metis-configmap.yaml | 2 +- services/maintenance/metis-sentinel-arm64-daemonset.yaml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 5021b066..14f6de9e 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -54,7 +54,7 @@ images: - name: registry.bstein.dev/bstein/ariadne newTag: 0.1.0-370 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis - newTag: 0.1.0-257-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} + newTag: 0.1.0-258-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria newTag: 0.1.0-120 # {"$imagepolicy": "maintenance:soteria:tag"} configMapGenerator: diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 0c9219bd..2cfeb327 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -16,7 +16,7 @@ data: METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-258-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} - METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-257-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} + METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-258-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0 diff --git a/services/maintenance/metis-sentinel-arm64-daemonset.yaml b/services/maintenance/metis-sentinel-arm64-daemonset.yaml index 21fefa7c..957c58cf 100644 --- a/services/maintenance/metis-sentinel-arm64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-arm64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: arm64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-257-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-258-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} imagePullPolicy: Always envFrom: - configMapRef: From 34cc031e415e0afa5ce215438bae251fd885ae0f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 01:50:16 +0000 Subject: [PATCH 360/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index d8628682..5383bb74 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.73 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.74 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.73 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.74 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 2999481e..2c3192b7 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.73 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.74 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From f138118e1e53b65346cfcce367aac45d44e3a44e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 01:51:16 +0000 Subject: [PATCH 361/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 6a128a3d..70c6c044 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.73 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.74 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 65e1649758cda25fcb24a4c7e8c752fe554d6bad Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 01:54:17 +0000 Subject: [PATCH 362/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 5383bb74..36c4e578 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.73 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.74 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.73 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 9c289d15..81b8727a 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.73 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.74 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.73 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.73" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.73" From c3ee27a309f5cb7662d6dcbd858b9d8fa23a0a86 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 01:56:45 +0000 Subject: [PATCH 363/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 36c4e578..81e3895d 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.74 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.73 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.74 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 81b8727a..54c3d67e 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.74 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.73 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.74 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.73" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.73" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 4c1a36aefea173c0d2c9f4715e70db9a4f9b94cc Mon Sep 17 00:00:00 2001 From: jenkins Date: Wed, 29 Jul 2026 22:58:38 -0300 Subject: [PATCH 364/991] Deploy Cassandra 0.8.74 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 81e3895d..ff8243b9 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-29-0.8.73-lab-proxy-lazy-mount" + cassandra.bstein.dev/redeploy: "2026-07-29-0.8.74-lab-search-catalog-gate" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 54c3d67e..11b5f908 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.74 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.74 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.73" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.73" + CASSANDRA_SIM_WORKER_VERSION: "0.8.74" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.74" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From dd2e8ba62495517504c318cd122b14b78defae60 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 02:12:26 +0000 Subject: [PATCH 365/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index ff8243b9..70f9641a 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.74 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.75 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.74 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.75 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 2c3192b7..06417585 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.74 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.75 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 17df3b35238fdfeec889e0373d02f7378e87a2dc Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 02:13:26 +0000 Subject: [PATCH 366/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 70c6c044..9ca93a11 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.74 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.75 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 0e2b21b2c13a7895c5190c66a247b701c9046e1e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 02:16:41 +0000 Subject: [PATCH 367/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 70f9641a..069a9b29 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.74 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.75 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.74 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 11b5f908..fd896523 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.74 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.75 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.74 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.74" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.74" From b1bbd37a4415393a5246831a97ff37072fda629e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 02:18:44 +0000 Subject: [PATCH 368/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 069a9b29..f1b17711 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.75 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.74 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.75 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index fd896523..db0e31e0 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.75 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.74 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.75 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.74" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.74" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From d00e3604188949de5ff9502a13f8deda3b28563c Mon Sep 17 00:00:00 2001 From: jenkins Date: Wed, 29 Jul 2026 23:20:14 -0300 Subject: [PATCH 369/991] Deploy Cassandra 0.8.75 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index f1b17711..f21e1e64 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-29-0.8.74-lab-search-catalog-gate" + cassandra.bstein.dev/redeploy: "2026-07-29-0.8.75-lab-search-alias-index" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index db0e31e0..b9d6ab33 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.75 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.75 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.74" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.74" + CASSANDRA_SIM_WORKER_VERSION: "0.8.75" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.75" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 683e0b1bfd7a3fcdb9d986eb26ba786b500816ef Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 02:42:25 +0000 Subject: [PATCH 370/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index f21e1e64..ad6f7fea 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.75 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.76 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.75 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.76 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 06417585..b438eb1d 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.75 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.76 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 44142c02bc8f549114a1711f34c168fef440f70b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 02:43:14 +0000 Subject: [PATCH 371/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 9ca93a11..671596f1 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.75 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.76 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From a9ef9e4cf44368fa41604b0d42644ad4fabe0057 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 02:46:29 +0000 Subject: [PATCH 372/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index ad6f7fea..170f1fa7 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.75 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.76 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.75 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index b9d6ab33..bc1745cf 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.75 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.76 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.75 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.75" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.75" From 01e46e65aa3938d99d57e006f01b1004c99d33cd Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 02:48:30 +0000 Subject: [PATCH 373/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 170f1fa7..db772310 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.76 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.75 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.76 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index bc1745cf..af50ec1a 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.76 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.75 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.76 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.75" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.75" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 4798a41d3cbad6996c839afe57545c8d51b99d1d Mon Sep 17 00:00:00 2001 From: jenkins Date: Wed, 29 Jul 2026 23:49:15 -0300 Subject: [PATCH 374/991] Deploy Cassandra 0.8.76 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index db772310..76706972 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-29-0.8.75-lab-search-alias-index" + cassandra.bstein.dev/redeploy: "2026-07-29-0.8.76-lab-search-no-full-hydration" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index af50ec1a..76b07c6b 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.76 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.76 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.75" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.75" + CASSANDRA_SIM_WORKER_VERSION: "0.8.76" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.76" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From eb23a418e62fdac68023d0dc18b8a50221de9dea Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 03:01:57 +0000 Subject: [PATCH 375/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 76706972..87837f85 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.76 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.77 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.76 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.77 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index b438eb1d..5b4a90b5 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.76 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.77 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From b47f7ca93ec5dc639cdfb6e5be9d5098d6935242 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 03:02:56 +0000 Subject: [PATCH 376/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 671596f1..73b1e8c0 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.76 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.77 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From e11ec96f9197c675da72ffb5b5a745c9d804a11d Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 03:06:25 +0000 Subject: [PATCH 377/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 87837f85..9438ce39 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.76 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.77 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.76 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 76b07c6b..698e1c76 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.76 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.77 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.76 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.76" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.76" From 5cf7a2083bf5347ee9afdef6e3b2465392f2754a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 03:07:25 +0000 Subject: [PATCH 378/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 9438ce39..d2d716f6 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.77 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.76 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.77 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 698e1c76..095e4b9c 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.77 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.76 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.77 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.76" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.76" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 015f50e5d86089b1217934d4a4c826401c77f89c Mon Sep 17 00:00:00 2001 From: jenkins Date: Thu, 30 Jul 2026 00:09:06 -0300 Subject: [PATCH 379/991] Deploy Cassandra 0.8.77 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index d2d716f6..54edee9d 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-29-0.8.76-lab-search-no-full-hydration" + cassandra.bstein.dev/redeploy: "2026-07-30-0.8.77-lab-search-indexed-alias-scan" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 095e4b9c..4884c131 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.77 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.77 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.76" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.76" + CASSANDRA_SIM_WORKER_VERSION: "0.8.77" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.77" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 9954e763ea06f73ca0c1ef33ada6857887f0d5db Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 03:37:10 +0000 Subject: [PATCH 380/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 54edee9d..eea21115 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.77 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.78 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.77 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.78 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 5b4a90b5..cc3da164 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.77 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.78 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 443dfd705cabaa8e17cf8d4929b28eb74da54dcb Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 03:38:10 +0000 Subject: [PATCH 381/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 73b1e8c0..ec1a80ff 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.77 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.78 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 3d96aefe39c043129c0aeb7f46d1bc15151cf4e6 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 03:43:25 +0000 Subject: [PATCH 382/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index eea21115..a0cb7371 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.77 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.78 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.77 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 4884c131..c49a5f9a 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.77 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.78 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.77 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.77" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.77" From a80c5b2f1266eea68f651d5774198fc4727c0b3e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 03:45:25 +0000 Subject: [PATCH 383/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index a0cb7371..6e11eb48 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.78 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.77 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.78 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index c49a5f9a..3c7e0b5f 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.78 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.77 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.78 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.77" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.77" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 8e9107783dd27cf309c40a3f781e96036e003e10 Mon Sep 17 00:00:00 2001 From: jenkins Date: Thu, 30 Jul 2026 00:47:17 -0300 Subject: [PATCH 384/991] Deploy Cassandra 0.8.78 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 6e11eb48..f15e9ddc 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-30-0.8.77-lab-search-indexed-alias-scan" + cassandra.bstein.dev/redeploy: "2026-07-30-0.8.78-prepare-front-only-images" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 3c7e0b5f..13918840 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.78 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.78 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.77" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.77" + CASSANDRA_SIM_WORKER_VERSION: "0.8.78" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.78" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 3d5c2bade38aafa03d99daded5b08238beef7184 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 04:01:03 +0000 Subject: [PATCH 385/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index ec1a80ff..d871b089 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.78 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.79 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 2bef5c602d29580b0edd3b8d3f8f5955040504e7 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 04:01:08 +0000 Subject: [PATCH 386/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index f15e9ddc..5547a544 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.78 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.79 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.78 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.79 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index cc3da164..329682ea 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.78 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.79 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From eeb05cc008be11050b3de9180586263be6f94043 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 04:05:05 +0000 Subject: [PATCH 387/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 5547a544..028e18c2 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.78 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.79 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.78 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 13918840..2c2546e5 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.78 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.79 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.78 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.78" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.78" From 69ae31eb6e676982c8a273a068f169d30f719299 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 04:06:19 +0000 Subject: [PATCH 388/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 028e18c2..1fae8dbb 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.79 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.78 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.79 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 2c2546e5..cc95349f 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.79 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.78 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.79 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.78" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.78" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 26f7fcd2e81e32564371e332d055e142e6b67961 Mon Sep 17 00:00:00 2001 From: jenkins Date: Thu, 30 Jul 2026 01:08:40 -0300 Subject: [PATCH 389/991] Deploy Cassandra 0.8.79 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 1fae8dbb..5087fea3 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-30-0.8.78-prepare-front-only-images" + cassandra.bstein.dev/redeploy: "2026-07-30-0.8.79-parent-only-face-images" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index cc95349f..bef23995 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.79 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.79 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.78" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.78" + CASSANDRA_SIM_WORKER_VERSION: "0.8.79" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.79" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 99e49b1981dab65e2ea22e9422404aef82580f19 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 04:21:55 +0000 Subject: [PATCH 390/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index d871b089..37dc4a12 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.79 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.80 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From c9fc154e675efa79f30a9bab4996c90347342fc6 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 04:21:59 +0000 Subject: [PATCH 391/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 5087fea3..a61258eb 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.79 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.80 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.79 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.80 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 329682ea..09575af5 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.79 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.80 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 36b5828d55bce731cbdf172896eeb646dcbdba57 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 04:24:56 +0000 Subject: [PATCH 392/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index a61258eb..a57a22e2 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.79 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.80 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.79 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index bef23995..479b106a 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.79 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.80 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.79 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.79" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.79" From 9913314ef54578f694aff146e84ee75021c715d4 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 04:26:56 +0000 Subject: [PATCH 393/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index a57a22e2..b3a71e3f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.80 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.79 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.80 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 479b106a..69398fc1 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.80 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.79 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.80 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.79" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.79" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 3ebd63f711d2791f08810e9ead9b54fe295279ef Mon Sep 17 00:00:00 2001 From: jenkins Date: Thu, 30 Jul 2026 01:27:32 -0300 Subject: [PATCH 394/991] Deploy Cassandra 0.8.80 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index b3a71e3f..4d1b69aa 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-30-0.8.79-parent-only-face-images" + cassandra.bstein.dev/redeploy: "2026-07-30-0.8.80-explicit-proxy-back-images" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 69398fc1..fdc81dd9 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.80 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.80 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.79" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.79" + CASSANDRA_SIM_WORKER_VERSION: "0.8.80" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.80" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 7d8c1cf5cdc4a309ee1968e3f578f554f2589337 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 04:41:16 +0000 Subject: [PATCH 395/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 4d1b69aa..41ad7936 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.80 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.81 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.80 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.81 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 09575af5..b4050ef8 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.80 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.81 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 4e58315e594a91f6a1556cf661a0fdad9e581c55 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 04:42:16 +0000 Subject: [PATCH 396/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 37dc4a12..b6f58d75 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.80 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.81 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From a860e4c80029d423786df2813ebc2a471eff0e64 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 04:46:18 +0000 Subject: [PATCH 397/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 41ad7936..999e813d 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.80 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.81 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.80 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index fdc81dd9..a482c943 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.80 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.81 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.80 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.80" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.80" From b6b85c1eb5474e0f460d78b57d0e64b20c2167bf Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 04:49:18 +0000 Subject: [PATCH 398/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 999e813d..e5a4b8db 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.81 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.80 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.81 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index a482c943..dd17b037 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.81 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.80 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.81 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.80" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.80" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 6532439255f0b78184606dec7fe6fd29f5e20ab2 Mon Sep 17 00:00:00 2001 From: jenkins Date: Thu, 30 Jul 2026 01:50:33 -0300 Subject: [PATCH 399/991] Deploy Cassandra 0.8.81 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index e5a4b8db..75efe43f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-30-0.8.80-explicit-proxy-back-images" + cassandra.bstein.dev/redeploy: "2026-07-30-0.8.81-explicit-face-image-helper" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index dd17b037..4d606a64 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.81 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.81 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.80" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.80" + CASSANDRA_SIM_WORKER_VERSION: "0.8.81" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.81" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 58fe6b711e84be8d6bd1a11367b527a3d47be892 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 05:03:43 +0000 Subject: [PATCH 400/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 75efe43f..f265e5dd 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.81 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.82 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.81 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.82 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index b4050ef8..5b72fced 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.81 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.82 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 2d249ef3f6ef3bcccc7c01238ff67a497c67354c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 05:04:42 +0000 Subject: [PATCH 401/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index b6f58d75..031b817d 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.81 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.82 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 02eb0c9fb28001686980bdac936e8b3db9791fae Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 05:09:41 +0000 Subject: [PATCH 402/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index f265e5dd..8044eded 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,9 +104,9 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.81 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.82 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.81 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.82 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 4d606a64..d8d36c06 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,8 +19,8 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.81 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.81 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.82 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.82 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.81" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.81" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From bec6c88d41cb1f018c631237c7d9e3ef47b799f0 Mon Sep 17 00:00:00 2001 From: jenkins Date: Thu, 30 Jul 2026 02:09:52 -0300 Subject: [PATCH 403/991] Deploy Cassandra 0.8.82 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 8044eded..124005b1 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-30-0.8.81-explicit-face-image-helper" + cassandra.bstein.dev/redeploy: "2026-07-30-0.8.82-face-specific-proxy-backs" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index d8d36c06..f3f2b993 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.82 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.82 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.81" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.81" + CASSANDRA_SIM_WORKER_VERSION: "0.8.82" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.82" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 96114b136d2ed3b139f583f55ecd7794a23df3b6 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 05:15:18 +0000 Subject: [PATCH 404/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 14f6de9e..eb1f3bae 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-370 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-371 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-258-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From e19dafed8dfd5a52d6210993a933e035876269db Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 05:46:25 +0000 Subject: [PATCH 405/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 124005b1..f6c249f1 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.82 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.83 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.82 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.83 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 5b72fced..3d71fc80 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.82 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.83 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 9fd011abd5f5fb1c702df048fd6878e95c8813a9 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 05:46:54 +0000 Subject: [PATCH 406/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 031b817d..9a72bc71 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.82 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.83 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 34531fcee855ef5f56505bd115f97540d1d30b3e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 05:50:25 +0000 Subject: [PATCH 407/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index f6c249f1..ccd43540 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.82 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.83 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.82 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index f3f2b993..328af171 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.82 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.83 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.82 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.82" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.82" From 37dd4218d552f3ee3c1eedfe24ed1da8a8abc830 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 05:52:56 +0000 Subject: [PATCH 408/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index ccd43540..92b5500f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.83 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.82 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.83 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 328af171..c70ca13b 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.83 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.82 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.83 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.82" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.82" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 2c3a593078fb44f0e0cf20c547b02e2ad7f44a50 Mon Sep 17 00:00:00 2001 From: jenkins Date: Thu, 30 Jul 2026 03:00:58 -0300 Subject: [PATCH 409/991] Deploy Cassandra 0.8.83 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 92b5500f..9e6d4f77 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-30-0.8.82-face-specific-proxy-backs" + cassandra.bstein.dev/redeploy: "2026-07-30-0.8.83-lab-ui-finish" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index c70ca13b..de3b176c 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.83 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.83 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.82" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.82" + CASSANDRA_SIM_WORKER_VERSION: "0.8.83" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.83" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 5eb14400f73870fca25be4e3d9af8022934147bc Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 06:36:31 +0000 Subject: [PATCH 410/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 9e6d4f77..3f552944 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.83 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.84 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.83 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.84 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 3d71fc80..3cdcba8b 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.83 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.84 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From afa7cc046735a1ac178e7ef449d94d652952fe8d Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 06:37:01 +0000 Subject: [PATCH 411/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 9a72bc71..9dc8c6d6 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.83 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.84 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 21697c1322b8efc2c750f8cf3f185e618b304659 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 06:40:26 +0000 Subject: [PATCH 412/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 3f552944..3d79b4b8 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.83 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.84 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.83 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index de3b176c..218c6e3c 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.83 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.84 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.83 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.83" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.83" From 6fbc057669d89096bbb6d9d9428a4f6809c831f5 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 06:41:05 +0000 Subject: [PATCH 413/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 3d79b4b8..7b7b986e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.84 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.83 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.84 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 218c6e3c..85bc0e27 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.84 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.83 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.84 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.83" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.83" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 7280231e9221d9dd3ca289d41aadf571d0a958d4 Mon Sep 17 00:00:00 2001 From: jenkins Date: Thu, 30 Jul 2026 04:09:36 -0300 Subject: [PATCH 414/991] Deploy Cassandra 0.8.84 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 7b7b986e..92215a8f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-30-0.8.83-lab-ui-finish" + cassandra.bstein.dev/redeploy: "2026-07-30-0.8.84-card-catalog-refresh" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 85bc0e27..33bde0ba 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.84 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.84 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.83" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.83" + CASSANDRA_SIM_WORKER_VERSION: "0.8.84" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.84" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 5ab7e4c37cec1a4258dc7a13e02485bf8e37fb13 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 08:51:18 +0000 Subject: [PATCH 415/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 9dc8c6d6..56ffa5a7 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.84 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.85 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From d9b62e0ed78bf1d71a7eb7491c17a3d6edf0a0a1 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 08:51:23 +0000 Subject: [PATCH 416/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 92215a8f..45af2496 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.84 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.85 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.84 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.85 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 3cdcba8b..6fd7e5a4 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.84 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.85 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 49e8b8e0afe10cc4bcfd78ecc12c31ec3a535367 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 08:55:20 +0000 Subject: [PATCH 417/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 45af2496..69233e06 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.84 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.85 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.84 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 33bde0ba..0eb970ac 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.84 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.85 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.84 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.84" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.84" From 23f0eccc45d8654879aacb8b8bc9d77a7c283a09 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 08:57:23 +0000 Subject: [PATCH 418/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 69233e06..1e87c1dd 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.85 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.84 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.85 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 0eb970ac..c359137c 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.85 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.84 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.85 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.84" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.84" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From d6756846085fa209065d0b25a1873ceec5a94123 Mon Sep 17 00:00:00 2001 From: jenkins Date: Thu, 30 Jul 2026 05:59:35 -0300 Subject: [PATCH 419/991] Deploy Cassandra 0.8.85 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 1e87c1dd..ab8cb947 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-30-0.8.84-card-catalog-refresh" + cassandra.bstein.dev/redeploy: "2026-07-30-0.8.85-lab-generator-recovery" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index c359137c..9f4032a5 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.85 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.85 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.84" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.84" + CASSANDRA_SIM_WORKER_VERSION: "0.8.85" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.85" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 24ced2402767c396528c6350417803f5d102f499 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 09:34:16 +0000 Subject: [PATCH 420/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 56ffa5a7..1450d9d6 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.85 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.86 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 0d159c9044cfbf5f9709f083f10e694cff72bb0c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 09:34:20 +0000 Subject: [PATCH 421/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index ab8cb947..e916e745 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.85 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.86 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.85 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.86 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 6fd7e5a4..2f6309e8 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.85 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.86 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From e39b80e601ff28891f6df683dcae48e70c05b801 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 09:37:19 +0000 Subject: [PATCH 422/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index e916e745..9510a319 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.85 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.86 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.85 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 9f4032a5..2479926b 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.85 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.86 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.85 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.85" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.85" From ef782093293cf89a7fb742024085120a5e3cd62b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 09:38:19 +0000 Subject: [PATCH 423/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 9510a319..367509b2 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.86 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.85 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.86 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 2479926b..d17c7444 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.86 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.85 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.86 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.85" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.85" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From c9f697667d67a03d43d02147db4334eab69d2dc2 Mon Sep 17 00:00:00 2001 From: jenkins Date: Thu, 30 Jul 2026 06:41:05 -0300 Subject: [PATCH 424/991] Deploy Cassandra 0.8.86 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 367509b2..e2cd338b 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-30-0.8.85-lab-generator-recovery" + cassandra.bstein.dev/redeploy: "2026-07-30-0.8.86-authoring-fallback" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index d17c7444..fddb4d2e 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.86 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.86 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.85" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.85" + CASSANDRA_SIM_WORKER_VERSION: "0.8.86" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.86" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 6be623c37a7b674455171310fc2e19431adbb89c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 09:46:49 +0000 Subject: [PATCH 425/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index c5b7ca42..7b6d3b4f 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -20,7 +20,7 @@ resources: - ingress.yaml images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend - newTag: 0.1.1-428 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} + newTag: 0.1.1-429 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend newTag: 0.1.1-428 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: From 8abbc76ddef89abc8c5c731af7cae63ed41a369f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 09:49:10 +0000 Subject: [PATCH 426/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 7b6d3b4f..8616853f 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -22,7 +22,7 @@ images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend newTag: 0.1.1-429 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend - newTag: 0.1.1-428 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} + newTag: 0.1.1-429 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: - name: chat-ai-gateway namespace: bstein-dev-home From b183983cf568c48148a82fa8794c30d699aacfcd Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 10:34:08 +0000 Subject: [PATCH 427/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index e2cd338b..4d2f4629 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.86 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.87 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.86 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.87 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 2f6309e8..456f70a4 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.86 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.87 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From e890a56d2806a32cc0513ba040cdbc761a6cdefd Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 10:35:07 +0000 Subject: [PATCH 428/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 1450d9d6..4a9f9ff1 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.86 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.87 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From e230c69f5d67936ee67e47b6b3f0084e400a3157 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 10:38:10 +0000 Subject: [PATCH 429/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 4d2f4629..66265558 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.86 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.87 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.86 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index fddb4d2e..4e890837 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.86 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.87 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.86 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.86" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.86" From 24ba50e098b5e9ea8723566dea44a584511eb364 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 10:40:10 +0000 Subject: [PATCH 430/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 66265558..5c7abd55 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.87 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.86 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.87 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 4e890837..be04c214 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.87 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.86 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.87 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.86" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.86" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From a755d222d0a96aae2eb372fc342d53ca261efc6b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 11:14:44 +0000 Subject: [PATCH 431/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 5c7abd55..55ca9a75 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.87 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.88 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.87 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.88 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 456f70a4..0ddf82f3 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.87 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.88 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From ea31fe0c6d1331e390e576ada2e32e71f59784b9 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 11:15:44 +0000 Subject: [PATCH 432/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 4a9f9ff1..11825c15 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.87 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.88 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 424d3c4c4532f7c11c04819bac4024b34843d8ed Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 11:17:47 +0000 Subject: [PATCH 433/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 55ca9a75..d4e2b789 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.87 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.88 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.87 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index be04c214..7dd892c0 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.87 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.88 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.87 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.86" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.86" From 1de20e18341e40acb723b60bcf0c4aa0abd64005 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 11:20:02 +0000 Subject: [PATCH 434/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index d4e2b789..cafe1129 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.88 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.87 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.88 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 7dd892c0..f93529b5 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.88 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.87 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.88 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.86" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.86" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 53f3de397c80045270278b4c681f9656f9b8f4e7 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 11:56:39 +0000 Subject: [PATCH 435/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 11825c15..ee5ac174 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.88 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.89 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 02e10dcd8c8a2755c3cb75c608842383bb6c2384 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 11:56:44 +0000 Subject: [PATCH 436/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index cafe1129..ae396be5 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.88 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.89 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.88 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.89 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 0ddf82f3..78ea290b 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.88 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.89 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From c54ea6b41fc4d7005b34940052b954a8a3af3ff2 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 11:59:47 +0000 Subject: [PATCH 437/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index ae396be5..f531b965 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.88 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.89 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.88 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index f93529b5..76067425 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.88 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.89 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.88 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.86" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.86" From 518fe0f2631f782edda1bfd6cdb42e795279b860 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 12:00:47 +0000 Subject: [PATCH 438/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index f531b965..520b4142 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.89 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.88 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.89 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 76067425..c98e4445 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.89 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.88 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.89 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.86" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.86" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From bb1e739179a17733f3a713ffadb84f2c01512a65 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 12:29:38 +0000 Subject: [PATCH 439/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index ee5ac174..dafcdf81 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.89 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.90 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 0a90062c5567e71219677129f7b6ccbd51a77fb8 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 12:29:44 +0000 Subject: [PATCH 440/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 520b4142..b8c83598 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.89 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.90 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.89 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.90 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 78ea290b..0d98cc0d 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.89 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.90 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From ae848399eed0e6d10f6f988c4534f5493c1f28bf Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 12:32:39 +0000 Subject: [PATCH 441/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index b8c83598..b103ec77 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.89 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.90 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.89 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index c98e4445..d4dd022e 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.89 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.90 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.89 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.86" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.86" From e8027e580d7cb8aa24d02423ec7fbf3067b5d002 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 12:34:39 +0000 Subject: [PATCH 442/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index b103ec77..d083064f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.90 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.89 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.90 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index d4dd022e..caf03e4c 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.90 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.89 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.90 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.86" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.86" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From f0815e16e2a9735a406ec198c5bcee496eae6d4a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 13:31:48 +0000 Subject: [PATCH 443/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index d083064f..f52ce5c4 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.90 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.91 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.90 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.91 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 0d98cc0d..065eeab0 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.90 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.91 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From e00e85a90b8cadb15eabf9a77cab3d24850c0e4c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 13:31:54 +0000 Subject: [PATCH 444/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index dafcdf81..d906b537 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.90 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.91 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 3ebe9358a89500cd18352d400ab8bfcacd97e39e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 13:35:11 +0000 Subject: [PATCH 445/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index f52ce5c4..f35e6b3c 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.90 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.91 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.90 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index caf03e4c..86e0a8f3 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.90 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.91 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.90 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.86" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.86" From e4e60188d0ddcf799e5754fb17ace195ae0ff9e2 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 13:37:13 +0000 Subject: [PATCH 446/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index f35e6b3c..1fa9e5ce 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.91 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.90 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.91 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 86e0a8f3..be3d25fa 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.91 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.90 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.91 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.86" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.86" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 54f9a67378ce6b54e616e9d925de154a0cc44146 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 13:39:27 +0000 Subject: [PATCH 447/991] chore(maintenance): automated image update --- services/maintenance/metis-configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 2cfeb327..dc26e803 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -15,7 +15,7 @@ data: METIS_MAX_DEVICE_BYTES: "1000000000000" METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" - METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-258-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} + METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-259-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-258-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis From 686864803044f970bb9ce429b6c8edd5b85b948d Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 13:41:27 +0000 Subject: [PATCH 448/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-amd64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-amd64-daemonset.yaml b/services/maintenance/metis-sentinel-amd64-daemonset.yaml index 5f8d17d8..bf8da77d 100644 --- a/services/maintenance/metis-sentinel-amd64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-amd64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: amd64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-258-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-259-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} imagePullPolicy: Always envFrom: - configMapRef: From 6d94eb39e432b3ce99afd78aad060d0c791a5b74 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 13:45:29 +0000 Subject: [PATCH 449/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- services/maintenance/metis-configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index eb1f3bae..e1e553b7 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -54,7 +54,7 @@ images: - name: registry.bstein.dev/bstein/ariadne newTag: 0.1.0-371 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis - newTag: 0.1.0-258-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} + newTag: 0.1.0-259-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria newTag: 0.1.0-120 # {"$imagepolicy": "maintenance:soteria:tag"} configMapGenerator: diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index dc26e803..e2366c44 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -16,7 +16,7 @@ data: METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-259-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} - METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-258-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} + METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-259-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0 From 7dc9b83ed89f7833666e93b6811f48ee5d6b235f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 13:46:28 +0000 Subject: [PATCH 450/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-arm64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-arm64-daemonset.yaml b/services/maintenance/metis-sentinel-arm64-daemonset.yaml index 957c58cf..e5b807d4 100644 --- a/services/maintenance/metis-sentinel-arm64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-arm64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: arm64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-258-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-259-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} imagePullPolicy: Always envFrom: - configMapRef: From e30271a139883be601a37f122adb1e7f410d3c83 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 14:08:15 +0000 Subject: [PATCH 451/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index d906b537..de7d9661 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.91 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.92 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From fcd62db0f5a63fd9c3b124396dcfe4f4b9328bc6 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 14:08:28 +0000 Subject: [PATCH 452/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 1fa9e5ce..1a101e59 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.91 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.92 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.91 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.92 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 065eeab0..68ef4f2a 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.91 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.92 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From d4711dba1974a676d1b4698bdab8d7b7f9319943 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 14:13:24 +0000 Subject: [PATCH 453/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 1a101e59..fc350374 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.91 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.92 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.91 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index be3d25fa..415b6cb8 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.91 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.92 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.91 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.86" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.86" From 38078e700e4da28f3d1752bd12f7a7b995a0caa7 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 14:14:37 +0000 Subject: [PATCH 454/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index fc350374..6c681cd5 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.92 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.91 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.92 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 415b6cb8..f3334b5a 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.92 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.91 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.92 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.86" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.86" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 447d607629b5586cc999a6d1bd4301c999f548c7 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 14:50:13 +0000 Subject: [PATCH 455/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index de7d9661..a3e6f69b 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.92 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.93 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 29f74e1bcd3966cbe28c5de830be6b39ee2f5972 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 14:50:18 +0000 Subject: [PATCH 456/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 6c681cd5..a63835f3 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.92 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.93 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.92 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.93 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 68ef4f2a..27e54861 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.92 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.93 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From d6ccd6a70c8335164ad5bdb401db7451a6a60301 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 14:54:35 +0000 Subject: [PATCH 457/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index a63835f3..2fcc754b 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.92 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.93 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.92 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index f3334b5a..6d3eaeac 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.92 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.93 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.92 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.86" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.86" From 1be4514ef7cd73766fe822be7c1c02d3a47c9a11 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 14:57:07 +0000 Subject: [PATCH 458/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 2fcc754b..61967703 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.93 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.92 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.93 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 6d3eaeac..514213b7 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.93 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.92 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.93 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.86" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.86" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 62eaea2932022e2bedae1dfae6a08279a8d23c0a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 15:22:48 +0000 Subject: [PATCH 459/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 61967703..b1872aee 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.93 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.94 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.93 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.94 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 27e54861..f0300608 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.93 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.94 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 292bb71b942db032fb7c9e5ecc54ccc82ab35244 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 15:23:50 +0000 Subject: [PATCH 460/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index a3e6f69b..91277d71 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.93 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.94 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From e2bbe700396d1700f813c04b689319c66fb245c3 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 15:27:01 +0000 Subject: [PATCH 461/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index b1872aee..babd4a31 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.93 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.94 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.93 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 514213b7..623e6d55 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.93 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.94 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.93 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.86" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.86" From f3f48d0bc4a3e24b73a07e1e226ba0425e56199e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 15:28:01 +0000 Subject: [PATCH 462/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index babd4a31..8ec9fda8 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.94 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.93 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.94 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 623e6d55..9447cf13 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.94 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.93 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.94 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.86" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.86" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From a84dbcc80d18ec60828911f67c6c161d17f2fe7f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 17:14:29 +0000 Subject: [PATCH 463/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index e1e553b7..b4724d45 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-371 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-372 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-259-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From b4a559154f4bcf2b9006ca65d2a74d89e7cbb7b5 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 21:47:17 +0000 Subject: [PATCH 464/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 8616853f..06f19eb9 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -20,7 +20,7 @@ resources: - ingress.yaml images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend - newTag: 0.1.1-429 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} + newTag: 0.1.1-430 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend newTag: 0.1.1-429 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: From ee49271eeb6cce1977ee046f0e1338592177d89c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Thu, 30 Jul 2026 21:50:20 +0000 Subject: [PATCH 465/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 06f19eb9..86f0c83c 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -22,7 +22,7 @@ images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend newTag: 0.1.1-430 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend - newTag: 0.1.1-429 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} + newTag: 0.1.1-430 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: - name: chat-ai-gateway namespace: bstein-dev-home From 7020c14ab08203805b172ee90590428d9d95c3b8 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Fri, 31 Jul 2026 01:39:33 +0000 Subject: [PATCH 466/991] chore(maintenance): automated image update --- services/maintenance/metis-configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index e2366c44..9e9a8170 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -15,7 +15,7 @@ data: METIS_MAX_DEVICE_BYTES: "1000000000000" METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" - METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-259-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} + METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-260-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-259-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis From 68d0452d01f0ffe3ab10fd48b023f663c0d900e6 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Fri, 31 Jul 2026 01:41:33 +0000 Subject: [PATCH 467/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-amd64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-amd64-daemonset.yaml b/services/maintenance/metis-sentinel-amd64-daemonset.yaml index bf8da77d..b821ba89 100644 --- a/services/maintenance/metis-sentinel-amd64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-amd64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: amd64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-259-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-260-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} imagePullPolicy: Always envFrom: - configMapRef: From 8b8c88f97cbd1448182f34ee20cec46d0c8448ad Mon Sep 17 00:00:00 2001 From: flux-bot Date: Fri, 31 Jul 2026 01:46:37 +0000 Subject: [PATCH 468/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- services/maintenance/metis-configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index b4724d45..5708e904 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -54,7 +54,7 @@ images: - name: registry.bstein.dev/bstein/ariadne newTag: 0.1.0-372 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis - newTag: 0.1.0-259-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} + newTag: 0.1.0-260-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria newTag: 0.1.0-120 # {"$imagepolicy": "maintenance:soteria:tag"} configMapGenerator: diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 9e9a8170..8ae03a55 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -16,7 +16,7 @@ data: METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-260-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} - METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-259-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} + METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-260-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0 From 292be2f183fd07f47d9f15bf999845c940a2ee90 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Fri, 31 Jul 2026 01:46:42 +0000 Subject: [PATCH 469/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-arm64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-arm64-daemonset.yaml b/services/maintenance/metis-sentinel-arm64-daemonset.yaml index e5b807d4..9c491d29 100644 --- a/services/maintenance/metis-sentinel-arm64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-arm64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: arm64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-259-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-260-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} imagePullPolicy: Always envFrom: - configMapRef: From ca476174bbb9c336abe8bb0994069cd020f06c6d Mon Sep 17 00:00:00 2001 From: flux-bot Date: Fri, 31 Jul 2026 05:15:39 +0000 Subject: [PATCH 470/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 5708e904..d091b4af 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-372 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-373 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-260-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From 78b2d34d1b7ea858542af36a1977397a0a1102e4 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Fri, 31 Jul 2026 09:45:58 +0000 Subject: [PATCH 471/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 86f0c83c..5a5e72df 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -20,7 +20,7 @@ resources: - ingress.yaml images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend - newTag: 0.1.1-430 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} + newTag: 0.1.1-431 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend newTag: 0.1.1-430 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: From d90f468785be03ce74ffaa01fdb2570b2e850b2d Mon Sep 17 00:00:00 2001 From: flux-bot Date: Fri, 31 Jul 2026 09:48:58 +0000 Subject: [PATCH 472/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 5a5e72df..70cf03a6 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -22,7 +22,7 @@ images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend newTag: 0.1.1-431 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend - newTag: 0.1.1-430 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} + newTag: 0.1.1-431 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: - name: chat-ai-gateway namespace: bstein-dev-home From 726b8f16aee20388e67ab24897650208425c1067 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Fri, 31 Jul 2026 13:40:00 +0000 Subject: [PATCH 473/991] chore(maintenance): automated image update --- services/maintenance/metis-configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 8ae03a55..48dfc7f2 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -15,7 +15,7 @@ data: METIS_MAX_DEVICE_BYTES: "1000000000000" METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" - METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-260-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} + METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-261-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-260-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis From 0a8d69a1931f62edf601b682845d5763ca704b23 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Fri, 31 Jul 2026 13:42:00 +0000 Subject: [PATCH 474/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-amd64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-amd64-daemonset.yaml b/services/maintenance/metis-sentinel-amd64-daemonset.yaml index b821ba89..8d732ed9 100644 --- a/services/maintenance/metis-sentinel-amd64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-amd64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: amd64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-260-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-261-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} imagePullPolicy: Always envFrom: - configMapRef: From be859976e9f0617a05198550eeecb7b73dba4098 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Fri, 31 Jul 2026 13:47:05 +0000 Subject: [PATCH 475/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- services/maintenance/metis-configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index d091b4af..d9d1e530 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -54,7 +54,7 @@ images: - name: registry.bstein.dev/bstein/ariadne newTag: 0.1.0-373 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis - newTag: 0.1.0-260-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} + newTag: 0.1.0-261-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria newTag: 0.1.0-120 # {"$imagepolicy": "maintenance:soteria:tag"} configMapGenerator: diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 48dfc7f2..0bd04720 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -16,7 +16,7 @@ data: METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-261-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} - METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-260-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} + METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-261-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0 From be133bd427663e4cc5a9632f34286faac31d0a75 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Fri, 31 Jul 2026 13:47:11 +0000 Subject: [PATCH 476/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-arm64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-arm64-daemonset.yaml b/services/maintenance/metis-sentinel-arm64-daemonset.yaml index 9c491d29..c5e4ba51 100644 --- a/services/maintenance/metis-sentinel-arm64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-arm64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: arm64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-260-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-261-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} imagePullPolicy: Always envFrom: - configMapRef: From 123a3c9fd01aca2d5211d7c4faa4fa49e7fc9055 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Fri, 31 Jul 2026 17:15:05 +0000 Subject: [PATCH 477/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index d9d1e530..34716748 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-373 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-374 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-261-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From 1cd00739cb409b8c2ce7a7733a983e258a9196be Mon Sep 17 00:00:00 2001 From: flux-bot Date: Fri, 31 Jul 2026 21:46:38 +0000 Subject: [PATCH 478/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 70cf03a6..8c71bb3b 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -20,7 +20,7 @@ resources: - ingress.yaml images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend - newTag: 0.1.1-431 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} + newTag: 0.1.1-432 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend newTag: 0.1.1-431 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: From 781a7ed90dc52ab2f6ed01fdc03e4d66650c6d36 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Fri, 31 Jul 2026 21:49:43 +0000 Subject: [PATCH 479/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 8c71bb3b..440cd920 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -22,7 +22,7 @@ images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend newTag: 0.1.1-432 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend - newTag: 0.1.1-431 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} + newTag: 0.1.1-432 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: - name: chat-ai-gateway namespace: bstein-dev-home From 828300b6ea45b33fb50df1c5f0ec678d8ab4b667 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 01:38:23 +0000 Subject: [PATCH 480/991] chore(maintenance): automated image update --- services/maintenance/metis-configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 0bd04720..46cac4aa 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -15,7 +15,7 @@ data: METIS_MAX_DEVICE_BYTES: "1000000000000" METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" - METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-261-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} + METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-262-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-261-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis From a452487bdc84c4287116aa1fd7fc794905c142bc Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 01:41:36 +0000 Subject: [PATCH 481/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-amd64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-amd64-daemonset.yaml b/services/maintenance/metis-sentinel-amd64-daemonset.yaml index 8d732ed9..74562664 100644 --- a/services/maintenance/metis-sentinel-amd64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-amd64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: amd64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-261-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-262-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} imagePullPolicy: Always envFrom: - configMapRef: From c015ff5e22e91d9294a538d74662db781286a13f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 01:45:24 +0000 Subject: [PATCH 482/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- services/maintenance/metis-configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 34716748..8f0b9c8d 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -54,7 +54,7 @@ images: - name: registry.bstein.dev/bstein/ariadne newTag: 0.1.0-374 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis - newTag: 0.1.0-261-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} + newTag: 0.1.0-262-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria newTag: 0.1.0-120 # {"$imagepolicy": "maintenance:soteria:tag"} configMapGenerator: diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 46cac4aa..34491761 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -16,7 +16,7 @@ data: METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-262-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} - METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-261-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} + METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-262-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0 From 8a239a9a9983875e15dff49ba0894ec06e9f3a77 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 01:46:38 +0000 Subject: [PATCH 483/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-arm64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-arm64-daemonset.yaml b/services/maintenance/metis-sentinel-arm64-daemonset.yaml index c5e4ba51..233e79ac 100644 --- a/services/maintenance/metis-sentinel-arm64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-arm64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: arm64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-261-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-262-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} imagePullPolicy: Always envFrom: - configMapRef: From 63f9605aec34e3e553297eb9e699d781e242f281 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 04:37:33 +0000 Subject: [PATCH 484/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 8ec9fda8..527c4711 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.94 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.95 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.94 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.95 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index f0300608..11827246 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.94 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.95 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From bc4cb75a0193247d2d9b4af54ca49f62e87cccbc Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 04:38:33 +0000 Subject: [PATCH 485/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 91277d71..03face0a 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.94 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.95 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 9df2f59c90a183d019fbd09c97f0482a548a9800 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 04:42:38 +0000 Subject: [PATCH 486/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 527c4711..ddd98850 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.94 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.95 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.94 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 9447cf13..fb8801b6 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.94 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.95 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.94 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.86" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.86" From 4423d4da27292eb5f178537537ca76d0e9179d86 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 04:44:41 +0000 Subject: [PATCH 487/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index ddd98850..13646098 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.95 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.94 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.95 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index fb8801b6..b8b6bdc1 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.95 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.94 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.95 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.86" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.86" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 8e930ec6edecb662491e3fd67f1d90a4c246182f Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 1 Aug 2026 01:45:57 -0300 Subject: [PATCH 488/991] Deploy Cassandra 0.8.95 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 13646098..b26ab17e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-07-30-0.8.86-authoring-fallback" + cassandra.bstein.dev/redeploy: "2026-08-01-0.8.95-generator-understanding" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index b8b6bdc1..b539160c 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.95 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.95 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.86" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.86" + CASSANDRA_SIM_WORKER_VERSION: "0.8.95" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.95" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 2ddbc5a933e5ea6fdddfe62c81a39363a90a8c3e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 05:14:44 +0000 Subject: [PATCH 489/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 8f0b9c8d..42473ca4 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-374 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-375 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-262-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From 0ee49d50651ebe15cf48b8b48304a00494a8be95 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 05:57:49 +0000 Subject: [PATCH 490/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index b26ab17e..ea80fcd4 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.95 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.96 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.95 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.96 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 11827246..0b1897ed 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.95 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.96 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From cf64ac3e859fb587e8a3eb6fb479332b4e17cf25 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 05:58:48 +0000 Subject: [PATCH 491/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 03face0a..181244f3 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.95 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.96 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 48982490465f0534b0f6d3b14cd56cc3fe1e92b4 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 06:01:50 +0000 Subject: [PATCH 492/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index ea80fcd4..73f2b637 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.95 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.96 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.95 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index b539160c..0297bc0e 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.95 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.96 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.95 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.95" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.95" From 3029deaad7b4186c97278c2fe45817f8d99f4de0 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 06:03:50 +0000 Subject: [PATCH 493/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 73f2b637..5f437407 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.96 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.95 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.96 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 0297bc0e..e876004b 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.96 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.95 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.96 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.95" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.95" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 922bc3b74ad7de0ec9d0e6e8da6dffd8fedd24f2 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 1 Aug 2026 03:05:57 -0300 Subject: [PATCH 494/991] Deploy Cassandra 0.8.96 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 5f437407..2c030757 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-01-0.8.95-generator-understanding" + cassandra.bstein.dev/redeploy: "2026-08-01-0.8.96-full-hint-preservation" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index e876004b..8b5629f2 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.96 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.96 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.95" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.95" + CASSANDRA_SIM_WORKER_VERSION: "0.8.96" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.96" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From b9c874f191b1cd4729e6e49d9d01194582d06886 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 06:46:24 +0000 Subject: [PATCH 495/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 440cd920..c698b675 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -20,7 +20,7 @@ resources: - ingress.yaml images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend - newTag: 0.1.1-432 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} + newTag: 0.1.1-433 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend newTag: 0.1.1-432 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: From 76e18e5851ac5d6e6bb447a36b04b537a47773a1 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 06:48:28 +0000 Subject: [PATCH 496/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index c698b675..da7315f7 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -22,7 +22,7 @@ images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend newTag: 0.1.1-433 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend - newTag: 0.1.1-432 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} + newTag: 0.1.1-433 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: - name: chat-ai-gateway namespace: bstein-dev-home From fb5a0230f050f50da81d4026764751ca6dd46799 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 07:38:09 +0000 Subject: [PATCH 497/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 181244f3..6497aa88 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.96 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.97 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 0615cefdd5384c405aea2e85fef82f657fa9c40e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 07:38:23 +0000 Subject: [PATCH 498/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 2c030757..4e3465b8 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.96 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.97 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.96 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.97 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 0b1897ed..418e58d7 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.96 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.97 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 5c1ff2c6965bf996125c4354589ff6373818f2b8 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 07:41:10 +0000 Subject: [PATCH 499/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 4e3465b8..bf17fa88 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.96 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.97 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.96 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 8b5629f2..e2b7d2bf 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.96 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.97 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.96 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.96" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.96" From eff21ca3da8f2892b54b7e5a20c03ee76ccac2d9 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 07:43:10 +0000 Subject: [PATCH 500/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index bf17fa88..5fe0bbcc 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.97 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.96 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.97 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index e2b7d2bf..03d87363 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.97 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.96 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.97 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.96" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.96" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From eb94150a181faf616a433f27b35336562d128c06 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 1 Aug 2026 04:36:36 -0300 Subject: [PATCH 501/991] Deploy Cassandra 0.8.97 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 5fe0bbcc..6edbf8d7 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-01-0.8.96-full-hint-preservation" + cassandra.bstein.dev/redeploy: "2026-08-01-0.8.97-full-hint-preservation" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 03d87363..2638e38c 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.97 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.97 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.96" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.96" + CASSANDRA_SIM_WORKER_VERSION: "0.8.97" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.97" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 840a8ec290ef0b71068c0202b940013b548e6163 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 1 Aug 2026 04:54:13 -0300 Subject: [PATCH 502/991] Extend Cassandra generator worker deadline --- services/cassandra/configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 2638e38c..cdb770d3 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -32,7 +32,7 @@ data: CASSANDRA_SIM_TOLERATIONS: veles.bstein.dev/simulation=true:NoSchedule CASSANDRA_GENERATOR_WORKER_TOLERATIONS: veles.bstein.dev/simulation=true:NoSchedule CASSANDRA_SIM_ACTIVE_DEADLINE_SECONDS: "7200" - CASSANDRA_GENERATOR_WORKER_ACTIVE_DEADLINE_SECONDS: "1800" + CASSANDRA_GENERATOR_WORKER_ACTIVE_DEADLINE_SECONDS: "7200" CASSANDRA_SIM_TTL_SECONDS: "3600" CASSANDRA_GENERATOR_WORKER_TTL_SECONDS: "600" CASSANDRA_SIM_CPU_REQUEST: 500m From 6bb898c295e1e3e3bed2ecc724c8d66b9e3f8b51 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 08:49:33 +0000 Subject: [PATCH 503/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 6edbf8d7..860656b1 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.97 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.98 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.97 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.98 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 418e58d7..d54e224c 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.97 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.98 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 35e0ad6765d552be773beb5563ad9e85ef0c9f6c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 08:50:33 +0000 Subject: [PATCH 504/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 6497aa88..0f9fe8b5 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.97 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.98 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From fd4bfa7196c2c2c32a7748a72a1f4f628f7b0117 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 08:55:36 +0000 Subject: [PATCH 505/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 860656b1..4322ffcb 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.97 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.98 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.97 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index cdb770d3..6fbee8f1 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.97 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.98 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.97 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.97" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.97" From 2665932b9fa8dbcb3556f737b85c4ef46c24ec87 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 08:58:37 +0000 Subject: [PATCH 506/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 4322ffcb..e015100d 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.98 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.97 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.98 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 6fbee8f1..f9e9e8cc 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.98 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.97 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.98 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.97" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.97" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 7e9d95c8751f0df187f3dac3958cc63ffaaeb3b0 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 1 Aug 2026 05:59:41 -0300 Subject: [PATCH 507/991] Deploy Cassandra 0.8.98 generator routing --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index e015100d..a717fd38 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-01-0.8.97-full-hint-preservation" + cassandra.bstein.dev/redeploy: "2026-08-01-0.8.98-generator-routing" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index f9e9e8cc..ffee8673 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.98 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.98 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.97" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.97" + CASSANDRA_SIM_WORKER_VERSION: "0.8.98" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.98" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 84eb72f9f4c47cb14f6a9ebb5ecf4edd63af8111 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 10:16:19 +0000 Subject: [PATCH 508/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 0f9fe8b5..47433ec6 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.98 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.99 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 7902fdd3ba2e939db711ac316ea771194aa3b492 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 10:16:23 +0000 Subject: [PATCH 509/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index a717fd38..debd3c1e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.98 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.99 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.98 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.99 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index d54e224c..ff171a95 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.98 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.99 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 24661d0d331fb10b62eba8c5103ec0efa16ce007 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 10:19:20 +0000 Subject: [PATCH 510/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index debd3c1e..2f662b06 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.98 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.99 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.98 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index ffee8673..aa6d54a9 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.98 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.99 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.98 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.98" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.98" From 9ffb7c05893e552309224ab4e1f2fae4b34a7114 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 10:21:25 +0000 Subject: [PATCH 511/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 2f662b06..a82de6a4 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.99 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.98 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.99 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index aa6d54a9..34595348 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.99 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.98 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.99 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.98" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.98" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From c6b6c524c286b0bc8356dd909948fccfee6cb72b Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Sat, 1 Aug 2026 07:27:32 -0300 Subject: [PATCH 512/991] Deploy Cassandra 0.8.99 generator repairs --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index a82de6a4..b46f0874 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-01-0.8.98-generator-routing" + cassandra.bstein.dev/redeploy: "2026-08-01-0.8.99-source-claims" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 34595348..b92467cf 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.99 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.99 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.98" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.98" + CASSANDRA_SIM_WORKER_VERSION: "0.8.99" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.99" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 8d0de9f592203fa117c4f75c16c0f44b664c0837 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 11:44:16 +0000 Subject: [PATCH 513/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index b46f0874..a8696724 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.99 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.100 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.99 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.100 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index ff171a95..07a2666c 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.99 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.100 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From e63004b907fcf19d3f38e360b976d83e8fed42de Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 11:45:06 +0000 Subject: [PATCH 514/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 47433ec6..d55b52b7 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.99 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.100 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From ba451a678a5e5eeff235474bdf97a795a3939ac0 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 11:47:10 +0000 Subject: [PATCH 515/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index a8696724..bb10870a 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.99 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.99 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.100 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index b92467cf..5927dd49 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.99 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.99 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.100 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.99" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.99" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 846aea4b15ed3cab903e92e0d9c1aacc116c6899 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 11:48:06 +0000 Subject: [PATCH 516/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index bb10870a..c07160ee 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.99 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.100 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.100 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 5927dd49..bd529944 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.99 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.100 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.100 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.99" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.99" From e12cdb51bc22a4403d097518173b1a6fedcaac3b Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Sat, 1 Aug 2026 08:49:14 -0300 Subject: [PATCH 517/991] Deploy Cassandra generator 0.8.100 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index c07160ee..dcca13f9 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-01-0.8.99-source-claims" + cassandra.bstein.dev/redeploy: "2026-08-01-0.8.100-claim-preservation" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index bd529944..70c91903 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.100 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.100 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.99" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.99" + CASSANDRA_SIM_WORKER_VERSION: "0.8.100" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.100" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 2d9ce111be48c40361a46eac39f0ab4df2656cfa Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 12:13:06 +0000 Subject: [PATCH 518/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index d55b52b7..1e9a546f 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.100 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.101 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 64ae37c33f7bff4d9af012b9ddaf8e752a2e9ac7 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 12:13:11 +0000 Subject: [PATCH 519/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index dcca13f9..c7c4627a 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.100 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.101 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.100 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.101 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 07a2666c..096a823d 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.100 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.101 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From a5d751519bb893d78e3e3ced970cca9846ce6fd0 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 12:14:07 +0000 Subject: [PATCH 520/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index c7c4627a..08e2ca28 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.100 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.100 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.101 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 70c91903..e8cbd297 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.100 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.100 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.101 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.100" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.100" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 817ca00567e6323538204f4b08c367a9080fdb7f Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Sat, 1 Aug 2026 09:15:37 -0300 Subject: [PATCH 521/991] Deploy Cassandra generator 0.8.101 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 08e2ca28..2f5eb04b 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-01-0.8.100-claim-preservation" + cassandra.bstein.dev/redeploy: "2026-08-01-0.8.101-hint-throughput" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index e8cbd297..0482e144 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -22,7 +22,7 @@ data: CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.100 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.101 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.100" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.100" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.101" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 3eb629fba6c751d683b43a86e64717a77dc00e8a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 12:17:08 +0000 Subject: [PATCH 522/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 2f5eb04b..e495304a 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.100 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.101 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.101 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 0482e144..f5f7b870 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.100 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.101 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.101 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.100" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.101" From c98ede4e9a17409941962887f7bbe3c057cde6fa Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 12:38:51 +0000 Subject: [PATCH 523/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 1e9a546f..19538f32 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.101 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.102 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 6bf8c5ba4a257afed4dbd2cb62eef2ee49dd4469 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 12:38:55 +0000 Subject: [PATCH 524/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index e495304a..08d5912f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.101 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.102 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.101 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.102 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 096a823d..8b0538a7 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.101 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.102 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From d8811e6daa6274ad01d64a979c9f63a10e1e910b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 12:42:53 +0000 Subject: [PATCH 525/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 08d5912f..ec46123d 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.101 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.102 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.101 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index f5f7b870..0f53ce18 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.101 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.102 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.101 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.100" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.101" From 5b7722d6adb646321263745c9eff987e83928070 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 12:42:57 +0000 Subject: [PATCH 526/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index ec46123d..b6718ee3 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.102 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.101 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.102 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 0f53ce18..a9862b4e 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.102 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.101 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.102 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.100" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.101" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim From 035756cee1b724a8e373a50d456d3c362d2a4a10 Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Sat, 1 Aug 2026 09:44:00 -0300 Subject: [PATCH 527/991] Deploy Cassandra generator 0.8.102 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 3 ++- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index b6718ee3..37e865e0 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-01-0.8.101-hint-throughput" + cassandra.bstein.dev/redeploy: "2026-08-01-0.8.102-hint-timeout" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index a9862b4e..99dd4cfc 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -22,7 +22,8 @@ data: CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.102 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.102 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.100" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.101" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.102" + CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator CASSANDRA_SIM_PRIORITY_CLASS: cassandra-sim From 7d0371d884cf34a20e687e5debd884c6f220dbcc Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 13:01:26 +0000 Subject: [PATCH 528/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 19538f32..70808204 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.102 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.103 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From a2d47fd8a1c56c8300929aaace53c51c219ec451 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 13:01:30 +0000 Subject: [PATCH 529/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 37e865e0..aa86a489 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.102 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.103 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.102 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.103 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 8b0538a7..916370e6 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.102 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.103 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 7e597835d5edd3e98c79b27e68d501557dbdc881 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 13:04:29 +0000 Subject: [PATCH 530/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index aa86a489..9735ad9b 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.102 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.103 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.102 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 99dd4cfc..2bf17b39 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.102 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.103 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.102 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.100" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.102" From 43a356b1355ea86eab0a06133ab078046dd37042 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 13:04:33 +0000 Subject: [PATCH 531/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 9735ad9b..44320b71 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.103 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.102 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.103 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 2bf17b39..e8095533 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.103 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.102 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.103 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.100" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.102" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 52259f8501db1f26781aa257b92d0ffb07dbbf78 Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Sat, 1 Aug 2026 10:21:53 -0300 Subject: [PATCH 532/991] Deploy Cassandra generator 0.8.103 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 44320b71..4a9125d2 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-01-0.8.102-hint-timeout" + cassandra.bstein.dev/redeploy: "2026-08-01-0.8.103-worker-env" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index e8095533..13810f53 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.103 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.103 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.100" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.102" + CASSANDRA_SIM_WORKER_VERSION: "0.8.103" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.103" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From 212f1ee25ee19e5bef7dbc9ec97fde56923776e0 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 13:41:18 +0000 Subject: [PATCH 533/991] chore(maintenance): automated image update --- services/maintenance/metis-configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 34491761..c9106986 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -15,7 +15,7 @@ data: METIS_MAX_DEVICE_BYTES: "1000000000000" METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" - METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-262-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} + METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-263-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-262-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis From 2066ad0185641c495e979f58c91634d0e2ec480d Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 13:43:19 +0000 Subject: [PATCH 534/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-amd64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-amd64-daemonset.yaml b/services/maintenance/metis-sentinel-amd64-daemonset.yaml index 74562664..10c3e881 100644 --- a/services/maintenance/metis-sentinel-amd64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-amd64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: amd64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-262-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-263-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} imagePullPolicy: Always envFrom: - configMapRef: From 8856759befda8dfb69f7b4797e41584c27b67144 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 13:48:24 +0000 Subject: [PATCH 535/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-arm64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-arm64-daemonset.yaml b/services/maintenance/metis-sentinel-arm64-daemonset.yaml index 233e79ac..3868493d 100644 --- a/services/maintenance/metis-sentinel-arm64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-arm64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: arm64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-262-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-263-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} imagePullPolicy: Always envFrom: - configMapRef: From 637b81a52b0aa050aed8c35426d602715cfdde5e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 13:48:28 +0000 Subject: [PATCH 536/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- services/maintenance/metis-configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 42473ca4..6722930f 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -54,7 +54,7 @@ images: - name: registry.bstein.dev/bstein/ariadne newTag: 0.1.0-375 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis - newTag: 0.1.0-262-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} + newTag: 0.1.0-263-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria newTag: 0.1.0-120 # {"$imagepolicy": "maintenance:soteria:tag"} configMapGenerator: diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index c9106986..3b358903 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -16,7 +16,7 @@ data: METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-263-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} - METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-262-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} + METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-263-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0 From 70790279cc87a88eaa2d88328054d5fca491e24b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 13:56:35 +0000 Subject: [PATCH 537/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 4a9125d2..cbe1abe2 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.103 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.104 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.103 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.104 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 916370e6..bde3c4d5 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.103 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.104 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 5e1cef5282a84a1705a23ef5781f0f86c1fc4d94 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 14:08:06 +0000 Subject: [PATCH 538/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index cbe1abe2..d0af3bd1 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.103 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.104 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.103 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 13810f53..597cfd69 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.103 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.104 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.103 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.103" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.103" From 6c6bdff1e851134b97379b60337d3649ef33892d Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 14:11:10 +0000 Subject: [PATCH 539/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index d0af3bd1..73ea35d4 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.104 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.103 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.104 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 597cfd69..ab6752e2 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.104 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.103 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.104 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.103" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.103" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 8d84f59a37c9665e48af4d91a24da857045937f9 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 14:12:10 +0000 Subject: [PATCH 540/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 70808204..15eb2aa1 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.103 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.104 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From d995c4f75d397fc8b82719c2f43b9c64b9d3b497 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 1 Aug 2026 11:14:05 -0300 Subject: [PATCH 541/991] Deploy Cassandra 0.8.104 workers --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 73ea35d4..63635c66 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-01-0.8.103-worker-env" + cassandra.bstein.dev/redeploy: "2026-08-01-0.8.104-generator-context" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index ab6752e2..aa836294 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.104 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.104 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.103" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.103" + CASSANDRA_SIM_WORKER_VERSION: "0.8.104" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.104" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From f7534ba80210938b57066774a8615738ffbce95a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 14:42:00 +0000 Subject: [PATCH 542/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 63635c66..c6aa9e80 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.104 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.105 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.104 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.105 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index bde3c4d5..8d31bf5d 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.104 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.105 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 109da1fc7025ccbec8bc6910a13d803c25bd010b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 14:44:14 +0000 Subject: [PATCH 543/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 15eb2aa1..8e0fca5b 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.104 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.105 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 30e5a79ff7dd764cf0b015b863eb8e656d92ee94 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 14:47:16 +0000 Subject: [PATCH 544/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index c6aa9e80..25b88a5f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.104 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.105 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.104 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index aa836294..a2bc860c 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.104 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.105 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.104 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.104" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.104" From 0b125ca306da7c0176802228f36473a02a8afbec Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 14:48:16 +0000 Subject: [PATCH 545/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 25b88a5f..88c0ebfb 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.105 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.104 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.105 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index a2bc860c..4580d7ca 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.105 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.104 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.105 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.104" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.104" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From c2bf0b8e2e95a759bb862ee3158641987f351341 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 1 Aug 2026 11:54:55 -0300 Subject: [PATCH 546/991] Deploy Cassandra 0.8.105 worker versions --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 88c0ebfb..0b29048e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-01-0.8.104-generator-context" + cassandra.bstein.dev/redeploy: "2026-08-01-0.8.105-prior-toggle" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 4580d7ca..764e5850 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.105 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.105 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.104" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.104" + CASSANDRA_SIM_WORKER_VERSION: "0.8.105" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.105" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From 839ac2a170a2fd00b5d01caf0778d0a8a508f216 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 15:34:13 +0000 Subject: [PATCH 547/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 0b29048e..7c7e3b09 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.105 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.106 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.105 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.106 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 8d31bf5d..ebe6e7d2 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.105 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.106 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From cc2b3cbf4b0e53f55153b1215b2d0a75abf11a26 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 15:34:17 +0000 Subject: [PATCH 548/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 8e0fca5b..7ea489f9 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.105 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.106 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From c473eb05eef6f01b8b0027f80e6e986557b33733 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 15:35:13 +0000 Subject: [PATCH 549/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 7c7e3b09..2f1dbd26 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.105 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.105 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.106 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 764e5850..e0994740 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.105 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.105 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.106 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.105" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.105" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 6baaa55fde7451159ae5402f77273c420825584e Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 1 Aug 2026 12:40:05 -0300 Subject: [PATCH 550/991] Deploy Cassandra 0.8.106 generator fixes --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/configmap.yaml | 6 +++--- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 2f1dbd26..6c66961f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-01-0.8.105-prior-toggle" + cassandra.bstein.dev/redeploy: "2026-08-01-0.8.106-generator-lane-contracts" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.105 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.106 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.106 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index e0994740..342632ca 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,10 +19,10 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.105 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.106 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.106 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.105" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.105" + CASSANDRA_SIM_WORKER_VERSION: "0.8.106" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.106" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From 961760371011340281ab25f5b1de92ded4235869 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 15:42:55 +0000 Subject: [PATCH 551/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 6c66961f..3c45587c 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.106 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.105 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.106 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 342632ca..05117e20 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.106 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.105 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.106 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.106" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.106" From fa64ee6f9df9ecbe129bda14f271a8a65f11c4a9 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 15:45:35 +0000 Subject: [PATCH 552/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 3c45587c..6c66961f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.105 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.106 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.106 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 05117e20..342632ca 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.105 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.106 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.106 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.106" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.106" From 7f793ec17719625ba23194d758fac060a6cbc8a1 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 17:08:35 +0000 Subject: [PATCH 553/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 6c66961f..b5e0557c 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.106 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.107 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.106 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.107 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index ebe6e7d2..3a788b94 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.106 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.107 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 999fc9a3a802db60b26470376d34a14b7ba20ba6 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 17:10:15 +0000 Subject: [PATCH 554/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 7ea489f9..2427eb8e 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.106 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.107 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From a5c16e7d58d89cf23f162c838897d8b28480336f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 17:13:55 +0000 Subject: [PATCH 555/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index b5e0557c..f83f3b82 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,9 +104,9 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.106 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.107 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.106 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.107 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 342632ca..ca58e3fd 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,8 +19,8 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.106 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.106 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.107 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.107 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.106" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.106" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From c10f794c18fe2e44cd34ea4447729ea57e0f0da2 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 17:15:15 +0000 Subject: [PATCH 556/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 6722930f..20325b72 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-375 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-376 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-263-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From 389d93b3349c15ba489254f6f441ddd77b380b58 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 1 Aug 2026 14:15:50 -0300 Subject: [PATCH 557/991] Deploy Cassandra 0.8.107 guide jobs fix --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index f83f3b82..0fc400f6 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-01-0.8.106-generator-lane-contracts" + cassandra.bstein.dev/redeploy: "2026-08-01-0.8.107-search-restriction-jobs" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index ca58e3fd..9f363a70 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.107 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.107 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.106" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.106" + CASSANDRA_SIM_WORKER_VERSION: "0.8.107" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.107" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From 92b2dcd45e6b9b2064c652e588db5bbf6e0376e9 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 18:28:38 +0000 Subject: [PATCH 558/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index da7315f7..b4e540c1 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -20,7 +20,7 @@ resources: - ingress.yaml images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend - newTag: 0.1.1-433 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} + newTag: 0.1.1-435 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend newTag: 0.1.1-433 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: From 8c2885ff6f5fe1bc855dd0f3386bae1aac15558f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 18:30:52 +0000 Subject: [PATCH 559/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index b4e540c1..19663862 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -22,7 +22,7 @@ images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend newTag: 0.1.1-435 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend - newTag: 0.1.1-433 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} + newTag: 0.1.1-435 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: - name: chat-ai-gateway namespace: bstein-dev-home From 2ce8181540b8cb050dc5aed8dc53c7f61b6fc653 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 18:37:35 +0000 Subject: [PATCH 560/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 0fc400f6..fd426d42 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.107 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.108 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.107 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.108 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 3a788b94..e9b88dde 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.107 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.108 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 8975a91fcbc7efcc6747546f537f4449d49e150e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 18:38:41 +0000 Subject: [PATCH 561/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 2427eb8e..b5bfdc20 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.107 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.108 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 42fcbefd5ecff4cf4c15451bdceb8bb336d667c8 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 18:42:36 +0000 Subject: [PATCH 562/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index fd426d42..a73e1dd2 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.107 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.108 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.107 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 9f363a70..cbc74adc 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.107 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.108 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.107 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.107" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.107" From 591002fe3d3ccc36dd7d1d78e202a4f06b097bea Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 18:45:40 +0000 Subject: [PATCH 563/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index a73e1dd2..3d2b3b0a 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.108 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.107 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.108 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index cbc74adc..ece99aa6 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.108 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.107 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.108 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.107" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.107" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From fb5230678ce491c07adf46b80b0ac867b2d337c1 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 18:50:47 +0000 Subject: [PATCH 564/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 3d2b3b0a..3e54020f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.108 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.109 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.108 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.109 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index e9b88dde..0b4260d0 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.108 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.109 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 923da7f44222f754a495d96467c42eac594edaaf Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 18:50:50 +0000 Subject: [PATCH 565/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index b5bfdc20..35929a32 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.108 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.109 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 4845993727b10dbf46b181a19d4fb16fd3ed5097 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 18:55:01 +0000 Subject: [PATCH 566/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 3e54020f..06d573e0 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.108 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.109 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.108 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index ece99aa6..c8b06d5d 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.108 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.109 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.108 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.107" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.107" From 72c515bdba7781622716e0e7bc5f0105e3817a8a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 18:56:05 +0000 Subject: [PATCH 567/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 06d573e0..ec29fb0c 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.109 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.108 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.109 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index c8b06d5d..859db0fd 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.109 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.108 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.109 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.107" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.107" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From c87a1e7758b3f70c7b1ac68db4f2c705279b2feb Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 1 Aug 2026 15:57:54 -0300 Subject: [PATCH 568/991] Deploy Cassandra 0.8.109 workers --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index ec29fb0c..48e51f4f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-01-0.8.107-search-restriction-jobs" + cassandra.bstein.dev/redeploy: "2026-08-01-0.8.109-section-card-gate" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 859db0fd..4d6d1cd7 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.109 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.109 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.107" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.107" + CASSANDRA_SIM_WORKER_VERSION: "0.8.109" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.109" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From bf948978d734411df28f495ee097c391cca6ba81 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 20:19:51 +0000 Subject: [PATCH 569/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 48e51f4f..eb54a281 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.109 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.110 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.109 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.110 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 0b4260d0..24e2fe07 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.109 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.110 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 28f5236f580124b677159c7094c9075081aa520a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 20:19:55 +0000 Subject: [PATCH 570/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 35929a32..5769bcf6 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.109 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.110 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 0fcc45487270d5126ec65741c1d6f538a98e8a3d Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 20:23:51 +0000 Subject: [PATCH 571/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index eb54a281..b94c5fc9 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.109 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.110 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.109 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 4d6d1cd7..2d8748d3 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.109 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.110 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.109 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.109" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.109" From 65218c37cd5b3a2ac0ef5090e41c341874150d1c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 20:24:52 +0000 Subject: [PATCH 572/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index b94c5fc9..068cb93d 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.110 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.109 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.110 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 2d8748d3..8bc3f384 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.110 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.109 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.110 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.109" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.109" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From d106493d1bcb25c8acc443d97020eaa8cacc3aea Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 1 Aug 2026 17:26:22 -0300 Subject: [PATCH 573/991] Deploy Cassandra 0.8.110 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 068cb93d..32d0bf33 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-01-0.8.109-section-card-gate" + cassandra.bstein.dev/redeploy: "2026-08-01-0.8.110-hint-search-gate" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 8bc3f384..ad48cb96 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.110 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.110 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.109" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.109" + CASSANDRA_SIM_WORKER_VERSION: "0.8.110" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.110" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From 03f0f72017c81f6a390d44c6b7b9edcdbf0c6ba1 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 21:46:50 +0000 Subject: [PATCH 574/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 19663862..3b84b55a 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -20,7 +20,7 @@ resources: - ingress.yaml images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend - newTag: 0.1.1-435 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} + newTag: 0.1.1-436 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend newTag: 0.1.1-435 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: From dc34aab2ac454c29d81c6654f25ae2b057a5022a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 21:48:51 +0000 Subject: [PATCH 575/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 3b84b55a..e7405d8a 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -22,7 +22,7 @@ images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend newTag: 0.1.1-436 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend - newTag: 0.1.1-435 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} + newTag: 0.1.1-436 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: - name: chat-ai-gateway namespace: bstein-dev-home From 874b2868e6d5d3ce0565f905bd1b67b9bfd8eef9 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 22:08:03 +0000 Subject: [PATCH 576/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 32d0bf33..b9fc0c90 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.110 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.111 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.110 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.111 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 24e2fe07..3b9d8279 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.110 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.111 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 2a83315cf1a81f58b49d40de4998f58890771820 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 22:09:03 +0000 Subject: [PATCH 577/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 5769bcf6..84c41f7b 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.110 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.111 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 625d740e7f3eeef8914c880b4e277edbb7dfe338 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 22:13:18 +0000 Subject: [PATCH 578/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index b9fc0c90..23dc7cf4 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.110 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.111 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.110 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index ad48cb96..8a4c8d74 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.110 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.111 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.110 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.110" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.110" From 3b74567d7d427e64d9b8461afe8316f73d59e782 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 22:15:25 +0000 Subject: [PATCH 579/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 23dc7cf4..ec21c300 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.111 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.110 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.111 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 8a4c8d74..70f17fa8 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.111 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.110 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.111 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.110" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.110" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From ad09819bf11ced45ba7e99f3bb284672131a27cb Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 1 Aug 2026 19:18:14 -0300 Subject: [PATCH 580/991] Deploy Cassandra 0.8.111 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index ec21c300..25d9466a 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-01-0.8.110-hint-search-gate" + cassandra.bstein.dev/redeploy: "2026-08-01-0.8.111-job-visibility-card-note-gate" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 70f17fa8..e9f4a756 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.111 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.111 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.110" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.110" + CASSANDRA_SIM_WORKER_VERSION: "0.8.111" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.111" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From 36435c38e41655e3f454494098ffa9ddc1757853 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 22:40:01 +0000 Subject: [PATCH 581/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 25d9466a..e634b443 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.111 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.112 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.111 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.112 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 3b9d8279..95e242cc 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.111 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.112 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 56ff97cc2325b0036ac0e309380d5e660ca95ff8 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 22:41:01 +0000 Subject: [PATCH 582/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 84c41f7b..14e09da1 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.111 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.112 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From f10810c16eac52c203064fc8020fa009ff31acf4 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 22:45:09 +0000 Subject: [PATCH 583/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index e634b443..4ce51ff6 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.111 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.112 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.111 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index e9f4a756..7044eff3 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.111 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.112 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.111 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.111" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.111" From 2648a6c6af48ea73c3b4b2e926805ada2b649a70 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 22:46:09 +0000 Subject: [PATCH 584/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 4ce51ff6..54c04264 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.112 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.111 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.112 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 7044eff3..ea7c55ec 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.112 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.111 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.112 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.111" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.111" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From c0b7c52ef6c02dd80dbf17771546b489d3f8851b Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 1 Aug 2026 19:50:13 -0300 Subject: [PATCH 585/991] Deploy Cassandra 0.8.112 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 54c04264..e5936f98 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-01-0.8.111-job-visibility-card-note-gate" + cassandra.bstein.dev/redeploy: "2026-08-01-0.8.112-frontend-cache-control" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index ea7c55ec..2d1f59b2 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.112 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.112 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.111" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.111" + CASSANDRA_SIM_WORKER_VERSION: "0.8.112" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.112" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From d39a920966eccc63ef6a36332238c4fb6b573893 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 23:33:40 +0000 Subject: [PATCH 586/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 14e09da1..c0e46357 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.112 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.113 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From afb1052933ad2ffb41e8d5ccb8b5267013b064da Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 23:33:45 +0000 Subject: [PATCH 587/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index e5936f98..1da9dbe8 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.112 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.113 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.112 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.113 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 95e242cc..a71e3769 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.112 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.113 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From dc296a2449bc5416c67f98926a46615674226328 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 23:38:57 +0000 Subject: [PATCH 588/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 1da9dbe8..e545ca4e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.112 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.113 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.112 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 2d1f59b2..38927b6f 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.112 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.113 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.112 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.112" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.112" From 1cf0442d685dc4aaf02a94813e471567b0620ca9 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sat, 1 Aug 2026 23:39:57 +0000 Subject: [PATCH 589/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index e545ca4e..940735b2 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.113 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.112 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.113 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 38927b6f..bef949ad 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.113 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.112 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.113 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.112" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.112" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 7974525cf490e602814d0a303ba7d778b65e689a Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 1 Aug 2026 20:41:10 -0300 Subject: [PATCH 590/991] Deploy Cassandra 0.8.113 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 940735b2..2559ed26 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-01-0.8.112-frontend-cache-control" + cassandra.bstein.dev/redeploy: "2026-08-01-0.8.113-generation-heartbeat" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index bef949ad..316df39a 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.113 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.113 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.112" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.112" + CASSANDRA_SIM_WORKER_VERSION: "0.8.113" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.113" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From 0fd29708e8069708d3caa2e2718337b05c883835 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 01:39:17 +0000 Subject: [PATCH 591/991] chore(maintenance): automated image update --- services/maintenance/metis-configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 3b358903..4cec9b16 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -15,7 +15,7 @@ data: METIS_MAX_DEVICE_BYTES: "1000000000000" METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" - METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-263-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} + METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-264-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-263-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis From 45c27cc2cdc363241343d0e855fabaf751aeba6e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 01:42:02 +0000 Subject: [PATCH 592/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index e7405d8a..f4504393 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -20,7 +20,7 @@ resources: - ingress.yaml images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend - newTag: 0.1.1-436 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} + newTag: 0.1.1-437 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend newTag: 0.1.1-436 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: From 3668a02418caae14ff18adda4c06ee82e433b3c5 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 01:43:28 +0000 Subject: [PATCH 593/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index f4504393..14ca1e3b 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -22,7 +22,7 @@ images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend newTag: 0.1.1-437 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend - newTag: 0.1.1-436 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} + newTag: 0.1.1-437 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: - name: chat-ai-gateway namespace: bstein-dev-home From 5b3ec3d75b7104e71b6ecf224f783d794d6f1ae3 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 01:44:12 +0000 Subject: [PATCH 594/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-amd64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-amd64-daemonset.yaml b/services/maintenance/metis-sentinel-amd64-daemonset.yaml index 10c3e881..20e90817 100644 --- a/services/maintenance/metis-sentinel-amd64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-amd64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: amd64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-263-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-264-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} imagePullPolicy: Always envFrom: - configMapRef: From f8d4306cee11ef11c56a1a550e36306964d29529 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 01:44:21 +0000 Subject: [PATCH 595/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 2559ed26..1453100e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.113 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.114 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.113 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.114 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index c0e46357..6c5fc32c 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.113 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.114 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index a71e3769..2fd6c2d5 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.113 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.114 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 82c7b916abb604520c702a28c6885652e66384e0 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 01:46:17 +0000 Subject: [PATCH 596/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- services/maintenance/metis-configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 20325b72..9b3ff347 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -54,7 +54,7 @@ images: - name: registry.bstein.dev/bstein/ariadne newTag: 0.1.0-376 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis - newTag: 0.1.0-263-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} + newTag: 0.1.0-264-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria newTag: 0.1.0-120 # {"$imagepolicy": "maintenance:soteria:tag"} configMapGenerator: diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 4cec9b16..66a19788 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -16,7 +16,7 @@ data: METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-264-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} - METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-263-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} + METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-264-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0 From 8f450acd9cdcc7446f0ef8fe62ff6b1b42761306 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 01:48:10 +0000 Subject: [PATCH 597/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-arm64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-arm64-daemonset.yaml b/services/maintenance/metis-sentinel-arm64-daemonset.yaml index 3868493d..ebbb3a19 100644 --- a/services/maintenance/metis-sentinel-arm64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-arm64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: arm64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-263-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-264-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} imagePullPolicy: Always envFrom: - configMapRef: From e4ad1798277d30dfe83851d0c8b7f573c4a8a819 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 01:48:24 +0000 Subject: [PATCH 598/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 1453100e..ff1bffe6 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.113 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.114 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.113 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 316df39a..7597cb7f 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.113 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.114 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.113 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.113" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.113" From 304574910c118e2ff574a94c38fdcea13d936f16 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 01:49:29 +0000 Subject: [PATCH 599/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 9b3ff347..4a980871 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-376 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-378 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-264-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From b8a8bf0991dfa1438d17b3a796e3c64a6fdf76e9 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 01:49:34 +0000 Subject: [PATCH 600/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index ff1bffe6..cc43b744 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.114 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.113 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.114 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 7597cb7f..df08fc65 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.114 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.113 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.114 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.113" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.113" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 91d4d98e2eb995a30bc9f308ed015db9ac9bdb11 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 1 Aug 2026 22:38:07 -0300 Subject: [PATCH 601/991] gpu(titan-24): add Hermes local-first fallback handoff --- .../applications/hermes/kustomization.yaml | 4 + .../bstein-dev-home/backend-deployment.yaml | 4 +- services/hermes/ariadne-handoff-rbac.yaml | 30 ++++ services/hermes/configmap.yaml | 19 ++- services/hermes/deployment.yaml | 15 +- services/hermes/kustomization.yaml | 15 ++ services/hermes/model-gate-configmap.yaml | 151 ++++++++++++++++++ services/hermes/model-gate-deployment.yaml | 124 ++++++++++++++ services/hermes/model-gate-rbac.yaml | 34 ++++ services/hermes/model-gate-state.yaml | 10 ++ services/hermes/networkpolicy.yaml | 30 ++++ services/hermes/ollama-deployment.yaml | 29 ++-- services/hermes/pvc.yaml | 15 ++ .../triage-titan-test-failures/SKILL.md | 59 +++++++ .../agents/openai.yaml | 4 + services/maintenance/ariadne-deployment.yaml | 23 ++- services/maintenance/ariadne-rbac.yaml | 1 - 17 files changed, 546 insertions(+), 21 deletions(-) create mode 100644 services/hermes/ariadne-handoff-rbac.yaml create mode 100644 services/hermes/model-gate-configmap.yaml create mode 100644 services/hermes/model-gate-deployment.yaml create mode 100644 services/hermes/model-gate-rbac.yaml create mode 100644 services/hermes/model-gate-state.yaml create mode 100644 services/hermes/networkpolicy.yaml create mode 100644 services/hermes/skills/triage-titan-test-failures/SKILL.md create mode 100644 services/hermes/skills/triage-titan-test-failures/agents/openai.yaml diff --git a/clusters/atlas/flux-system/applications/hermes/kustomization.yaml b/clusters/atlas/flux-system/applications/hermes/kustomization.yaml index 6a16b1b5..ec31a55c 100644 --- a/clusters/atlas/flux-system/applications/hermes/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/hermes/kustomization.yaml @@ -18,6 +18,10 @@ spec: wait: true timeout: 45m healthChecks: + - apiVersion: apps/v1 + kind: Deployment + name: hermes-model-gate + namespace: hermes - apiVersion: apps/v1 kind: Deployment name: hermes-ollama diff --git a/services/bstein-dev-home/backend-deployment.yaml b/services/bstein-dev-home/backend-deployment.yaml index fbaa425e..b39244ee 100644 --- a/services/bstein-dev-home/backend-deployment.yaml +++ b/services/bstein-dev-home/backend-deployment.yaml @@ -68,7 +68,7 @@ spec: args: - >- . /vault/secrets/portal-env.sh - && exec gunicorn -b 0.0.0.0:8080 --workers 2 --timeout 600 app:app + && exec gunicorn -b 0.0.0.0:8080 --workers 2 --timeout 1200 app:app env: - name: AI_CHAT_API value: http://ollama.ai.svc.cluster.local:11434 @@ -119,6 +119,8 @@ spec: value: http://ariadne.maintenance.svc.cluster.local - name: ARIADNE_TIMEOUT_SEC value: "10" + - name: ARIADNE_GAME_MODE_TIMEOUT_SEC + value: "900" - name: ACCOUNT_ALLOWED_GROUPS value: "" - name: HTTP_CHECK_TIMEOUT_SEC diff --git a/services/hermes/ariadne-handoff-rbac.yaml b/services/hermes/ariadne-handoff-rbac.yaml new file mode 100644 index 00000000..a8da16cc --- /dev/null +++ b/services/hermes/ariadne-handoff-rbac.yaml @@ -0,0 +1,30 @@ +# services/hermes/ariadne-handoff-rbac.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: ariadne-gpu-handoff + namespace: hermes +rules: + - apiGroups: ["coordination.k8s.io"] + resources: + - leases + resourceNames: + - titan-24-gpu-owner + verbs: + - get + - patch + - update +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: ariadne-gpu-handoff + namespace: hermes +subjects: + - kind: ServiceAccount + name: ariadne + namespace: maintenance +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: ariadne-gpu-handoff diff --git a/services/hermes/configmap.yaml b/services/hermes/configmap.yaml index e751f45a..af663e11 100644 --- a/services/hermes/configmap.yaml +++ b/services/hermes/configmap.yaml @@ -10,11 +10,24 @@ data: config.yaml: | model: provider: custom - default: qwen2.5:7b-instruct-q4_0 - model: qwen2.5:7b-instruct-q4_0 - base_url: http://hermes-ollama.hermes.svc.cluster.local:11434/v1 + default: gpt-oss:20b + model: gpt-oss:20b + context_length: 64000 + base_url: http://hermes-model-gate.hermes.svc.cluster.local:11434/v1 api_key: ollama + fallback_providers: + - provider: openai-codex + model: gpt-5.4 + + agent: + api_max_retries: 1 + + skills: + creation_nudge_interval: 15 + external_dirs: + - /opt/data/workspace/skills + terminal: backend: local cwd: /opt/data/workspace diff --git a/services/hermes/deployment.yaml b/services/hermes/deployment.yaml index 75437fe6..b7035a29 100644 --- a/services/hermes/deployment.yaml +++ b/services/hermes/deployment.yaml @@ -20,10 +20,10 @@ spec: labels: app: hermes annotations: - ai.bstein.dev/model: qwen2.5:7b-instruct-q4_0 + ai.bstein.dev/model: gpt-oss:20b with openai-codex fallback ai.bstein.dev/role: testing-triage ai.bstein.dev/placement: arm64 gateway lane (rpi5 preferred) - ai.bstein.dev/config-rev: "20260721-hermes-rollout-deadline" + ai.bstein.dev/config-rev: "20260801-gpu-owner-fallback" spec: serviceAccountName: hermes-triage automountServiceAccountToken: true @@ -190,6 +190,9 @@ spec: mountPath: /opt/data - name: tools mountPath: /opt/data/home/.local/bin + - name: triage-skill + mountPath: /opt/data/workspace/skills/triage-titan-test-failures + readOnly: true readinessProbe: httpGet: path: /api/status @@ -220,3 +223,11 @@ spec: name: hermes-config - name: tools emptyDir: {} + - name: triage-skill + configMap: + name: hermes-triage-skill + items: + - key: SKILL.md + path: SKILL.md + - key: openai.yaml + path: agents/openai.yaml diff --git a/services/hermes/kustomization.yaml b/services/hermes/kustomization.yaml index 96e642e4..7287255d 100644 --- a/services/hermes/kustomization.yaml +++ b/services/hermes/kustomization.yaml @@ -7,8 +7,23 @@ resources: - configmap.yaml - rbac.yaml - pvc.yaml + - model-gate-rbac.yaml + - ariadne-handoff-rbac.yaml + - model-gate-state.yaml + - model-gate-configmap.yaml + - model-gate-deployment.yaml + - networkpolicy.yaml - ollama-deployment.yaml - deployment.yaml - service.yaml - agent-certificate.yaml - agent-ingress.yaml + +configMapGenerator: + - name: hermes-triage-skill + namespace: hermes + files: + - SKILL.md=skills/triage-titan-test-failures/SKILL.md + - openai.yaml=skills/triage-titan-test-failures/agents/openai.yaml + options: + disableNameSuffixHash: true diff --git a/services/hermes/model-gate-configmap.yaml b/services/hermes/model-gate-configmap.yaml new file mode 100644 index 00000000..cf179d84 --- /dev/null +++ b/services/hermes/model-gate-configmap.yaml @@ -0,0 +1,151 @@ +# services/hermes/model-gate-configmap.yaml +apiVersion: v1 +kind: ConfigMap +metadata: + name: hermes-model-gate + namespace: hermes +data: + model_gate.py: | + #!/usr/bin/env python3 + """Fail-closed proxy that admits local inference only while Hermes owns titan-24.""" + + from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer + import json + import os + from pathlib import Path + import ssl + import threading + import time + from urllib.error import HTTPError, URLError + from urllib.request import Request, urlopen + + + LISTEN_HOST = os.environ.get("LISTEN_HOST", "0.0.0.0") + LISTEN_PORT = int(os.environ.get("LISTEN_PORT", "8080")) + UPSTREAM_URL = os.environ.get("UPSTREAM_URL", "http://hermes-ollama.hermes.svc.cluster.local:11434").rstrip("/") + LEASE_NAMESPACE = os.environ.get("LEASE_NAMESPACE", "hermes") + LEASE_NAME = os.environ.get("LEASE_NAME", "titan-24-gpu-owner") + CACHE_TTL_SEC = float(os.environ.get("LEASE_CACHE_TTL_SEC", "1")) + API_HOST = os.environ.get("KUBERNETES_SERVICE_HOST", "kubernetes.default.svc") + API_PORT = os.environ.get("KUBERNETES_SERVICE_PORT_HTTPS", "443") + TOKEN_PATH = Path("/var/run/secrets/kubernetes.io/serviceaccount/token") + CA_PATH = Path("/var/run/secrets/kubernetes.io/serviceaccount/ca.crt") + LEASE_URL = ( + f"https://{API_HOST}:{API_PORT}/apis/coordination.k8s.io/v1/" + f"namespaces/{LEASE_NAMESPACE}/leases/{LEASE_NAME}" + ) + + _cache_lock = threading.Lock() + _cached_owner = "unavailable" + _cached_at = 0.0 + + + def _lease_owner() -> str: + """Return the current owner, failing closed when Kubernetes is unavailable.""" + + global _cached_at, _cached_owner + now = time.monotonic() + with _cache_lock: + if now - _cached_at < CACHE_TTL_SEC: + return _cached_owner + try: + token = TOKEN_PATH.read_text(encoding="utf-8").strip() + request = Request(LEASE_URL, headers={"Authorization": f"Bearer {token}"}) + context = ssl.create_default_context(cafile=str(CA_PATH)) + with urlopen(request, timeout=3, context=context) as response: + payload = json.load(response) + owner = str((payload.get("spec") or {}).get("holderIdentity") or "unavailable").strip() + except Exception: + owner = "unavailable" + _cached_owner = owner + _cached_at = now + return owner + + + class Handler(BaseHTTPRequestHandler): + """Proxy local model traffic while exposing health and ownership status.""" + + protocol_version = "HTTP/1.1" + + def _json(self, status: int, payload: dict) -> None: + body = json.dumps(payload, separators=(",", ":")).encode("utf-8") + self.send_response(status) + self.send_header("Content-Type", "application/json") + self.send_header("Content-Length", str(len(body))) + self.send_header("Cache-Control", "no-store") + self.end_headers() + self.wfile.write(body) + + def _local_allowed(self) -> tuple[bool, str]: + owner = _lease_owner() + return owner == "hermes", owner + + def _proxy(self) -> None: + allowed, owner = self._local_allowed() + if not allowed: + self._json( + 503, + { + "error": { + "message": f"local GPU inference unavailable while titan-24 owner is {owner}", + "type": "server_error", + }, + "gpu_owner": owner, + "fallback_required": True, + }, + ) + return + + length = int(self.headers.get("Content-Length", "0") or 0) + body = self.rfile.read(length) if length else None + headers = {"Content-Type": self.headers.get("Content-Type", "application/json")} + if self.headers.get("Accept"): + headers["Accept"] = self.headers["Accept"] + request = Request(f"{UPSTREAM_URL}{self.path}", data=body, headers=headers, method=self.command) + try: + response = urlopen(request, timeout=1800) + except HTTPError as exc: + response = exc + except (TimeoutError, URLError) as exc: + self._json(503, {"error": {"message": f"local model upstream unavailable: {exc}", "type": "server_error"}}) + return + + self.send_response(response.status) + content_type = response.headers.get("Content-Type") + if content_type: + self.send_header("Content-Type", content_type) + content_length = response.headers.get("Content-Length") + if content_length: + self.send_header("Content-Length", content_length) + else: + self.send_header("Connection", "close") + self.close_connection = True + self.send_header("Cache-Control", "no-store") + self.end_headers() + while True: + chunk = response.read(65536) + if not chunk: + break + self.wfile.write(chunk) + self.wfile.flush() + response.close() + + def do_GET(self) -> None: + if self.path == "/healthz": + self._json(200, {"status": "ok"}) + return + if self.path == "/gate/status": + allowed, owner = self._local_allowed() + self._json(200, {"gpu_owner": owner, "local_inference_allowed": allowed}) + return + self._proxy() + + def do_POST(self) -> None: + self._proxy() + + def log_message(self, format_string: str, *args) -> None: + print(f"model-gate {self.address_string()} {format_string % args}", flush=True) + + + if __name__ == "__main__": + ThreadingHTTPServer((LISTEN_HOST, LISTEN_PORT), Handler).serve_forever() diff --git a/services/hermes/model-gate-deployment.yaml b/services/hermes/model-gate-deployment.yaml new file mode 100644 index 00000000..2fc83aa7 --- /dev/null +++ b/services/hermes/model-gate-deployment.yaml @@ -0,0 +1,124 @@ +# services/hermes/model-gate-deployment.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + name: hermes-model-gate + namespace: hermes + labels: + app: hermes-model-gate +spec: + replicas: 1 + revisionHistoryLimit: 2 + selector: + matchLabels: + app: hermes-model-gate + template: + metadata: + labels: + app: hermes-model-gate + spec: + serviceAccountName: hermes-model-gate + securityContext: + seccompProfile: + type: RuntimeDefault + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: kubernetes.io/arch + operator: In + values: + - arm64 + - key: node-role.kubernetes.io/worker + operator: In + values: + - "true" + - key: kubernetes.io/hostname + operator: NotIn + values: + - titan-13 + - titan-15 + - titan-17 + - titan-19 + preferredDuringSchedulingIgnoredDuringExecution: + - weight: 90 + preference: + matchExpressions: + - key: hardware + operator: In + values: + - rpi5 + containers: + - name: model-gate + image: python@sha256:6d43704baacd1bfbe7c295d7f13079d5d8104ed33568873133f8fc69980419df + imagePullPolicy: IfNotPresent + command: + - python + - /opt/model-gate/model_gate.py + ports: + - name: http + containerPort: 8080 + env: + - name: UPSTREAM_URL + value: http://hermes-ollama.hermes.svc.cluster.local:11434 + - name: LEASE_NAMESPACE + value: hermes + - name: LEASE_NAME + value: titan-24-gpu-owner + readinessProbe: + httpGet: + path: /healthz + port: http + initialDelaySeconds: 3 + periodSeconds: 10 + livenessProbe: + httpGet: + path: /healthz + port: http + initialDelaySeconds: 10 + periodSeconds: 30 + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + readOnlyRootFilesystem: true + runAsNonRoot: true + runAsUser: 65532 + resources: + requests: + cpu: 25m + memory: 32Mi + limits: + cpu: 250m + memory: 128Mi + volumeMounts: + - name: script + mountPath: /opt/model-gate + readOnly: true + - name: tmp + mountPath: /tmp + volumes: + - name: script + configMap: + name: hermes-model-gate + defaultMode: 0555 + - name: tmp + emptyDir: {} +--- +apiVersion: v1 +kind: Service +metadata: + name: hermes-model-gate + namespace: hermes + labels: + app: hermes-model-gate +spec: + type: ClusterIP + selector: + app: hermes-model-gate + ports: + - name: http + port: 11434 + targetPort: http diff --git a/services/hermes/model-gate-rbac.yaml b/services/hermes/model-gate-rbac.yaml new file mode 100644 index 00000000..1c56556a --- /dev/null +++ b/services/hermes/model-gate-rbac.yaml @@ -0,0 +1,34 @@ +# services/hermes/model-gate-rbac.yaml +apiVersion: v1 +kind: ServiceAccount +metadata: + name: hermes-model-gate + namespace: hermes +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: hermes-model-gate + namespace: hermes +rules: + - apiGroups: ["coordination.k8s.io"] + resources: + - leases + resourceNames: + - titan-24-gpu-owner + verbs: + - get +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: hermes-model-gate + namespace: hermes +subjects: + - kind: ServiceAccount + name: hermes-model-gate + namespace: hermes +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: hermes-model-gate diff --git a/services/hermes/model-gate-state.yaml b/services/hermes/model-gate-state.yaml new file mode 100644 index 00000000..75659118 --- /dev/null +++ b/services/hermes/model-gate-state.yaml @@ -0,0 +1,10 @@ +# services/hermes/model-gate-state.yaml +apiVersion: coordination.k8s.io/v1 +kind: Lease +metadata: + name: titan-24-gpu-owner + namespace: hermes + annotations: + kustomize.toolkit.fluxcd.io/ssa: IfNotPresent +spec: + holderIdentity: hermes diff --git a/services/hermes/networkpolicy.yaml b/services/hermes/networkpolicy.yaml new file mode 100644 index 00000000..57bfa577 --- /dev/null +++ b/services/hermes/networkpolicy.yaml @@ -0,0 +1,30 @@ +# services/hermes/networkpolicy.yaml +apiVersion: networking.k8s.io/v1 +kind: NetworkPolicy +metadata: + name: hermes-ollama-ingress + namespace: hermes +spec: + podSelector: + matchLabels: + app: hermes-ollama + policyTypes: + - Ingress + ingress: + - from: + - podSelector: + matchLabels: + app: hermes-model-gate + ports: + - protocol: TCP + port: 11434 + - from: + - namespaceSelector: + matchLabels: + kubernetes.io/metadata.name: maintenance + podSelector: + matchLabels: + app: ariadne + ports: + - protocol: TCP + port: 11434 diff --git a/services/hermes/ollama-deployment.yaml b/services/hermes/ollama-deployment.yaml index 946aa7b1..64a351f5 100644 --- a/services/hermes/ollama-deployment.yaml +++ b/services/hermes/ollama-deployment.yaml @@ -18,8 +18,8 @@ spec: labels: app: hermes-ollama annotations: - ai.bstein.dev/model: qwen2.5:7b-instruct-q4_0 - ai.bstein.dev/gpu: accelerator MVP lane (titan-24) + ai.bstein.dev/model: gpt-oss:20b + ai.bstein.dev/gpu: titan-24 local-first lane spec: runtimeClassName: nvidia affinity: @@ -33,7 +33,8 @@ spec: - titan-24 volumes: - name: models - emptyDir: {} + persistentVolumeClaim: + claimName: hermes-models initContainers: - name: warm-model image: ollama/ollama@sha256:2c9595c555fd70a28363489ac03bd5bf9e7c5bdf2890373c3a830ffd7252ce6d @@ -44,7 +45,7 @@ spec: - name: OLLAMA_MODELS value: /root/.ollama - name: OLLAMA_MODEL - value: qwen2.5:7b-instruct-q4_0 + value: gpt-oss:20b - name: NVIDIA_VISIBLE_DEVICES value: all - name: NVIDIA_DRIVER_CAPABILITIES @@ -68,7 +69,7 @@ spec: nvidia.com/gpu.shared: 1 limits: cpu: "4" - memory: 10Gi + memory: 16Gi nvidia.com/gpu.shared: 1 containers: - name: ollama @@ -82,6 +83,16 @@ spec: value: 0.0.0.0 - name: OLLAMA_KEEP_ALIVE value: 6h + - name: OLLAMA_CONTEXT_LENGTH + value: "64000" + - name: OLLAMA_FLASH_ATTENTION + value: "1" + - name: OLLAMA_KV_CACHE_TYPE + value: q8_0 + - name: OLLAMA_MAX_LOADED_MODELS + value: "1" + - name: OLLAMA_NUM_PARALLEL + value: "1" - name: OLLAMA_MODELS value: /root/.ollama - name: NVIDIA_VISIBLE_DEVICES @@ -100,10 +111,10 @@ spec: timeoutSeconds: 5 resources: requests: - cpu: "2" - memory: 8Gi + cpu: "8" + memory: 24Gi nvidia.com/gpu.shared: 1 limits: - cpu: "6" - memory: 12Gi + cpu: "16" + memory: 40Gi nvidia.com/gpu.shared: 1 diff --git a/services/hermes/pvc.yaml b/services/hermes/pvc.yaml index 85812f5e..9ff1830f 100644 --- a/services/hermes/pvc.yaml +++ b/services/hermes/pvc.yaml @@ -13,3 +13,18 @@ spec: resources: requests: storage: 4Gi +--- +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: hermes-models + namespace: hermes + labels: + app: hermes-ollama +spec: + accessModes: + - ReadWriteOnce + storageClassName: local-path + resources: + requests: + storage: 30Gi diff --git a/services/hermes/skills/triage-titan-test-failures/SKILL.md b/services/hermes/skills/triage-titan-test-failures/SKILL.md new file mode 100644 index 00000000..a5c4eb6d --- /dev/null +++ b/services/hermes/skills/triage-titan-test-failures/SKILL.md @@ -0,0 +1,59 @@ +--- +name: triage-titan-test-failures +description: Diagnose Titan CI test failures and environment regressions from Ariadne evidence, Jenkins artifacts, Flux state, Kubernetes health, Pushgateway quality metrics, and Grafana context. Use for failed or flaky in-scope suites, suspected cluster-caused test failures, release-quality questions, or requests for a supervised read-only triage summary and repo-side next steps. +--- + +# Triage Titan Test Failures + +Follow the established Titan evidence path. Keep the investigation read-only and distinguish observed facts from inference. + +## Collect the canonical evidence + +1. Read the latest Ariadne diagnosis: + + ```sh + curl -fsS "$ARIADNE_BASE_URL/api/internal/testing/triage/diagnosis/latest" + ``` + +2. Read the deterministic bundle when the diagnosis is missing, stale, unavailable, or lacks evidence: + + ```sh + curl -fsS "$ARIADNE_BASE_URL/api/internal/testing/triage/latest" + ``` + +3. Ask for human approval before triggering a fresh collection or diagnosis. Use these only after approval: + + ```sh + curl -fsS -X POST "$ARIADNE_BASE_URL/api/internal/testing/triage/collect" + curl -fsS -X POST "$ARIADNE_BASE_URL/api/internal/testing/triage/diagnosis/run" + ``` + +Treat Ariadne's bundle as the evidence source of truth. A local-model diagnosis may be unavailable while Wolf owns titan-24; continue from the stored bundle using the active Hermes fallback model. + +## Narrow the failure + +Work in this order: + +1. Confirm the failed suite and build are in the canonical scope: `ananke`, `ariadne`, `atlasbot`, `bstein_home`, `data_prepper`, `metis`, `pegasus`, `soteria`, or `titan_iac`. +2. Identify the first failed gate in the enforced order: `style`, `loc`, `coverage`, `tests`, `gate_glue`, `sonarqube`, `supply_chain`. +3. Correlate the build timestamp with retained Jenkins logs/artifacts, recent Git commits, and Flux revisions. +4. Check whether Kubernetes health, node pressure, image pulls, storage, DNS, or a shared dependency explains the failure better than a repo regression. +5. Check Pushgateway and Grafana evidence for branch gaps, stale metrics, aliases, or missing zero-state telemetry. +6. State unknowns explicitly. Never invent a log line, metric, commit, pod condition, or root cause. + +Use read-only commands such as `kubectl get`, `kubectl describe`, `kubectl logs`, and HTTP GET requests. Do not read Secret values or run mutating Kubernetes, Flux, Vault, Jenkins, or Git commands. + +## Produce the triage result + +Return these sections: + +- `Finding`: one sentence naming the most likely failure class. +- `Confidence`: low, medium, or high, with the reason. +- `Evidence`: the smallest set of concrete timestamps, build IDs, artifact paths, commits, metrics, pods, nodes, or Flux revisions that support the finding. +- `Likely cause`: explain the causal chain and label inference as inference. +- `Blast radius`: affected suites, services, branches, or environments. +- `Next checks`: ordered read-only checks with exact commands or URLs. +- `Repo-side fix`: the smallest Flux/IaC or application change, or `none yet` when evidence is insufficient. +- `Approval required`: call out every step that would modify files, infrastructure, credentials, test environments, or external systems. + +Never present a proposed fix as applied. Prefer a concise evidence-backed answer over a general log summary. diff --git a/services/hermes/skills/triage-titan-test-failures/agents/openai.yaml b/services/hermes/skills/triage-titan-test-failures/agents/openai.yaml new file mode 100644 index 00000000..f29a6d9b --- /dev/null +++ b/services/hermes/skills/triage-titan-test-failures/agents/openai.yaml @@ -0,0 +1,4 @@ +interface: + display_name: "Triage Titan Test Failures" + short_description: "Analyze evidence for supervised test-failure triage" + default_prompt: "Use $triage-titan-test-failures to diagnose the latest Titan test failure from Ariadne evidence." diff --git a/services/maintenance/ariadne-deployment.yaml b/services/maintenance/ariadne-deployment.yaml index f39ddba3..6b57cf85 100644 --- a/services/maintenance/ariadne-deployment.yaml +++ b/services/maintenance/ariadne-deployment.yaml @@ -285,8 +285,21 @@ spec: - name: GAME_MODE_NODE_NAME value: titan-24 - name: GAME_MODE_DISPLACE_WORKLOADS - value: >- - [{"kind":"Deployment","namespace":"hermes","name":"hermes-ollama","restoreReplicas":1}] + value: "[]" + - name: GAME_MODE_LEASE_NAMESPACE + value: hermes + - name: GAME_MODE_LEASE_NAME + value: titan-24-gpu-owner + - name: GAME_MODE_OLLAMA_URL + value: http://hermes-ollama.hermes.svc.cluster.local:11434 + - name: GAME_MODE_OLLAMA_MODEL + value: gpt-oss:20b + - name: GAME_MODE_OLLAMA_REQUEST_TIMEOUT_SEC + value: "900" + - name: GAME_MODE_TRANSITION_TIMEOUT_SEC + value: "900" + - name: GAME_MODE_POLL_INTERVAL_SEC + value: "1" - name: WOLF_OIDC_CLIENT_ID value: wolf - name: WOLF_OIDC_BASE_URL @@ -444,11 +457,11 @@ spec: - name: ARIADNE_SCHEDULE_TESTING_TRIAGE value: "*/15 * * * *" - name: ARIADNE_TESTING_TRIAGE_MODEL_URL - value: http://hermes-ollama.hermes.svc.cluster.local:11434 + value: http://hermes-model-gate.hermes.svc.cluster.local:11434 - name: ARIADNE_TESTING_TRIAGE_MODEL - value: qwen2.5:7b-instruct-q4_0 + value: gpt-oss:20b - name: ARIADNE_TESTING_TRIAGE_MODEL_TIMEOUT_SEC - value: "180" + value: "900" - name: JENKINS_WORKSPACE_NAMESPACE value: jenkins - name: JENKINS_WORKSPACE_PVC_PREFIX diff --git a/services/maintenance/ariadne-rbac.yaml b/services/maintenance/ariadne-rbac.yaml index 73c5e3b5..cdc45583 100644 --- a/services/maintenance/ariadne-rbac.yaml +++ b/services/maintenance/ariadne-rbac.yaml @@ -78,7 +78,6 @@ rules: - get - list - watch - --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding From 958ba21d47440136e34186e3b691409b982d8d19 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 1 Aug 2026 22:49:57 -0300 Subject: [PATCH 602/991] Deploy Cassandra 0.8.114 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index cc43b744..956afe70 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-01-0.8.113-generation-heartbeat" + cassandra.bstein.dev/redeploy: "2026-08-01-0.8.114-card-notes" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index df08fc65..39f81bd7 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.114 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.114 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.113" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.113" + CASSANDRA_SIM_WORKER_VERSION: "0.8.114" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.114" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From fb31d4514edf3e21383a823ddc27904e18b5b574 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 1 Aug 2026 22:59:29 -0300 Subject: [PATCH 603/991] gpu(titan-24): avoid unhealthy gate node --- services/hermes/model-gate-deployment.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/services/hermes/model-gate-deployment.yaml b/services/hermes/model-gate-deployment.yaml index 2fc83aa7..a8c9511c 100644 --- a/services/hermes/model-gate-deployment.yaml +++ b/services/hermes/model-gate-deployment.yaml @@ -37,6 +37,7 @@ spec: - key: kubernetes.io/hostname operator: NotIn values: + - titan-04 - titan-13 - titan-15 - titan-17 From b52663cea76ed9e0ca69860557b6341788b18da3 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 1 Aug 2026 23:18:49 -0300 Subject: [PATCH 604/991] ai(hermes): harden Atlas triage evidence guardrails --- .../skills/triage-titan-test-failures/SKILL.md | 15 ++++++++++++++- 1 file changed, 14 insertions(+), 1 deletion(-) diff --git a/services/hermes/skills/triage-titan-test-failures/SKILL.md b/services/hermes/skills/triage-titan-test-failures/SKILL.md index a5c4eb6d..b1600a9e 100644 --- a/services/hermes/skills/triage-titan-test-failures/SKILL.md +++ b/services/hermes/skills/triage-titan-test-failures/SKILL.md @@ -15,7 +15,7 @@ Follow the established Titan evidence path. Keep the investigation read-only and curl -fsS "$ARIADNE_BASE_URL/api/internal/testing/triage/diagnosis/latest" ``` -2. Read the deterministic bundle when the diagnosis is missing, stale, unavailable, or lacks evidence: +2. Always read the deterministic bundle, even when the diagnosis looks complete: ```sh curl -fsS "$ARIADNE_BASE_URL/api/internal/testing/triage/latest" @@ -28,8 +28,19 @@ Follow the established Titan evidence path. Keep the investigation read-only and curl -fsS -X POST "$ARIADNE_BASE_URL/api/internal/testing/triage/diagnosis/run" ``` +Record the timestamps and status from both responses. Treat the diagnosis as stale when it predates the deterministic bundle, reports `unavailable`, or lacks concrete evidence. In any of those cases, continue the investigation from the deterministic bundle; do not stop at model availability. + Treat Ariadne's bundle as the evidence source of truth. A local-model diagnosis may be unavailable while Wolf owns titan-24; continue from the stored bundle using the active Hermes fallback model. +## Atlas facts and guardrails + +- Ariadne runs as the `ariadne` Deployment and Service in the `maintenance` namespace. +- Hermes local inference runs through `hermes-model-gate` in the `hermes` namespace. Ollama is the `hermes-ollama` Deployment and Service in that namespace. +- OpenClaw is not part of this inference path. Never suggest an `openclaw` resource unless a read-only query first proves one exists. +- A connection error recorded inside an older diagnosis proves only that the model request failed at that timestamp. It does not prove the service is currently down. +- Never invent a namespace, workload, container, port, URL, log line, metric, commit, or pod condition. Verify a target with a read-only query before presenting an exact follow-up command; otherwise state what must be discovered first. +- HTTP POST collection and diagnosis endpoints are state-changing operations. Put them only under `Approval required`; never describe them as read-only or include them in the read-only command list. + ## Narrow the failure Work in this order: @@ -41,6 +52,8 @@ Work in this order: 5. Check Pushgateway and Grafana evidence for branch gaps, stale metrics, aliases, or missing zero-state telemetry. 6. State unknowns explicitly. Never invent a log line, metric, commit, pod condition, or root cause. +If the latest diagnosis is unavailable, the minimum acceptable result still analyzes the deterministic bundle's failed suites, build/check evidence, freshness, and environment observations. Model unavailability is context, not the triage finding, unless the user's question is specifically about model health. + Use read-only commands such as `kubectl get`, `kubectl describe`, `kubectl logs`, and HTTP GET requests. Do not read Secret values or run mutating Kubernetes, Flux, Vault, Jenkins, or Git commands. ## Produce the triage result From 97bd47442b931061cbfbafa4836e9e11951a934e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 03:23:09 +0000 Subject: [PATCH 605/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 6c5fc32c..788b14cb 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.114 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.115 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 1f85daba661de6f35b609e76f23d5f2d4f00810a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 03:23:15 +0000 Subject: [PATCH 606/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 956afe70..362a7b9b 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.114 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.115 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.114 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.115 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 2fd6c2d5..0d2b5465 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.114 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.115 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 5740c6df280eb0abeb75dbec52ee2291b91ec136 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 03:26:13 +0000 Subject: [PATCH 607/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 362a7b9b..904ce8da 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.114 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.115 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.114 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 39f81bd7..bca385dd 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.114 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.115 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.114 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.114" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.114" From b9020f7db06721fd5ed287950dd4f9e59a2a5ff5 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 03:28:21 +0000 Subject: [PATCH 608/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 904ce8da..010a8e8a 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.115 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.114 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.115 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index bca385dd..eb368429 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.115 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.114 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.115 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.114" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.114" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 2f1e62c6d0ea802d0ee26a7b9d601307647bebce Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 04:55:10 +0000 Subject: [PATCH 609/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 010a8e8a..edb4ced3 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.115 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.116 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.115 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.116 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 0d2b5465..fef7cc9b 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.115 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.116 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 444ed3a498bad565c6c63fa6666c90fbf4fc3e05 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 04:56:09 +0000 Subject: [PATCH 610/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 788b14cb..3477e693 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.115 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.116 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 782d12e5c5695bb23233e8a074f7e4d028e0a8a6 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 04:59:10 +0000 Subject: [PATCH 611/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index edb4ced3..2ee42ba3 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.115 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.116 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.115 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index eb368429..3cf00134 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.115 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.116 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.115 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.114" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.114" From 273864d093b48145eac454bc937d61f7f550032d Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 05:01:17 +0000 Subject: [PATCH 612/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 2ee42ba3..460abb06 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.116 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.115 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.116 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 3cf00134..6326f101 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.116 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.115 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.116 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.114" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.114" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 41bb2bba7e55d6830a95fe5f9eac73990c9b93f2 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 02:02:02 -0300 Subject: [PATCH 613/991] Deploy Cassandra 0.8.116 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 460abb06..8bb3b4f6 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-01-0.8.114-card-notes" + cassandra.bstein.dev/redeploy: "2026-08-01-0.8.116-retry-reuse" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 6326f101..ccdb339f 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.116 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.116 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.114" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.114" + CASSANDRA_SIM_WORKER_VERSION: "0.8.116" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.116" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From 749dbd8a65c0d769d38b4353cf8f587915642686 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 05:15:26 +0000 Subject: [PATCH 614/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 4a980871..429e8d13 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-378 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-379 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-264-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From 5f4bdc6e7e6d5364ff36a111607c1263674b26ab Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 02:30:44 -0300 Subject: [PATCH 615/991] ai(hermes): add isolated user chat instance --- .../hermes-chat/kustomization.yaml | 28 +++ .../applications/hermes/kustomization.yaml | 4 + .../applications/kustomization.yaml | 1 + services/hermes-chat/certificate.yaml | 13 + services/hermes-chat/configmap.yaml | 142 +++++++++++ services/hermes-chat/deployment.yaml | 220 +++++++++++++++++ services/hermes-chat/ingress.yaml | 27 +++ services/hermes-chat/kustomization.yaml | 15 ++ services/hermes-chat/namespace.yaml | 7 + services/hermes-chat/networkpolicy.yaml | 63 +++++ services/hermes-chat/pvc.yaml | 15 ++ services/hermes-chat/rbac.yaml | 62 +++++ services/hermes-chat/service.yaml | 17 ++ services/hermes-chat/serviceaccount.yaml | 7 + services/hermes/agent-ingress.yaml | 4 +- services/hermes/kustomization.yaml | 2 + services/hermes/oauth2-proxy.yaml | 160 ++++++++++++ services/hermes/vault-serviceaccount.yaml | 6 + services/keycloak/kustomization.yaml | 4 + .../hermes-access-oidc-client-job.yaml | 57 +++++ .../scripts/hermes_access_oidc_ensure.sh | 228 ++++++++++++++++++ .../vault/hermes-auth-role-bootstrap-job.yaml | 54 +++++ services/vault/kustomization.yaml | 1 + .../vault/scripts/vault_k8s_auth_configure.sh | 4 +- 24 files changed, 1138 insertions(+), 3 deletions(-) create mode 100644 clusters/atlas/flux-system/applications/hermes-chat/kustomization.yaml create mode 100644 services/hermes-chat/certificate.yaml create mode 100644 services/hermes-chat/configmap.yaml create mode 100644 services/hermes-chat/deployment.yaml create mode 100644 services/hermes-chat/ingress.yaml create mode 100644 services/hermes-chat/kustomization.yaml create mode 100644 services/hermes-chat/namespace.yaml create mode 100644 services/hermes-chat/networkpolicy.yaml create mode 100644 services/hermes-chat/pvc.yaml create mode 100644 services/hermes-chat/rbac.yaml create mode 100644 services/hermes-chat/service.yaml create mode 100644 services/hermes-chat/serviceaccount.yaml create mode 100644 services/hermes/oauth2-proxy.yaml create mode 100644 services/hermes/vault-serviceaccount.yaml create mode 100644 services/keycloak/oneoffs/hermes-access-oidc-client-job.yaml create mode 100755 services/keycloak/scripts/hermes_access_oidc_ensure.sh create mode 100644 services/vault/hermes-auth-role-bootstrap-job.yaml diff --git a/clusters/atlas/flux-system/applications/hermes-chat/kustomization.yaml b/clusters/atlas/flux-system/applications/hermes-chat/kustomization.yaml new file mode 100644 index 00000000..38b6d761 --- /dev/null +++ b/clusters/atlas/flux-system/applications/hermes-chat/kustomization.yaml @@ -0,0 +1,28 @@ +# clusters/atlas/flux-system/applications/hermes-chat/kustomization.yaml +apiVersion: kustomize.toolkit.fluxcd.io/v1 +kind: Kustomization +metadata: + name: hermes-chat + namespace: flux-system +spec: + interval: 10m + path: ./services/hermes-chat + targetNamespace: hermes-chat + prune: true + sourceRef: + kind: GitRepository + name: flux-system + namespace: flux-system + wait: true + timeout: 30m + healthChecks: + - apiVersion: apps/v1 + kind: Deployment + name: hermes-chat + namespace: hermes-chat + dependsOn: + - name: cert-manager + - name: core + - name: hermes + - name: keycloak + - name: longhorn diff --git a/clusters/atlas/flux-system/applications/hermes/kustomization.yaml b/clusters/atlas/flux-system/applications/hermes/kustomization.yaml index ec31a55c..47cca710 100644 --- a/clusters/atlas/flux-system/applications/hermes/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/hermes/kustomization.yaml @@ -30,6 +30,10 @@ spec: kind: Deployment name: hermes namespace: hermes + - apiVersion: apps/v1 + kind: Deployment + name: oauth2-proxy-hermes + namespace: hermes dependsOn: - name: cert-manager - name: core diff --git a/clusters/atlas/flux-system/applications/kustomization.yaml b/clusters/atlas/flux-system/applications/kustomization.yaml index b5ca2378..671f019b 100644 --- a/clusters/atlas/flux-system/applications/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/kustomization.yaml @@ -28,6 +28,7 @@ resources: - ai-llm/kustomization.yaml - openclaw/kustomization.yaml - hermes/kustomization.yaml + - hermes-chat/kustomization.yaml - game-stream/kustomization.yaml - cassandra-auth/kustomization.yaml - cassandra/kustomization.yaml diff --git a/services/hermes-chat/certificate.yaml b/services/hermes-chat/certificate.yaml new file mode 100644 index 00000000..3bed14a1 --- /dev/null +++ b/services/hermes-chat/certificate.yaml @@ -0,0 +1,13 @@ +# services/hermes-chat/certificate.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + name: chat-tls + namespace: hermes-chat +spec: + secretName: chat-tls + issuerRef: + kind: ClusterIssuer + name: letsencrypt + dnsNames: + - chat.bstein.dev diff --git a/services/hermes-chat/configmap.yaml b/services/hermes-chat/configmap.yaml new file mode 100644 index 00000000..f395ffba --- /dev/null +++ b/services/hermes-chat/configmap.yaml @@ -0,0 +1,142 @@ +# services/hermes-chat/configmap.yaml +apiVersion: v1 +kind: ConfigMap +metadata: + name: hermes-chat-config + namespace: hermes-chat + labels: + app: hermes-chat +data: + config.yaml: | + model: + provider: custom + default: gpt-oss:20b + model: gpt-oss:20b + context_length: 64000 + base_url: http://hermes-model-gate.hermes.svc.cluster.local:11434/v1 + api_key: ollama + + fallback_providers: + - provider: openai-codex + model: gpt-5.4 + + agent: + api_max_retries: 1 + + skills: + creation_nudge_interval: 15 + external_dirs: + - /opt/data/workspace/skills + + terminal: + backend: local + cwd: /opt/data/workspace + timeout: 180 + home_mode: profile + + approvals: + mode: manual + deny: + - "*kubectl apply*" + - "*kubectl create*" + - "*kubectl delete*" + - "*kubectl edit*" + - "*kubectl patch*" + - "*kubectl replace*" + - "*kubectl scale*" + - "*kubectl set*" + - "*kubectl label*" + - "*kubectl annotate*" + - "*kubectl cordon*" + - "*kubectl uncordon*" + - "*kubectl drain*" + - "*kubectl rollout restart*" + - "*kubectl rollout undo*" + - "*kubectl exec*" + - "*kubectl attach*" + - "*kubectl cp*" + - "*kubectl debug*" + - "*kubectl expose*" + - "*kubectl port-forward*" + - "*kubectl proxy*" + - "*kubectl run*" + - "*kubectl get secret*" + - "*kubectl describe secret*" + - "*flux reconcile*" + - "*flux suspend*" + - "*flux resume*" + - "*vault *" + - "*k3s *" + - "*crictl *" + - "*ctr *" + - "*169.254.169.254*" + - "*kubernetes.default*" + - "*/var/run/secrets/kubernetes.io*" + + dashboard: + public_url: https://chat.bstein.dev + oauth: + provider: self-hosted + self_hosted: + issuer: https://sso.bstein.dev/realms/atlas + client_id: hermes-chat-dashboard + scopes: openid profile email groups + + display: + compact: true + tool_progress: all + interim_assistant_messages: true + long_running_notifications: true + + tool_loop_guardrails: + warnings_enabled: true + hard_stop_enabled: true + warn_after: + exact_failure: 2 + same_tool_failure: 3 + idempotent_no_progress: 2 + hard_stop_after: + exact_failure: 5 + same_tool_failure: 8 + idempotent_no_progress: 5 + + updates: + pre_update_backup: quick + backup_keep: 3 + non_interactive_local_changes: stash + SOUL.md: | + You are a personal AI assistant and researcher for Atlas users. Be useful, + curious, careful, and direct. Help with research, writing, planning, + learning, files, personal automation, and creative work. Use tools when + they materially improve the answer and make reusable skills when a stable + workflow is worth keeping. + + Your environment is a private consumer sandbox. Work in the mounted + workspace and with public Internet services the user intentionally asks + you to use. You may inspect the Titan cluster through the dedicated + read-only Kubernetes identity to explain health and status. You do not + administer it: never attempt mutations, secret access, exec, attach, + port-forwarding, private-service access, or cloud metadata access. + AGENTS.md: | + # Personal Hermes workspace + + This Hermes instance is a personal chat, research, and automation + environment. User-created files and skills belong under `/opt/data/workspace`. + + You may: + + - research public Internet sources and cite them + - create, read, and edit files in the workspace + - create and improve reusable skills + - configure user-owned channels and provider integrations + - run ordinary local commands needed for the user's task + - inspect non-secret Kubernetes resources and pod logs with read-only + `kubectl get`, `describe`, and `logs` commands + + This container is not an infrastructure administration environment. The + Kubernetes identity is observation-only and cannot read Secrets or use pod + exec, attach, or port-forwarding. Do not attempt cluster mutations, private + service access, node LAN access, metadata services, Vault, container + runtimes, or the operator Hermes instance. If a request needs an action, + explain the evidence and say Brad must perform it from the operator + instance at `agent.bstein.dev`. diff --git a/services/hermes-chat/deployment.yaml b/services/hermes-chat/deployment.yaml new file mode 100644 index 00000000..ef3888c3 --- /dev/null +++ b/services/hermes-chat/deployment.yaml @@ -0,0 +1,220 @@ +# services/hermes-chat/deployment.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + name: hermes-chat + namespace: hermes-chat + labels: + app: hermes-chat +spec: + replicas: 1 + revisionHistoryLimit: 2 + progressDeadlineSeconds: 1800 + strategy: + type: Recreate + selector: + matchLabels: + app: hermes-chat + template: + metadata: + labels: + app: hermes-chat + annotations: + ai.bstein.dev/model: gpt-oss:20b with independent openai-codex fallback + ai.bstein.dev/role: personal-chat-research + ai.bstein.dev/isolation: observer-only Kubernetes RBAC, private-service egress denied + spec: + serviceAccountName: hermes-chat + automountServiceAccountToken: true + securityContext: + fsGroup: 10000 + fsGroupChangePolicy: OnRootMismatch + seccompProfile: + type: RuntimeDefault + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: kubernetes.io/arch + operator: In + values: + - arm64 + - key: node-role.kubernetes.io/worker + operator: In + values: + - "true" + - key: kubernetes.io/hostname + operator: NotIn + values: + - titan-13 + - titan-15 + - titan-17 + - titan-19 + preferredDuringSchedulingIgnoredDuringExecution: + - weight: 100 + preference: + matchExpressions: + - key: atlas.bstein.dev/spillover + operator: DoesNotExist + - weight: 90 + preference: + matchExpressions: + - key: hardware + operator: In + values: + - rpi5 + - weight: 50 + preference: + matchExpressions: + - key: hardware + operator: In + values: + - rpi4 + initContainers: + - name: init-config + image: busybox:1.37 + imagePullPolicy: IfNotPresent + command: + - sh + - -c + - | + set -eu + mkdir -p /opt/data/workspace/skills /opt/data/home/.local/bin /opt/data/logs + cp /config/config.yaml /opt/data/config.yaml + cp /config/SOUL.md /opt/data/SOUL.md + cp /config/AGENTS.md /opt/data/workspace/AGENTS.md + touch /opt/data/.env + if ! grep -q '^API_SERVER_KEY=' /opt/data/.env; then + api_key="$(dd if=/dev/urandom bs=32 count=1 2>/dev/null | od -An -tx1 | tr -d ' \n')" + printf '\nAPI_SERVER_KEY=%s\n' "${api_key}" >> /opt/data/.env + fi + chmod 0600 /opt/data/.env + chown -R 10000:10000 /opt/data + securityContext: + allowPrivilegeEscalation: false + runAsUser: 0 + runAsGroup: 0 + seccompProfile: + type: RuntimeDefault + volumeMounts: + - name: home + mountPath: /opt/data + - name: config + mountPath: /config + readOnly: true + resources: + requests: + cpu: 25m + memory: 32Mi + limits: + cpu: 100m + memory: 64Mi + - name: install-kubectl + image: bitnami/kubectl@sha256:554ab88b1858e8424c55de37ad417b16f2a0e65d1607aa0f3fe3ce9b9f10b131 + imagePullPolicy: IfNotPresent + command: + - /bin/sh + - -c + - | + set -eu + cp "$(command -v kubectl)" /tools/kubectl + chmod 0755 /tools/kubectl + chown 10000:10000 /tools/kubectl + securityContext: + allowPrivilegeEscalation: false + runAsUser: 0 + runAsGroup: 0 + seccompProfile: + type: RuntimeDefault + volumeMounts: + - name: tools + mountPath: /tools + resources: + requests: + cpu: 25m + memory: 32Mi + limits: + cpu: 100m + memory: 64Mi + containers: + - name: hermes-chat + image: nousresearch/hermes-agent@sha256:9c841866021c54c4596849f6135717e8a4d52ba510b7f52c50aef1de1a283973 + imagePullPolicy: IfNotPresent + args: + - gateway + - run + ports: + - name: dashboard + containerPort: 9119 + protocol: TCP + env: + - name: HERMES_HOME + value: /opt/data + - name: HOME + value: /opt/data/home + - name: PATH + value: /opt/data/home/.local/bin:/opt/hermes/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin + - name: HERMES_DASHBOARD + value: "1" + - name: HERMES_DASHBOARD_HOST + value: 0.0.0.0 + - name: HERMES_DASHBOARD_PORT + value: "9119" + - name: HERMES_DASHBOARD_PUBLIC_URL + value: https://chat.bstein.dev + - name: HERMES_DASHBOARD_OIDC_ISSUER + value: https://sso.bstein.dev/realms/atlas + - name: HERMES_DASHBOARD_OIDC_CLIENT_ID + value: hermes-chat-dashboard + - name: HERMES_DASHBOARD_OIDC_SCOPES + value: openid profile email groups + - name: API_SERVER_ENABLED + value: "true" + - name: API_SERVER_HOST + value: 0.0.0.0 + - name: API_SERVER_PORT + value: "8642" + - name: API_SERVER_CORS_ORIGINS + value: https://chat.bstein.dev + volumeMounts: + - name: home + mountPath: /opt/data + - name: tools + mountPath: /opt/data/home/.local/bin + readinessProbe: + httpGet: + path: /api/status + port: dashboard + initialDelaySeconds: 30 + periodSeconds: 10 + timeoutSeconds: 5 + livenessProbe: + httpGet: + path: /api/status + port: dashboard + initialDelaySeconds: 90 + periodSeconds: 30 + timeoutSeconds: 10 + securityContext: + allowPrivilegeEscalation: false + seccompProfile: + type: RuntimeDefault + resources: + requests: + cpu: 100m + memory: 768Mi + ephemeral-storage: 256Mi + limits: + cpu: "1" + memory: 2Gi + ephemeral-storage: 1Gi + volumes: + - name: home + persistentVolumeClaim: + claimName: hermes-chat-home + - name: config + configMap: + name: hermes-chat-config + - name: tools + emptyDir: {} diff --git a/services/hermes-chat/ingress.yaml b/services/hermes-chat/ingress.yaml new file mode 100644 index 00000000..e176231f --- /dev/null +++ b/services/hermes-chat/ingress.yaml @@ -0,0 +1,27 @@ +# services/hermes-chat/ingress.yaml +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + name: chat + namespace: hermes-chat + annotations: + cert-manager.io/cluster-issuer: letsencrypt + traefik.ingress.kubernetes.io/router.entrypoints: websecure + traefik.ingress.kubernetes.io/router.tls: "true" +spec: + ingressClassName: traefik + tls: + - hosts: + - chat.bstein.dev + secretName: chat-tls + rules: + - host: chat.bstein.dev + http: + paths: + - path: / + pathType: Prefix + backend: + service: + name: hermes-chat + port: + name: dashboard diff --git a/services/hermes-chat/kustomization.yaml b/services/hermes-chat/kustomization.yaml new file mode 100644 index 00000000..4d3529d7 --- /dev/null +++ b/services/hermes-chat/kustomization.yaml @@ -0,0 +1,15 @@ +# services/hermes-chat/kustomization.yaml +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: hermes-chat +resources: + - namespace.yaml + - serviceaccount.yaml + - rbac.yaml + - configmap.yaml + - pvc.yaml + - deployment.yaml + - service.yaml + - networkpolicy.yaml + - certificate.yaml + - ingress.yaml diff --git a/services/hermes-chat/namespace.yaml b/services/hermes-chat/namespace.yaml new file mode 100644 index 00000000..8b607b8b --- /dev/null +++ b/services/hermes-chat/namespace.yaml @@ -0,0 +1,7 @@ +# services/hermes-chat/namespace.yaml +apiVersion: v1 +kind: Namespace +metadata: + name: hermes-chat + labels: + app.kubernetes.io/name: hermes-chat diff --git a/services/hermes-chat/networkpolicy.yaml b/services/hermes-chat/networkpolicy.yaml new file mode 100644 index 00000000..c6cf5718 --- /dev/null +++ b/services/hermes-chat/networkpolicy.yaml @@ -0,0 +1,63 @@ +# services/hermes-chat/networkpolicy.yaml +apiVersion: networking.k8s.io/v1 +kind: NetworkPolicy +metadata: + name: hermes-chat-isolation + namespace: hermes-chat +spec: + podSelector: + matchLabels: + app: hermes-chat + policyTypes: + - Ingress + - Egress + ingress: + - from: + - namespaceSelector: + matchLabels: + kubernetes.io/metadata.name: traefik + podSelector: + matchLabels: + app.kubernetes.io/name: traefik + ports: + - protocol: TCP + port: 9119 + egress: + - to: + - namespaceSelector: + matchLabels: + kubernetes.io/metadata.name: kube-system + podSelector: + matchLabels: + k8s-app: kube-dns + ports: + - protocol: UDP + port: 53 + - protocol: TCP + port: 53 + - to: + - namespaceSelector: + matchLabels: + kubernetes.io/metadata.name: hermes + podSelector: + matchLabels: + app: hermes-model-gate + ports: + - protocol: TCP + port: 8080 + - to: + - ipBlock: + cidr: 10.43.0.1/32 + ports: + - protocol: TCP + port: 443 + - to: + - ipBlock: + cidr: 0.0.0.0/0 + except: + - 10.0.0.0/8 + - 100.64.0.0/10 + - 127.0.0.0/8 + - 169.254.0.0/16 + - 172.16.0.0/12 + - 192.168.0.0/16 diff --git a/services/hermes-chat/pvc.yaml b/services/hermes-chat/pvc.yaml new file mode 100644 index 00000000..f2588f79 --- /dev/null +++ b/services/hermes-chat/pvc.yaml @@ -0,0 +1,15 @@ +# services/hermes-chat/pvc.yaml +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: hermes-chat-home + namespace: hermes-chat + labels: + app: hermes-chat +spec: + accessModes: + - ReadWriteOnce + storageClassName: astreae + resources: + requests: + storage: 2Gi diff --git a/services/hermes-chat/rbac.yaml b/services/hermes-chat/rbac.yaml new file mode 100644 index 00000000..4144da68 --- /dev/null +++ b/services/hermes-chat/rbac.yaml @@ -0,0 +1,62 @@ +# services/hermes-chat/rbac.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: hermes-chat-observer +rules: + - apiGroups: [""] + resources: + - endpoints + - events + - namespaces + - nodes + - persistentvolumeclaims + - persistentvolumes + - pods + - pods/log + - replicationcontrollers + - services + verbs: ["get", "list", "watch"] + - apiGroups: ["apps"] + resources: + - daemonsets + - deployments + - replicasets + - statefulsets + verbs: ["get", "list", "watch"] + - apiGroups: ["batch"] + resources: + - cronjobs + - jobs + verbs: ["get", "list", "watch"] + - apiGroups: ["networking.k8s.io"] + resources: + - ingresses + - networkpolicies + verbs: ["get", "list", "watch"] + - apiGroups: ["helm.toolkit.fluxcd.io"] + resources: + - helmreleases + verbs: ["get", "list", "watch"] + - apiGroups: ["kustomize.toolkit.fluxcd.io"] + resources: + - kustomizations + verbs: ["get", "list", "watch"] + - apiGroups: ["source.toolkit.fluxcd.io"] + resources: + - gitrepositories + - helmrepositories + verbs: ["get", "list", "watch"] +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: hermes-chat-observer +subjects: + - kind: ServiceAccount + name: hermes-chat + namespace: hermes-chat +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: hermes-chat-observer diff --git a/services/hermes-chat/service.yaml b/services/hermes-chat/service.yaml new file mode 100644 index 00000000..8b74822e --- /dev/null +++ b/services/hermes-chat/service.yaml @@ -0,0 +1,17 @@ +# services/hermes-chat/service.yaml +apiVersion: v1 +kind: Service +metadata: + name: hermes-chat + namespace: hermes-chat + labels: + app: hermes-chat +spec: + type: ClusterIP + selector: + app: hermes-chat + ports: + - name: dashboard + port: 9119 + targetPort: dashboard + protocol: TCP diff --git a/services/hermes-chat/serviceaccount.yaml b/services/hermes-chat/serviceaccount.yaml new file mode 100644 index 00000000..88eca224 --- /dev/null +++ b/services/hermes-chat/serviceaccount.yaml @@ -0,0 +1,7 @@ +# services/hermes-chat/serviceaccount.yaml +apiVersion: v1 +kind: ServiceAccount +metadata: + name: hermes-chat + namespace: hermes-chat +automountServiceAccountToken: true diff --git a/services/hermes/agent-ingress.yaml b/services/hermes/agent-ingress.yaml index 4ef033cd..9581a95b 100644 --- a/services/hermes/agent-ingress.yaml +++ b/services/hermes/agent-ingress.yaml @@ -21,6 +21,6 @@ spec: pathType: Prefix backend: service: - name: hermes + name: oauth2-proxy-hermes port: - name: dashboard + name: http diff --git a/services/hermes/kustomization.yaml b/services/hermes/kustomization.yaml index 7287255d..3c7172a9 100644 --- a/services/hermes/kustomization.yaml +++ b/services/hermes/kustomization.yaml @@ -4,6 +4,7 @@ kind: Kustomization namespace: hermes resources: - namespace.yaml + - vault-serviceaccount.yaml - configmap.yaml - rbac.yaml - pvc.yaml @@ -16,6 +17,7 @@ resources: - ollama-deployment.yaml - deployment.yaml - service.yaml + - oauth2-proxy.yaml - agent-certificate.yaml - agent-ingress.yaml diff --git a/services/hermes/oauth2-proxy.yaml b/services/hermes/oauth2-proxy.yaml new file mode 100644 index 00000000..3ed20ce8 --- /dev/null +++ b/services/hermes/oauth2-proxy.yaml @@ -0,0 +1,160 @@ +# services/hermes/oauth2-proxy.yaml +apiVersion: v1 +kind: ConfigMap +metadata: + name: hermes-operator-allowlist + namespace: hermes +data: + allowed-emails: | + brad@bstein.dev +--- +apiVersion: v1 +kind: Service +metadata: + name: oauth2-proxy-hermes + namespace: hermes + labels: + app: oauth2-proxy-hermes +spec: + selector: + app: oauth2-proxy-hermes + ports: + - name: http + port: 80 + targetPort: http +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: oauth2-proxy-hermes + namespace: hermes + labels: + app: oauth2-proxy-hermes +spec: + replicas: 1 + revisionHistoryLimit: 2 + selector: + matchLabels: + app: oauth2-proxy-hermes + template: + metadata: + labels: + app: oauth2-proxy-hermes + annotations: + vault.hashicorp.com/agent-inject: "true" + vault.hashicorp.com/agent-pre-populate-only: "true" + vault.hashicorp.com/role: hermes + vault.hashicorp.com/agent-inject-secret-oidc-config: kv/data/atlas/hermes/operator-oidc + vault.hashicorp.com/agent-inject-template-oidc-config: | + {{- with secret "kv/data/atlas/hermes/operator-oidc" -}} + client_id = "{{ .Data.data.client_id }}" + client_secret = "{{ .Data.data.client_secret }}" + cookie_secret = "{{ .Data.data.cookie_secret }}" + {{- end -}} + spec: + serviceAccountName: hermes-vault + automountServiceAccountToken: true + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: kubernetes.io/arch + operator: In + values: + - arm64 + - key: node-role.kubernetes.io/worker + operator: In + values: + - "true" + - key: kubernetes.io/hostname + operator: NotIn + values: + - titan-13 + - titan-15 + - titan-17 + - titan-19 + preferredDuringSchedulingIgnoredDuringExecution: + - weight: 90 + preference: + matchExpressions: + - key: hardware + operator: In + values: + - rpi5 + - weight: 50 + preference: + matchExpressions: + - key: hardware + operator: In + values: + - rpi4 + containers: + - name: oauth2-proxy + image: quay.io/oauth2-proxy/oauth2-proxy:v7.6.0@sha256:dcb6ff8dd21bf3058f6a22c6fa385fa5b897a9cd3914c88a2cc2bb0a85f8065d + imagePullPolicy: IfNotPresent + args: + - --provider=oidc + - --config=/vault/secrets/oidc-config + - --redirect-url=https://agent.bstein.dev/oauth2/callback + - --oidc-issuer-url=https://sso.bstein.dev/realms/atlas + - --scope=openid profile email + - --email-domain=* + - --authenticated-emails-file=/etc/oauth2-proxy/allowed-emails + - --set-xauthrequest=true + - --pass-access-token=true + - --set-authorization-header=true + - --cookie-secure=true + - --cookie-samesite=lax + - --cookie-refresh=20m + - --cookie-expire=24h + - --upstream=http://hermes.hermes.svc.cluster.local:9119 + - --http-address=0.0.0.0:4180 + - --skip-provider-button=true + - --skip-jwt-bearer-tokens=true + - --cookie-domain=agent.bstein.dev + - --reverse-proxy=true + ports: + - name: http + containerPort: 4180 + readinessProbe: + httpGet: + path: /ping + port: http + initialDelaySeconds: 5 + periodSeconds: 10 + livenessProbe: + httpGet: + path: /ping + port: http + initialDelaySeconds: 20 + periodSeconds: 20 + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + readOnlyRootFilesystem: true + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + resources: + requests: + cpu: 25m + memory: 64Mi + limits: + cpu: 250m + memory: 256Mi + volumeMounts: + - name: allowlist + mountPath: /etc/oauth2-proxy + readOnly: true + - name: tmp + mountPath: /tmp + volumes: + - name: allowlist + configMap: + name: hermes-operator-allowlist + - name: tmp + emptyDir: + sizeLimit: 64Mi diff --git a/services/hermes/vault-serviceaccount.yaml b/services/hermes/vault-serviceaccount.yaml new file mode 100644 index 00000000..91106486 --- /dev/null +++ b/services/hermes/vault-serviceaccount.yaml @@ -0,0 +1,6 @@ +# services/hermes/vault-serviceaccount.yaml +apiVersion: v1 +kind: ServiceAccount +metadata: + name: hermes-vault + namespace: hermes diff --git a/services/keycloak/kustomization.yaml b/services/keycloak/kustomization.yaml index 56677b8b..ff6ae911 100644 --- a/services/keycloak/kustomization.yaml +++ b/services/keycloak/kustomization.yaml @@ -27,6 +27,7 @@ resources: - oneoffs/soteria-oidc-secret-ensure-job.yaml - oneoffs/quality-oidc-secret-ensure-job.yaml - oneoffs/hermes-dashboard-oidc-client-job.yaml + - oneoffs/hermes-access-oidc-client-job.yaml - oneoffs/veles-realm-ensure-job.yaml - oneoffs/veles-gitea-oidc-secret-ensure-job.yaml - oneoffs/metis-ssh-keys-secret-ensure-job.yaml @@ -55,6 +56,9 @@ configMapGenerator: - name: hermes-dashboard-oidc-client-script files: - hermes_dashboard_oidc_client_ensure.sh=scripts/hermes_dashboard_oidc_client_ensure.sh + - name: hermes-access-oidc-script + files: + - hermes_access_oidc_ensure.sh=scripts/hermes_access_oidc_ensure.sh - name: veles-gitea-oidc-secret-ensure-script files: - veles_gitea_oidc_secret_ensure.sh=scripts/veles_gitea_oidc_secret_ensure.sh diff --git a/services/keycloak/oneoffs/hermes-access-oidc-client-job.yaml b/services/keycloak/oneoffs/hermes-access-oidc-client-job.yaml new file mode 100644 index 00000000..21a42e9e --- /dev/null +++ b/services/keycloak/oneoffs/hermes-access-oidc-client-job.yaml @@ -0,0 +1,57 @@ +# services/keycloak/oneoffs/hermes-access-oidc-client-job.yaml +# Purpose: create chat OIDC and Brad-only operator proxy clients. +apiVersion: batch/v1 +kind: Job +metadata: + name: hermes-access-oidc-client-ensure-1 + namespace: sso +spec: + backoffLimit: 3 + template: + metadata: + annotations: + vault.hashicorp.com/agent-inject: "true" + vault.hashicorp.com/agent-pre-populate-only: "true" + vault.hashicorp.com/role: sso-secrets + vault.hashicorp.com/agent-inject-secret-keycloak-admin-env.sh: kv/data/atlas/shared/keycloak-admin + vault.hashicorp.com/agent-inject-template-keycloak-admin-env.sh: | + {{ with secret "kv/data/atlas/shared/keycloak-admin" }} + export KEYCLOAK_ADMIN="{{ .Data.data.username }}" + export KEYCLOAK_ADMIN_USER="{{ .Data.data.username }}" + export KEYCLOAK_ADMIN_PASSWORD="{{ .Data.data.password }}" + {{ end }} + spec: + serviceAccountName: mas-secrets-ensure + restartPolicy: Never + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: kubernetes.io/arch + operator: In + values: + - arm64 + - key: node-role.kubernetes.io/worker + operator: Exists + containers: + - name: apply + image: bitnami/kubectl@sha256:554ab88b1858e8424c55de37ad417b16f2a0e65d1607aa0f3fe3ce9b9f10b131 + command: + - /scripts/hermes_access_oidc_ensure.sh + volumeMounts: + - name: script + mountPath: /scripts + readOnly: true + resources: + requests: + cpu: 25m + memory: 32Mi + limits: + cpu: 250m + memory: 128Mi + volumes: + - name: script + configMap: + name: hermes-access-oidc-script + defaultMode: 0555 diff --git a/services/keycloak/scripts/hermes_access_oidc_ensure.sh b/services/keycloak/scripts/hermes_access_oidc_ensure.sh new file mode 100755 index 00000000..ea68d2dc --- /dev/null +++ b/services/keycloak/scripts/hermes_access_oidc_ensure.sh @@ -0,0 +1,228 @@ +#!/usr/bin/env sh +set -eu + +. /vault/secrets/keycloak-admin-env.sh + +KC_URL="http://keycloak.sso.svc.cluster.local" +CHAT_CLIENT="hermes-chat-dashboard" +CHAT_URL="https://chat.bstein.dev" +OPERATOR_CLIENT="hermes-operator-proxy" +OPERATOR_URL="https://agent.bstein.dev" + +ACCESS_TOKEN="" +for attempt in 1 2 3 4 5 6 7 8 9 10; do + if curl -fsS "${KC_URL}/realms/master" >/dev/null 2>&1; then + break + fi + echo "Waiting for Keycloak to be reachable (attempt ${attempt})" >&2 + sleep $((attempt * 2)) +done + +for attempt in 1 2 3 4 5; do + token_json="$(curl -sS -X POST "${KC_URL}/realms/master/protocol/openid-connect/token" \ + -H 'Content-Type: application/x-www-form-urlencoded' \ + -d "grant_type=password" \ + -d "client_id=admin-cli" \ + -d "username=${KEYCLOAK_ADMIN}" \ + -d "password=${KEYCLOAK_ADMIN_PASSWORD}" || true)" + ACCESS_TOKEN="$(printf '%s' "${token_json}" | jq -r '.access_token' 2>/dev/null || true)" + if [ -n "${ACCESS_TOKEN}" ] && [ "${ACCESS_TOKEN}" != "null" ]; then + break + fi + echo "Keycloak token request failed (attempt ${attempt})" >&2 + sleep $((attempt * 2)) +done +if [ -z "${ACCESS_TOKEN}" ] || [ "${ACCESS_TOKEN}" = "null" ]; then + echo "Failed to fetch Keycloak admin token" >&2 + exit 1 +fi + +chat_payload="$(jq -nc \ + --arg client_id "${CHAT_CLIENT}" \ + --arg redirect_uri "${CHAT_URL}/auth/callback" \ + --arg web_origin "${CHAT_URL}" \ + '{ + clientId:$client_id, + enabled:true, + protocol:"openid-connect", + publicClient:true, + standardFlowEnabled:true, + implicitFlowEnabled:false, + directAccessGrantsEnabled:false, + serviceAccountsEnabled:false, + redirectUris:[$redirect_uri], + webOrigins:[$web_origin], + rootUrl:$web_origin, + baseUrl:"/", + attributes:{ + "pkce.code.challenge.method":"S256", + "post.logout.redirect.uris":$web_origin + } + }')" + +chat_query="$(curl -sS -H "Authorization: Bearer ${ACCESS_TOKEN}" \ + "${KC_URL}/admin/realms/atlas/clients?clientId=${CHAT_CLIENT}" || true)" +chat_id="$(printf '%s' "${chat_query}" | jq -r '.[0].id' 2>/dev/null || true)" +if [ -z "${chat_id}" ] || [ "${chat_id}" = "null" ]; then + status="$(curl -sS -o /dev/null -w '%{http_code}' -X POST \ + -H "Authorization: Bearer ${ACCESS_TOKEN}" \ + -H 'Content-Type: application/json' \ + -d "${chat_payload}" \ + "${KC_URL}/admin/realms/atlas/clients")" + if [ "${status}" != "201" ] && [ "${status}" != "204" ] && [ "${status}" != "409" ]; then + echo "Keycloak chat client create failed (status ${status})" >&2 + exit 1 + fi + chat_query="$(curl -sS -H "Authorization: Bearer ${ACCESS_TOKEN}" \ + "${KC_URL}/admin/realms/atlas/clients?clientId=${CHAT_CLIENT}" || true)" + chat_id="$(printf '%s' "${chat_query}" | jq -r '.[0].id' 2>/dev/null || true)" +fi +if [ -z "${chat_id}" ] || [ "${chat_id}" = "null" ]; then + echo "Keycloak chat client not found after create" >&2 + exit 1 +fi + +status="$(curl -sS -o /dev/null -w '%{http_code}' -X PUT \ + -H "Authorization: Bearer ${ACCESS_TOKEN}" \ + -H 'Content-Type: application/json' \ + -d "${chat_payload}" \ + "${KC_URL}/admin/realms/atlas/clients/${chat_id}")" +if [ "${status}" != "204" ]; then + echo "Keycloak chat client update failed (status ${status})" >&2 + exit 1 +fi + +scope_id="$(curl -sS -H "Authorization: Bearer ${ACCESS_TOKEN}" \ + "${KC_URL}/admin/realms/atlas/client-scopes?search=groups" \ + | jq -r '.[] | select(.name=="groups") | .id' 2>/dev/null | head -n1 || true)" +if [ -z "${scope_id}" ] || [ "${scope_id}" = "null" ]; then + echo "Keycloak groups client scope not found" >&2 + exit 1 +fi +default_scopes="$(curl -sS -H "Authorization: Bearer ${ACCESS_TOKEN}" \ + "${KC_URL}/admin/realms/atlas/clients/${chat_id}/default-client-scopes" || true)" +optional_scopes="$(curl -sS -H "Authorization: Bearer ${ACCESS_TOKEN}" \ + "${KC_URL}/admin/realms/atlas/clients/${chat_id}/optional-client-scopes" || true)" +if ! printf '%s' "${default_scopes}" | jq -e '.[] | select(.name=="groups")' >/dev/null 2>&1 \ + && ! printf '%s' "${optional_scopes}" | jq -e '.[] | select(.name=="groups")' >/dev/null 2>&1; then + status="$(curl -sS -o /dev/null -w '%{http_code}' -X PUT \ + -H "Authorization: Bearer ${ACCESS_TOKEN}" \ + "${KC_URL}/admin/realms/atlas/clients/${chat_id}/optional-client-scopes/${scope_id}")" + if [ "${status}" != "200" ] && [ "${status}" != "201" ] && [ "${status}" != "204" ]; then + status="$(curl -sS -o /dev/null -w '%{http_code}' -X POST \ + -H "Authorization: Bearer ${ACCESS_TOKEN}" \ + "${KC_URL}/admin/realms/atlas/clients/${chat_id}/optional-client-scopes/${scope_id}")" + if [ "${status}" != "200" ] && [ "${status}" != "201" ] && [ "${status}" != "204" ]; then + echo "Failed to attach groups scope to chat client (status ${status})" >&2 + exit 1 + fi + fi +fi + +operator_payload="$(jq -nc \ + --arg client_id "${OPERATOR_CLIENT}" \ + --arg redirect_uri "${OPERATOR_URL}/oauth2/callback" \ + --arg web_origin "${OPERATOR_URL}" \ + '{ + clientId:$client_id, + enabled:true, + protocol:"openid-connect", + publicClient:false, + standardFlowEnabled:true, + implicitFlowEnabled:false, + directAccessGrantsEnabled:false, + serviceAccountsEnabled:false, + redirectUris:[$redirect_uri], + webOrigins:[$web_origin], + rootUrl:$web_origin, + baseUrl:"/", + attributes:{"post.logout.redirect.uris":$web_origin} + }')" + +operator_query="$(curl -sS -H "Authorization: Bearer ${ACCESS_TOKEN}" \ + "${KC_URL}/admin/realms/atlas/clients?clientId=${OPERATOR_CLIENT}" || true)" +operator_id="$(printf '%s' "${operator_query}" | jq -r '.[0].id' 2>/dev/null || true)" +if [ -z "${operator_id}" ] || [ "${operator_id}" = "null" ]; then + status="$(curl -sS -o /dev/null -w '%{http_code}' -X POST \ + -H "Authorization: Bearer ${ACCESS_TOKEN}" \ + -H 'Content-Type: application/json' \ + -d "${operator_payload}" \ + "${KC_URL}/admin/realms/atlas/clients")" + if [ "${status}" != "201" ] && [ "${status}" != "204" ] && [ "${status}" != "409" ]; then + echo "Keycloak operator proxy client create failed (status ${status})" >&2 + exit 1 + fi + operator_query="$(curl -sS -H "Authorization: Bearer ${ACCESS_TOKEN}" \ + "${KC_URL}/admin/realms/atlas/clients?clientId=${OPERATOR_CLIENT}" || true)" + operator_id="$(printf '%s' "${operator_query}" | jq -r '.[0].id' 2>/dev/null || true)" +fi +if [ -z "${operator_id}" ] || [ "${operator_id}" = "null" ]; then + echo "Keycloak operator proxy client not found after create" >&2 + exit 1 +fi + +status="$(curl -sS -o /dev/null -w '%{http_code}' -X PUT \ + -H "Authorization: Bearer ${ACCESS_TOKEN}" \ + -H 'Content-Type: application/json' \ + -d "${operator_payload}" \ + "${KC_URL}/admin/realms/atlas/clients/${operator_id}")" +if [ "${status}" != "204" ]; then + echo "Keycloak operator proxy client update failed (status ${status})" >&2 + exit 1 +fi + +client_secret="$(curl -sS -H "Authorization: Bearer ${ACCESS_TOKEN}" \ + "${KC_URL}/admin/realms/atlas/clients/${operator_id}/client-secret" \ + | jq -r '.value' 2>/dev/null || true)" +if [ -z "${client_secret}" ] || [ "${client_secret}" = "null" ]; then + echo "Keycloak operator proxy client secret not found" >&2 + exit 1 +fi + +vault_addr="${VAULT_ADDR:-http://vault.vault.svc.cluster.local:8200}" +vault_role="${VAULT_ROLE:-sso-secrets}" +jwt="$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)" +login_payload="$(jq -nc --arg jwt "${jwt}" --arg role "${vault_role}" '{jwt:$jwt,role:$role}')" +vault_token="$(curl -sS --request POST --data "${login_payload}" \ + "${vault_addr}/v1/auth/kubernetes/login" | jq -r '.auth.client_token')" +if [ -z "${vault_token}" ] || [ "${vault_token}" = "null" ]; then + echo "Vault login failed" >&2 + exit 1 +fi + +read_status="$(curl -sS -o /tmp/hermes-operator-oidc-read.json -w '%{http_code}' \ + -H "X-Vault-Token: ${vault_token}" \ + "${vault_addr}/v1/kv/data/atlas/hermes/operator-oidc" || true)" +cookie_secret="" +if [ "${read_status}" = "200" ]; then + cookie_secret="$(jq -r '.data.data.cookie_secret // empty' /tmp/hermes-operator-oidc-read.json)" +elif [ "${read_status}" != "404" ]; then + echo "Vault operator OIDC read failed (status ${read_status})" >&2 + exit 1 +fi +if [ -n "${cookie_secret}" ]; then + cookie_length="$(printf '%s' "${cookie_secret}" | wc -c | tr -d ' ')" + if [ "${cookie_length}" != "16" ] && [ "${cookie_length}" != "24" ] && [ "${cookie_length}" != "32" ]; then + cookie_secret="" + fi +fi +if [ -z "${cookie_secret}" ]; then + cookie_secret="$(openssl rand -hex 16 | tr -d '\n')" +fi + +vault_payload="$(jq -nc \ + --arg client_id "${OPERATOR_CLIENT}" \ + --arg client_secret "${client_secret}" \ + --arg cookie_secret "${cookie_secret}" \ + '{data:{client_id:$client_id,client_secret:$client_secret,cookie_secret:$cookie_secret}}')" +write_status="$(curl -sS -o /tmp/hermes-operator-oidc-write.json -w '%{http_code}' -X POST \ + -H "X-Vault-Token: ${vault_token}" \ + -H 'Content-Type: application/json' \ + -d "${vault_payload}" \ + "${vault_addr}/v1/kv/data/atlas/hermes/operator-oidc")" +if [ "${write_status}" != "200" ] && [ "${write_status}" != "204" ]; then + echo "Vault operator OIDC write failed (status ${write_status})" >&2 + exit 1 +fi + +echo "Hermes chat and operator OIDC clients are ready" diff --git a/services/vault/hermes-auth-role-bootstrap-job.yaml b/services/vault/hermes-auth-role-bootstrap-job.yaml new file mode 100644 index 00000000..2d794291 --- /dev/null +++ b/services/vault/hermes-auth-role-bootstrap-job.yaml @@ -0,0 +1,54 @@ +# services/vault/hermes-auth-role-bootstrap-job.yaml +# Purpose: apply the Vault read/write boundaries needed by Hermes operator OIDC. +apiVersion: batch/v1 +kind: Job +metadata: + name: vault-k8s-auth-hermes-1 + namespace: vault +spec: + backoffLimit: 2 + template: + spec: + serviceAccountName: vault-admin + restartPolicy: Never + nodeSelector: + kubernetes.io/arch: arm64 + node-role.kubernetes.io/worker: "true" + containers: + - name: configure-k8s-auth + image: hashicorp/vault:1.21.4 + imagePullPolicy: IfNotPresent + command: + - sh + - /scripts/vault_k8s_auth_configure.sh + env: + - name: VAULT_ADDR + value: http://10.43.57.249:8200 + - name: VAULT_K8S_ROLE + value: vault-admin + - name: VAULT_K8S_TOKEN_REVIEWER_JWT_FILE + value: /var/run/secrets/vault-token-reviewer/token + - name: VAULT_K8S_ROLE_TTL + value: 1h + volumeMounts: + - name: k8s-auth-config-script + mountPath: /scripts + readOnly: true + - name: token-reviewer + mountPath: /var/run/secrets/vault-token-reviewer + readOnly: true + resources: + requests: + cpu: 25m + memory: 32Mi + limits: + cpu: 250m + memory: 128Mi + volumes: + - name: k8s-auth-config-script + configMap: + name: vault-k8s-auth-config-script + defaultMode: 0555 + - name: token-reviewer + secret: + secretName: vault-admin-token-reviewer diff --git a/services/vault/kustomization.yaml b/services/vault/kustomization.yaml index 98b47e44..d370373c 100644 --- a/services/vault/kustomization.yaml +++ b/services/vault/kustomization.yaml @@ -11,6 +11,7 @@ resources: - configmap.yaml - statefulset.yaml - k8s-auth-config-cronjob.yaml + - hermes-auth-role-bootstrap-job.yaml - oidc-config-cronjob.yaml - service.yaml - certificate.yaml diff --git a/services/vault/scripts/vault_k8s_auth_configure.sh b/services/vault/scripts/vault_k8s_auth_configure.sh index d0876b6e..cc5903b3 100644 --- a/services/vault/scripts/vault_k8s_auth_configure.sh +++ b/services/vault/scripts/vault_k8s_auth_configure.sh @@ -253,6 +253,8 @@ write_policy_and_role "health" "health" "health-vault-sync" \ "health/*" "" write_policy_and_role "game-stream" "game-stream" "game-stream-vault" \ "game-stream/*" "" +write_policy_and_role "hermes" "hermes" "hermes-vault" \ + "hermes/operator-oidc" "" write_policy_and_role "veles" "veles" "veles-backend,veles-generator,veles-postgres,veles-vault-sync" \ "veles/* shared/harbor-pull shared/postmark-relay" "" write_policy_and_role "veles-sim" "veles" "veles-sim" \ @@ -296,7 +298,7 @@ write_policy_and_role "vault" "vault" "vault" \ write_policy_and_role "sso-secrets" "sso" "mas-secrets-ensure" \ "shared/keycloak-admin shared/postmark-relay maintenance/metis-ssh-keys" \ - "harbor/harbor-oidc vault/vault-oidc-config comms/synapse-oidc logging/oauth2-proxy-logs-oidc finance/actual-oidc maintenance/metis-oidc maintenance/soteria-oidc maintenance/metis-ssh-keys veles/veles-oidc cassandra/cassandra-oidc gitea/gitea-veles-oidc gitea/gitea-cassandra-oidc" \ + "harbor/harbor-oidc vault/vault-oidc-config comms/synapse-oidc logging/oauth2-proxy-logs-oidc finance/actual-oidc maintenance/metis-oidc maintenance/soteria-oidc maintenance/metis-ssh-keys veles/veles-oidc cassandra/cassandra-oidc gitea/gitea-veles-oidc gitea/gitea-cassandra-oidc hermes/operator-oidc" \ ' path "kv/data/atlas/nodes/*" { capabilities = ["create", "update", "read"] From c4320b9718995274eec708723f57fb4195c7468d Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 02:35:39 -0300 Subject: [PATCH 616/991] ai(hermes): avoid unstable titan-18 placement --- services/hermes-chat/deployment.yaml | 1 + services/hermes/oauth2-proxy.yaml | 1 + .../keycloak/oneoffs/hermes-access-oidc-client-job.yaml | 6 +++++- 3 files changed, 7 insertions(+), 1 deletion(-) diff --git a/services/hermes-chat/deployment.yaml b/services/hermes-chat/deployment.yaml index ef3888c3..f608f67e 100644 --- a/services/hermes-chat/deployment.yaml +++ b/services/hermes-chat/deployment.yaml @@ -50,6 +50,7 @@ spec: - titan-13 - titan-15 - titan-17 + - titan-18 - titan-19 preferredDuringSchedulingIgnoredDuringExecution: - weight: 100 diff --git a/services/hermes/oauth2-proxy.yaml b/services/hermes/oauth2-proxy.yaml index 3ed20ce8..dd6b4a90 100644 --- a/services/hermes/oauth2-proxy.yaml +++ b/services/hermes/oauth2-proxy.yaml @@ -73,6 +73,7 @@ spec: - titan-13 - titan-15 - titan-17 + - titan-18 - titan-19 preferredDuringSchedulingIgnoredDuringExecution: - weight: 90 diff --git a/services/keycloak/oneoffs/hermes-access-oidc-client-job.yaml b/services/keycloak/oneoffs/hermes-access-oidc-client-job.yaml index 21a42e9e..b189290c 100644 --- a/services/keycloak/oneoffs/hermes-access-oidc-client-job.yaml +++ b/services/keycloak/oneoffs/hermes-access-oidc-client-job.yaml @@ -3,7 +3,7 @@ apiVersion: batch/v1 kind: Job metadata: - name: hermes-access-oidc-client-ensure-1 + name: hermes-access-oidc-client-ensure-2 namespace: sso spec: backoffLimit: 3 @@ -34,6 +34,10 @@ spec: - arm64 - key: node-role.kubernetes.io/worker operator: Exists + - key: kubernetes.io/hostname + operator: NotIn + values: + - titan-18 containers: - name: apply image: bitnami/kubectl@sha256:554ab88b1858e8424c55de37ad417b16f2a0e65d1607aa0f3fe3ce9b9f10b131 From c87a4b5be529d50e0c2bb875b59c19f7546226d9 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 02:47:43 -0300 Subject: [PATCH 617/991] ai(hermes): add operator mastery lab --- services/hermes/deployment.yaml | 22 ++- services/hermes/kustomization.yaml | 11 ++ services/hermes/oauth2-proxy.yaml | 1 + .../skills/master-hermes-on-atlas/SKILL.md | 71 ++++++++++ .../master-hermes-on-atlas/agents/openai.yaml | 4 + .../references/architecture.md | 97 +++++++++++++ .../references/curriculum.md | 128 ++++++++++++++++++ .../references/incident-drills.md | 95 +++++++++++++ .../references/mastery-rubric.md | 75 ++++++++++ 9 files changed, 503 insertions(+), 1 deletion(-) create mode 100644 services/hermes/skills/master-hermes-on-atlas/SKILL.md create mode 100644 services/hermes/skills/master-hermes-on-atlas/agents/openai.yaml create mode 100644 services/hermes/skills/master-hermes-on-atlas/references/architecture.md create mode 100644 services/hermes/skills/master-hermes-on-atlas/references/curriculum.md create mode 100644 services/hermes/skills/master-hermes-on-atlas/references/incident-drills.md create mode 100644 services/hermes/skills/master-hermes-on-atlas/references/mastery-rubric.md diff --git a/services/hermes/deployment.yaml b/services/hermes/deployment.yaml index b7035a29..afc00aa6 100644 --- a/services/hermes/deployment.yaml +++ b/services/hermes/deployment.yaml @@ -23,7 +23,7 @@ spec: ai.bstein.dev/model: gpt-oss:20b with openai-codex fallback ai.bstein.dev/role: testing-triage ai.bstein.dev/placement: arm64 gateway lane (rpi5 preferred) - ai.bstein.dev/config-rev: "20260801-gpu-owner-fallback" + ai.bstein.dev/config-rev: "20260802-mastery-lab" spec: serviceAccountName: hermes-triage automountServiceAccountToken: true @@ -50,6 +50,7 @@ spec: - titan-13 - titan-15 - titan-17 + - titan-18 - titan-19 preferredDuringSchedulingIgnoredDuringExecution: - weight: 100 @@ -193,6 +194,9 @@ spec: - name: triage-skill mountPath: /opt/data/workspace/skills/triage-titan-test-failures readOnly: true + - name: mastery-skill + mountPath: /opt/data/workspace/skills/master-hermes-on-atlas + readOnly: true readinessProbe: httpGet: path: /api/status @@ -231,3 +235,19 @@ spec: path: SKILL.md - key: openai.yaml path: agents/openai.yaml + - name: mastery-skill + configMap: + name: hermes-mastery-skill + items: + - key: SKILL.md + path: SKILL.md + - key: openai.yaml + path: agents/openai.yaml + - key: architecture.md + path: references/architecture.md + - key: curriculum.md + path: references/curriculum.md + - key: incident-drills.md + path: references/incident-drills.md + - key: mastery-rubric.md + path: references/mastery-rubric.md diff --git a/services/hermes/kustomization.yaml b/services/hermes/kustomization.yaml index 3c7172a9..fe8660d8 100644 --- a/services/hermes/kustomization.yaml +++ b/services/hermes/kustomization.yaml @@ -29,3 +29,14 @@ configMapGenerator: - openai.yaml=skills/triage-titan-test-failures/agents/openai.yaml options: disableNameSuffixHash: true + - name: hermes-mastery-skill + namespace: hermes + files: + - SKILL.md=skills/master-hermes-on-atlas/SKILL.md + - openai.yaml=skills/master-hermes-on-atlas/agents/openai.yaml + - architecture.md=skills/master-hermes-on-atlas/references/architecture.md + - curriculum.md=skills/master-hermes-on-atlas/references/curriculum.md + - incident-drills.md=skills/master-hermes-on-atlas/references/incident-drills.md + - mastery-rubric.md=skills/master-hermes-on-atlas/references/mastery-rubric.md + options: + disableNameSuffixHash: true diff --git a/services/hermes/oauth2-proxy.yaml b/services/hermes/oauth2-proxy.yaml index dd6b4a90..6cba6ffa 100644 --- a/services/hermes/oauth2-proxy.yaml +++ b/services/hermes/oauth2-proxy.yaml @@ -99,6 +99,7 @@ spec: - --config=/vault/secrets/oidc-config - --redirect-url=https://agent.bstein.dev/oauth2/callback - --oidc-issuer-url=https://sso.bstein.dev/realms/atlas + - --code-challenge-method=S256 - --scope=openid profile email - --email-domain=* - --authenticated-emails-file=/etc/oauth2-proxy/allowed-emails diff --git a/services/hermes/skills/master-hermes-on-atlas/SKILL.md b/services/hermes/skills/master-hermes-on-atlas/SKILL.md new file mode 100644 index 00000000..7113d7af --- /dev/null +++ b/services/hermes/skills/master-hermes-on-atlas/SKILL.md @@ -0,0 +1,71 @@ +--- +name: master-hermes-on-atlas +description: Coach Brad through hands-on mastery of the live Atlas Hermes deployment, including its web and CLI interfaces, local GPU inference and Codex fallback, tools, skills, sessions, profiles, channels, security boundaries, and evidence-driven test-failure triage. Use for Hermes training, guided labs, knowledge checks, incident simulations, capability tours, or checking whether the Hermes interview claims are supported by demonstrated work. +--- + +# Master Hermes on Atlas + +Act as a demanding, practical coach. Teach the deployed system, not a generic +Hermes installation. Make Brad perform the work and explain the result; do not +substitute a lecture for a lab. + +## Start or resume training + +1. Read `references/architecture.md` before teaching deployment-specific facts. +2. Read `references/curriculum.md` to select the next lab. +3. Ask whether to assess, resume, or choose a lab. If no progress record exists, + default to a five-question assessment followed by the first weak area. +4. Give one bounded task at a time. State the goal, safety boundary, exact + success evidence, and at most one initial hint. +5. Wait for Brad's answer or observed command output before revealing the + explanation. +6. Grade with `references/mastery-rubric.md`. Separate demonstrated ability + from verbal familiarity. +7. Offer a concise progress update. Write it to + `/opt/data/workspace/hermes-training/progress.md` only after Brad explicitly + approves the file change. + +## Run live exercises safely + +- Use read-only commands by default: `kubectl get`, `describe`, `logs`, `auth + can-i`, HTTP GET, `hermes status`, and Hermes list/status commands. +- Never read Kubernetes Secret values. Never use Vault reads as a training + shortcut. Redact bearer tokens, cookies, device codes, and credentials. +- Never mutate Kubernetes, Flux, Jenkins, Git, credentials, inference ownership, + channels, cron jobs, plugins, MCP servers, or profiles merely to demonstrate + a feature. +- Draft state-changing commands and explain their effect. Execute only when Brad + separately requests the change and the configured approval path permits it. +- Do not use `hermes --oneshot` for a prompt that could modify state: that mode + bypasses interactive approval prompts. +- Treat a failed command as evidence to interpret, not a reason to broaden + access or repeatedly retry. + +## Teach evidence-driven triage + +For a live test-failure lab, also use `$triage-titan-test-failures`. Require the +student to distinguish: + +- observed fact from inference; +- stale evidence from current state; +- application regression from environment failure; +- a read-only next check from a proposed mutation; +- a generic suggestion from the smallest Flux-tracked repo-side fix. + +For offline practice, read `references/incident-drills.md` and present only the +student packet for one incident. Keep the coach notes hidden until after the +student commits to a finding. + +## Validate claims honestly + +Use the claim audit in `references/mastery-rubric.md`. Current configuration and +live demonstrations can support current-use claims. They cannot prove that +OpenClaw previously ran or was replaced; require Git history, retained manifests, +or other evidence before treating that historical claim as demonstrated. + +End every session with: + +- what Brad demonstrated; +- what remains unproven; +- the next smallest lab; +- any safety or operational issue discovered. diff --git a/services/hermes/skills/master-hermes-on-atlas/agents/openai.yaml b/services/hermes/skills/master-hermes-on-atlas/agents/openai.yaml new file mode 100644 index 00000000..e2eeb648 --- /dev/null +++ b/services/hermes/skills/master-hermes-on-atlas/agents/openai.yaml @@ -0,0 +1,4 @@ +interface: + display_name: "Master Hermes on Atlas" + short_description: "Practice Hermes safely on the live Atlas stack" + default_prompt: "Use $master-hermes-on-atlas to assess me and begin my next hands-on Hermes lab." diff --git a/services/hermes/skills/master-hermes-on-atlas/references/architecture.md b/services/hermes/skills/master-hermes-on-atlas/references/architecture.md new file mode 100644 index 00000000..bce3083b --- /dev/null +++ b/services/hermes/skills/master-hermes-on-atlas/references/architecture.md @@ -0,0 +1,97 @@ +# Live Atlas Hermes architecture + +Use this reference for deployment-specific facts. Re-check live state before +asserting health, placement, ownership, or current model availability. + +## Two isolated agent instances + +| Surface | Purpose | Identity boundary | State and permissions | +| --- | --- | --- | --- | +| `agent.bstein.dev` | Brad's operator and triage lab | Keycloak plus an outer oauth2-proxy exact-email allow-list for `brad@bstein.dev` | `hermes` namespace, its own PVC and service account; read-only cluster triage plus approved internal evidence endpoints | +| `chat.bstein.dev` | Consumer chat and research | Keycloak login | `hermes-chat` namespace, separate PVC/config/auth/sessions/skills; read-only cluster observer RBAC and no access to Secrets or Kubernetes mutation APIs | + +The instances do not share conversation state, credentials, profiles, skills +created on their PVCs, or Kubernetes identities. They share only the inference +service described below. Consumer users cannot reach the operator dashboard +through the chat Service or Ingress. + +## Inference path + +```text +operator Hermes ─┐ + ├─> hermes-model-gate ─> Ollama gpt-oss:20b on titan-24 GPU +consumer Hermes ─┘ │ + └─ 503 while Wolf owns the GPU + +each instance independently ─────> openai-codex/gpt-5.4 fallback +``` + +- The configured context length is 64,000 tokens. +- `hermes-model-gate` is the stable OpenAI-compatible endpoint. +- A GPU-owner ConfigMap and controller coordinate Hermes versus Wolf/Moonlight. +- Wolf ownership makes the gate return a deliberate unavailable response. The + Hermes gateway stays alive and can use its configured fallback. +- The two agent pods do not consume titan-24 GPU memory. Ollama does. Agent pods + are ARM gateway workloads with persistent state on separate PVCs. +- Fallback credentials are deliberately per-instance. Never copy Brad's Codex + credential store into the consumer PVC. + +Verify rather than memorize: + +```sh +hermes status +hermes fallback list +kubectl -n hermes get configmap hermes-gpu-owner -o yaml +kubectl -n hermes get deploy hermes hermes-model-gate hermes-ollama -o wide +kubectl -n hermes-chat get deploy hermes-chat -o wide +``` + +Do not change the GPU owner as part of a lesson. + +## Operator evidence path + +The operator role is designed for supervised test-failure triage: + +1. Ariadne deterministic bundle and optional diagnosis. +2. Retained Jenkins logs and artifacts. +3. Recent Git changes and Flux revision/state. +4. Kubernetes workload, node, event, storage, DNS, and dependency health. +5. Pushgateway quality metrics and VictoriaMetrics/Grafana context. +6. A concise finding, confidence, evidence, blast radius, next checks, + repo-side fix, and approval-required section. + +The versioned `$triage-titan-test-failures` skill encodes this workflow. The +operator has internal URLs for Ariadne, Jenkins, and VictoriaMetrics. The +consumer instance intentionally does not. + +## Security layers and their limits + +Security is layered rather than delegated to a prompt: + +1. Keycloak authenticates the human. +2. The operator proxy limits `agent.bstein.dev` to Brad's exact email. +3. Separate namespaces, PVCs, service accounts, configs, and ingresses isolate + operator and consumer state. +4. Kubernetes RBAC grants the consumer get/list/watch only and excludes Secrets, + exec, attach, port-forward, and mutation. +5. NetworkPolicy permits the consumer to reach DNS, the shared model gate, the + Kubernetes API, and public IPv4 while blocking arbitrary private service + access. +6. Hermes deny patterns and instructions add user-facing guardrails. + +Prompt rules and shell deny patterns are not the primary security boundary. +RBAC, network policy, credential separation, and routing isolation are. The +consumer can still disclose non-secret cluster metadata it is authorized to +read; that is an intentional requirement and should be described honestly. + +## CLI-to-web mental model + +The pinned Hermes build exposes chat, models and fallback, auth, sessions, +profiles, skills and bundles, plugins, tools, MCP, gateway/channels, pairing, +webhooks, cron, kanban, projects, hooks, memory/journey, logs, security, backup, +and diagnostics. The web interface is a control surface over many of these +same persisted capabilities. + +Use ` --help` and the web Documentation page for the installed version. +Do not rely on screenshots or online docs from a different release when a live +command can settle the question. diff --git a/services/hermes/skills/master-hermes-on-atlas/references/curriculum.md b/services/hermes/skills/master-hermes-on-atlas/references/curriculum.md new file mode 100644 index 00000000..8679bcd5 --- /dev/null +++ b/services/hermes/skills/master-hermes-on-atlas/references/curriculum.md @@ -0,0 +1,128 @@ +# Hands-on curriculum + +Complete labs by evidence, not elapsed time. A focused pass can establish +operational competence in several days; mastery requires repeating real triage +and recovery work over multiple incidents. + +## Phase 1: orientation and control + +### Lab 1 — Map the system + +From the web UI, identify Chat, Sessions, Files, Models, Logs, Cron, Skills, +Plugins, MCP, Channels, Webhooks, Pairing, Profiles, Config, Keys, System, and +Documentation. Explain which state belongs to the operator PVC and which +components are shared. Verify three claims with read-only CLI output. + +Success evidence: a correct diagram or written request path from browser to +agent to model, including the fallback branch and the consumer boundary. + +### Lab 2 — Models, context, and fallback + +Inspect `hermes status`, `hermes fallback list`, deployment placement, and GPU +owner state. Explain why a 32K model was rejected, why the gateway remains up +when Wolf owns the GPU, and which credentials a fallback consumes. + +Success evidence: predict outcomes for local healthy, local slow, gate 503, +invalid local response, and expired Codex authorization without changing state. + +### Lab 3 — Sessions, files, profiles, and logs + +Create a named training session and a harmless workspace note through the UI, +then find the corresponding session/file/log surfaces. Inspect profile and +backup help without creating a profile or backup. + +Success evidence: explain persistence, what survives a pod replacement, what is +instance-local, and how to recover a lost conversation without exposing auth. + +## Phase 2: tools and safe autonomy + +### Lab 4 — Tools versus skills versus MCP + +Use `hermes tools`, `hermes skills`, `hermes plugins`, and `hermes mcp` help or +list/status views. Classify each as executable capability, procedure/context, +packaged extension, or external protocol integration. Explain why a skill is +not a security boundary. + +Success evidence: choose the right mechanism for three examples: repeatable +Titan triage, a read-only external API, and a scheduled notification. + +### Lab 5 — Prove the permission boundary + +Use `kubectl auth can-i` as both service accounts. Inspect the relevant +ClusterRoles and NetworkPolicies. Do not attempt mutations. + +Success evidence: an allow/deny matrix covering pods, logs, Secrets, exec, +deployment patch, Flux reads, Flux reconcile, the model gate, internal services, +and public web research. + +### Lab 6 — Channels, pairing, webhooks, and cron + +Inspect the configured state and help for gateway/channels, pairing, webhooks, +and cron. Design one safe notification workflow and one unsafe workflow. Do not +register a channel, create a webhook, or schedule a job during the lab. + +Success evidence: identify the identity, secret, audience, tool policy, failure +mode, audit trail, and revocation path for the proposed integration. + +## Phase 3: the interview workflow + +### Lab 7 — Deterministic live triage + +Invoke `$triage-titan-test-failures`. Read the current Ariadne diagnosis and +bundle, then correlate one suite with Jenkins, Flux/Git, cluster health, and +quality metrics. Keep every collection step read-only. + +Success evidence: the required structured triage result with timestamps and no +invented evidence. + +### Lab 8 — Incident simulations + +Use one student packet from `incident-drills.md`. Diagnose it before receiving +coach notes. Repeat until three cases score at least `Independent`. + +Success evidence: correct failure class, causal chain, next checks, minimal +repo-side correction, and explicit approval boundary. + +### Lab 9 — Build and evaluate a reusable skill + +Identify a stable repeated workflow, create a small skill in the operator's +writable skills directory, inspect it, and test it against a fresh incident. +Do not alter the Flux-mounted training or triage skills. + +Success evidence: precise trigger description, concise procedure, progressive +disclosure where useful, one passing case, one adversarial case, and a stated +permission boundary. + +### Lab 10 — Model outage drill + +Use retained logs/current status or a separately approved maintenance window. +Do not take the live model down for training. Explain the expected trace from +model gate to fallback, recognize an auth failure, and name the restoration +checks. + +Success evidence: correctly distinguish model unavailability, context rejection, +provider auth failure, and agent failure. + +## Phase 4: independent operation + +### Lab 11 — Supervised real incident + +Lead a real failure triage from intake to an approved repo-side proposal. A +human applies any change through Git/Flux. Verify the result read-only. + +### Lab 12 — Teach it back and audit the claims + +Explain the complete architecture and demonstrate the workflow without hints. +Audit each sentence of the interview answer using the claim table in +`mastery-rubric.md`. Weaken or qualify anything not supported by evidence. + +## Suggested pace + +- Day 1: Labs 1–3. +- Days 2–3: Labs 4–6. +- Days 4–7: Labs 7–10. +- Weeks 2–4: repeat Labs 7–11 on real incidents; improve one skill from observed + failures; finish with Lab 12. + +Do not advance solely because a day elapsed. Re-run any lab graded below +`Independent`. diff --git a/services/hermes/skills/master-hermes-on-atlas/references/incident-drills.md b/services/hermes/skills/master-hermes-on-atlas/references/incident-drills.md new file mode 100644 index 00000000..dc974283 --- /dev/null +++ b/services/hermes/skills/master-hermes-on-atlas/references/incident-drills.md @@ -0,0 +1,95 @@ +# Incident drills + +Present only one `Student packet` before the student answers. Use the coach +notes afterward to grade the failure classification and reasoning. These cases +are based on retained Atlas rollout observations; treat them as training +fixtures, not proof of current live state. + +## Case A — Metrics disappear after a Soteria run + +### Student packet + +- The Soteria test stages ran. +- The post-stage log ends with: + `Syntax error: end of file unexpected (expecting "fi")`. +- The canonical Soteria Pushgateway series did not refresh. +- Other suites continued publishing. + +Ask for: finding, confidence, evidence, likely cause, blast radius, read-only +next checks, repo-side fix, and approval-required actions. + +### Coach notes + +The primary class is pipeline glue/shell syntax, not a Pushgateway outage and +not a product-test failure. Inspect the post block and the exact shell parsed by +`/bin/sh`; confirm the last successful metric timestamp. The smallest likely +fix is closing/correcting the conditional in the Jenkinsfile, then a normal SCM +run and read-only metric verification. Editing, pushing, triggering, or manual +metric backfill requires explicit approval. + +## Case B — UI tests fail before metrics publish + +### Student packet + +- `bstein-dev-home` requires Playwright `1.59.1`. +- The CI test container contains Playwright `1.51.0`. +- The frontend test stage hard-fails. +- No fresh canonical quality metrics appear for the run. + +### Coach notes + +Separate the direct test-environment mismatch from the telemetry-control-flow +defect. The version mismatch explains the test failure; early pipeline abort +explains missing metrics. A complete proposal aligns the image version and +persists stage return codes so publishing still runs while the final gate still +fails. Do not call this a Kubernetes capacity problem without node/pod evidence. + +## Case C — Promotion exits 127 + +### Student packet + +- Titan IaC validation and tests finish. +- The Promote stage uses `python:3.12-slim`. +- The stage returns exit code `127` at its first Git command. +- The repository and remote are reachable from other jobs. + +### Coach notes + +Exit 127 means the invoked command is unavailable. Confirm the exact log line +and image contents; the likely issue is that the slim image lacks `git`, not bad +Git credentials. The minimal repo-side fix installs `git` and CA certificates +in the job's dependency setup or uses a suitable pinned runner image. + +## Case D — Data Preppers cannot publish an image + +### Student packet + +- Tests and local image build complete. +- Push to `registry.bstein.dev/streaming/data-prepper:2.8.0` is denied. +- The configured Jenkins credential belongs to a different Harbor project. +- A Sonar evidence GET also returns `401` in the same run. + +### Coach notes + +Do not collapse independent authentication failures into a generic network +failure. Verify the Harbor repository/project and credential ID without reading +the secret value; separately verify the Sonar token injection path and API +scope. The likely image fix is selecting a streaming-scoped robot credential. +Treat the Sonar 401 as a second issue unless evidence proves a shared cause. + +## Case E — Hermes local inference fails during game streaming + +### Student packet + +- Wolf owns titan-24 according to the GPU-owner state. +- `hermes-model-gate` is ready but returns a deliberate unavailable response. +- Both Hermes dashboards remain healthy. +- One instance answers through Codex; the other reports missing provider auth. + +### Coach notes + +This is expected resource arbitration plus an instance-specific fallback auth +gap. Do not restart the agent or claim the GPU is underprovisioned. Confirm the +gate response, fallback chain, and each instance's auth status without exposing +tokens. Authorize the affected instance with its intended user's account. The +separate credential stores are a security property, not configuration drift. diff --git a/services/hermes/skills/master-hermes-on-atlas/references/mastery-rubric.md b/services/hermes/skills/master-hermes-on-atlas/references/mastery-rubric.md new file mode 100644 index 00000000..ae12ffbb --- /dev/null +++ b/services/hermes/skills/master-hermes-on-atlas/references/mastery-rubric.md @@ -0,0 +1,75 @@ +# Mastery and claim rubric + +## Performance levels + +| Level | Evidence | +| --- | --- | +| Exposed | Recognizes terms but needs the path and commands supplied. | +| Assisted | Completes a lab with hints and can explain the result afterward. | +| Independent | Selects safe tools, gathers fresh evidence, and reaches a defensible result without hints. | +| Mastery | Handles ambiguity and failure, teaches the architecture, improves the reusable workflow, and preserves security boundaries. | + +Score each domain separately: + +1. Architecture and request routing. +2. Models, context, GPU ownership, and fallback. +3. Sessions, files, profiles, logs, and recovery. +4. Tools, skills, plugins, MCP, channels, webhooks, and cron. +5. Identity, RBAC, network, credentials, approvals, and auditability. +6. Jenkins/Flux/Kubernetes/metrics evidence correlation. +7. Clear triage findings and minimal repo-side proposals. +8. Skill creation, evaluation, and iteration. + +Never award `Independent` from a verbal answer alone when the lab calls for live +or fixture evidence. Never award `Mastery` until Brad has led at least two +different real incidents and improved a workflow based on what failed. + +## Interview claim audit + +| Claim | What supports it | Minimum demonstration | +| --- | --- | --- | +| Hermes runs in the Kubernetes cluster | Flux manifests and live workloads | Trace browser, agent, model gate, Ollama, PVC, and service account. | +| Hermes fits existing automation | Operator config, internal evidence URLs, triage skill | Complete a triage using Ariadne, Jenkins, Git/Flux, cluster health, and metrics. | +| Hermes follows Brad's triage path | `$triage-titan-test-failures` procedure | Lead two evidence-backed cases with facts separated from inference. | +| Repeated workflows become reusable skills | Versioned triage/training skills plus writable user skill area | Build, test, and improve one skill from a repeated real workflow. | +| Access starts read-only and scoped | RBAC, NetworkPolicy, separate identities and state | Produce and explain the allow/deny matrix from live authorization checks. | +| Human approval protects changes | Approval config, deny patterns, Flux workflow | Identify every mutation in a proposed incident response and stop before it. | +| Local GPU gracefully yields to gaming | Owner state, model gate, fallback | Explain or observe a Wolf ownership window and verify continued fallback service. | +| OpenClaw previously ran and was replaced | Not established by the current Hermes deployment | Show retained Git history/manifests/logs or qualify the statement as recollection. | + +## Triage answer scoring + +Award one point for each: + +- names the correct failure class; +- cites timestamped/build-specific evidence; +- labels inference; +- checks evidence freshness; +- identifies realistic blast radius; +- orders read-only next checks; +- proposes the smallest Flux/repo-side change or says evidence is insufficient; +- isolates approval-required actions; +- avoids invented resources, logs, metrics, or commits; +- remains concise enough for an operator to act on. + +Scores below 8/10 require another incident drill. Any invented evidence or +unacknowledged mutation caps the result at `Assisted`. + +## Progress record format + +When Brad approves recording progress, use this compact structure: + +```markdown +# Hermes training progress + +- Last session: +- Current level: +- Completed: +- Needs repetition: +- Next lab: +- Safety findings: +- Claim status: +``` + +Append evidence links or command summaries; never record tokens, cookies, +credentials, device codes, or Secret values. From f127ce421b58feab0135c7413bcdad1a83655b9a Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 02:51:35 -0300 Subject: [PATCH 618/991] docs(hermes): correct GPU ownership reference --- .../skills/master-hermes-on-atlas/references/architecture.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/services/hermes/skills/master-hermes-on-atlas/references/architecture.md b/services/hermes/skills/master-hermes-on-atlas/references/architecture.md index bce3083b..3c70ceb9 100644 --- a/services/hermes/skills/master-hermes-on-atlas/references/architecture.md +++ b/services/hermes/skills/master-hermes-on-atlas/references/architecture.md @@ -28,7 +28,8 @@ each instance independently ─────> openai-codex/gpt-5.4 fallback - The configured context length is 64,000 tokens. - `hermes-model-gate` is the stable OpenAI-compatible endpoint. -- A GPU-owner ConfigMap and controller coordinate Hermes versus Wolf/Moonlight. +- A coordination Lease stores whether Hermes or Wolf/Moonlight owns the GPU. + Ariadne has narrowly scoped permission to update that Lease during handoff. - Wolf ownership makes the gate return a deliberate unavailable response. The Hermes gateway stays alive and can use its configured fallback. - The two agent pods do not consume titan-24 GPU memory. Ollama does. Agent pods @@ -41,7 +42,7 @@ Verify rather than memorize: ```sh hermes status hermes fallback list -kubectl -n hermes get configmap hermes-gpu-owner -o yaml +kubectl -n hermes get lease titan-24-gpu-owner -o yaml kubectl -n hermes get deploy hermes hermes-model-gate hermes-ollama -o wide kubectl -n hermes-chat get deploy hermes-chat -o wide ``` From de9aa503924b5d2b55afb60665aa809f07ce4506 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 03:08:20 -0300 Subject: [PATCH 619/991] ai(hermes-chat): allow read-only API endpoint access --- services/hermes-chat/networkpolicy.yaml | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/services/hermes-chat/networkpolicy.yaml b/services/hermes-chat/networkpolicy.yaml index c6cf5718..7a5260b9 100644 --- a/services/hermes-chat/networkpolicy.yaml +++ b/services/hermes-chat/networkpolicy.yaml @@ -51,6 +51,18 @@ spec: ports: - protocol: TCP port: 443 + # K3s applies egress policy after Service DNAT, so admit only the fixed API + # server endpoints as well as the kubernetes Service IP above. + - to: + - ipBlock: + cidr: 192.168.22.11/32 + - ipBlock: + cidr: 192.168.22.12/32 + - ipBlock: + cidr: 192.168.22.13/32 + ports: + - protocol: TCP + port: 6443 - to: - ipBlock: cidr: 0.0.0.0/0 From 3255936aebac0e2dfc0b876032cf68d7dd4545f5 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 03:08:20 -0300 Subject: [PATCH 620/991] monitoring(gpu): report time-weighted namespace usage --- scripts/dashboards_render_atlas.py | 51 +++++++++++++++++-- scripts/tests/test_dashboards_render_atlas.py | 19 +++++++ services/monitoring/dashboards/atlas-gpu.json | 6 +-- .../monitoring/dashboards/atlas-overview.json | 4 +- services/monitoring/dcgm-exporter.yaml | 5 +- .../monitoring/grafana-dashboard-gpu.yaml | 6 +-- .../grafana-dashboard-overview.yaml | 4 +- 7 files changed, 81 insertions(+), 14 deletions(-) diff --git a/scripts/dashboards_render_atlas.py b/scripts/dashboards_render_atlas.py index 1eece5ab..64dab668 100644 --- a/scripts/dashboards_render_atlas.py +++ b/scripts/dashboards_render_atlas.py @@ -284,8 +284,14 @@ def dcgm_gpu_util_by_node(): ) +def nvidia_gpu_util_by_node(): + return "max by (node) (nvidia_gpu_device_utilization_percent)" + + def gpu_util_by_node(): - return f"{dcgm_gpu_util_by_node()} or {jetson_gpu_util_by_node()}" + process_exporter = nvidia_gpu_util_by_node() + dcgm_fallback = f"({dcgm_gpu_util_by_node()}) unless on(node) ({process_exporter})" + return f"{process_exporter} or {dcgm_fallback} or {jetson_gpu_util_by_node()}" def gpu_util_by_hostname(): @@ -357,6 +363,21 @@ def nvidia_process_gpu_usage_by_namespace(scope_var): return f"(({usage}) > 0)" +def nvidia_process_gpu_usage_by_namespace_range(scope_var, window="$__range"): + namespace_samples = ( + "sum_over_time(nvidia_namespace_gpu_sm_util_percent" + f"{{{namespace_gpu_selector(scope_var)}}}[{window}])" + ) + device_samples = ( + f"count_over_time(nvidia_gpu_device_utilization_percent[{window}])" + ) + averaged = ( + f"({namespace_samples}) / on(node,gpu,uuid,model) group_left() " + f"clamp_min({device_samples}, 1)" + ) + return f"((sum by (namespace) ({averaged})) > 0)" + + def nvidia_gpu_device_utilization(): return "max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))" @@ -390,17 +411,41 @@ def unattributed_gpu_usage(): ) +def legacy_gpu_util_range_without_process_exporter(window="$__range"): + dcgm_range = dcgm_gpu_util_by_node().replace( + "DCGM_FI_DEV_GPU_UTIL", f"avg_over_time(DCGM_FI_DEV_GPU_UTIL[{window}])" + ) + jetson_range = ( + f'max by (node) (avg_over_time(jetson_gr3d_freq_percent{{node!=""}}[{window}]))' + ) + process_exporter_nodes = ( + f"max by (node) (count_over_time(nvidia_gpu_device_utilization_percent[{window}]))" + ) + return f"(({dcgm_range}) or ({jetson_range})) unless on(node) ({process_exporter_nodes})" + + +def unattributed_gpu_usage_range(window="$__range"): + total = f"(sum({legacy_gpu_util_range_without_process_exporter(window)}) or on() vector(0))" + return f'label_replace(({total} > 0), "namespace", "unattributed", "", "")' + + def gpu_utilization_raw(scope_var): return f"({nvidia_process_gpu_usage_by_namespace(scope_var)}) or ({unattributed_gpu_usage()})" +def gpu_utilization_range_raw(scope_var, window="$__range"): + attributed = nvidia_process_gpu_usage_by_namespace_range(scope_var, window) + unattributed = unattributed_gpu_usage_range(window) + return f"({attributed}) or ({unattributed})" + + def gpu_pool_used_expr(scope_var): raw_total = f"(sum({gpu_utilization_raw(scope_var)}) or on() vector(0))" return f"100 * {raw_total} / clamp_min({gpu_capacity_percent()}, 1)" def namespace_gpu_share_expr(scope_var): - activity = gpu_utilization_raw(scope_var) + activity = gpu_utilization_range_raw(scope_var) total = f"(sum({activity}) or on() vector(0))" share = f"100 * ({activity}) / clamp_min({total}, 1)" idle = ( @@ -1910,7 +1955,7 @@ OVERVIEW_PANEL_DESCRIPTIONS = { "Postgres Connections Used": "Current Postgres connections; lower leaves room for apps during spikes.", "Postgres Hottest Connections": "Database with the most active connections; high values identify the pressure source.", "Namespace CPU Share": "CPU share by namespace in the selected scope; big slices show who is using compute.", - "Namespace GPU Utilization": "Instant share of observed GPU compute activity by namespace. Host covers GPU work outside Kubernetes pods; idle appears only when observed GPU activity is zero.", + "Namespace GPU Utilization": "Time-weighted share of observed GPU compute activity across the selected range. Process-aware NVIDIA metrics attribute titan-22/24 work to namespaces; host is non-pod work, and Jetson titan-20/21 activity remains unattributed when process-level attribution is unavailable. Idle appears only when observed activity is zero.", "Namespace RAM Share": "Memory share by namespace in the selected scope; big slices show who may drive pressure.", "Worker Node CPU": "Worker CPU over time; lower is calmer, sustained high load may need rescheduling.", "Worker Node RAM": "Worker memory over time; lower is safer, sustained high use risks evictions.", diff --git a/scripts/tests/test_dashboards_render_atlas.py b/scripts/tests/test_dashboards_render_atlas.py index 3740589e..3269adaf 100644 --- a/scripts/tests/test_dashboards_render_atlas.py +++ b/scripts/tests/test_dashboards_render_atlas.py @@ -157,6 +157,11 @@ def test_overview_uses_readable_quality_power_and_gitops_panels(): gpu_expr = panels_by_title["Namespace GPU Utilization"]["targets"][0]["expr"] assert "nvidia_namespace_gpu_sm_util_percent" in gpu_expr assert "nvidia_gpu_device_utilization_percent" in gpu_expr + assert "sum_over_time" in gpu_expr + assert "count_over_time" in gpu_expr + assert "avg_over_time(DCGM_FI_DEV_GPU_UTIL[$__range])" in gpu_expr + assert "avg_over_time(jetson_gr3d_freq_percent" in gpu_expr + assert "$__range" in gpu_expr assert "sum by (namespace)" in gpu_expr assert 'namespace", "shared"' not in gpu_expr assert "kube_node_labels" not in gpu_expr @@ -165,6 +170,20 @@ def test_overview_uses_readable_quality_power_and_gitops_panels(): assert 'namespace", "unattributed"' in gpu_expr assert 'namespace", "idle"' in gpu_expr assert panels_by_title["Namespace GPU Utilization"]["targets"][0]["instant"] is True + assert "Time-weighted share" in panels_by_title["Namespace GPU Utilization"]["description"] + + +def test_gpu_node_panel_prefers_stable_process_metrics_and_covers_all_gpu_families(): + mod = load_module() + dashboard = mod.build_gpu_dashboard() + panels_by_title = {panel["title"]: panel for panel in flatten_panels(dashboard["panels"])} + + node_expr = panels_by_title["GPU Util by Node"]["targets"][0]["expr"] + assert "nvidia_gpu_device_utilization_percent" in node_expr + assert "DCGM_FI_DEV_GPU_UTIL" in node_expr + assert "jetson_gr3d_freq_percent" in node_expr + assert "unless on(node)" in node_expr + assert mod.GPU_NODES == ["titan-20", "titan-21", "titan-22", "titan-24"] def test_overview_and_testing_panels_all_have_concise_descriptions(): diff --git a/services/monitoring/dashboards/atlas-gpu.json b/services/monitoring/dashboards/atlas-gpu.json index 6bc000fd..1e56b6ba 100644 --- a/services/monitoring/dashboards/atlas-gpu.json +++ b/services/monitoring/dashboards/atlas-gpu.json @@ -20,7 +20,7 @@ }, "targets": [ { - "expr": "(100 * ((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"}) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) / clamp_min((sum((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"}) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)), 1)) or (label_replace(vector(100), \"namespace\", \"idle\", \"\", \"\") and on() ((sum((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"}) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)) == 0))", + "expr": "(100 * ((((sum by (namespace) ((sum_over_time(nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu}[$__range])) / on(node,gpu,uuid,model) group_left() clamp_min(count_over_time(nvidia_gpu_device_utilization_percent[$__range]), 1))) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(avg_over_time(DCGM_FI_DEV_GPU_UTIL[$__range]), \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) or (max by (node) (avg_over_time(jetson_gr3d_freq_percent{node!=\"\"}[$__range])))) unless on(node) (max by (node) (count_over_time(nvidia_gpu_device_utilization_percent[$__range])))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) / clamp_min((sum((((sum by (namespace) ((sum_over_time(nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu}[$__range])) / on(node,gpu,uuid,model) group_left() clamp_min(count_over_time(nvidia_gpu_device_utilization_percent[$__range]), 1))) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(avg_over_time(DCGM_FI_DEV_GPU_UTIL[$__range]), \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) or (max by (node) (avg_over_time(jetson_gr3d_freq_percent{node!=\"\"}[$__range])))) unless on(node) (max by (node) (count_over_time(nvidia_gpu_device_utilization_percent[$__range])))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)), 1)) or (label_replace(vector(100), \"namespace\", \"idle\", \"\", \"\") and on() ((sum((((sum by (namespace) ((sum_over_time(nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu}[$__range])) / on(node,gpu,uuid,model) group_left() clamp_min(count_over_time(nvidia_gpu_device_utilization_percent[$__range]), 1))) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(avg_over_time(DCGM_FI_DEV_GPU_UTIL[$__range]), \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) or (max by (node) (avg_over_time(jetson_gr3d_freq_percent{node!=\"\"}[$__range])))) unless on(node) (max by (node) (count_over_time(nvidia_gpu_device_utilization_percent[$__range])))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)) == 0))", "refId": "A", "legendFormat": "{{namespace}}", "instant": true @@ -72,7 +72,7 @@ "targetBlank": false } ], - "description": "Instant share of observed GPU compute activity by namespace. Host covers GPU work outside Kubernetes pods; idle appears only when observed GPU activity is zero." + "description": "Time-weighted share of observed GPU compute activity across the selected range. Process-aware NVIDIA metrics attribute titan-22/24 work to namespaces; host is non-pod work, and Jetson titan-20/21 activity remains unattributed when process-level attribution is unavailable. Idle appears only when observed activity is zero." }, { "id": 2, @@ -128,7 +128,7 @@ }, "targets": [ { - "expr": "label_replace(avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"}) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"}), \"Hostname\", \"$1\", \"node\", \"(.*)\")", + "expr": "label_replace(max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"}), \"Hostname\", \"$1\", \"node\", \"(.*)\")", "refId": "A", "legendFormat": "{{Hostname}}" } diff --git a/services/monitoring/dashboards/atlas-overview.json b/services/monitoring/dashboards/atlas-overview.json index 9728f576..ecac8784 100644 --- a/services/monitoring/dashboards/atlas-overview.json +++ b/services/monitoring/dashboards/atlas-overview.json @@ -3728,7 +3728,7 @@ }, "targets": [ { - "expr": "(100 * ((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"}) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) / clamp_min((sum((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"}) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)), 1)) or (label_replace(vector(100), \"namespace\", \"idle\", \"\", \"\") and on() ((sum((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"}) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)) == 0))", + "expr": "(100 * ((((sum by (namespace) ((sum_over_time(nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu}[$__range])) / on(node,gpu,uuid,model) group_left() clamp_min(count_over_time(nvidia_gpu_device_utilization_percent[$__range]), 1))) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(avg_over_time(DCGM_FI_DEV_GPU_UTIL[$__range]), \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) or (max by (node) (avg_over_time(jetson_gr3d_freq_percent{node!=\"\"}[$__range])))) unless on(node) (max by (node) (count_over_time(nvidia_gpu_device_utilization_percent[$__range])))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) / clamp_min((sum((((sum by (namespace) ((sum_over_time(nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu}[$__range])) / on(node,gpu,uuid,model) group_left() clamp_min(count_over_time(nvidia_gpu_device_utilization_percent[$__range]), 1))) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(avg_over_time(DCGM_FI_DEV_GPU_UTIL[$__range]), \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) or (max by (node) (avg_over_time(jetson_gr3d_freq_percent{node!=\"\"}[$__range])))) unless on(node) (max by (node) (count_over_time(nvidia_gpu_device_utilization_percent[$__range])))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)), 1)) or (label_replace(vector(100), \"namespace\", \"idle\", \"\", \"\") and on() ((sum((((sum by (namespace) ((sum_over_time(nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu}[$__range])) / on(node,gpu,uuid,model) group_left() clamp_min(count_over_time(nvidia_gpu_device_utilization_percent[$__range]), 1))) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(avg_over_time(DCGM_FI_DEV_GPU_UTIL[$__range]), \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) or (max by (node) (avg_over_time(jetson_gr3d_freq_percent{node!=\"\"}[$__range])))) unless on(node) (max by (node) (count_over_time(nvidia_gpu_device_utilization_percent[$__range])))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)) == 0))", "refId": "A", "legendFormat": "{{namespace}}", "instant": true @@ -3780,7 +3780,7 @@ "targetBlank": false } ], - "description": "Instant share of observed GPU compute activity by namespace. Host covers GPU work outside Kubernetes pods; idle appears only when observed GPU activity is zero." + "description": "Time-weighted share of observed GPU compute activity across the selected range. Process-aware NVIDIA metrics attribute titan-22/24 work to namespaces; host is non-pod work, and Jetson titan-20/21 activity remains unattributed when process-level attribution is unavailable. Idle appears only when observed activity is zero." }, { "id": 13, diff --git a/services/monitoring/dcgm-exporter.yaml b/services/monitoring/dcgm-exporter.yaml index e8c3b03d..74885e18 100644 --- a/services/monitoring/dcgm-exporter.yaml +++ b/services/monitoring/dcgm-exporter.yaml @@ -65,7 +65,10 @@ spec: resources: requests: cpu: 50m - memory: 64Mi + memory: 512Mi + limits: + cpu: 500m + memory: 1Gi volumeMounts: - name: pod-resources mountPath: /var/lib/kubelet/pod-resources diff --git a/services/monitoring/grafana-dashboard-gpu.yaml b/services/monitoring/grafana-dashboard-gpu.yaml index 40692ea7..f57ac713 100644 --- a/services/monitoring/grafana-dashboard-gpu.yaml +++ b/services/monitoring/grafana-dashboard-gpu.yaml @@ -29,7 +29,7 @@ data: }, "targets": [ { - "expr": "(100 * ((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"}) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) / clamp_min((sum((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"}) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)), 1)) or (label_replace(vector(100), \"namespace\", \"idle\", \"\", \"\") and on() ((sum((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"}) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)) == 0))", + "expr": "(100 * ((((sum by (namespace) ((sum_over_time(nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu}[$__range])) / on(node,gpu,uuid,model) group_left() clamp_min(count_over_time(nvidia_gpu_device_utilization_percent[$__range]), 1))) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(avg_over_time(DCGM_FI_DEV_GPU_UTIL[$__range]), \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) or (max by (node) (avg_over_time(jetson_gr3d_freq_percent{node!=\"\"}[$__range])))) unless on(node) (max by (node) (count_over_time(nvidia_gpu_device_utilization_percent[$__range])))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) / clamp_min((sum((((sum by (namespace) ((sum_over_time(nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu}[$__range])) / on(node,gpu,uuid,model) group_left() clamp_min(count_over_time(nvidia_gpu_device_utilization_percent[$__range]), 1))) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(avg_over_time(DCGM_FI_DEV_GPU_UTIL[$__range]), \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) or (max by (node) (avg_over_time(jetson_gr3d_freq_percent{node!=\"\"}[$__range])))) unless on(node) (max by (node) (count_over_time(nvidia_gpu_device_utilization_percent[$__range])))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)), 1)) or (label_replace(vector(100), \"namespace\", \"idle\", \"\", \"\") and on() ((sum((((sum by (namespace) ((sum_over_time(nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu}[$__range])) / on(node,gpu,uuid,model) group_left() clamp_min(count_over_time(nvidia_gpu_device_utilization_percent[$__range]), 1))) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(avg_over_time(DCGM_FI_DEV_GPU_UTIL[$__range]), \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) or (max by (node) (avg_over_time(jetson_gr3d_freq_percent{node!=\"\"}[$__range])))) unless on(node) (max by (node) (count_over_time(nvidia_gpu_device_utilization_percent[$__range])))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)) == 0))", "refId": "A", "legendFormat": "{{namespace}}", "instant": true @@ -81,7 +81,7 @@ data: "targetBlank": false } ], - "description": "Instant share of observed GPU compute activity by namespace. Host covers GPU work outside Kubernetes pods; idle appears only when observed GPU activity is zero." + "description": "Time-weighted share of observed GPU compute activity across the selected range. Process-aware NVIDIA metrics attribute titan-22/24 work to namespaces; host is non-pod work, and Jetson titan-20/21 activity remains unattributed when process-level attribution is unavailable. Idle appears only when observed activity is zero." }, { "id": 2, @@ -137,7 +137,7 @@ data: }, "targets": [ { - "expr": "label_replace(avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"}) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"}), \"Hostname\", \"$1\", \"node\", \"(.*)\")", + "expr": "label_replace(max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"}), \"Hostname\", \"$1\", \"node\", \"(.*)\")", "refId": "A", "legendFormat": "{{Hostname}}" } diff --git a/services/monitoring/grafana-dashboard-overview.yaml b/services/monitoring/grafana-dashboard-overview.yaml index 55bcaef7..bf6ce496 100644 --- a/services/monitoring/grafana-dashboard-overview.yaml +++ b/services/monitoring/grafana-dashboard-overview.yaml @@ -3737,7 +3737,7 @@ data: }, "targets": [ { - "expr": "(100 * ((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"}) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) / clamp_min((sum((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"}) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)), 1)) or (label_replace(vector(100), \"namespace\", \"idle\", \"\", \"\") and on() ((sum((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"}) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)) == 0))", + "expr": "(100 * ((((sum by (namespace) ((sum_over_time(nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu}[$__range])) / on(node,gpu,uuid,model) group_left() clamp_min(count_over_time(nvidia_gpu_device_utilization_percent[$__range]), 1))) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(avg_over_time(DCGM_FI_DEV_GPU_UTIL[$__range]), \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) or (max by (node) (avg_over_time(jetson_gr3d_freq_percent{node!=\"\"}[$__range])))) unless on(node) (max by (node) (count_over_time(nvidia_gpu_device_utilization_percent[$__range])))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) / clamp_min((sum((((sum by (namespace) ((sum_over_time(nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu}[$__range])) / on(node,gpu,uuid,model) group_left() clamp_min(count_over_time(nvidia_gpu_device_utilization_percent[$__range]), 1))) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(avg_over_time(DCGM_FI_DEV_GPU_UTIL[$__range]), \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) or (max by (node) (avg_over_time(jetson_gr3d_freq_percent{node!=\"\"}[$__range])))) unless on(node) (max by (node) (count_over_time(nvidia_gpu_device_utilization_percent[$__range])))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)), 1)) or (label_replace(vector(100), \"namespace\", \"idle\", \"\", \"\") and on() ((sum((((sum by (namespace) ((sum_over_time(nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu}[$__range])) / on(node,gpu,uuid,model) group_left() clamp_min(count_over_time(nvidia_gpu_device_utilization_percent[$__range]), 1))) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(avg_over_time(DCGM_FI_DEV_GPU_UTIL[$__range]), \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) or (max by (node) (avg_over_time(jetson_gr3d_freq_percent{node!=\"\"}[$__range])))) unless on(node) (max by (node) (count_over_time(nvidia_gpu_device_utilization_percent[$__range])))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)) == 0))", "refId": "A", "legendFormat": "{{namespace}}", "instant": true @@ -3789,7 +3789,7 @@ data: "targetBlank": false } ], - "description": "Instant share of observed GPU compute activity by namespace. Host covers GPU work outside Kubernetes pods; idle appears only when observed GPU activity is zero." + "description": "Time-weighted share of observed GPU compute activity across the selected range. Process-aware NVIDIA metrics attribute titan-22/24 work to namespaces; host is non-pod work, and Jetson titan-20/21 activity remains unattributed when process-level attribution is unavailable. Idle appears only when observed activity is zero." }, { "id": 13, From c1c64361cd68bd0e612ed571027e172af065a8bc Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 03:18:34 -0300 Subject: [PATCH 621/991] ai(hermes-chat): permit Atlas OIDC egress --- services/hermes-chat/networkpolicy.yaml | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/services/hermes-chat/networkpolicy.yaml b/services/hermes-chat/networkpolicy.yaml index 7a5260b9..1c645120 100644 --- a/services/hermes-chat/networkpolicy.yaml +++ b/services/hermes-chat/networkpolicy.yaml @@ -45,6 +45,18 @@ spec: ports: - protocol: TCP port: 8080 + # Atlas OIDC uses the public sso.bstein.dev issuer, which resolves to the + # in-cluster Traefik load balancer for pods on the Atlas network. + - to: + - namespaceSelector: + matchLabels: + kubernetes.io/metadata.name: traefik + podSelector: + matchLabels: + app: traefik + ports: + - protocol: TCP + port: 443 - to: - ipBlock: cidr: 10.43.0.1/32 From c06e8ef766b71d470cc156bf5c947f148b0b6b0c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 06:20:21 +0000 Subject: [PATCH 622/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 8bb3b4f6..226a0192 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.116 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.117 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.116 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.117 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index fef7cc9b..f7d22f45 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.116 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.117 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 4757490590f28d749210d99a89e27eecd512b016 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 06:21:21 +0000 Subject: [PATCH 623/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 3477e693..bd4bf3b9 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.116 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.117 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 50dd87d4765b4eacfa5914d2348945e67aca415b Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 03:21:55 -0300 Subject: [PATCH 624/991] ai(hermes): steer mastery labs to Codex --- services/hermes/skills/master-hermes-on-atlas/SKILL.md | 9 +++++++++ .../skills/master-hermes-on-atlas/agents/openai.yaml | 2 +- .../master-hermes-on-atlas/references/curriculum.md | 3 +++ 3 files changed, 13 insertions(+), 1 deletion(-) diff --git a/services/hermes/skills/master-hermes-on-atlas/SKILL.md b/services/hermes/skills/master-hermes-on-atlas/SKILL.md index 7113d7af..136caad3 100644 --- a/services/hermes/skills/master-hermes-on-atlas/SKILL.md +++ b/services/hermes/skills/master-hermes-on-atlas/SKILL.md @@ -9,6 +9,15 @@ Act as a demanding, practical coach. Teach the deployed system, not a generic Hermes installation. Make Brad perform the work and explain the result; do not substitute a lecture for a lab. +## Select the training model + +Use `openai-codex/gpt-5.4` for assessments, multi-reference labs, incident +grading, and skill evaluation. If the active provider is the local +`gpt-oss:20b`, stop before reading the reference files and ask Brad to select +Codex in Models or start a Codex-backed session. Continue locally only when Brad +explicitly asks to evaluate the local model itself or requests a lightweight +single-question review. + ## Start or resume training 1. Read `references/architecture.md` before teaching deployment-specific facts. diff --git a/services/hermes/skills/master-hermes-on-atlas/agents/openai.yaml b/services/hermes/skills/master-hermes-on-atlas/agents/openai.yaml index e2eeb648..9e39098b 100644 --- a/services/hermes/skills/master-hermes-on-atlas/agents/openai.yaml +++ b/services/hermes/skills/master-hermes-on-atlas/agents/openai.yaml @@ -1,4 +1,4 @@ interface: display_name: "Master Hermes on Atlas" short_description: "Practice Hermes safely on the live Atlas stack" - default_prompt: "Use $master-hermes-on-atlas to assess me and begin my next hands-on Hermes lab." + default_prompt: "Use $master-hermes-on-atlas to assess me and begin my next hands-on Hermes lab; first stop and tell me to select openai-codex/gpt-5.4 if this session is using the local model." diff --git a/services/hermes/skills/master-hermes-on-atlas/references/curriculum.md b/services/hermes/skills/master-hermes-on-atlas/references/curriculum.md index 8679bcd5..e39a456a 100644 --- a/services/hermes/skills/master-hermes-on-atlas/references/curriculum.md +++ b/services/hermes/skills/master-hermes-on-atlas/references/curriculum.md @@ -4,6 +4,9 @@ Complete labs by evidence, not elapsed time. A focused pass can establish operational competence in several days; mastery requires repeating real triage and recovery work over multiple incidents. +Run the curriculum on `openai-codex/gpt-5.4`. Use the local model only for a +deliberate comparison lab; it is not the default coach for multi-reference work. + ## Phase 1: orientation and control ### Lab 1 — Map the system From fcd71c46b17ed8dc22ea41c76864ce40f5a6b243 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 06:24:25 +0000 Subject: [PATCH 625/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 226a0192..910f41f7 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.116 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.117 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.116 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index ccdb339f..dedc529c 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.116 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.117 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.116 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.116" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.116" From 67d607e0046196d60c3fa29a2b2983f22e019855 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 06:25:25 +0000 Subject: [PATCH 626/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 910f41f7..900b5908 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.117 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.116 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.117 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index dedc529c..8e0f1c56 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.117 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.116 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.117 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.116" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.116" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 2745b5d986eab5dca165b11758817a2d83bcc6ce Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 03:25:16 -0300 Subject: [PATCH 627/991] Deploy Cassandra 0.8.117 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 900b5908..b279eb7b 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-01-0.8.116-retry-reuse" + cassandra.bstein.dev/redeploy: "2026-08-02-0.8.117-card-note-access" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 8e0f1c56..42696294 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.117 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.117 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.116" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.116" + CASSANDRA_SIM_WORKER_VERSION: "0.8.117" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.117" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From df953359b9f4b1cbd7daaa0113d32e7f9f98b6a9 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 03:30:58 -0300 Subject: [PATCH 628/991] monitoring(gpu): use process-level pod attribution --- scripts/dashboards_render_atlas.py | 7 ++++--- scripts/tests/test_dashboards_render_atlas.py | 4 ++++ services/monitoring/dashboards/atlas-gpu.json | 6 +++--- services/monitoring/dcgm-exporter.yaml | 15 --------------- services/monitoring/grafana-dashboard-gpu.yaml | 6 +++--- 5 files changed, 14 insertions(+), 24 deletions(-) diff --git a/scripts/dashboards_render_atlas.py b/scripts/dashboards_render_atlas.py index 64dab668..edbecc8f 100644 --- a/scripts/dashboards_render_atlas.py +++ b/scripts/dashboards_render_atlas.py @@ -5535,12 +5535,13 @@ def build_gpu_dashboard(): panels.append( table_panel( 4, - "GPU Pods Reporting Device Util", - 'topk(10, sum(DCGM_FI_DEV_GPU_UTIL{pod!=""}) by (namespace,pod,Hostname))', + "GPU Processes by Pod", + 'topk(10, sum by (namespace,pod,node,process) ' + '(nvidia_process_gpu_sm_util_percent{pod!="host"}) > 0)', {"h": 8, "w": 12, "x": 12, "y": 8}, unit="percent", transformations=[{"id": "labelsToFields", "options": {}}], - description="DCGM labels the device utilization sample with GPU-consuming pods; multiple pods on one device can report the same value.", + description="NVML process-level SM samples mapped to Kubernetes pods through host cgroups; values are per-process activity rather than duplicated whole-device utilization.", ) ) return { diff --git a/scripts/tests/test_dashboards_render_atlas.py b/scripts/tests/test_dashboards_render_atlas.py index 3269adaf..51273ff3 100644 --- a/scripts/tests/test_dashboards_render_atlas.py +++ b/scripts/tests/test_dashboards_render_atlas.py @@ -185,6 +185,10 @@ def test_gpu_node_panel_prefers_stable_process_metrics_and_covers_all_gpu_famili assert "unless on(node)" in node_expr assert mod.GPU_NODES == ["titan-20", "titan-21", "titan-22", "titan-24"] + process_expr = panels_by_title["GPU Processes by Pod"]["targets"][0]["expr"] + assert "nvidia_process_gpu_sm_util_percent" in process_expr + assert "DCGM_FI_DEV_GPU_UTIL" not in process_expr + def test_overview_and_testing_panels_all_have_concise_descriptions(): mod = load_module() diff --git a/services/monitoring/dashboards/atlas-gpu.json b/services/monitoring/dashboards/atlas-gpu.json index 1e56b6ba..d267bd67 100644 --- a/services/monitoring/dashboards/atlas-gpu.json +++ b/services/monitoring/dashboards/atlas-gpu.json @@ -152,7 +152,7 @@ { "id": 4, "type": "table", - "title": "GPU Pods Reporting Device Util", + "title": "GPU Processes by Pod", "datasource": { "type": "prometheus", "uid": "atlas-vm" @@ -165,7 +165,7 @@ }, "targets": [ { - "expr": "topk(10, sum(DCGM_FI_DEV_GPU_UTIL{pod!=\"\"}) by (namespace,pod,Hostname))", + "expr": "topk(10, sum by (namespace,pod,node,process) (nvidia_process_gpu_sm_util_percent{pod!=\"host\"}) > 0)", "refId": "A" } ], @@ -188,7 +188,7 @@ "options": {} } ], - "description": "DCGM labels the device utilization sample with GPU-consuming pods; multiple pods on one device can report the same value." + "description": "NVML process-level SM samples mapped to Kubernetes pods through host cgroups; values are per-process activity rather than duplicated whole-device utilization." } ], "time": { diff --git a/services/monitoring/dcgm-exporter.yaml b/services/monitoring/dcgm-exporter.yaml index 74885e18..c57af067 100644 --- a/services/monitoring/dcgm-exporter.yaml +++ b/services/monitoring/dcgm-exporter.yaml @@ -53,13 +53,6 @@ spec: ports: - name: metrics containerPort: 9400 - env: - - name: DCGM_EXPORTER_KUBERNETES - value: "true" - - name: KUBERNETES_VIRTUAL_GPUS - value: "true" - - name: NVIDIA_RESOURCE_NAMES - value: nvidia.com/gpu.shared securityContext: privileged: true resources: @@ -69,14 +62,6 @@ spec: limits: cpu: 500m memory: 1Gi - volumeMounts: - - name: pod-resources - mountPath: /var/lib/kubelet/pod-resources - volumes: - - name: pod-resources - hostPath: - path: /var/lib/kubelet/pod-resources - type: Directory --- apiVersion: v1 kind: Service diff --git a/services/monitoring/grafana-dashboard-gpu.yaml b/services/monitoring/grafana-dashboard-gpu.yaml index f57ac713..94cf3b1a 100644 --- a/services/monitoring/grafana-dashboard-gpu.yaml +++ b/services/monitoring/grafana-dashboard-gpu.yaml @@ -161,7 +161,7 @@ data: { "id": 4, "type": "table", - "title": "GPU Pods Reporting Device Util", + "title": "GPU Processes by Pod", "datasource": { "type": "prometheus", "uid": "atlas-vm" @@ -174,7 +174,7 @@ data: }, "targets": [ { - "expr": "topk(10, sum(DCGM_FI_DEV_GPU_UTIL{pod!=\"\"}) by (namespace,pod,Hostname))", + "expr": "topk(10, sum by (namespace,pod,node,process) (nvidia_process_gpu_sm_util_percent{pod!=\"host\"}) > 0)", "refId": "A" } ], @@ -197,7 +197,7 @@ data: "options": {} } ], - "description": "DCGM labels the device utilization sample with GPU-consuming pods; multiple pods on one device can report the same value." + "description": "NVML process-level SM samples mapped to Kubernetes pods through host cgroups; values are per-process activity rather than duplicated whole-device utilization." } ], "time": { From b1ecfe96e4586b11af148129dd496b515a19799d Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 03:59:32 -0300 Subject: [PATCH 629/991] ai(hermes): add operator guide and current GPU shares --- scripts/dashboards_render_atlas.py | 43 +------- scripts/tests/test_dashboards_render_atlas.py | 12 +-- scripts/tests/test_nvidia_process_exporter.py | 99 +++++++++++++++++++ services/hermes/configmap.yaml | 4 + services/hermes/deployment.yaml | 17 +++- services/hermes/kustomization.yaml | 9 ++ .../dashboard/dist/index.js | 88 +++++++++++++++++ .../dashboard/dist/style.css | 64 ++++++++++++ .../dashboard/manifest.json | 16 +++ .../skills/master-hermes-on-atlas/SKILL.md | 14 ++- .../master-hermes-on-atlas/agents/openai.yaml | 2 +- services/monitoring/dashboards/atlas-gpu.json | 4 +- .../monitoring/dashboards/atlas-overview.json | 4 +- .../monitoring/grafana-dashboard-gpu.yaml | 4 +- .../grafana-dashboard-overview.yaml | 4 +- .../monitoring/nvidia-process-exporter.yaml | 1 + .../scripts/nvidia_process_exporter.py | 34 ++++++- 17 files changed, 352 insertions(+), 67 deletions(-) create mode 100644 scripts/tests/test_nvidia_process_exporter.py create mode 100644 services/hermes/plugins/atlas-operator-guide/dashboard/dist/index.js create mode 100644 services/hermes/plugins/atlas-operator-guide/dashboard/dist/style.css create mode 100644 services/hermes/plugins/atlas-operator-guide/dashboard/manifest.json diff --git a/scripts/dashboards_render_atlas.py b/scripts/dashboards_render_atlas.py index edbecc8f..68c2d631 100644 --- a/scripts/dashboards_render_atlas.py +++ b/scripts/dashboards_render_atlas.py @@ -363,21 +363,6 @@ def nvidia_process_gpu_usage_by_namespace(scope_var): return f"(({usage}) > 0)" -def nvidia_process_gpu_usage_by_namespace_range(scope_var, window="$__range"): - namespace_samples = ( - "sum_over_time(nvidia_namespace_gpu_sm_util_percent" - f"{{{namespace_gpu_selector(scope_var)}}}[{window}])" - ) - device_samples = ( - f"count_over_time(nvidia_gpu_device_utilization_percent[{window}])" - ) - averaged = ( - f"({namespace_samples}) / on(node,gpu,uuid,model) group_left() " - f"clamp_min({device_samples}, 1)" - ) - return f"((sum by (namespace) ({averaged})) > 0)" - - def nvidia_gpu_device_utilization(): return "max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))" @@ -411,41 +396,17 @@ def unattributed_gpu_usage(): ) -def legacy_gpu_util_range_without_process_exporter(window="$__range"): - dcgm_range = dcgm_gpu_util_by_node().replace( - "DCGM_FI_DEV_GPU_UTIL", f"avg_over_time(DCGM_FI_DEV_GPU_UTIL[{window}])" - ) - jetson_range = ( - f'max by (node) (avg_over_time(jetson_gr3d_freq_percent{{node!=""}}[{window}]))' - ) - process_exporter_nodes = ( - f"max by (node) (count_over_time(nvidia_gpu_device_utilization_percent[{window}]))" - ) - return f"(({dcgm_range}) or ({jetson_range})) unless on(node) ({process_exporter_nodes})" - - -def unattributed_gpu_usage_range(window="$__range"): - total = f"(sum({legacy_gpu_util_range_without_process_exporter(window)}) or on() vector(0))" - return f'label_replace(({total} > 0), "namespace", "unattributed", "", "")' - - def gpu_utilization_raw(scope_var): return f"({nvidia_process_gpu_usage_by_namespace(scope_var)}) or ({unattributed_gpu_usage()})" -def gpu_utilization_range_raw(scope_var, window="$__range"): - attributed = nvidia_process_gpu_usage_by_namespace_range(scope_var, window) - unattributed = unattributed_gpu_usage_range(window) - return f"({attributed}) or ({unattributed})" - - def gpu_pool_used_expr(scope_var): raw_total = f"(sum({gpu_utilization_raw(scope_var)}) or on() vector(0))" return f"100 * {raw_total} / clamp_min({gpu_capacity_percent()}, 1)" def namespace_gpu_share_expr(scope_var): - activity = gpu_utilization_range_raw(scope_var) + activity = gpu_utilization_raw(scope_var) total = f"(sum({activity}) or on() vector(0))" share = f"100 * ({activity}) / clamp_min({total}, 1)" idle = ( @@ -1955,7 +1916,7 @@ OVERVIEW_PANEL_DESCRIPTIONS = { "Postgres Connections Used": "Current Postgres connections; lower leaves room for apps during spikes.", "Postgres Hottest Connections": "Database with the most active connections; high values identify the pressure source.", "Namespace CPU Share": "CPU share by namespace in the selected scope; big slices show who is using compute.", - "Namespace GPU Utilization": "Time-weighted share of observed GPU compute activity across the selected range. Process-aware NVIDIA metrics attribute titan-22/24 work to namespaces; host is non-pod work, and Jetson titan-20/21 activity remains unattributed when process-level attribution is unavailable. Idle appears only when observed activity is zero.", + "Namespace GPU Utilization": "Current proportional share of observed GPU compute activity. Process-aware NVIDIA metrics attribute titan-22/24 work to namespaces; host is non-pod work, and Jetson titan-20/21 activity remains unattributed when process-level attribution is unavailable. The slices total 100% of compute in use now, independent of the selected dashboard time range; idle appears only when observed activity is zero.", "Namespace RAM Share": "Memory share by namespace in the selected scope; big slices show who may drive pressure.", "Worker Node CPU": "Worker CPU over time; lower is calmer, sustained high load may need rescheduling.", "Worker Node RAM": "Worker memory over time; lower is safer, sustained high use risks evictions.", diff --git a/scripts/tests/test_dashboards_render_atlas.py b/scripts/tests/test_dashboards_render_atlas.py index 51273ff3..99df8288 100644 --- a/scripts/tests/test_dashboards_render_atlas.py +++ b/scripts/tests/test_dashboards_render_atlas.py @@ -157,11 +157,10 @@ def test_overview_uses_readable_quality_power_and_gitops_panels(): gpu_expr = panels_by_title["Namespace GPU Utilization"]["targets"][0]["expr"] assert "nvidia_namespace_gpu_sm_util_percent" in gpu_expr assert "nvidia_gpu_device_utilization_percent" in gpu_expr - assert "sum_over_time" in gpu_expr - assert "count_over_time" in gpu_expr - assert "avg_over_time(DCGM_FI_DEV_GPU_UTIL[$__range])" in gpu_expr - assert "avg_over_time(jetson_gr3d_freq_percent" in gpu_expr - assert "$__range" in gpu_expr + assert "sum_over_time" not in gpu_expr + assert "count_over_time" not in gpu_expr + assert "avg_over_time" not in gpu_expr + assert "$__range" not in gpu_expr assert "sum by (namespace)" in gpu_expr assert 'namespace", "shared"' not in gpu_expr assert "kube_node_labels" not in gpu_expr @@ -170,7 +169,8 @@ def test_overview_uses_readable_quality_power_and_gitops_panels(): assert 'namespace", "unattributed"' in gpu_expr assert 'namespace", "idle"' in gpu_expr assert panels_by_title["Namespace GPU Utilization"]["targets"][0]["instant"] is True - assert "Time-weighted share" in panels_by_title["Namespace GPU Utilization"]["description"] + assert "Current proportional share" in panels_by_title["Namespace GPU Utilization"]["description"] + assert "independent of the selected dashboard time range" in panels_by_title["Namespace GPU Utilization"]["description"] def test_gpu_node_panel_prefers_stable_process_metrics_and_covers_all_gpu_families(): diff --git a/scripts/tests/test_nvidia_process_exporter.py b/scripts/tests/test_nvidia_process_exporter.py new file mode 100644 index 00000000..3a01ee91 --- /dev/null +++ b/scripts/tests/test_nvidia_process_exporter.py @@ -0,0 +1,99 @@ +import importlib.util +from pathlib import Path +import sys +import types + +import pytest + + +ROOT = Path(__file__).resolve().parents[2] +EXPORTER_PATH = ROOT / "services" / "monitoring" / "scripts" / "nvidia_process_exporter.py" + + +def load_exporter(monkeypatch): + """Load the exporter without requiring an NVIDIA driver on the test host.""" + + pynvml = types.ModuleType("pynvml") + + class NVMLError(Exception): + pass + + class NVMLErrorNotFound(NVMLError): + pass + + class NVMLErrorNotSupported(NVMLError): + pass + + pynvml.NVMLError = NVMLError + pynvml.NVMLError_NotFound = NVMLErrorNotFound + pynvml.NVMLError_NotSupported = NVMLErrorNotSupported + for name in ( + "nvmlDeviceGetComputeRunningProcesses_v3", + "nvmlDeviceGetCount", + "nvmlDeviceGetGraphicsRunningProcesses_v3", + "nvmlDeviceGetHandleByIndex", + "nvmlDeviceGetName", + "nvmlDeviceGetProcessUtilization", + "nvmlDeviceGetUUID", + "nvmlDeviceGetUtilizationRates", + "nvmlInit", + ): + setattr(pynvml, name, lambda *args, **kwargs: None) + + monkeypatch.setitem(sys.modules, "pynvml", pynvml) + spec = importlib.util.spec_from_file_location("nvidia_process_exporter_test", EXPORTER_PATH) + module = importlib.util.module_from_spec(spec) + spec.loader.exec_module(module) + return module + + +def test_process_sample_window_uses_nvml_microseconds(monkeypatch): + exporter = load_exporter(monkeypatch) + observed = [] + monkeypatch.setattr(exporter.time, "time", lambda: 1_700_000_000.0) + monkeypatch.setattr( + exporter, + "nvmlDeviceGetProcessUtilization", + lambda handle, since: observed.append(since) or [], + ) + + samples, supported = exporter.process_utilization_samples(object()) + + assert samples == {} + assert supported == 1 + assert observed == [1_700_000_000_000_000 - 30_000_000] + + +def test_namespace_attribution_scales_to_current_device_total(monkeypatch): + exporter = load_exporter(monkeypatch) + + result = exporter.reconcile_namespace_utilization( + {"game-stream": 20, "hermes": 10}, + device_util=3, + ) + + assert sum(result.values()) == pytest.approx(3) + assert result["game-stream"] == pytest.approx(2) + assert result["hermes"] == pytest.approx(1) + + +def test_namespace_attribution_assigns_unexplained_compute_to_host(monkeypatch): + exporter = load_exporter(monkeypatch) + + result = exporter.reconcile_namespace_utilization( + {"hermes": 1}, + device_util=3, + ) + + assert result == {"hermes": 1, "host": 2} + + +def test_zero_device_utilization_clears_stale_process_samples(monkeypatch): + exporter = load_exporter(monkeypatch) + + result = exporter.reconcile_namespace_utilization( + {"hermes": 40, "game-stream": 5}, + device_util=0, + ) + + assert result == {"hermes": 0, "game-stream": 0} diff --git a/services/hermes/configmap.yaml b/services/hermes/configmap.yaml index af663e11..c8818279 100644 --- a/services/hermes/configmap.yaml +++ b/services/hermes/configmap.yaml @@ -28,6 +28,10 @@ data: external_dirs: - /opt/data/workspace/skills + plugins: + enabled: + - atlas-operator-guide + terminal: backend: local cwd: /opt/data/workspace diff --git a/services/hermes/deployment.yaml b/services/hermes/deployment.yaml index afc00aa6..51dd6506 100644 --- a/services/hermes/deployment.yaml +++ b/services/hermes/deployment.yaml @@ -23,7 +23,7 @@ spec: ai.bstein.dev/model: gpt-oss:20b with openai-codex fallback ai.bstein.dev/role: testing-triage ai.bstein.dev/placement: arm64 gateway lane (rpi5 preferred) - ai.bstein.dev/config-rev: "20260802-mastery-lab" + ai.bstein.dev/config-rev: "20260802-operator-guide" spec: serviceAccountName: hermes-triage automountServiceAccountToken: true @@ -197,6 +197,9 @@ spec: - name: mastery-skill mountPath: /opt/data/workspace/skills/master-hermes-on-atlas readOnly: true + - name: operator-guide-plugin + mountPath: /opt/data/plugins/atlas-operator-guide + readOnly: true readinessProbe: httpGet: path: /api/status @@ -251,3 +254,15 @@ spec: path: references/incident-drills.md - key: mastery-rubric.md path: references/mastery-rubric.md + - key: two-hour-proof-sprint.md + path: references/two-hour-proof-sprint.md + - name: operator-guide-plugin + configMap: + name: hermes-operator-guide-plugin + items: + - key: manifest.json + path: dashboard/manifest.json + - key: index.js + path: dashboard/dist/index.js + - key: style.css + path: dashboard/dist/style.css diff --git a/services/hermes/kustomization.yaml b/services/hermes/kustomization.yaml index fe8660d8..0966dccc 100644 --- a/services/hermes/kustomization.yaml +++ b/services/hermes/kustomization.yaml @@ -38,5 +38,14 @@ configMapGenerator: - curriculum.md=skills/master-hermes-on-atlas/references/curriculum.md - incident-drills.md=skills/master-hermes-on-atlas/references/incident-drills.md - mastery-rubric.md=skills/master-hermes-on-atlas/references/mastery-rubric.md + - two-hour-proof-sprint.md=skills/master-hermes-on-atlas/references/two-hour-proof-sprint.md + options: + disableNameSuffixHash: true + - name: hermes-operator-guide-plugin + namespace: hermes + files: + - manifest.json=plugins/atlas-operator-guide/dashboard/manifest.json + - index.js=plugins/atlas-operator-guide/dashboard/dist/index.js + - style.css=plugins/atlas-operator-guide/dashboard/dist/style.css options: disableNameSuffixHash: true diff --git a/services/hermes/plugins/atlas-operator-guide/dashboard/dist/index.js b/services/hermes/plugins/atlas-operator-guide/dashboard/dist/index.js new file mode 100644 index 00000000..5a2ff8ce --- /dev/null +++ b/services/hermes/plugins/atlas-operator-guide/dashboard/dist/index.js @@ -0,0 +1,88 @@ +(function () { + "use strict"; + + var pluginName = "atlas-operator-guide"; + var storageKey = "atlas.operator-guide.hidden.v1"; + var prompt = [ + "Use $master-hermes-on-atlas to run the Atlas two-hour proof sprint.", + "I will perform every setup and evidence step myself.", + "Start with step 1 only, require live proof, and stop at every mutation or approval boundary.", + "First tell me to select openai-codex/gpt-5.4 if this session is using the local model." + ].join(" "); + + function OperatorGuide() { + var sdk = window.__HERMES_PLUGIN_SDK__; + var React = sdk.React; + var state = sdk.hooks.useState(function () { + return window.localStorage.getItem(storageKey) === "1"; + }); + var hidden = state[0]; + var setHidden = state[1]; + var copiedState = sdk.hooks.useState(false); + var copied = copiedState[0]; + var setCopied = copiedState[1]; + + if (hidden) { + return React.createElement( + "button", + { + className: "atlas-guide-restore", + onClick: function () { + window.localStorage.removeItem(storageKey); + setHidden(false); + }, + type: "button" + }, + "Show Atlas operator walkthrough" + ); + } + + function copyPrompt() { + navigator.clipboard.writeText(prompt).then(function () { + setCopied(true); + window.setTimeout(function () { setCopied(false); }, 2500); + }); + } + + return React.createElement( + "section", + { className: "atlas-guide-card", role: "region", "aria-label": "Atlas operator walkthrough" }, + React.createElement( + "div", + { className: "atlas-guide-heading" }, + React.createElement("div", null, + React.createElement("strong", null, "Start here: two-hour Hermes proof sprint"), + React.createElement("p", null, "You do the setup and evidence work. Hermes coaches, checks, and stops at approval boundaries.") + ), + React.createElement( + "button", + { + className: "atlas-guide-hide", + onClick: function () { + window.localStorage.setItem(storageKey, "1"); + setHidden(true); + }, + type: "button" + }, + "Hide" + ) + ), + React.createElement( + "ol", + { className: "atlas-guide-steps" }, + React.createElement("li", null, "Open Models and select openai-codex/gpt-5.4 for the coaching session."), + React.createElement("li", null, "Copy the sprint prompt, paste it into Chat, and press Enter."), + React.createElement("li", null, "Complete one live triage and build one writable skill yourself.") + ), + React.createElement( + "div", + { className: "atlas-guide-actions" }, + React.createElement("a", { className: "atlas-guide-button", href: "/models" }, "Open Models"), + React.createElement("button", { className: "atlas-guide-button", onClick: copyPrompt, type: "button" }, copied ? "Prompt copied" : "Copy sprint prompt"), + React.createElement("a", { className: "atlas-guide-link", href: "/skills" }, "Inspect skills") + ) + ); + } + + window.__HERMES_PLUGINS__.registerSlot(pluginName, "chat:top", OperatorGuide); +}()); diff --git a/services/hermes/plugins/atlas-operator-guide/dashboard/dist/style.css b/services/hermes/plugins/atlas-operator-guide/dashboard/dist/style.css new file mode 100644 index 00000000..ffecc67c --- /dev/null +++ b/services/hermes/plugins/atlas-operator-guide/dashboard/dist/style.css @@ -0,0 +1,64 @@ +.atlas-guide-card { + border: 1px solid rgba(247, 201, 72, 0.7); + background: rgba(247, 201, 72, 0.08); + color: inherit; + padding: 0.75rem 1rem; + font-family: "Mondwest", monospace; +} + +.atlas-guide-heading { + display: flex; + align-items: flex-start; + justify-content: space-between; + gap: 1rem; +} + +.atlas-guide-heading strong { + color: #f7c948; + font-family: "Rules Expanded", sans-serif; + letter-spacing: 0.04em; + text-transform: uppercase; +} + +.atlas-guide-heading p { + margin: 0.25rem 0 0; + opacity: 0.8; +} + +.atlas-guide-steps { + margin: 0.6rem 0; + padding-left: 1.25rem; +} + +.atlas-guide-actions { + display: flex; + flex-wrap: wrap; + align-items: center; + gap: 0.5rem; +} + +.atlas-guide-button, +.atlas-guide-hide, +.atlas-guide-restore { + border: 1px solid rgba(247, 201, 72, 0.7); + background: transparent; + color: #f7c948; + cursor: pointer; + padding: 0.35rem 0.6rem; + text-decoration: none; +} + +.atlas-guide-button:hover, +.atlas-guide-hide:hover, +.atlas-guide-restore:hover { + background: rgba(247, 201, 72, 0.14); +} + +.atlas-guide-hide, +.atlas-guide-restore { + font-size: 0.75rem; +} + +.atlas-guide-link { + color: #f7c948; +} diff --git a/services/hermes/plugins/atlas-operator-guide/dashboard/manifest.json b/services/hermes/plugins/atlas-operator-guide/dashboard/manifest.json new file mode 100644 index 00000000..440a16d0 --- /dev/null +++ b/services/hermes/plugins/atlas-operator-guide/dashboard/manifest.json @@ -0,0 +1,16 @@ +{ + "name": "atlas-operator-guide", + "label": "Atlas Operator Guide", + "description": "Hands-on onboarding for supervised Atlas triage and Hermes skill building.", + "icon": "Sparkles", + "version": "1.0.0", + "tab": { + "path": "/atlas-operator-guide", + "hidden": true + }, + "slots": [ + "chat:top" + ], + "entry": "dist/index.js", + "css": "dist/style.css" +} diff --git a/services/hermes/skills/master-hermes-on-atlas/SKILL.md b/services/hermes/skills/master-hermes-on-atlas/SKILL.md index 136caad3..699dfa1c 100644 --- a/services/hermes/skills/master-hermes-on-atlas/SKILL.md +++ b/services/hermes/skills/master-hermes-on-atlas/SKILL.md @@ -22,15 +22,19 @@ single-question review. 1. Read `references/architecture.md` before teaching deployment-specific facts. 2. Read `references/curriculum.md` to select the next lab. -3. Ask whether to assess, resume, or choose a lab. If no progress record exists, +3. When Brad asks for the two-hour proof sprint, read + `references/two-hour-proof-sprint.md` and run it in order. Brad performs + every required UI action and evidence check; coach and verify without doing + the learning-critical steps for him. +4. Ask whether to assess, resume, or choose a lab. If no progress record exists, default to a five-question assessment followed by the first weak area. -4. Give one bounded task at a time. State the goal, safety boundary, exact +5. Give one bounded task at a time. State the goal, safety boundary, exact success evidence, and at most one initial hint. -5. Wait for Brad's answer or observed command output before revealing the +6. Wait for Brad's answer or observed command output before revealing the explanation. -6. Grade with `references/mastery-rubric.md`. Separate demonstrated ability +7. Grade with `references/mastery-rubric.md`. Separate demonstrated ability from verbal familiarity. -7. Offer a concise progress update. Write it to +8. Offer a concise progress update. Write it to `/opt/data/workspace/hermes-training/progress.md` only after Brad explicitly approves the file change. diff --git a/services/hermes/skills/master-hermes-on-atlas/agents/openai.yaml b/services/hermes/skills/master-hermes-on-atlas/agents/openai.yaml index 9e39098b..760f152d 100644 --- a/services/hermes/skills/master-hermes-on-atlas/agents/openai.yaml +++ b/services/hermes/skills/master-hermes-on-atlas/agents/openai.yaml @@ -1,4 +1,4 @@ interface: display_name: "Master Hermes on Atlas" short_description: "Practice Hermes safely on the live Atlas stack" - default_prompt: "Use $master-hermes-on-atlas to assess me and begin my next hands-on Hermes lab; first stop and tell me to select openai-codex/gpt-5.4 if this session is using the local model." + default_prompt: "Use $master-hermes-on-atlas to run the Atlas two-hour proof sprint. I will perform every setup and evidence step myself. Start with step 1 only, require live proof, and stop at every mutation or approval boundary. First tell me to select openai-codex/gpt-5.4 if this session is using the local model." diff --git a/services/monitoring/dashboards/atlas-gpu.json b/services/monitoring/dashboards/atlas-gpu.json index d267bd67..c50bc8f5 100644 --- a/services/monitoring/dashboards/atlas-gpu.json +++ b/services/monitoring/dashboards/atlas-gpu.json @@ -20,7 +20,7 @@ }, "targets": [ { - "expr": "(100 * ((((sum by (namespace) ((sum_over_time(nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu}[$__range])) / on(node,gpu,uuid,model) group_left() clamp_min(count_over_time(nvidia_gpu_device_utilization_percent[$__range]), 1))) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(avg_over_time(DCGM_FI_DEV_GPU_UTIL[$__range]), \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) or (max by (node) (avg_over_time(jetson_gr3d_freq_percent{node!=\"\"}[$__range])))) unless on(node) (max by (node) (count_over_time(nvidia_gpu_device_utilization_percent[$__range])))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) / clamp_min((sum((((sum by (namespace) ((sum_over_time(nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu}[$__range])) / on(node,gpu,uuid,model) group_left() clamp_min(count_over_time(nvidia_gpu_device_utilization_percent[$__range]), 1))) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(avg_over_time(DCGM_FI_DEV_GPU_UTIL[$__range]), \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) or (max by (node) (avg_over_time(jetson_gr3d_freq_percent{node!=\"\"}[$__range])))) unless on(node) (max by (node) (count_over_time(nvidia_gpu_device_utilization_percent[$__range])))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)), 1)) or (label_replace(vector(100), \"namespace\", \"idle\", \"\", \"\") and on() ((sum((((sum by (namespace) ((sum_over_time(nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu}[$__range])) / on(node,gpu,uuid,model) group_left() clamp_min(count_over_time(nvidia_gpu_device_utilization_percent[$__range]), 1))) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(avg_over_time(DCGM_FI_DEV_GPU_UTIL[$__range]), \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) or (max by (node) (avg_over_time(jetson_gr3d_freq_percent{node!=\"\"}[$__range])))) unless on(node) (max by (node) (count_over_time(nvidia_gpu_device_utilization_percent[$__range])))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)) == 0))", + "expr": "(100 * ((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) / clamp_min((sum((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)), 1)) or (label_replace(vector(100), \"namespace\", \"idle\", \"\", \"\") and on() ((sum((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)) == 0))", "refId": "A", "legendFormat": "{{namespace}}", "instant": true @@ -72,7 +72,7 @@ "targetBlank": false } ], - "description": "Time-weighted share of observed GPU compute activity across the selected range. Process-aware NVIDIA metrics attribute titan-22/24 work to namespaces; host is non-pod work, and Jetson titan-20/21 activity remains unattributed when process-level attribution is unavailable. Idle appears only when observed activity is zero." + "description": "Current proportional share of observed GPU compute activity. Process-aware NVIDIA metrics attribute titan-22/24 work to namespaces; host is non-pod work, and Jetson titan-20/21 activity remains unattributed when process-level attribution is unavailable. The slices total 100% of compute in use now, independent of the selected dashboard time range; idle appears only when observed activity is zero." }, { "id": 2, diff --git a/services/monitoring/dashboards/atlas-overview.json b/services/monitoring/dashboards/atlas-overview.json index ecac8784..ff74cca2 100644 --- a/services/monitoring/dashboards/atlas-overview.json +++ b/services/monitoring/dashboards/atlas-overview.json @@ -3728,7 +3728,7 @@ }, "targets": [ { - "expr": "(100 * ((((sum by (namespace) ((sum_over_time(nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu}[$__range])) / on(node,gpu,uuid,model) group_left() clamp_min(count_over_time(nvidia_gpu_device_utilization_percent[$__range]), 1))) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(avg_over_time(DCGM_FI_DEV_GPU_UTIL[$__range]), \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) or (max by (node) (avg_over_time(jetson_gr3d_freq_percent{node!=\"\"}[$__range])))) unless on(node) (max by (node) (count_over_time(nvidia_gpu_device_utilization_percent[$__range])))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) / clamp_min((sum((((sum by (namespace) ((sum_over_time(nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu}[$__range])) / on(node,gpu,uuid,model) group_left() clamp_min(count_over_time(nvidia_gpu_device_utilization_percent[$__range]), 1))) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(avg_over_time(DCGM_FI_DEV_GPU_UTIL[$__range]), \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) or (max by (node) (avg_over_time(jetson_gr3d_freq_percent{node!=\"\"}[$__range])))) unless on(node) (max by (node) (count_over_time(nvidia_gpu_device_utilization_percent[$__range])))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)), 1)) or (label_replace(vector(100), \"namespace\", \"idle\", \"\", \"\") and on() ((sum((((sum by (namespace) ((sum_over_time(nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu}[$__range])) / on(node,gpu,uuid,model) group_left() clamp_min(count_over_time(nvidia_gpu_device_utilization_percent[$__range]), 1))) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(avg_over_time(DCGM_FI_DEV_GPU_UTIL[$__range]), \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) or (max by (node) (avg_over_time(jetson_gr3d_freq_percent{node!=\"\"}[$__range])))) unless on(node) (max by (node) (count_over_time(nvidia_gpu_device_utilization_percent[$__range])))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)) == 0))", + "expr": "(100 * ((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) / clamp_min((sum((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)), 1)) or (label_replace(vector(100), \"namespace\", \"idle\", \"\", \"\") and on() ((sum((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)) == 0))", "refId": "A", "legendFormat": "{{namespace}}", "instant": true @@ -3780,7 +3780,7 @@ "targetBlank": false } ], - "description": "Time-weighted share of observed GPU compute activity across the selected range. Process-aware NVIDIA metrics attribute titan-22/24 work to namespaces; host is non-pod work, and Jetson titan-20/21 activity remains unattributed when process-level attribution is unavailable. Idle appears only when observed activity is zero." + "description": "Current proportional share of observed GPU compute activity. Process-aware NVIDIA metrics attribute titan-22/24 work to namespaces; host is non-pod work, and Jetson titan-20/21 activity remains unattributed when process-level attribution is unavailable. The slices total 100% of compute in use now, independent of the selected dashboard time range; idle appears only when observed activity is zero." }, { "id": 13, diff --git a/services/monitoring/grafana-dashboard-gpu.yaml b/services/monitoring/grafana-dashboard-gpu.yaml index 94cf3b1a..fee7e538 100644 --- a/services/monitoring/grafana-dashboard-gpu.yaml +++ b/services/monitoring/grafana-dashboard-gpu.yaml @@ -29,7 +29,7 @@ data: }, "targets": [ { - "expr": "(100 * ((((sum by (namespace) ((sum_over_time(nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu}[$__range])) / on(node,gpu,uuid,model) group_left() clamp_min(count_over_time(nvidia_gpu_device_utilization_percent[$__range]), 1))) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(avg_over_time(DCGM_FI_DEV_GPU_UTIL[$__range]), \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) or (max by (node) (avg_over_time(jetson_gr3d_freq_percent{node!=\"\"}[$__range])))) unless on(node) (max by (node) (count_over_time(nvidia_gpu_device_utilization_percent[$__range])))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) / clamp_min((sum((((sum by (namespace) ((sum_over_time(nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu}[$__range])) / on(node,gpu,uuid,model) group_left() clamp_min(count_over_time(nvidia_gpu_device_utilization_percent[$__range]), 1))) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(avg_over_time(DCGM_FI_DEV_GPU_UTIL[$__range]), \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) or (max by (node) (avg_over_time(jetson_gr3d_freq_percent{node!=\"\"}[$__range])))) unless on(node) (max by (node) (count_over_time(nvidia_gpu_device_utilization_percent[$__range])))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)), 1)) or (label_replace(vector(100), \"namespace\", \"idle\", \"\", \"\") and on() ((sum((((sum by (namespace) ((sum_over_time(nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu}[$__range])) / on(node,gpu,uuid,model) group_left() clamp_min(count_over_time(nvidia_gpu_device_utilization_percent[$__range]), 1))) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(avg_over_time(DCGM_FI_DEV_GPU_UTIL[$__range]), \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) or (max by (node) (avg_over_time(jetson_gr3d_freq_percent{node!=\"\"}[$__range])))) unless on(node) (max by (node) (count_over_time(nvidia_gpu_device_utilization_percent[$__range])))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)) == 0))", + "expr": "(100 * ((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) / clamp_min((sum((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)), 1)) or (label_replace(vector(100), \"namespace\", \"idle\", \"\", \"\") and on() ((sum((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)) == 0))", "refId": "A", "legendFormat": "{{namespace}}", "instant": true @@ -81,7 +81,7 @@ data: "targetBlank": false } ], - "description": "Time-weighted share of observed GPU compute activity across the selected range. Process-aware NVIDIA metrics attribute titan-22/24 work to namespaces; host is non-pod work, and Jetson titan-20/21 activity remains unattributed when process-level attribution is unavailable. Idle appears only when observed activity is zero." + "description": "Current proportional share of observed GPU compute activity. Process-aware NVIDIA metrics attribute titan-22/24 work to namespaces; host is non-pod work, and Jetson titan-20/21 activity remains unattributed when process-level attribution is unavailable. The slices total 100% of compute in use now, independent of the selected dashboard time range; idle appears only when observed activity is zero." }, { "id": 2, diff --git a/services/monitoring/grafana-dashboard-overview.yaml b/services/monitoring/grafana-dashboard-overview.yaml index bf6ce496..77b12867 100644 --- a/services/monitoring/grafana-dashboard-overview.yaml +++ b/services/monitoring/grafana-dashboard-overview.yaml @@ -3737,7 +3737,7 @@ data: }, "targets": [ { - "expr": "(100 * ((((sum by (namespace) ((sum_over_time(nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu}[$__range])) / on(node,gpu,uuid,model) group_left() clamp_min(count_over_time(nvidia_gpu_device_utilization_percent[$__range]), 1))) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(avg_over_time(DCGM_FI_DEV_GPU_UTIL[$__range]), \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) or (max by (node) (avg_over_time(jetson_gr3d_freq_percent{node!=\"\"}[$__range])))) unless on(node) (max by (node) (count_over_time(nvidia_gpu_device_utilization_percent[$__range])))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) / clamp_min((sum((((sum by (namespace) ((sum_over_time(nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu}[$__range])) / on(node,gpu,uuid,model) group_left() clamp_min(count_over_time(nvidia_gpu_device_utilization_percent[$__range]), 1))) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(avg_over_time(DCGM_FI_DEV_GPU_UTIL[$__range]), \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) or (max by (node) (avg_over_time(jetson_gr3d_freq_percent{node!=\"\"}[$__range])))) unless on(node) (max by (node) (count_over_time(nvidia_gpu_device_utilization_percent[$__range])))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)), 1)) or (label_replace(vector(100), \"namespace\", \"idle\", \"\", \"\") and on() ((sum((((sum by (namespace) ((sum_over_time(nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu}[$__range])) / on(node,gpu,uuid,model) group_left() clamp_min(count_over_time(nvidia_gpu_device_utilization_percent[$__range]), 1))) > 0)) or (label_replace(((sum(((avg by (node) (label_replace(label_replace(avg_over_time(DCGM_FI_DEV_GPU_UTIL[$__range]), \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) or (max by (node) (avg_over_time(jetson_gr3d_freq_percent{node!=\"\"}[$__range])))) unless on(node) (max by (node) (count_over_time(nvidia_gpu_device_utilization_percent[$__range])))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)) == 0))", + "expr": "(100 * ((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) / clamp_min((sum((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)), 1)) or (label_replace(vector(100), \"namespace\", \"idle\", \"\", \"\") and on() ((sum((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)) == 0))", "refId": "A", "legendFormat": "{{namespace}}", "instant": true @@ -3789,7 +3789,7 @@ data: "targetBlank": false } ], - "description": "Time-weighted share of observed GPU compute activity across the selected range. Process-aware NVIDIA metrics attribute titan-22/24 work to namespaces; host is non-pod work, and Jetson titan-20/21 activity remains unattributed when process-level attribution is unavailable. Idle appears only when observed activity is zero." + "description": "Current proportional share of observed GPU compute activity. Process-aware NVIDIA metrics attribute titan-22/24 work to namespaces; host is non-pod work, and Jetson titan-20/21 activity remains unattributed when process-level attribution is unavailable. The slices total 100% of compute in use now, independent of the selected dashboard time range; idle appears only when observed activity is zero." }, { "id": 13, diff --git a/services/monitoring/nvidia-process-exporter.yaml b/services/monitoring/nvidia-process-exporter.yaml index 408e4c42..325a0379 100644 --- a/services/monitoring/nvidia-process-exporter.yaml +++ b/services/monitoring/nvidia-process-exporter.yaml @@ -49,6 +49,7 @@ spec: annotations: prometheus.io/scrape: "true" prometheus.io/port: "9401" + monitoring.bstein.dev/restart-rev: "20260802-current-attribution" spec: serviceAccountName: nvidia-process-exporter imagePullSecrets: diff --git a/services/monitoring/scripts/nvidia_process_exporter.py b/services/monitoring/scripts/nvidia_process_exporter.py index a43b2b45..136a199c 100644 --- a/services/monitoring/scripts/nvidia_process_exporter.py +++ b/services/monitoring/scripts/nvidia_process_exporter.py @@ -134,7 +134,8 @@ def running_process_memory(handle): def process_utilization_samples(handle): try: - since = int(time.time() * 1000) - SAMPLE_WINDOW_MS + # NVML process sample timestamps are microseconds since the epoch. + since = int(time.time() * 1_000_000) - (SAMPLE_WINDOW_MS * 1000) samples = nvmlDeviceGetProcessUtilization(handle, since) except NVMLError_NotFound: return {}, 1 @@ -156,6 +157,32 @@ def process_utilization_samples(handle): return by_pid, 1 +def reconcile_namespace_utilization(namespace_sm, device_util): + """Make namespace attribution add up to the device's current utilization.""" + + current = max(float(device_util), 0.0) + reconciled = { + namespace: max(float(value), 0.0) + for namespace, value in namespace_sm.items() + } + attributed = sum(reconciled.values()) + + if current == 0: + return {namespace: 0.0 for namespace in reconciled} + + # Per-process NVML samples and the device gauge are collected on slightly + # different intervals. Scale a stale/overlapping process sum down to the + # device's current total while preserving the namespace proportions. + if attributed > current and attributed > 0: + scale = current / attributed + return {namespace: value * scale for namespace, value in reconciled.items()} + + residual = current - attributed + if residual > 0.1: + reconciled["host"] = reconciled.get("host", 0.0) + residual + return reconciled + + def collect_metrics(): nvmlInit() pods = load_pods() @@ -204,10 +231,7 @@ def collect_metrics(): lines.append(metric_line("nvidia_process_gpu_sm_util_percent", labels, sm_util)) lines.append(metric_line("nvidia_process_gpu_memory_used_bytes", labels, int(proc_info["memory"]))) - attributed = sum(namespace_sm.values()) - residual = max(device_util - attributed, 0.0) - if residual > 0.1: - namespace_sm["host"] = namespace_sm.get("host", 0.0) + residual + namespace_sm = reconcile_namespace_utilization(namespace_sm, device_util) for namespace, value in sorted(namespace_sm.items()): labels = {**base, "namespace": namespace, "pod": "__namespace_total__"} From 934bf871c9d2cba46bfaca108773e8a6f7d51048 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 04:01:40 -0300 Subject: [PATCH 630/991] ai(hermes): include operator proof sprint --- .../references/two-hour-proof-sprint.md | 82 +++++++++++++++++++ 1 file changed, 82 insertions(+) create mode 100644 services/hermes/skills/master-hermes-on-atlas/references/two-hour-proof-sprint.md diff --git a/services/hermes/skills/master-hermes-on-atlas/references/two-hour-proof-sprint.md b/services/hermes/skills/master-hermes-on-atlas/references/two-hour-proof-sprint.md new file mode 100644 index 00000000..98f7bbba --- /dev/null +++ b/services/hermes/skills/master-hermes-on-atlas/references/two-hour-proof-sprint.md @@ -0,0 +1,82 @@ +# Atlas two-hour proof sprint + +The sprint establishes usable, defensible evidence for the current Hermes +claims. It does not award mastery and it cannot retroactively prove historical +OpenClaw use. Brad performs the work; Hermes gives one task at a time, checks +the evidence, and withholds later answers until Brad commits to a result. + +## 0–15 minutes — control surface and request path + +1. Have Brad select `openai-codex/gpt-5.4` for the training session. +2. In the web UI, have him locate Chat, Sessions, Files, Models, Logs, Skills, + Plugins, MCP, Channels, Webhooks, Cron, Profiles, Config, Keys, System, and + Documentation. +3. Have him explain browser → operator agent → model gate → Ollama, including + Codex fallback and the separate consumer instance. + +Evidence: Brad can identify persistent, shared, and instance-local state and +can name the GPU owner check without changing it. + +## 15–35 minutes — permissions and safety + +1. Have Brad inspect the operator ServiceAccount, ClusterRole, NetworkPolicy, + and approval deny list using read-only commands. +2. Have him produce an allow/deny matrix for pod/log reads, Secret reads, + exec, deployment mutation, Flux reads, Flux reconcile, and internal + evidence endpoints. +3. Require him to explain why prompt instructions and skills are not the + primary security boundary. + +Evidence: correct identity/RBAC/network/approval layering with no Secret values +read and no mutation attempted. + +## 35–75 minutes — perform the claimed triage path + +Invoke `$triage-titan-test-failures`. Brad must: + +1. check Ariadne diagnosis and bundle freshness; +2. identify one current or retained failed suite/build; +3. correlate Jenkins log/artifact evidence; +4. correlate Git/Flux revision and Kubernetes environment health; +5. query the relevant Pushgateway/VictoriaMetrics quality signal and identify + the matching Grafana context; +6. produce Finding, Confidence, Evidence, Likely cause, Blast radius, Next + checks, Repo-side fix, and Approval required. + +Hermes may suggest a read-only command after Brad explains why it is needed. +Do not let the built-in diagnosis replace Brad's own evidence correlation. + +Evidence: an 8/10 or better result under the triage rubric with no invented +facts and no unacknowledged mutation. + +## 75–105 minutes — build the reusable workflow + +1. Have Brad inspect the mounted `triage-titan-test-failures` skill and explain + its trigger, fixed procedure, variable evidence, and security boundary. +2. Have Brad choose one genuinely repeated sub-workflow from the triage. +3. Guide him to create a new skill in the operator's writable skill area. Do + not edit the mounted Flux skill and do not write the skill for him. +4. Test one expected trigger and one adversarial/non-trigger case. +5. Have Brad make one improvement based on the test results. + +Evidence: Brad can find the skill in the Skills UI, explain every instruction, +and show a passing and adversarial evaluation. + +## 105–120 minutes — supervised proposal and claim audit + +1. Have Brad turn the triage into the smallest repo-side proposal without + applying it. +2. Have him identify every step requiring approval: file edit, commit/push, + pipeline trigger, Flux reconcile, credential/environment change, or manual + backfill. +3. Audit the interview answer sentence by sentence using `mastery-rubric.md`. +4. Offer to record progress only after Brad approves the write. + +Minimum honest outcome: + +- current Hermes deployment and supervised triage use are demonstrated; +- the established Atlas automation path and read-only boundary are explained; +- one reusable writable skill is created, tested, and improved by Brad; +- autonomous production mutation is not claimed; +- historical OpenClaw replacement remains unproven unless independent retained + evidence is produced. From c26dc3d1b77be2d701fcce1b8fa53c2241ead787 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 04:12:07 -0300 Subject: [PATCH 631/991] docs(hermes): ground OpenClaw history in retained evidence --- .../skills/master-hermes-on-atlas/SKILL.md | 6 +++--- .../references/architecture.md | 17 +++++++++++++++++ .../references/mastery-rubric.md | 2 +- .../references/two-hour-proof-sprint.md | 13 ++++++++----- 4 files changed, 29 insertions(+), 9 deletions(-) diff --git a/services/hermes/skills/master-hermes-on-atlas/SKILL.md b/services/hermes/skills/master-hermes-on-atlas/SKILL.md index 699dfa1c..9258a05e 100644 --- a/services/hermes/skills/master-hermes-on-atlas/SKILL.md +++ b/services/hermes/skills/master-hermes-on-atlas/SKILL.md @@ -72,9 +72,9 @@ student commits to a finding. ## Validate claims honestly Use the claim audit in `references/mastery-rubric.md`. Current configuration and -live demonstrations can support current-use claims. They cannot prove that -OpenClaw previously ran or was replaced; require Git history, retained manifests, -or other evidence before treating that historical claim as demonstrated. +live demonstrations support current-use claims. The retained Git history and +bound OpenClaw PVC support the deployment/replacement history; require Brad to +inspect that evidence and distinguish it from proof of every past interaction. End every session with: diff --git a/services/hermes/skills/master-hermes-on-atlas/references/architecture.md b/services/hermes/skills/master-hermes-on-atlas/references/architecture.md index 3c70ceb9..e1ff0630 100644 --- a/services/hermes/skills/master-hermes-on-atlas/references/architecture.md +++ b/services/hermes/skills/master-hermes-on-atlas/references/architecture.md @@ -49,6 +49,23 @@ kubectl -n hermes-chat get deploy hermes-chat -o wide Do not change the GPU owner as part of a lesson. +## Retained OpenClaw replacement evidence + +OpenClaw is not part of the current inference path, but its deployment history +is retained: + +- `1bc58e10` added the OpenClaw testing-triage workspace, workload, model, + ingress, RBAC, and storage. +- follow-up commits wired local diagnosis, OIDC, persistence, and the gateway. +- `97ecb36b` replaced OpenClaw with Hermes and moved the agent-facing resources. +- `bb5e286f` decoupled Hermes from the retired OpenClaw Flux dependency. +- the `openclaw-home` PVC remains bound as retained state while no OpenClaw + workload is running. + +Have Brad verify the commits and live resource shape. This establishes the +cluster deployment and replacement sequence; Brad's direct experience remains +the evidence for how he personally used the old agent. + ## Operator evidence path The operator role is designed for supervised test-failure triage: diff --git a/services/hermes/skills/master-hermes-on-atlas/references/mastery-rubric.md b/services/hermes/skills/master-hermes-on-atlas/references/mastery-rubric.md index ae12ffbb..c9372410 100644 --- a/services/hermes/skills/master-hermes-on-atlas/references/mastery-rubric.md +++ b/services/hermes/skills/master-hermes-on-atlas/references/mastery-rubric.md @@ -35,7 +35,7 @@ different real incidents and improved a workflow based on what failed. | Access starts read-only and scoped | RBAC, NetworkPolicy, separate identities and state | Produce and explain the allow/deny matrix from live authorization checks. | | Human approval protects changes | Approval config, deny patterns, Flux workflow | Identify every mutation in a proposed incident response and stop before it. | | Local GPU gracefully yields to gaming | Owner state, model gate, fallback | Explain or observe a Wolf ownership window and verify continued fallback service. | -| OpenClaw previously ran and was replaced | Not established by the current Hermes deployment | Show retained Git history/manifests/logs or qualify the statement as recollection. | +| OpenClaw previously ran and was replaced | `1bc58e10` deploys the OpenClaw triage stack; follow-up commits add gateway/OIDC/persistence; `97ecb36b` replaces it with Hermes; `bb5e286f` retires the dependency; the bound `openclaw-home` PVC remains without a workload | Inspect the commits and live Flux/PVC state, then explain what they prove versus what depends on Brad's personal recollection. | ## Triage answer scoring diff --git a/services/hermes/skills/master-hermes-on-atlas/references/two-hour-proof-sprint.md b/services/hermes/skills/master-hermes-on-atlas/references/two-hour-proof-sprint.md index 98f7bbba..6db1f658 100644 --- a/services/hermes/skills/master-hermes-on-atlas/references/two-hour-proof-sprint.md +++ b/services/hermes/skills/master-hermes-on-atlas/references/two-hour-proof-sprint.md @@ -1,9 +1,11 @@ # Atlas two-hour proof sprint The sprint establishes usable, defensible evidence for the current Hermes -claims. It does not award mastery and it cannot retroactively prove historical -OpenClaw use. Brad performs the work; Hermes gives one task at a time, checks -the evidence, and withholds later answers until Brad commits to a result. +claims. It does not award mastery. Retained Git and PVC evidence establishes +the OpenClaw deployment/replacement sequence; Brad's direct experience remains +the evidence for how he personally used it. Brad performs the work; Hermes +gives one task at a time, checks the evidence, and withholds later answers until +Brad commits to a result. ## 0–15 minutes — control surface and request path @@ -70,6 +72,7 @@ and show a passing and adversarial evaluation. pipeline trigger, Flux reconcile, credential/environment change, or manual backfill. 3. Audit the interview answer sentence by sentence using `mastery-rubric.md`. + Include the retained OpenClaw commits and live PVC/no-workload state. 4. Offer to record progress only after Brad approves the write. Minimum honest outcome: @@ -78,5 +81,5 @@ Minimum honest outcome: - the established Atlas automation path and read-only boundary are explained; - one reusable writable skill is created, tested, and improved by Brad; - autonomous production mutation is not claimed; -- historical OpenClaw replacement remains unproven unless independent retained - evidence is produced. +- historical OpenClaw deployment and replacement are supported by retained Git + and PVC evidence, with personal-use details identified as Brad's testimony. From 278eb7a5ae8ea660b226a3b119266518c602b581 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 07:14:23 +0000 Subject: [PATCH 632/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index b279eb7b..9b19b35b 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.117 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.118 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.117 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.118 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index f7d22f45..e6daa8fe 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.117 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.118 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 5ae289cba9eee07af0cbe33343ca9551cd900ffa Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 07:14:32 +0000 Subject: [PATCH 633/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index bd4bf3b9..31838fec 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.117 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.118 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From a28387ffa5888d9bb88b34eeb5c388542da34bba Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 07:17:37 +0000 Subject: [PATCH 634/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 9b19b35b..bc530e3e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.117 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.118 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.117 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 42696294..7cfe6a4c 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.117 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.118 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.117 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.117" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.117" From 90489e9a72bbdaf05973be54be8c8083aea4601e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 07:19:06 +0000 Subject: [PATCH 635/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index bc530e3e..a2680920 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.118 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.117 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.118 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 7cfe6a4c..0071cb81 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.118 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.117 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.118 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.117" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.117" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From edfd8a88798b7cf761695222eb010e4342b12527 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 04:21:03 -0300 Subject: [PATCH 636/991] Deploy Cassandra 0.8.118 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index a2680920..60028d14 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-02-0.8.117-card-note-access" + cassandra.bstein.dev/redeploy: "2026-08-02-0.8.118-card-note-repair" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 0071cb81..9b0da266 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.118 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.118 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.117" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.117" + CASSANDRA_SIM_WORKER_VERSION: "0.8.118" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.118" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From f2328f12e4608b2151f5e70daefa69c08e494689 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 04:26:30 -0300 Subject: [PATCH 637/991] monitoring(gpu): attribute Jetson activity by allocation --- scripts/dashboards_render_atlas.py | 35 ++++++++++++++----- scripts/tests/test_dashboards_render_atlas.py | 6 +++- services/monitoring/dashboards/atlas-gpu.json | 4 +-- .../monitoring/dashboards/atlas-overview.json | 4 +-- .../monitoring/grafana-dashboard-gpu.yaml | 4 +-- .../grafana-dashboard-overview.yaml | 4 +-- 6 files changed, 39 insertions(+), 18 deletions(-) diff --git a/scripts/dashboards_render_atlas.py b/scripts/dashboards_render_atlas.py index 68c2d631..cda8aad1 100644 --- a/scripts/dashboards_render_atlas.py +++ b/scripts/dashboards_render_atlas.py @@ -301,16 +301,11 @@ def gpu_util_by_hostname(): GPU_RESOURCE_REGEX = "nvidia(_com_|[.]com/)gpu.*" -def gpu_node_labels(): - return f'max by (node) (kube_node_status_allocatable{{resource=~"{GPU_RESOURCE_REGEX}"}} > bool 0)' - - def gpu_requests_by_namespace_node(scope_var): return ( "sum by (namespace,node) (" f'kube_pod_container_resource_requests{{resource=~"{GPU_RESOURCE_REGEX}",{scope_var}}} ' "* on(namespace,pod) group_left(node) kube_pod_info " - f"* on(node) group_left() ({gpu_node_labels()})" ")" ) @@ -332,7 +327,8 @@ def gpu_usage_by_namespace(scope_var): def jetson_gpu_usage_by_namespace(scope_var): requests_by_ns = gpu_requests_by_namespace_node(scope_var) - total_by_node = f"sum by (node) ({requests_by_ns})" + all_requests = gpu_requests_by_namespace_node('namespace=~".*"') + total_by_node = f"sum by (node) ({all_requests})" return ( "sum by (namespace) (" f"({requests_by_ns}) / on(node) group_left() clamp_min({total_by_node}, 1) " @@ -341,6 +337,12 @@ def jetson_gpu_usage_by_namespace(scope_var): ) +def jetson_gpu_requested_nodes(): + all_requests = gpu_requests_by_namespace_node('namespace=~".*"') + requested = f"(sum by (node) ({all_requests}) > 0)" + return f"({requested}) and on(node) ({jetson_gpu_util_by_node()})" + + def namespace_share_expr(resource_expr): total = f"clamp_min(sum( {resource_expr} ), 1)" return f"100 * ( {resource_expr} ) / {total}" @@ -390,14 +392,29 @@ def gpu_total_devices_expr(): def unattributed_gpu_usage(): - legacy_total = f"(sum({legacy_gpu_util_without_process_exporter()}) or on() vector(0))" + unresolved = ( + f"({legacy_gpu_util_without_process_exporter()}) " + f"unless on(node) ({jetson_gpu_requested_nodes()})" + ) + legacy_total = f"(sum({unresolved}) or on() vector(0))" return ( f'label_replace(({legacy_total} > 0), "namespace", "unattributed", "", "")' ) def gpu_utilization_raw(scope_var): - return f"({nvidia_process_gpu_usage_by_namespace(scope_var)}) or ({unattributed_gpu_usage()})" + nvidia = ( + 'label_replace(' + f'{nvidia_process_gpu_usage_by_namespace(scope_var)}, ' + '"gpu_source", "nvidia", "", "")' + ) + jetson = ( + 'label_replace(' + f'(({jetson_gpu_usage_by_namespace(scope_var)}) > 0), ' + '"gpu_source", "jetson", "", "")' + ) + attributed = f"sum by (namespace) (({nvidia}) or ({jetson}))" + return f"({attributed}) or ({unattributed_gpu_usage()})" def gpu_pool_used_expr(scope_var): @@ -1916,7 +1933,7 @@ OVERVIEW_PANEL_DESCRIPTIONS = { "Postgres Connections Used": "Current Postgres connections; lower leaves room for apps during spikes.", "Postgres Hottest Connections": "Database with the most active connections; high values identify the pressure source.", "Namespace CPU Share": "CPU share by namespace in the selected scope; big slices show who is using compute.", - "Namespace GPU Utilization": "Current proportional share of observed GPU compute activity. Process-aware NVIDIA metrics attribute titan-22/24 work to namespaces; host is non-pod work, and Jetson titan-20/21 activity remains unattributed when process-level attribution is unavailable. The slices total 100% of compute in use now, independent of the selected dashboard time range; idle appears only when observed activity is zero.", + "Namespace GPU Utilization": "Current proportional share of observed GPU compute activity. Process-aware NVIDIA metrics attribute titan-22/24 work to namespaces and non-pod work to host. Jetson titan-20/21 compute is assigned by Kubernetes shared-GPU allocations; unallocated activity remains unattributed. The slices total 100% of compute in use now, independent of the selected dashboard time range; idle appears only when observed activity is zero.", "Namespace RAM Share": "Memory share by namespace in the selected scope; big slices show who may drive pressure.", "Worker Node CPU": "Worker CPU over time; lower is calmer, sustained high load may need rescheduling.", "Worker Node RAM": "Worker memory over time; lower is safer, sustained high use risks evictions.", diff --git a/scripts/tests/test_dashboards_render_atlas.py b/scripts/tests/test_dashboards_render_atlas.py index 99df8288..c78c897c 100644 --- a/scripts/tests/test_dashboards_render_atlas.py +++ b/scripts/tests/test_dashboards_render_atlas.py @@ -163,7 +163,10 @@ def test_overview_uses_readable_quality_power_and_gitops_panels(): assert "$__range" not in gpu_expr assert "sum by (namespace)" in gpu_expr assert 'namespace", "shared"' not in gpu_expr - assert "kube_node_labels" not in gpu_expr + assert "kube_pod_container_resource_requests" in gpu_expr + assert mod.GPU_RESOURCE_REGEX in gpu_expr + assert '"gpu_source", "nvidia"' in gpu_expr + assert '"gpu_source", "jetson"' in gpu_expr assert "100 *" in gpu_expr assert "100 -" not in gpu_expr assert 'namespace", "unattributed"' in gpu_expr @@ -171,6 +174,7 @@ def test_overview_uses_readable_quality_power_and_gitops_panels(): assert panels_by_title["Namespace GPU Utilization"]["targets"][0]["instant"] is True assert "Current proportional share" in panels_by_title["Namespace GPU Utilization"]["description"] assert "independent of the selected dashboard time range" in panels_by_title["Namespace GPU Utilization"]["description"] + assert "Kubernetes shared-GPU allocations" in panels_by_title["Namespace GPU Utilization"]["description"] def test_gpu_node_panel_prefers_stable_process_metrics_and_covers_all_gpu_families(): diff --git a/services/monitoring/dashboards/atlas-gpu.json b/services/monitoring/dashboards/atlas-gpu.json index c50bc8f5..beb788fb 100644 --- a/services/monitoring/dashboards/atlas-gpu.json +++ b/services/monitoring/dashboards/atlas-gpu.json @@ -20,7 +20,7 @@ }, "targets": [ { - "expr": "(100 * ((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) / clamp_min((sum((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)), 1)) or (label_replace(vector(100), \"namespace\", \"idle\", \"\", \"\") and on() ((sum((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)) == 0))", + "expr": "(100 * ((sum by (namespace) ((label_replace(((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0), \"gpu_source\", \"nvidia\", \"\", \"\")) or (label_replace(((sum by (namespace) ((sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",$namespace_scope_gpu} * on(namespace,pod) group_left(node) kube_pod_info )) / on(node) group_left() clamp_min(sum by (node) (sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",namespace=~\".*\"} * on(namespace,pod) group_left(node) kube_pod_info )), 1) * on(node) group_left() max by (node) (jetson_gr3d_freq_percent{node!=\"\"}))) > 0), \"gpu_source\", \"jetson\", \"\", \"\")))) or (label_replace(((sum((((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) unless on(node) (((sum by (node) (sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",namespace=~\".*\"} * on(namespace,pod) group_left(node) kube_pod_info )) > 0)) and on(node) (max by (node) (jetson_gr3d_freq_percent{node!=\"\"})))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) / clamp_min((sum((sum by (namespace) ((label_replace(((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0), \"gpu_source\", \"nvidia\", \"\", \"\")) or (label_replace(((sum by (namespace) ((sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",$namespace_scope_gpu} * on(namespace,pod) group_left(node) kube_pod_info )) / on(node) group_left() clamp_min(sum by (node) (sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",namespace=~\".*\"} * on(namespace,pod) group_left(node) kube_pod_info )), 1) * on(node) group_left() max by (node) (jetson_gr3d_freq_percent{node!=\"\"}))) > 0), \"gpu_source\", \"jetson\", \"\", \"\")))) or (label_replace(((sum((((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) unless on(node) (((sum by (node) (sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",namespace=~\".*\"} * on(namespace,pod) group_left(node) kube_pod_info )) > 0)) and on(node) (max by (node) (jetson_gr3d_freq_percent{node!=\"\"})))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)), 1)) or (label_replace(vector(100), \"namespace\", \"idle\", \"\", \"\") and on() ((sum((sum by (namespace) ((label_replace(((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0), \"gpu_source\", \"nvidia\", \"\", \"\")) or (label_replace(((sum by (namespace) ((sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",$namespace_scope_gpu} * on(namespace,pod) group_left(node) kube_pod_info )) / on(node) group_left() clamp_min(sum by (node) (sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",namespace=~\".*\"} * on(namespace,pod) group_left(node) kube_pod_info )), 1) * on(node) group_left() max by (node) (jetson_gr3d_freq_percent{node!=\"\"}))) > 0), \"gpu_source\", \"jetson\", \"\", \"\")))) or (label_replace(((sum((((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) unless on(node) (((sum by (node) (sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",namespace=~\".*\"} * on(namespace,pod) group_left(node) kube_pod_info )) > 0)) and on(node) (max by (node) (jetson_gr3d_freq_percent{node!=\"\"})))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)) == 0))", "refId": "A", "legendFormat": "{{namespace}}", "instant": true @@ -72,7 +72,7 @@ "targetBlank": false } ], - "description": "Current proportional share of observed GPU compute activity. Process-aware NVIDIA metrics attribute titan-22/24 work to namespaces; host is non-pod work, and Jetson titan-20/21 activity remains unattributed when process-level attribution is unavailable. The slices total 100% of compute in use now, independent of the selected dashboard time range; idle appears only when observed activity is zero." + "description": "Current proportional share of observed GPU compute activity. Process-aware NVIDIA metrics attribute titan-22/24 work to namespaces and non-pod work to host. Jetson titan-20/21 compute is assigned by Kubernetes shared-GPU allocations; unallocated activity remains unattributed. The slices total 100% of compute in use now, independent of the selected dashboard time range; idle appears only when observed activity is zero." }, { "id": 2, diff --git a/services/monitoring/dashboards/atlas-overview.json b/services/monitoring/dashboards/atlas-overview.json index ff74cca2..d4e5a9b7 100644 --- a/services/monitoring/dashboards/atlas-overview.json +++ b/services/monitoring/dashboards/atlas-overview.json @@ -3728,7 +3728,7 @@ }, "targets": [ { - "expr": "(100 * ((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) / clamp_min((sum((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)), 1)) or (label_replace(vector(100), \"namespace\", \"idle\", \"\", \"\") and on() ((sum((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)) == 0))", + "expr": "(100 * ((sum by (namespace) ((label_replace(((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0), \"gpu_source\", \"nvidia\", \"\", \"\")) or (label_replace(((sum by (namespace) ((sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",$namespace_scope_gpu} * on(namespace,pod) group_left(node) kube_pod_info )) / on(node) group_left() clamp_min(sum by (node) (sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",namespace=~\".*\"} * on(namespace,pod) group_left(node) kube_pod_info )), 1) * on(node) group_left() max by (node) (jetson_gr3d_freq_percent{node!=\"\"}))) > 0), \"gpu_source\", \"jetson\", \"\", \"\")))) or (label_replace(((sum((((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) unless on(node) (((sum by (node) (sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",namespace=~\".*\"} * on(namespace,pod) group_left(node) kube_pod_info )) > 0)) and on(node) (max by (node) (jetson_gr3d_freq_percent{node!=\"\"})))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) / clamp_min((sum((sum by (namespace) ((label_replace(((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0), \"gpu_source\", \"nvidia\", \"\", \"\")) or (label_replace(((sum by (namespace) ((sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",$namespace_scope_gpu} * on(namespace,pod) group_left(node) kube_pod_info )) / on(node) group_left() clamp_min(sum by (node) (sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",namespace=~\".*\"} * on(namespace,pod) group_left(node) kube_pod_info )), 1) * on(node) group_left() max by (node) (jetson_gr3d_freq_percent{node!=\"\"}))) > 0), \"gpu_source\", \"jetson\", \"\", \"\")))) or (label_replace(((sum((((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) unless on(node) (((sum by (node) (sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",namespace=~\".*\"} * on(namespace,pod) group_left(node) kube_pod_info )) > 0)) and on(node) (max by (node) (jetson_gr3d_freq_percent{node!=\"\"})))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)), 1)) or (label_replace(vector(100), \"namespace\", \"idle\", \"\", \"\") and on() ((sum((sum by (namespace) ((label_replace(((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0), \"gpu_source\", \"nvidia\", \"\", \"\")) or (label_replace(((sum by (namespace) ((sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",$namespace_scope_gpu} * on(namespace,pod) group_left(node) kube_pod_info )) / on(node) group_left() clamp_min(sum by (node) (sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",namespace=~\".*\"} * on(namespace,pod) group_left(node) kube_pod_info )), 1) * on(node) group_left() max by (node) (jetson_gr3d_freq_percent{node!=\"\"}))) > 0), \"gpu_source\", \"jetson\", \"\", \"\")))) or (label_replace(((sum((((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) unless on(node) (((sum by (node) (sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",namespace=~\".*\"} * on(namespace,pod) group_left(node) kube_pod_info )) > 0)) and on(node) (max by (node) (jetson_gr3d_freq_percent{node!=\"\"})))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)) == 0))", "refId": "A", "legendFormat": "{{namespace}}", "instant": true @@ -3780,7 +3780,7 @@ "targetBlank": false } ], - "description": "Current proportional share of observed GPU compute activity. Process-aware NVIDIA metrics attribute titan-22/24 work to namespaces; host is non-pod work, and Jetson titan-20/21 activity remains unattributed when process-level attribution is unavailable. The slices total 100% of compute in use now, independent of the selected dashboard time range; idle appears only when observed activity is zero." + "description": "Current proportional share of observed GPU compute activity. Process-aware NVIDIA metrics attribute titan-22/24 work to namespaces and non-pod work to host. Jetson titan-20/21 compute is assigned by Kubernetes shared-GPU allocations; unallocated activity remains unattributed. The slices total 100% of compute in use now, independent of the selected dashboard time range; idle appears only when observed activity is zero." }, { "id": 13, diff --git a/services/monitoring/grafana-dashboard-gpu.yaml b/services/monitoring/grafana-dashboard-gpu.yaml index fee7e538..c96c615f 100644 --- a/services/monitoring/grafana-dashboard-gpu.yaml +++ b/services/monitoring/grafana-dashboard-gpu.yaml @@ -29,7 +29,7 @@ data: }, "targets": [ { - "expr": "(100 * ((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) / clamp_min((sum((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)), 1)) or (label_replace(vector(100), \"namespace\", \"idle\", \"\", \"\") and on() ((sum((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)) == 0))", + "expr": "(100 * ((sum by (namespace) ((label_replace(((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0), \"gpu_source\", \"nvidia\", \"\", \"\")) or (label_replace(((sum by (namespace) ((sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",$namespace_scope_gpu} * on(namespace,pod) group_left(node) kube_pod_info )) / on(node) group_left() clamp_min(sum by (node) (sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",namespace=~\".*\"} * on(namespace,pod) group_left(node) kube_pod_info )), 1) * on(node) group_left() max by (node) (jetson_gr3d_freq_percent{node!=\"\"}))) > 0), \"gpu_source\", \"jetson\", \"\", \"\")))) or (label_replace(((sum((((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) unless on(node) (((sum by (node) (sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",namespace=~\".*\"} * on(namespace,pod) group_left(node) kube_pod_info )) > 0)) and on(node) (max by (node) (jetson_gr3d_freq_percent{node!=\"\"})))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) / clamp_min((sum((sum by (namespace) ((label_replace(((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0), \"gpu_source\", \"nvidia\", \"\", \"\")) or (label_replace(((sum by (namespace) ((sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",$namespace_scope_gpu} * on(namespace,pod) group_left(node) kube_pod_info )) / on(node) group_left() clamp_min(sum by (node) (sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",namespace=~\".*\"} * on(namespace,pod) group_left(node) kube_pod_info )), 1) * on(node) group_left() max by (node) (jetson_gr3d_freq_percent{node!=\"\"}))) > 0), \"gpu_source\", \"jetson\", \"\", \"\")))) or (label_replace(((sum((((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) unless on(node) (((sum by (node) (sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",namespace=~\".*\"} * on(namespace,pod) group_left(node) kube_pod_info )) > 0)) and on(node) (max by (node) (jetson_gr3d_freq_percent{node!=\"\"})))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)), 1)) or (label_replace(vector(100), \"namespace\", \"idle\", \"\", \"\") and on() ((sum((sum by (namespace) ((label_replace(((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0), \"gpu_source\", \"nvidia\", \"\", \"\")) or (label_replace(((sum by (namespace) ((sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",$namespace_scope_gpu} * on(namespace,pod) group_left(node) kube_pod_info )) / on(node) group_left() clamp_min(sum by (node) (sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",namespace=~\".*\"} * on(namespace,pod) group_left(node) kube_pod_info )), 1) * on(node) group_left() max by (node) (jetson_gr3d_freq_percent{node!=\"\"}))) > 0), \"gpu_source\", \"jetson\", \"\", \"\")))) or (label_replace(((sum((((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) unless on(node) (((sum by (node) (sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",namespace=~\".*\"} * on(namespace,pod) group_left(node) kube_pod_info )) > 0)) and on(node) (max by (node) (jetson_gr3d_freq_percent{node!=\"\"})))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)) == 0))", "refId": "A", "legendFormat": "{{namespace}}", "instant": true @@ -81,7 +81,7 @@ data: "targetBlank": false } ], - "description": "Current proportional share of observed GPU compute activity. Process-aware NVIDIA metrics attribute titan-22/24 work to namespaces; host is non-pod work, and Jetson titan-20/21 activity remains unattributed when process-level attribution is unavailable. The slices total 100% of compute in use now, independent of the selected dashboard time range; idle appears only when observed activity is zero." + "description": "Current proportional share of observed GPU compute activity. Process-aware NVIDIA metrics attribute titan-22/24 work to namespaces and non-pod work to host. Jetson titan-20/21 compute is assigned by Kubernetes shared-GPU allocations; unallocated activity remains unattributed. The slices total 100% of compute in use now, independent of the selected dashboard time range; idle appears only when observed activity is zero." }, { "id": 2, diff --git a/services/monitoring/grafana-dashboard-overview.yaml b/services/monitoring/grafana-dashboard-overview.yaml index 77b12867..bfed0763 100644 --- a/services/monitoring/grafana-dashboard-overview.yaml +++ b/services/monitoring/grafana-dashboard-overview.yaml @@ -3737,7 +3737,7 @@ data: }, "targets": [ { - "expr": "(100 * ((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) / clamp_min((sum((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)), 1)) or (label_replace(vector(100), \"namespace\", \"idle\", \"\", \"\") and on() ((sum((((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0)) or (label_replace(((sum(((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)) == 0))", + "expr": "(100 * ((sum by (namespace) ((label_replace(((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0), \"gpu_source\", \"nvidia\", \"\", \"\")) or (label_replace(((sum by (namespace) ((sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",$namespace_scope_gpu} * on(namespace,pod) group_left(node) kube_pod_info )) / on(node) group_left() clamp_min(sum by (node) (sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",namespace=~\".*\"} * on(namespace,pod) group_left(node) kube_pod_info )), 1) * on(node) group_left() max by (node) (jetson_gr3d_freq_percent{node!=\"\"}))) > 0), \"gpu_source\", \"jetson\", \"\", \"\")))) or (label_replace(((sum((((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) unless on(node) (((sum by (node) (sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",namespace=~\".*\"} * on(namespace,pod) group_left(node) kube_pod_info )) > 0)) and on(node) (max by (node) (jetson_gr3d_freq_percent{node!=\"\"})))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) / clamp_min((sum((sum by (namespace) ((label_replace(((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0), \"gpu_source\", \"nvidia\", \"\", \"\")) or (label_replace(((sum by (namespace) ((sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",$namespace_scope_gpu} * on(namespace,pod) group_left(node) kube_pod_info )) / on(node) group_left() clamp_min(sum by (node) (sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",namespace=~\".*\"} * on(namespace,pod) group_left(node) kube_pod_info )), 1) * on(node) group_left() max by (node) (jetson_gr3d_freq_percent{node!=\"\"}))) > 0), \"gpu_source\", \"jetson\", \"\", \"\")))) or (label_replace(((sum((((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) unless on(node) (((sum by (node) (sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",namespace=~\".*\"} * on(namespace,pod) group_left(node) kube_pod_info )) > 0)) and on(node) (max by (node) (jetson_gr3d_freq_percent{node!=\"\"})))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)), 1)) or (label_replace(vector(100), \"namespace\", \"idle\", \"\", \"\") and on() ((sum((sum by (namespace) ((label_replace(((sum by (namespace) (nvidia_namespace_gpu_sm_util_percent{namespace!=\"\",pod!=\"\",$namespace_scope_gpu})) > 0), \"gpu_source\", \"nvidia\", \"\", \"\")) or (label_replace(((sum by (namespace) ((sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",$namespace_scope_gpu} * on(namespace,pod) group_left(node) kube_pod_info )) / on(node) group_left() clamp_min(sum by (node) (sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",namespace=~\".*\"} * on(namespace,pod) group_left(node) kube_pod_info )), 1) * on(node) group_left() max by (node) (jetson_gr3d_freq_percent{node!=\"\"}))) > 0), \"gpu_source\", \"jetson\", \"\", \"\")))) or (label_replace(((sum((((max by (node) (nvidia_gpu_device_utilization_percent) or (avg by (node) (label_replace(label_replace(DCGM_FI_DEV_GPU_UTIL, \"pod\", \"$1\", \"Hostname\", \"(.*)\"), \"namespace\", \"monitoring\", \"\", \"\") * on(namespace,pod) group_left(node) kube_pod_info{namespace=\"monitoring\"})) unless on(node) (max by (node) (nvidia_gpu_device_utilization_percent)) or max by (node) (jetson_gr3d_freq_percent{node!=\"\"})) unless on(node) (max by (node,gpu,uuid,model) (last_over_time(nvidia_gpu_device_utilization_percent[5m]))))) unless on(node) (((sum by (node) (sum by (namespace,node) (kube_pod_container_resource_requests{resource=~\"nvidia(_com_|[.]com/)gpu.*\",namespace=~\".*\"} * on(namespace,pod) group_left(node) kube_pod_info )) > 0)) and on(node) (max by (node) (jetson_gr3d_freq_percent{node!=\"\"})))) or on() vector(0)) > 0), \"namespace\", \"unattributed\", \"\", \"\"))) or on() vector(0)) == 0))", "refId": "A", "legendFormat": "{{namespace}}", "instant": true @@ -3789,7 +3789,7 @@ data: "targetBlank": false } ], - "description": "Current proportional share of observed GPU compute activity. Process-aware NVIDIA metrics attribute titan-22/24 work to namespaces; host is non-pod work, and Jetson titan-20/21 activity remains unattributed when process-level attribution is unavailable. The slices total 100% of compute in use now, independent of the selected dashboard time range; idle appears only when observed activity is zero." + "description": "Current proportional share of observed GPU compute activity. Process-aware NVIDIA metrics attribute titan-22/24 work to namespaces and non-pod work to host. Jetson titan-20/21 compute is assigned by Kubernetes shared-GPU allocations; unallocated activity remains unattributed. The slices total 100% of compute in use now, independent of the selected dashboard time range; idle appears only when observed activity is zero." }, { "id": 13, From 61d5dc9b055448416028a95d5ffd95d98f9ff22c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 07:40:39 +0000 Subject: [PATCH 638/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 60028d14..66bc9dfc 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.118 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.119 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.118 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.119 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index e6daa8fe..a16aeaf9 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.118 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.119 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From cc7afc410611c911f945fb1e3c5dc10158ca620b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 07:41:46 +0000 Subject: [PATCH 639/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 31838fec..9d515ab9 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.118 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.119 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 32cc4397f3ee756bed4cfa17ba016bc647ff1c65 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 07:45:47 +0000 Subject: [PATCH 640/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 66bc9dfc..a9498cfe 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.118 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.119 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.118 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 9b0da266..c3c5484b 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.118 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.119 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.118 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.118" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.118" From acc7435ed8d30f47b2518d1baa921202bad30e8d Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 07:46:47 +0000 Subject: [PATCH 641/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index a9498cfe..e8bb934b 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.119 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.118 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.119 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index c3c5484b..50b69dc3 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.119 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.118 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.119 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.118" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.118" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From d4b1158092107250a32a308ae68265db5f742d0c Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 04:48:53 -0300 Subject: [PATCH 642/991] Deploy Cassandra 0.8.119 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index e8bb934b..1dd81c16 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-02-0.8.118-card-note-repair" + cassandra.bstein.dev/redeploy: "2026-08-02-0.8.119-retry-lineage" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 50b69dc3..409ab2a7 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.119 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.119 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.118" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.118" + CASSANDRA_SIM_WORKER_VERSION: "0.8.119" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.119" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From c80756f3987fb6096aa8c4cf8bbcb0f4073a2d4c Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 05:31:35 -0300 Subject: [PATCH 643/991] chore(cassandra): deploy 0.8.120 --- services/cassandra/backend-deployment.yaml | 10 +++++----- services/cassandra/configmap.yaml | 8 ++++---- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 4 files changed, 11 insertions(+), 11 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 1dd81c16..252a206f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-02-0.8.119-retry-lineage" + cassandra.bstein.dev/redeploy: "2026-08-02-0.8.120-entry-hazard-units" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.119 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.120 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.119 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.120 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -104,9 +104,9 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.119 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.120 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.119 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.120 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 409ab2a7..e90fd709 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,10 +19,10 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.119 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.119 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.119" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.119" + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.120 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.120 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_SIM_WORKER_VERSION: "0.8.120" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.120" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 9d515ab9..f5778871 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.119 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.120 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index a16aeaf9..df33a941 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.119 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.120 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From c0d77661fdc92a7203d979d5475aa236460234b2 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 08:32:05 +0000 Subject: [PATCH 644/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 8 ++++---- services/cassandra/configmap.yaml | 4 ++-- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 4 files changed, 8 insertions(+), 8 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 252a206f..29019b86 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.120 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.119 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.120 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.119 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -104,9 +104,9 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.120 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.119 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.120 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.119 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index e90fd709..9c69cf85 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,8 +19,8 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.120 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.120 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.119 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.119 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.120" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.120" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index f5778871..9d515ab9 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.120 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.119 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index df33a941..a16aeaf9 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.120 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.119 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 4685db97a7ae16908b8ef6ca915807f5f17708e1 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 08:34:23 +0000 Subject: [PATCH 645/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 29019b86..168092e2 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.119 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.120 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.119 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.120 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index a16aeaf9..df33a941 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.119 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.120 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From d9f6bb9b483adc985966691daf0a304ef57061f6 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 08:34:27 +0000 Subject: [PATCH 646/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 9d515ab9..f5778871 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.119 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.120 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 3743490a05a3763eb66a1dd92653dbdcdc1bb828 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 08:37:30 +0000 Subject: [PATCH 647/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 168092e2..2a8e6a94 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.119 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.120 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.119 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 9c69cf85..b15f5bc1 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.119 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.120 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.119 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.120" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.120" From cba32616df2cd031d64c106aba08a4adef8f1ae3 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 08:39:31 +0000 Subject: [PATCH 648/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 2a8e6a94..252a206f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.120 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.119 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.120 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index b15f5bc1..e90fd709 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.120 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.119 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.120 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.120" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.120" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 57c247d8cd1c97082f562fa5a0773a7b8ea4651f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 09:10:57 +0000 Subject: [PATCH 649/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 252a206f..5233caf9 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.120 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.121 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.120 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.121 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index df33a941..93f96848 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.120 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.121 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 41746d792f633efc87d53051c25fa01396b06e08 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 09:11:57 +0000 Subject: [PATCH 650/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index f5778871..4c1e2c97 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.120 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.121 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 4888c7215a1955fbf73bf6727398d55d34ead63c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 09:15:58 +0000 Subject: [PATCH 651/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 5233caf9..1b10cb42 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.120 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.121 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.120 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index e90fd709..1300fc4f 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.120 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.121 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.120 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.120" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.120" From 99d3c1e78b4c9fb7964462abc78c6c046109ee09 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 09:16:58 +0000 Subject: [PATCH 652/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 1b10cb42..9acee1b5 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.121 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.120 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.121 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 1300fc4f..6466d028 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.121 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.120 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.121 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.120" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.120" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 1377115cdd1a70018c84dd986133d8dd7cc5f36a Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 06:25:24 -0300 Subject: [PATCH 653/991] Deploy Cassandra 0.8.121 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 9acee1b5..9145eaba 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-02-0.8.120-entry-hazard-units" + cassandra.bstein.dev/redeploy: "2026-08-02-0.8.121-card-note-pre-retry-repair" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 6466d028..580ef270 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.121 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.121 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.120" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.120" + CASSANDRA_SIM_WORKER_VERSION: "0.8.121" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.121" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From 2c51e6e57add67e707e38093bc7235a4700e5e09 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 09:39:49 +0000 Subject: [PATCH 654/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 14ca1e3b..4f31ae25 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -20,7 +20,7 @@ resources: - ingress.yaml images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend - newTag: 0.1.1-437 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} + newTag: 0.1.1-438 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend newTag: 0.1.1-437 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: From 8293121f8f811a229a08b84d5ce5703316c4d7c1 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 09:40:38 +0000 Subject: [PATCH 655/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 4f31ae25..3de04a22 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -22,7 +22,7 @@ images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend newTag: 0.1.1-438 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend - newTag: 0.1.1-437 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} + newTag: 0.1.1-438 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: - name: chat-ai-gateway namespace: bstein-dev-home From 5ed81991bf721c836b87a32b856eb7205cb000f8 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 10:20:20 +0000 Subject: [PATCH 656/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 9145eaba..d7854803 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.121 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.122 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.121 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.122 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 93f96848..8b209788 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.121 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.122 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 03e36f7e2d5744ae49432bc03f1e05215306da41 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 10:20:44 +0000 Subject: [PATCH 657/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 4c1e2c97..eb9ec407 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.121 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.122 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 0f60dea4e2c2a84c157db3ab6806fa7fab669bf2 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 10:31:42 +0000 Subject: [PATCH 658/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index d7854803..819f7c88 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.121 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.122 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.121 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 580ef270..79bf468d 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.121 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.122 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.121 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.121" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.121" From ddeeaf08be97c1cf65e0cde95d9790cc4ad1b7c3 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 10:38:10 +0000 Subject: [PATCH 659/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 819f7c88..4cadb7f4 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.122 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.121 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.122 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 79bf468d..ffdb86f2 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.122 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.121 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.122 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.121" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.121" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From eb9b0c9b43daa2c6a7f5d8745d46182937cc0541 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 07:39:07 -0300 Subject: [PATCH 660/991] Deploy Cassandra 0.8.122 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 4cadb7f4..2c4fa8c2 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-02-0.8.121-card-note-pre-retry-repair" + cassandra.bstein.dev/redeploy: "2026-08-02-0.8.122-stale-card-note-repair" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index ffdb86f2..858c41e0 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.122 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.122 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.121" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.121" + CASSANDRA_SIM_WORKER_VERSION: "0.8.122" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.122" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From 9e675fe4e12f5b11bbe6ce1228cdbfa5ae10a80d Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 08:54:01 -0300 Subject: [PATCH 661/991] ai(hermes): prefer Codex and trim default prompts --- services/hermes-chat/configmap.yaml | 27 ++++++++++----- services/hermes-chat/deployment.yaml | 5 +-- services/hermes/configmap.yaml | 33 ++++++++++++++----- services/hermes/deployment.yaml | 7 ++-- .../dashboard/dist/index.js | 4 +-- .../master-hermes-on-atlas/agents/openai.yaml | 2 +- 6 files changed, 53 insertions(+), 25 deletions(-) diff --git a/services/hermes-chat/configmap.yaml b/services/hermes-chat/configmap.yaml index f395ffba..84d6ab63 100644 --- a/services/hermes-chat/configmap.yaml +++ b/services/hermes-chat/configmap.yaml @@ -9,20 +9,31 @@ metadata: data: config.yaml: | model: - provider: custom - default: gpt-oss:20b - model: gpt-oss:20b - context_length: 64000 - base_url: http://hermes-model-gate.hermes.svc.cluster.local:11434/v1 - api_key: ollama + provider: openai-codex + default: gpt-5.6-terra + model: gpt-5.6-terra fallback_providers: - - provider: openai-codex - model: gpt-5.4 + - provider: custom + model: gpt-oss:20b + base_url: http://hermes-model-gate.hermes.svc.cluster.local:11434/v1 + api_key: ollama agent: api_max_retries: 1 + platform_toolsets: + cli: + - clarify + - file + - terminal + - web + api_server: + - clarify + - file + - terminal + - web + skills: creation_nudge_interval: 15 external_dirs: diff --git a/services/hermes-chat/deployment.yaml b/services/hermes-chat/deployment.yaml index f608f67e..ff15c75e 100644 --- a/services/hermes-chat/deployment.yaml +++ b/services/hermes-chat/deployment.yaml @@ -20,7 +20,7 @@ spec: labels: app: hermes-chat annotations: - ai.bstein.dev/model: gpt-oss:20b with independent openai-codex fallback + ai.bstein.dev/model: openai-codex/gpt-5.6-terra with local gpt-oss:20b fallback ai.bstein.dev/role: personal-chat-research ai.bstein.dev/isolation: observer-only Kubernetes RBAC, private-service egress denied spec: @@ -182,7 +182,8 @@ spec: - name: home mountPath: /opt/data - name: tools - mountPath: /opt/data/home/.local/bin + mountPath: /usr/local/bin/kubectl + subPath: kubectl readinessProbe: httpGet: path: /api/status diff --git a/services/hermes/configmap.yaml b/services/hermes/configmap.yaml index c8818279..2af03da6 100644 --- a/services/hermes/configmap.yaml +++ b/services/hermes/configmap.yaml @@ -9,20 +9,37 @@ metadata: data: config.yaml: | model: - provider: custom - default: gpt-oss:20b - model: gpt-oss:20b - context_length: 64000 - base_url: http://hermes-model-gate.hermes.svc.cluster.local:11434/v1 - api_key: ollama + provider: openai-codex + default: gpt-5.6-terra + model: gpt-5.6-terra fallback_providers: - - provider: openai-codex - model: gpt-5.4 + - provider: custom + model: gpt-oss:20b + base_url: http://hermes-model-gate.hermes.svc.cluster.local:11434/v1 + api_key: ollama agent: api_max_retries: 1 + platform_toolsets: + cli: + - clarify + - file + - session_search + - skills + - terminal + - todo + - web + api_server: + - clarify + - file + - session_search + - skills + - terminal + - todo + - web + skills: creation_nudge_interval: 15 external_dirs: diff --git a/services/hermes/deployment.yaml b/services/hermes/deployment.yaml index 51dd6506..bee76e5b 100644 --- a/services/hermes/deployment.yaml +++ b/services/hermes/deployment.yaml @@ -20,7 +20,7 @@ spec: labels: app: hermes annotations: - ai.bstein.dev/model: gpt-oss:20b with openai-codex fallback + ai.bstein.dev/model: openai-codex/gpt-5.6-terra with local gpt-oss:20b fallback ai.bstein.dev/role: testing-triage ai.bstein.dev/placement: arm64 gateway lane (rpi5 preferred) ai.bstein.dev/config-rev: "20260802-operator-guide" @@ -100,8 +100,6 @@ spec: mountPath: /opt/data - name: config mountPath: /config - - name: tools - mountPath: /opt/data/home/.local/bin resources: requests: cpu: 25m @@ -190,7 +188,8 @@ spec: - name: home mountPath: /opt/data - name: tools - mountPath: /opt/data/home/.local/bin + mountPath: /usr/local/bin/kubectl + subPath: kubectl - name: triage-skill mountPath: /opt/data/workspace/skills/triage-titan-test-failures readOnly: true diff --git a/services/hermes/plugins/atlas-operator-guide/dashboard/dist/index.js b/services/hermes/plugins/atlas-operator-guide/dashboard/dist/index.js index 5a2ff8ce..f927802f 100644 --- a/services/hermes/plugins/atlas-operator-guide/dashboard/dist/index.js +++ b/services/hermes/plugins/atlas-operator-guide/dashboard/dist/index.js @@ -7,7 +7,7 @@ "Use $master-hermes-on-atlas to run the Atlas two-hour proof sprint.", "I will perform every setup and evidence step myself.", "Start with step 1 only, require live proof, and stop at every mutation or approval boundary.", - "First tell me to select openai-codex/gpt-5.4 if this session is using the local model." + "First confirm this session is using openai-codex/gpt-5.6-terra rather than the local fallback." ].join(" "); function OperatorGuide() { @@ -70,7 +70,7 @@ React.createElement( "ol", { className: "atlas-guide-steps" }, - React.createElement("li", null, "Open Models and select openai-codex/gpt-5.4 for the coaching session."), + React.createElement("li", null, "Confirm Models shows openai-codex/gpt-5.6-terra for the coaching session."), React.createElement("li", null, "Copy the sprint prompt, paste it into Chat, and press Enter."), React.createElement("li", null, "Complete one live triage and build one writable skill yourself.") ), diff --git a/services/hermes/skills/master-hermes-on-atlas/agents/openai.yaml b/services/hermes/skills/master-hermes-on-atlas/agents/openai.yaml index 760f152d..416c3a9e 100644 --- a/services/hermes/skills/master-hermes-on-atlas/agents/openai.yaml +++ b/services/hermes/skills/master-hermes-on-atlas/agents/openai.yaml @@ -1,4 +1,4 @@ interface: display_name: "Master Hermes on Atlas" short_description: "Practice Hermes safely on the live Atlas stack" - default_prompt: "Use $master-hermes-on-atlas to run the Atlas two-hour proof sprint. I will perform every setup and evidence step myself. Start with step 1 only, require live proof, and stop at every mutation or approval boundary. First tell me to select openai-codex/gpt-5.4 if this session is using the local model." + default_prompt: "Use $master-hermes-on-atlas to run the Atlas two-hour proof sprint. I will perform every setup and evidence step myself. Start with step 1 only, require live proof, and stop at every mutation or approval boundary. First confirm this session is using openai-codex/gpt-5.6-terra rather than the local fallback." From c77a8c2428d1faf72184ef00e8bd23ad2acae8b4 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 12:18:18 +0000 Subject: [PATCH 662/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index eb9ec407..513a3cdf 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.122 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.123 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 4f094e2ca4e1366ac2bd90d9ea0930396de6d6ff Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 12:18:23 +0000 Subject: [PATCH 663/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 2c4fa8c2..a76cd765 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.122 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.123 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.122 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.123 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 8b209788..f42601d0 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.122 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.123 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From d61507eddfc56da12ac23024da21ec2cfe118b6a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 12:21:21 +0000 Subject: [PATCH 664/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index a76cd765..3d9d8521 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.122 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.122 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.123 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 858c41e0..090ee108 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.122 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.122 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.123 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.122" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.122" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From a2a3a604f1cd7d2e6441e428243f821928ec51e4 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 12:24:06 +0000 Subject: [PATCH 665/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 3d9d8521..21e6d9ba 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.122 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.123 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.123 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 090ee108..bb289688 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.122 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.123 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.123 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.122" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.122" From 9cde098509279c0e58e873b78f7d71b8247ca965 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 09:27:01 -0300 Subject: [PATCH 666/991] Deploy Cassandra 0.8.123 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 21e6d9ba..060eca71 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-02-0.8.122-stale-card-note-repair" + cassandra.bstein.dev/redeploy: "2026-08-02-0.8.123-program-hint-coverage" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index bb289688..ff48c1ed 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.123 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.123 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.122" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.122" + CASSANDRA_SIM_WORKER_VERSION: "0.8.123" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.123" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From a92ceb1d4841db2453a679e5f52a5abe9c407272 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 13:27:28 +0000 Subject: [PATCH 667/991] chore(maintenance): automated image update --- services/maintenance/metis-configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 66a19788..9991a3a3 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -15,7 +15,7 @@ data: METIS_MAX_DEVICE_BYTES: "1000000000000" METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" - METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-264-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} + METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-265-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-264-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis From 4bac99bca46924986bedef86ee641b3a29911143 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 13:29:28 +0000 Subject: [PATCH 668/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-amd64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-amd64-daemonset.yaml b/services/maintenance/metis-sentinel-amd64-daemonset.yaml index 20e90817..cacfbd19 100644 --- a/services/maintenance/metis-sentinel-amd64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-amd64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: amd64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-264-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-265-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} imagePullPolicy: Always envFrom: - configMapRef: From 3e09f9604ae2544bb7f32ef242cd7657db3e9a1d Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 13:31:29 +0000 Subject: [PATCH 669/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- services/maintenance/metis-configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 429e8d13..a34cb283 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -54,7 +54,7 @@ images: - name: registry.bstein.dev/bstein/ariadne newTag: 0.1.0-379 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis - newTag: 0.1.0-264-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} + newTag: 0.1.0-265-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria newTag: 0.1.0-120 # {"$imagepolicy": "maintenance:soteria:tag"} configMapGenerator: diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 9991a3a3..1b7c5f8e 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -16,7 +16,7 @@ data: METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-265-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} - METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-264-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} + METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-265-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0 From 6e885a3bdb3b0d4b7aad3a33b047a9bea79a7555 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 13:31:33 +0000 Subject: [PATCH 670/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-arm64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-arm64-daemonset.yaml b/services/maintenance/metis-sentinel-arm64-daemonset.yaml index ebbb3a19..4a0c065f 100644 --- a/services/maintenance/metis-sentinel-arm64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-arm64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: arm64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-264-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-265-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} imagePullPolicy: Always envFrom: - configMapRef: From 71ee23ca865a2ceb453e5453fcdfc97eea016419 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 14:53:27 +0000 Subject: [PATCH 671/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 060eca71..a48843c3 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.123 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.124 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.123 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.124 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index f42601d0..62c62731 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.123 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.124 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From caab41270d2ca553df5ac79150fad2726e70fffc Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 14:54:27 +0000 Subject: [PATCH 672/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 513a3cdf..e4d66f6f 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.123 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.124 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From cfaf9762f555a74894057f33f7d27c801d8eed71 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 14:57:27 +0000 Subject: [PATCH 673/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index a48843c3..996f2014 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.123 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.124 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.123 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index ff48c1ed..6aebdcdc 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.123 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.124 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.123 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.123" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.123" From 6dd8e265f9bacbad2e19d6e15ac478b32f3ecbc6 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 14:59:27 +0000 Subject: [PATCH 674/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 996f2014..35c35b03 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.124 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.123 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.124 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 6aebdcdc..480c8a35 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.124 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.123 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.124 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.123" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.123" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 808d8390391286d8387b5efe583ab30c69385733 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 12:25:51 -0300 Subject: [PATCH 675/991] docs(hermes): align training with Codex-first routing --- .../skills/master-hermes-on-atlas/SKILL.md | 2 +- .../references/architecture.md | 20 ++++++++++--------- .../references/curriculum.md | 6 +++--- .../references/two-hour-proof-sprint.md | 7 ++++--- 4 files changed, 19 insertions(+), 16 deletions(-) diff --git a/services/hermes/skills/master-hermes-on-atlas/SKILL.md b/services/hermes/skills/master-hermes-on-atlas/SKILL.md index 9258a05e..e33e487a 100644 --- a/services/hermes/skills/master-hermes-on-atlas/SKILL.md +++ b/services/hermes/skills/master-hermes-on-atlas/SKILL.md @@ -11,7 +11,7 @@ substitute a lecture for a lab. ## Select the training model -Use `openai-codex/gpt-5.4` for assessments, multi-reference labs, incident +Use `openai-codex/gpt-5.6-terra` for assessments, multi-reference labs, incident grading, and skill evaluation. If the active provider is the local `gpt-oss:20b`, stop before reading the reference files and ask Brad to select Codex in Models or start a Codex-backed session. Continue locally only when Brad diff --git a/services/hermes/skills/master-hermes-on-atlas/references/architecture.md b/services/hermes/skills/master-hermes-on-atlas/references/architecture.md index e1ff0630..c35188d6 100644 --- a/services/hermes/skills/master-hermes-on-atlas/references/architecture.md +++ b/services/hermes/skills/master-hermes-on-atlas/references/architecture.md @@ -18,23 +18,25 @@ through the chat Service or Ingress. ## Inference path ```text -operator Hermes ─┐ - ├─> hermes-model-gate ─> Ollama gpt-oss:20b on titan-24 GPU -consumer Hermes ─┘ │ - └─ 503 while Wolf owns the GPU - -each instance independently ─────> openai-codex/gpt-5.4 fallback +operator Hermes ───> independently authenticated openai-codex/gpt-5.6-terra +consumer Hermes ───> independently authenticated openai-codex/gpt-5.6-terra + │ + └─ provider error or manual selection ─> hermes-model-gate + │ + ├─ Hermes owns GPU ─> Ollama gpt-oss:20b + └─ Wolf owns GPU ───> HTTP 503 ``` - The configured context length is 64,000 tokens. - `hermes-model-gate` is the stable OpenAI-compatible endpoint. - A coordination Lease stores whether Hermes or Wolf/Moonlight owns the GPU. Ariadne has narrowly scoped permission to update that Lease during handoff. -- Wolf ownership makes the gate return a deliberate unavailable response. The - Hermes gateway stays alive and can use its configured fallback. +- Wolf ownership makes the local gate return a deliberate unavailable response. + Normal interactive chat remains on its Codex primary and does not consume + titan-24 GPU resources. - The two agent pods do not consume titan-24 GPU memory. Ollama does. Agent pods are ARM gateway workloads with persistent state on separate PVCs. -- Fallback credentials are deliberately per-instance. Never copy Brad's Codex +- Codex credentials are deliberately per-instance. Never copy Brad's Codex credential store into the consumer PVC. Verify rather than memorize: diff --git a/services/hermes/skills/master-hermes-on-atlas/references/curriculum.md b/services/hermes/skills/master-hermes-on-atlas/references/curriculum.md index e39a456a..3c3364bd 100644 --- a/services/hermes/skills/master-hermes-on-atlas/references/curriculum.md +++ b/services/hermes/skills/master-hermes-on-atlas/references/curriculum.md @@ -4,7 +4,7 @@ Complete labs by evidence, not elapsed time. A focused pass can establish operational competence in several days; mastery requires repeating real triage and recovery work over multiple incidents. -Run the curriculum on `openai-codex/gpt-5.4`. Use the local model only for a +Run the curriculum on `openai-codex/gpt-5.6-terra`. Use the local model only for a deliberate comparison lab; it is not the default coach for multi-reference work. ## Phase 1: orientation and control @@ -22,8 +22,8 @@ agent to model, including the fallback branch and the consumer boundary. ### Lab 2 — Models, context, and fallback Inspect `hermes status`, `hermes fallback list`, deployment placement, and GPU -owner state. Explain why a 32K model was rejected, why the gateway remains up -when Wolf owns the GPU, and which credentials a fallback consumes. +owner state. Explain why a 32K model was rejected, why normal Codex-backed chat +remains available when Wolf owns the GPU, and when the local fallback can run. Success evidence: predict outcomes for local healthy, local slow, gate 503, invalid local response, and expired Codex authorization without changing state. diff --git a/services/hermes/skills/master-hermes-on-atlas/references/two-hour-proof-sprint.md b/services/hermes/skills/master-hermes-on-atlas/references/two-hour-proof-sprint.md index 6db1f658..ace25f92 100644 --- a/services/hermes/skills/master-hermes-on-atlas/references/two-hour-proof-sprint.md +++ b/services/hermes/skills/master-hermes-on-atlas/references/two-hour-proof-sprint.md @@ -9,12 +9,13 @@ Brad commits to a result. ## 0–15 minutes — control surface and request path -1. Have Brad select `openai-codex/gpt-5.4` for the training session. +1. Have Brad start a new session and confirm it uses + `openai-codex/gpt-5.6-terra`. 2. In the web UI, have him locate Chat, Sessions, Files, Models, Logs, Skills, Plugins, MCP, Channels, Webhooks, Cron, Profiles, Config, Keys, System, and Documentation. -3. Have him explain browser → operator agent → model gate → Ollama, including - Codex fallback and the separate consumer instance. +3. Have him explain browser → operator agent → Codex primary, including the + model-gate/Ollama fallback branch and the separate consumer instance. Evidence: Brad can identify persistent, shared, and instance-local state and can name the GPU owner check without changing it. From 89f6461d2c05473a67024c171f08cd65397fb5e4 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 16:08:57 +0000 Subject: [PATCH 676/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 35c35b03..b305dfdb 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.124 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.125 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.124 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.125 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 62c62731..e21d2247 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.124 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.125 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From d4d9118adaf75c4e3f36164d02d485cd0f0fc712 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 16:09:02 +0000 Subject: [PATCH 677/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index e4d66f6f..9071c917 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.124 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.125 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 307980f8c7187e0563feb13c0226c927697a7995 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 16:14:15 +0000 Subject: [PATCH 678/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index b305dfdb..952406e9 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.124 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.125 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.124 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 480c8a35..55224a08 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.124 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.125 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.124 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.123" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.123" From e79430ca07571b6aa5dc4c44f772e47100130005 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 16:15:00 +0000 Subject: [PATCH 679/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 952406e9..69e5a755 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.125 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.124 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.125 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 55224a08..40c0c3fd 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.125 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.124 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.125 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.123" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.123" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From f3d77b23922167ce9de0ded466147700dce79a80 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 13:18:24 -0300 Subject: [PATCH 680/991] Deploy Cassandra 0.8.125 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 69e5a755..1ffa7a68 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-02-0.8.123-program-hint-coverage" + cassandra.bstein.dev/redeploy: "2026-08-02-0.8.125-generator-observability" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 40c0c3fd..b0ad8064 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.125 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.125 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.123" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.123" + CASSANDRA_SIM_WORKER_VERSION: "0.8.125" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.125" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator @@ -33,7 +33,7 @@ data: CASSANDRA_SIM_TOLERATIONS: veles.bstein.dev/simulation=true:NoSchedule CASSANDRA_GENERATOR_WORKER_TOLERATIONS: veles.bstein.dev/simulation=true:NoSchedule CASSANDRA_SIM_ACTIVE_DEADLINE_SECONDS: "7200" - CASSANDRA_GENERATOR_WORKER_ACTIVE_DEADLINE_SECONDS: "7200" + CASSANDRA_GENERATOR_WORKER_ACTIVE_DEADLINE_SECONDS: "14400" CASSANDRA_SIM_TTL_SECONDS: "3600" CASSANDRA_GENERATOR_WORKER_TTL_SECONDS: "600" CASSANDRA_SIM_CPU_REQUEST: 500m From 57c99098b77f6cd73c432abc3958683c54e92fac Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 17:12:39 +0000 Subject: [PATCH 681/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 9071c917..d221b9ae 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.125 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.126 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 52ad4be7be6085b81642ac77d1aba3e619c7d6fd Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 17:12:45 +0000 Subject: [PATCH 682/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 1ffa7a68..50e0d35f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.125 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.126 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.125 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.126 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index e21d2247..18180e2b 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.125 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.126 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From fdb2e297b691156d599df3942ff6beb4a77c6c57 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 17:14:47 +0000 Subject: [PATCH 683/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index a34cb283..0caf1636 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-379 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-380 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-265-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From 24186416fdf95fb5c42cc0b95827f65738d33747 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 14:15:07 -0300 Subject: [PATCH 684/991] fix(hermes): stabilize operator sessions --- services/hermes/configmap.yaml | 4 ---- services/hermes/deployment.yaml | 15 +-------------- services/hermes/kustomization.yaml | 8 -------- services/hermes/oauth2-proxy.yaml | 7 +++---- 4 files changed, 4 insertions(+), 30 deletions(-) diff --git a/services/hermes/configmap.yaml b/services/hermes/configmap.yaml index 2af03da6..4f7d9196 100644 --- a/services/hermes/configmap.yaml +++ b/services/hermes/configmap.yaml @@ -45,10 +45,6 @@ data: external_dirs: - /opt/data/workspace/skills - plugins: - enabled: - - atlas-operator-guide - terminal: backend: local cwd: /opt/data/workspace diff --git a/services/hermes/deployment.yaml b/services/hermes/deployment.yaml index bee76e5b..30919e4a 100644 --- a/services/hermes/deployment.yaml +++ b/services/hermes/deployment.yaml @@ -23,7 +23,7 @@ spec: ai.bstein.dev/model: openai-codex/gpt-5.6-terra with local gpt-oss:20b fallback ai.bstein.dev/role: testing-triage ai.bstein.dev/placement: arm64 gateway lane (rpi5 preferred) - ai.bstein.dev/config-rev: "20260802-operator-guide" + ai.bstein.dev/config-rev: "20260802-session-stability" spec: serviceAccountName: hermes-triage automountServiceAccountToken: true @@ -196,9 +196,6 @@ spec: - name: mastery-skill mountPath: /opt/data/workspace/skills/master-hermes-on-atlas readOnly: true - - name: operator-guide-plugin - mountPath: /opt/data/plugins/atlas-operator-guide - readOnly: true readinessProbe: httpGet: path: /api/status @@ -255,13 +252,3 @@ spec: path: references/mastery-rubric.md - key: two-hour-proof-sprint.md path: references/two-hour-proof-sprint.md - - name: operator-guide-plugin - configMap: - name: hermes-operator-guide-plugin - items: - - key: manifest.json - path: dashboard/manifest.json - - key: index.js - path: dashboard/dist/index.js - - key: style.css - path: dashboard/dist/style.css diff --git a/services/hermes/kustomization.yaml b/services/hermes/kustomization.yaml index 0966dccc..04f07d92 100644 --- a/services/hermes/kustomization.yaml +++ b/services/hermes/kustomization.yaml @@ -41,11 +41,3 @@ configMapGenerator: - two-hour-proof-sprint.md=skills/master-hermes-on-atlas/references/two-hour-proof-sprint.md options: disableNameSuffixHash: true - - name: hermes-operator-guide-plugin - namespace: hermes - files: - - manifest.json=plugins/atlas-operator-guide/dashboard/manifest.json - - index.js=plugins/atlas-operator-guide/dashboard/dist/index.js - - style.css=plugins/atlas-operator-guide/dashboard/dist/style.css - options: - disableNameSuffixHash: true diff --git a/services/hermes/oauth2-proxy.yaml b/services/hermes/oauth2-proxy.yaml index 6cba6ffa..d9971f0d 100644 --- a/services/hermes/oauth2-proxy.yaml +++ b/services/hermes/oauth2-proxy.yaml @@ -104,12 +104,11 @@ spec: - --email-domain=* - --authenticated-emails-file=/etc/oauth2-proxy/allowed-emails - --set-xauthrequest=true - - --pass-access-token=true - - --set-authorization-header=true + - --session-cookie-minimal=true - --cookie-secure=true - --cookie-samesite=lax - - --cookie-refresh=20m - - --cookie-expire=24h + - --cookie-refresh=0 + - --cookie-expire=8h - --upstream=http://hermes.hermes.svc.cluster.local:9119 - --http-address=0.0.0.0:4180 - --skip-provider-button=true From 980a29f40706a5e2abe6068db813dbd23d92ce73 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 17:16:45 +0000 Subject: [PATCH 685/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 50e0d35f..8d6440ee 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.125 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.126 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.125 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index b0ad8064..802be954 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.125 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.126 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.125 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.125" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.125" From 96895ee9ba67d53adcb02b9db20a98e56ccf084c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 17:17:55 +0000 Subject: [PATCH 686/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 8d6440ee..cbca7d0f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.126 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.125 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.126 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 802be954..a08ca93e 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.126 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.125 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.126 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.125" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.125" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 20f93becb6fb86a518e4f0a50228da49c69c9d77 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 14:23:14 -0300 Subject: [PATCH 687/991] Deploy Cassandra 0.8.126 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index cbca7d0f..613d4836 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-02-0.8.125-generator-observability" + cassandra.bstein.dev/redeploy: "2026-08-02-0.8.126-cumulative-guide-repair" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index a08ca93e..90b52d43 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.126 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.126 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.125" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.125" + CASSANDRA_SIM_WORKER_VERSION: "0.8.126" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.126" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From cfe70c8f5b53553f879b867638163c7ce04c7de4 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 15:25:22 -0300 Subject: [PATCH 688/991] fix(hermes): stabilize consumer chat transport --- infrastructure/traefik/deployment.yaml | 16 ++++++++++++++-- .../oneoffs/hermes-access-oidc-client-job.yaml | 2 +- .../scripts/hermes_access_oidc_ensure.sh | 3 ++- 3 files changed, 17 insertions(+), 4 deletions(-) diff --git a/infrastructure/traefik/deployment.yaml b/infrastructure/traefik/deployment.yaml index 19d42465..07637544 100644 --- a/infrastructure/traefik/deployment.yaml +++ b/infrastructure/traefik/deployment.yaml @@ -4,8 +4,6 @@ items: - apiVersion: apps/v1 kind: Deployment metadata: - annotations: - deployment.kubernetes.io/revision: "4" name: traefik namespace: traefik spec: @@ -73,6 +71,14 @@ items: node-role.kubernetes.io/worker: "true" affinity: nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: hardware + operator: In + values: + - rpi5 + - rpi4 preferredDuringSchedulingIgnoredDuringExecution: - weight: 100 preference: @@ -103,6 +109,12 @@ items: operator: In values: - rpi4 + podAntiAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchLabels: + app: traefik + topologyKey: kubernetes.io/hostname restartPolicy: Always schedulerName: default-scheduler serviceAccount: atlas-traefik-ingress-controller diff --git a/services/keycloak/oneoffs/hermes-access-oidc-client-job.yaml b/services/keycloak/oneoffs/hermes-access-oidc-client-job.yaml index b189290c..a61d6c67 100644 --- a/services/keycloak/oneoffs/hermes-access-oidc-client-job.yaml +++ b/services/keycloak/oneoffs/hermes-access-oidc-client-job.yaml @@ -3,7 +3,7 @@ apiVersion: batch/v1 kind: Job metadata: - name: hermes-access-oidc-client-ensure-2 + name: hermes-access-oidc-client-ensure-3 namespace: sso spec: backoffLimit: 3 diff --git a/services/keycloak/scripts/hermes_access_oidc_ensure.sh b/services/keycloak/scripts/hermes_access_oidc_ensure.sh index ea68d2dc..5f390cf1 100755 --- a/services/keycloak/scripts/hermes_access_oidc_ensure.sh +++ b/services/keycloak/scripts/hermes_access_oidc_ensure.sh @@ -56,7 +56,8 @@ chat_payload="$(jq -nc \ baseUrl:"/", attributes:{ "pkce.code.challenge.method":"S256", - "post.logout.redirect.uris":$web_origin + "post.logout.redirect.uris":$web_origin, + "access.token.lifespan":"1200" } }')" From 141244b05a17dd1b0962e535aadf67f3fe550fcc Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 15:36:44 -0300 Subject: [PATCH 689/991] fix(hermes): reset consumer PTY session --- services/hermes-chat/deployment.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/services/hermes-chat/deployment.yaml b/services/hermes-chat/deployment.yaml index ff15c75e..6cc79203 100644 --- a/services/hermes-chat/deployment.yaml +++ b/services/hermes-chat/deployment.yaml @@ -23,6 +23,7 @@ spec: ai.bstein.dev/model: openai-codex/gpt-5.6-terra with local gpt-oss:20b fallback ai.bstein.dev/role: personal-chat-research ai.bstein.dev/isolation: observer-only Kubernetes RBAC, private-service egress denied + ai.bstein.dev/session-reset: "20260802-consumer-pty-recovery" spec: serviceAccountName: hermes-chat automountServiceAccountToken: true From 0bd9b8ed52856235709d10794c260d31e074f416 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 18:39:12 +0000 Subject: [PATCH 690/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 613d4836..ec8617f6 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.126 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.127 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.126 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.127 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 18180e2b..eb35eb84 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.126 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.127 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 766f62706dce21b6f9fb115759d60af170d9c343 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 18:39:15 +0000 Subject: [PATCH 691/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index d221b9ae..0a27a995 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.126 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.127 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 825d53370dd362f04faaa29728d77c279b44be7c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 18:42:07 +0000 Subject: [PATCH 692/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index ec8617f6..dac9c252 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.126 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.127 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.126 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 90b52d43..74de86e2 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.126 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.127 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.126 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.126" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.126" From ad799852501457e209355c91631d15656b11f00b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 18:43:35 +0000 Subject: [PATCH 693/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index dac9c252..02127b06 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.127 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.126 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.127 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 74de86e2..a7cf0a42 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.127 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.126 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.127 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.126" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.126" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 4dfcc1866c351bfb332f17d1486ac79cca46e89e Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 15:45:38 -0300 Subject: [PATCH 694/991] Deploy Cassandra 0.8.127 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 02127b06..8f128b7f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-02-0.8.126-cumulative-guide-repair" + cassandra.bstein.dev/redeploy: "2026-08-02-0.8.127-scoped-guide-claims" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index a7cf0a42..e678f1df 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.127 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.127 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.126" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.126" + CASSANDRA_SIM_WORKER_VERSION: "0.8.127" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.127" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From 5c55735c89fec23184eeb30e5420b8fdf65f0ec7 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 15:53:30 -0300 Subject: [PATCH 695/991] fix(hermes): prevent stale dashboard sockets --- dockerfiles/Dockerfile.hermes-agent | 32 ++++++++++++++++++++++++++++ services/hermes-chat/deployment.yaml | 3 ++- services/hermes/deployment.yaml | 3 ++- 3 files changed, 36 insertions(+), 2 deletions(-) create mode 100644 dockerfiles/Dockerfile.hermes-agent diff --git a/dockerfiles/Dockerfile.hermes-agent b/dockerfiles/Dockerfile.hermes-agent new file mode 100644 index 00000000..186852c6 --- /dev/null +++ b/dockerfiles/Dockerfile.hermes-agent @@ -0,0 +1,32 @@ +# syntax=docker/dockerfile:1 +# dockerfiles/Dockerfile.hermes-agent +FROM nousresearch/hermes-agent@sha256:9c841866021c54c4596849f6135717e8a4d52ba510b7f52c50aef1de1a283973 + +USER root + +# Ignore an async WebSocket-ticket result after React has already disposed the +# connection attempt. Without this guard, a stale socket can supersede the +# visible chat socket and leave the dashboard in a reconnect loop. +RUN node <<'NODE' +const fs = require("node:fs"); +const path = "/opt/hermes/web/src/pages/ChatPage.tsx"; +const source = fs.readFileSync(path, "utf8"); +const before = [ + ' const url = await api.buildWsUrl("/api/pty", params);', + ' const ws = new WebSocket(url);', +].join("\n"); +const after = [ + ' const url = await api.buildWsUrl("/api/pty", params);', + ' if (unmounting) return;', + ' const ws = new WebSocket(url);', +].join("\n"); + +if (!source.includes(before)) { + throw new Error("Hermes ChatPage WebSocket patch context changed"); +} +fs.writeFileSync(path, source.replace(before, after)); +NODE + +RUN cd /opt/hermes/web \ + && npm run build \ + && grep -Fq 'if (unmounting) return;' src/pages/ChatPage.tsx diff --git a/services/hermes-chat/deployment.yaml b/services/hermes-chat/deployment.yaml index 6cc79203..f63a235a 100644 --- a/services/hermes-chat/deployment.yaml +++ b/services/hermes-chat/deployment.yaml @@ -24,6 +24,7 @@ spec: ai.bstein.dev/role: personal-chat-research ai.bstein.dev/isolation: observer-only Kubernetes RBAC, private-service egress denied ai.bstein.dev/session-reset: "20260802-consumer-pty-recovery" + ai.bstein.dev/frontend-fix: discard disposed WebSocket ticket attempts spec: serviceAccountName: hermes-chat automountServiceAccountToken: true @@ -141,7 +142,7 @@ spec: memory: 64Mi containers: - name: hermes-chat - image: nousresearch/hermes-agent@sha256:9c841866021c54c4596849f6135717e8a4d52ba510b7f52c50aef1de1a283973 + image: registry.bstein.dev/bstein/hermes-agent@sha256:61dddd6f2f2716cc474b3d81255694de0b8f8062f059541a72fa19c780d892b4 imagePullPolicy: IfNotPresent args: - gateway diff --git a/services/hermes/deployment.yaml b/services/hermes/deployment.yaml index 30919e4a..32784e4e 100644 --- a/services/hermes/deployment.yaml +++ b/services/hermes/deployment.yaml @@ -20,6 +20,7 @@ spec: labels: app: hermes annotations: + ai.bstein.dev/frontend-fix: discard disposed WebSocket ticket attempts ai.bstein.dev/model: openai-codex/gpt-5.6-terra with local gpt-oss:20b fallback ai.bstein.dev/role: testing-triage ai.bstein.dev/placement: arm64 gateway lane (rpi5 preferred) @@ -133,7 +134,7 @@ spec: memory: 64Mi containers: - name: hermes - image: nousresearch/hermes-agent@sha256:9c841866021c54c4596849f6135717e8a4d52ba510b7f52c50aef1de1a283973 + image: registry.bstein.dev/bstein/hermes-agent@sha256:61dddd6f2f2716cc474b3d81255694de0b8f8062f059541a72fa19c780d892b4 imagePullPolicy: IfNotPresent args: - gateway From e1fed8fc7b180fa4ce29b548b27a6b218a19c9d5 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 19:15:16 +0000 Subject: [PATCH 696/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 0a27a995..944db628 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.127 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.128 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 2ee58ee1dd62b329cb1e92d92ec9eee7a2a6950d Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 19:15:20 +0000 Subject: [PATCH 697/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 8f128b7f..8aa138c7 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.127 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.128 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.127 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.128 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index eb35eb84..3b350db4 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.127 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.128 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 939715aa989748870fda8daabca34b1890e403de Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 19:18:11 +0000 Subject: [PATCH 698/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 8aa138c7..2035a3da 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.127 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.128 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.127 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index e678f1df..8dd43ce9 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.127 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.128 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.127 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.127" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.127" From b4ebad6fb25638c877e51aa61d2faddd6dda6c24 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 19:19:40 +0000 Subject: [PATCH 699/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 2035a3da..ff510d51 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.128 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.127 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.128 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 8dd43ce9..a7a4489b 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.128 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.127 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.128 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.127" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.127" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 4a479e51c74088114f404c1ef1f698fe73cb65e6 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 16:22:06 -0300 Subject: [PATCH 700/991] Deploy Cassandra 0.8.128 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index ff510d51..6fa2e017 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-02-0.8.127-scoped-guide-claims" + cassandra.bstein.dev/redeploy: "2026-08-02-0.8.128-repair-cached-guide-chunks" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index a7a4489b..b7d5b304 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.128 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.128 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.127" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.127" + CASSANDRA_SIM_WORKER_VERSION: "0.8.128" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.128" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From 723a789ddf6b20e79341645faf4c4d6c5e654818 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 16:46:21 -0300 Subject: [PATCH 701/991] fix(hermes): isolate consumer sessions --- dockerfiles/Dockerfile.hermes-agent | 70 +++++++++++++++--- dockerfiles/hermes-session-migrate.py | 101 ++++++++++++++++++++++++++ services/hermes-chat/deployment.yaml | 59 ++++++++++++--- services/hermes/deployment.yaml | 4 +- 4 files changed, 211 insertions(+), 23 deletions(-) create mode 100644 dockerfiles/hermes-session-migrate.py diff --git a/dockerfiles/Dockerfile.hermes-agent b/dockerfiles/Dockerfile.hermes-agent index 186852c6..48c016dc 100644 --- a/dockerfiles/Dockerfile.hermes-agent +++ b/dockerfiles/Dockerfile.hermes-agent @@ -4,29 +4,81 @@ FROM nousresearch/hermes-agent@sha256:9c841866021c54c4596849f6135717e8a4d52ba510 USER root -# Ignore an async WebSocket-ticket result after React has already disposed the -# connection attempt. Without this guard, a stale socket can supersede the -# visible chat socket and leave the dashboard in a reconnect loop. +# Keep dashboard chat sockets tied to the intended React mount and conversation. +# A resumed conversation needs a different PTY attachment key from a fresh chat; +# reconnects to that same conversation must keep using the same key. RUN node <<'NODE' const fs = require("node:fs"); const path = "/opt/hermes/web/src/pages/ChatPage.tsx"; -const source = fs.readFileSync(path, "utf8"); -const before = [ +let source = fs.readFileSync(path, "utf8"); +const socketBefore = [ ' const url = await api.buildWsUrl("/api/pty", params);', ' const ws = new WebSocket(url);', ].join("\n"); -const after = [ +const socketAfter = [ ' const url = await api.buildWsUrl("/api/pty", params);', ' if (unmounting) return;', ' const ws = new WebSocket(url);', ].join("\n"); +const attachBefore = ' params.attach = ptyAttachToken(forceFresh);'; +const attachAfter = [ + ' const attachScope = resumeParam', + ' ? `resume:${resumeParam}:${scopedProfile ?? ""}`', + ' : `fresh:${scopedProfile ?? ""}`;', + ' params.attach = `${ptyAttachToken(forceFresh)}:${attachScope}`;', +].join("\n"); -if (!source.includes(before)) { +if (!source.includes(socketBefore)) { throw new Error("Hermes ChatPage WebSocket patch context changed"); } -fs.writeFileSync(path, source.replace(before, after)); +if (!source.includes(attachBefore)) { + throw new Error("Hermes ChatPage PTY attachment patch context changed"); +} +source = source.replace(socketBefore, socketAfter); +source = source.replace(attachBefore, attachAfter); +fs.writeFileSync(path, source); NODE +# The upstream self-hosted OIDC plugin authenticates users but deliberately +# treats the dashboard as one shared workstation. Allow a deployment to narrow +# that workstation to an explicit OIDC subject without changing default +# behavior for the operator instance. +RUN python - <<'PY' +from pathlib import Path + +path = Path("/opt/hermes/plugins/dashboard_auth/self_hosted/__init__.py") +source = path.read_text() +before = ''' if not user_id: + raise ProviderError("ID token missing 'sub' (user_id) claim") + + email = str(claims.get("email", "") or "") +''' +after = ''' if not user_id: + raise ProviderError("ID token missing 'sub' (user_id) claim") + + allowed_user_ids = { + value.strip() + for value in os.environ.get( + "HERMES_DASHBOARD_OIDC_ALLOWED_USER_IDS", "" + ).split(",") + if value.strip() + } + if allowed_user_ids and user_id not in allowed_user_ids: + raise ProviderError("This account is not authorized for this dashboard") + + email = str(claims.get("email", "") or "") +''' +if before not in source: + raise SystemExit("Hermes self-hosted OIDC patch context changed") +path.write_text(source.replace(before, after)) +PY + +COPY dockerfiles/hermes-session-migrate.py /opt/hermes/bin/hermes-session-migrate + RUN cd /opt/hermes/web \ && npm run build \ - && grep -Fq 'if (unmounting) return;' src/pages/ChatPage.tsx + && grep -Fq 'if (unmounting) return;' src/pages/ChatPage.tsx \ + && grep -Fq 'resume:${resumeParam}' src/pages/ChatPage.tsx \ + && grep -Fq 'HERMES_DASHBOARD_OIDC_ALLOWED_USER_IDS' \ + /opt/hermes/plugins/dashboard_auth/self_hosted/__init__.py \ + && chmod 0755 /opt/hermes/bin/hermes-session-migrate diff --git a/dockerfiles/hermes-session-migrate.py b/dockerfiles/hermes-session-migrate.py new file mode 100644 index 00000000..2ba69b32 --- /dev/null +++ b/dockerfiles/hermes-session-migrate.py @@ -0,0 +1,101 @@ +#!/usr/bin/env python3 +"""Copy selected legacy Hermes sessions into an isolated user home.""" + +from __future__ import annotations + +import os +from pathlib import Path +import shutil +import sqlite3 + +from hermes_state import SessionDB + + +def _copy_if_missing(source: Path, target: Path) -> None: + """Copy one credential/config file without overwriting user state.""" + if source.is_file() and not target.exists(): + target.parent.mkdir(parents=True, exist_ok=True) + shutil.copy2(source, target) + + +def _copy_session( + source: sqlite3.Connection, + target: sqlite3.Connection, + session_id: str, + user_id: str, +) -> bool: + """Copy a session and its messages, preserving original timestamps.""" + source.row_factory = sqlite3.Row + session = source.execute( + "SELECT * FROM sessions WHERE id = ?", (session_id,) + ).fetchone() + if session is None: + return False + + columns = list(session.keys()) + values = [user_id if column == "user_id" else session[column] for column in columns] + placeholders = ", ".join("?" for _ in columns) + target.execute( + f"INSERT OR IGNORE INTO sessions ({', '.join(columns)}) " + f"VALUES ({placeholders})", + values, + ) + + message_columns = [ + row[1] for row in target.execute("PRAGMA table_info(messages)").fetchall() + ] + selected_columns = [ + column + for column in message_columns + if column in { + row[1] + for row in source.execute("PRAGMA table_info(messages)").fetchall() + } + ] + column_sql = ", ".join(selected_columns) + target.execute( + f"INSERT OR IGNORE INTO messages ({column_sql}) " + f"SELECT {column_sql} FROM source_db.messages WHERE session_id = ?", + (session_id,), + ) + return True + + +def main() -> None: + """Create the isolated home and perform the idempotent session copy.""" + source_home = Path(os.environ["HERMES_MIGRATE_SOURCE_HOME"]) + target_home = Path(os.environ["HERMES_HOME"]) + user_id = os.environ["HERMES_MIGRATE_USER_ID"].strip() + session_ids = [ + value.strip() + for value in os.environ.get("HERMES_MIGRATE_SESSION_IDS", "").split(",") + if value.strip() + ] + + target_home.mkdir(parents=True, exist_ok=True) + (target_home / "home" / ".local" / "bin").mkdir(parents=True, exist_ok=True) + (target_home / "workspace" / "skills").mkdir(parents=True, exist_ok=True) + (target_home / "logs").mkdir(parents=True, exist_ok=True) + for filename in (".env", "auth.json"): + _copy_if_missing(source_home / filename, target_home / filename) + + source_db = source_home / "state.db" + target_db = target_home / "state.db" + SessionDB(db_path=target_db).close() + copied = 0 + if source_db.is_file() and session_ids: + source = sqlite3.connect(f"file:{source_db}?mode=ro", uri=True) + target = sqlite3.connect(target_db) + target.execute("ATTACH DATABASE ? AS source_db", (str(source_db),)) + try: + with target: + for session_id in session_ids: + copied += int(_copy_session(source, target, session_id, user_id)) + finally: + target.close() + source.close() + print(f"isolated Hermes home ready; migrated_sessions={copied}") + + +if __name__ == "__main__": + main() diff --git a/services/hermes-chat/deployment.yaml b/services/hermes-chat/deployment.yaml index f63a235a..60b417f4 100644 --- a/services/hermes-chat/deployment.yaml +++ b/services/hermes-chat/deployment.yaml @@ -24,7 +24,8 @@ spec: ai.bstein.dev/role: personal-chat-research ai.bstein.dev/isolation: observer-only Kubernetes RBAC, private-service egress denied ai.bstein.dev/session-reset: "20260802-consumer-pty-recovery" - ai.bstein.dev/frontend-fix: discard disposed WebSocket ticket attempts + ai.bstein.dev/frontend-fix: scope PTY attachment by selected conversation + ai.bstein.dev/user-boundary: one OIDC subject with an isolated PVC subdirectory spec: serviceAccountName: hermes-chat automountServiceAccountToken: true @@ -75,6 +76,36 @@ spec: values: - rpi4 initContainers: + - name: migrate-user-sessions + image: registry.bstein.dev/bstein/hermes-agent@sha256:ba3e81a1cefcc178729891a7af31269e65b94a72d880f0cb144d3ddbbceaeaba + imagePullPolicy: IfNotPresent + command: + - /opt/hermes/bin/hermes-session-migrate + env: + - name: HERMES_HOME + value: /storage/users/4794ab8284a14d421eaeea3e + - name: HERMES_MIGRATE_SOURCE_HOME + value: /storage + - name: HERMES_MIGRATE_USER_ID + value: 26b56113-0ec5-40b0-be7d-c2cd862f9bbc + - name: HERMES_MIGRATE_SESSION_IDS + value: 20260802_182723_9f53f1,20260802_173527_9dc51b + securityContext: + allowPrivilegeEscalation: false + runAsUser: 10000 + runAsGroup: 10000 + seccompProfile: + type: RuntimeDefault + volumeMounts: + - name: home + mountPath: /storage + resources: + requests: + cpu: 25m + memory: 64Mi + limits: + cpu: 250m + memory: 256Mi - name: init-config image: busybox:1.37 imagePullPolicy: IfNotPresent @@ -83,17 +114,18 @@ spec: - -c - | set -eu - mkdir -p /opt/data/workspace/skills /opt/data/home/.local/bin /opt/data/logs - cp /config/config.yaml /opt/data/config.yaml - cp /config/SOUL.md /opt/data/SOUL.md - cp /config/AGENTS.md /opt/data/workspace/AGENTS.md - touch /opt/data/.env - if ! grep -q '^API_SERVER_KEY=' /opt/data/.env; then + user_home=/storage/users/4794ab8284a14d421eaeea3e + mkdir -p "${user_home}/workspace/skills" "${user_home}/home/.local/bin" "${user_home}/logs" + cp /config/config.yaml "${user_home}/config.yaml" + cp /config/SOUL.md "${user_home}/SOUL.md" + cp /config/AGENTS.md "${user_home}/workspace/AGENTS.md" + touch "${user_home}/.env" + if ! grep -q '^API_SERVER_KEY=' "${user_home}/.env"; then api_key="$(dd if=/dev/urandom bs=32 count=1 2>/dev/null | od -An -tx1 | tr -d ' \n')" - printf '\nAPI_SERVER_KEY=%s\n' "${api_key}" >> /opt/data/.env + printf '\nAPI_SERVER_KEY=%s\n' "${api_key}" >> "${user_home}/.env" fi - chmod 0600 /opt/data/.env - chown -R 10000:10000 /opt/data + chmod 0600 "${user_home}/.env" + chown -R 10000:10000 "${user_home}" securityContext: allowPrivilegeEscalation: false runAsUser: 0 @@ -102,7 +134,7 @@ spec: type: RuntimeDefault volumeMounts: - name: home - mountPath: /opt/data + mountPath: /storage - name: config mountPath: /config readOnly: true @@ -142,7 +174,7 @@ spec: memory: 64Mi containers: - name: hermes-chat - image: registry.bstein.dev/bstein/hermes-agent@sha256:61dddd6f2f2716cc474b3d81255694de0b8f8062f059541a72fa19c780d892b4 + image: registry.bstein.dev/bstein/hermes-agent@sha256:ba3e81a1cefcc178729891a7af31269e65b94a72d880f0cb144d3ddbbceaeaba imagePullPolicy: IfNotPresent args: - gateway @@ -172,6 +204,8 @@ spec: value: hermes-chat-dashboard - name: HERMES_DASHBOARD_OIDC_SCOPES value: openid profile email groups + - name: HERMES_DASHBOARD_OIDC_ALLOWED_USER_IDS + value: 26b56113-0ec5-40b0-be7d-c2cd862f9bbc - name: API_SERVER_ENABLED value: "true" - name: API_SERVER_HOST @@ -183,6 +217,7 @@ spec: volumeMounts: - name: home mountPath: /opt/data + subPath: users/4794ab8284a14d421eaeea3e - name: tools mountPath: /usr/local/bin/kubectl subPath: kubectl diff --git a/services/hermes/deployment.yaml b/services/hermes/deployment.yaml index 32784e4e..aa3e5c28 100644 --- a/services/hermes/deployment.yaml +++ b/services/hermes/deployment.yaml @@ -20,7 +20,7 @@ spec: labels: app: hermes annotations: - ai.bstein.dev/frontend-fix: discard disposed WebSocket ticket attempts + ai.bstein.dev/frontend-fix: scope PTY attachment by selected conversation ai.bstein.dev/model: openai-codex/gpt-5.6-terra with local gpt-oss:20b fallback ai.bstein.dev/role: testing-triage ai.bstein.dev/placement: arm64 gateway lane (rpi5 preferred) @@ -134,7 +134,7 @@ spec: memory: 64Mi containers: - name: hermes - image: registry.bstein.dev/bstein/hermes-agent@sha256:61dddd6f2f2716cc474b3d81255694de0b8f8062f059541a72fa19c780d892b4 + image: registry.bstein.dev/bstein/hermes-agent@sha256:ba3e81a1cefcc178729891a7af31269e65b94a72d880f0cb144d3ddbbceaeaba imagePullPolicy: IfNotPresent args: - gateway From b315e028211bde9434d329891ba4ca7da0b8c37f Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 17:00:40 -0300 Subject: [PATCH 702/991] fix(hermes): report consumer access denial --- dockerfiles/Dockerfile.hermes-agent | 86 ++++++++++++++++++++-------- services/hermes-chat/deployment.yaml | 4 +- services/hermes/deployment.yaml | 2 +- 3 files changed, 65 insertions(+), 27 deletions(-) diff --git a/dockerfiles/Dockerfile.hermes-agent b/dockerfiles/Dockerfile.hermes-agent index 48c016dc..611bcbb5 100644 --- a/dockerfiles/Dockerfile.hermes-agent +++ b/dockerfiles/Dockerfile.hermes-agent @@ -39,38 +39,76 @@ source = source.replace(attachBefore, attachAfter); fs.writeFileSync(path, source); NODE -# The upstream self-hosted OIDC plugin authenticates users but deliberately -# treats the dashboard as one shared workstation. Allow a deployment to narrow -# that workstation to an explicit OIDC subject without changing default -# behavior for the operator instance. +# The upstream OIDC gate authenticates users but deliberately treats the +# dashboard as one shared workstation. Allow a deployment to narrow that +# workstation to explicit OIDC subjects. Enforce this after normal provider +# verification so a denied account is a 403, not a misleading provider 503. RUN python - <<'PY' from pathlib import Path -path = Path("/opt/hermes/plugins/dashboard_auth/self_hosted/__init__.py") +path = Path("/opt/hermes/hermes_cli/dashboard_auth/middleware.py") source = path.read_text() -before = ''' if not user_id: - raise ProviderError("ID token missing 'sub' (user_id) claim") +helper_before = '''def _client_ip(request: Request) -> str: + fwd = request.headers.get("x-forwarded-for", "") + if fwd: + return fwd.split(",")[0].strip() + return request.client.host if request.client else "" + - email = str(claims.get("email", "") or "") ''' -after = ''' if not user_id: - raise ProviderError("ID token missing 'sub' (user_id) claim") +helper_after = helper_before + '''def _dashboard_user_allowed(session) -> bool: + """Apply an optional deployment-level OIDC-subject allowlist.""" + import os + + allowed = { + value.strip() + for value in os.environ.get( + "HERMES_DASHBOARD_OIDC_ALLOWED_USER_IDS", "" + ).split(",") + if value.strip() + } + return not allowed or session.user_id in allowed + + +def _user_forbidden_response() -> Response: + """Return an authorization failure without exposing identities.""" + return JSONResponse( + { + "error": "forbidden", + "detail": "This Atlas account is not authorized for this dashboard.", + }, + status_code=403, + ) - allowed_user_ids = { - value.strip() - for value in os.environ.get( - "HERMES_DASHBOARD_OIDC_ALLOWED_USER_IDS", "" - ).split(",") - if value.strip() - } - if allowed_user_ids and user_id not in allowed_user_ids: - raise ProviderError("This account is not authorized for this dashboard") - email = str(claims.get("email", "") or "") ''' -if before not in source: - raise SystemExit("Hermes self-hosted OIDC patch context changed") -path.write_text(source.replace(before, after)) +refresh_before = ''' new_session, refreshing_provider = refreshed + request.state.session = new_session + response = await call_next(request) +''' +refresh_after = ''' new_session, refreshing_provider = refreshed + if not _dashboard_user_allowed(new_session): + return _user_forbidden_response() + request.state.session = new_session + response = await call_next(request) +''' +final_before = ''' request.state.session = session + return await call_next(request) +''' +final_after = ''' if not _dashboard_user_allowed(session): + return _user_forbidden_response() + request.state.session = session + return await call_next(request) +''' +for before, after, label in ( + (helper_before, helper_after, "allowlist helper"), + (refresh_before, refresh_after, "refreshed session"), + (final_before, final_after, "verified session"), +): + if before not in source: + raise SystemExit(f"Hermes dashboard auth {label} patch context changed") + source = source.replace(before, after, 1) +path.write_text(source) PY COPY dockerfiles/hermes-session-migrate.py /opt/hermes/bin/hermes-session-migrate @@ -80,5 +118,5 @@ RUN cd /opt/hermes/web \ && grep -Fq 'if (unmounting) return;' src/pages/ChatPage.tsx \ && grep -Fq 'resume:${resumeParam}' src/pages/ChatPage.tsx \ && grep -Fq 'HERMES_DASHBOARD_OIDC_ALLOWED_USER_IDS' \ - /opt/hermes/plugins/dashboard_auth/self_hosted/__init__.py \ + /opt/hermes/hermes_cli/dashboard_auth/middleware.py \ && chmod 0755 /opt/hermes/bin/hermes-session-migrate diff --git a/services/hermes-chat/deployment.yaml b/services/hermes-chat/deployment.yaml index 60b417f4..ac97e8bb 100644 --- a/services/hermes-chat/deployment.yaml +++ b/services/hermes-chat/deployment.yaml @@ -77,7 +77,7 @@ spec: - rpi4 initContainers: - name: migrate-user-sessions - image: registry.bstein.dev/bstein/hermes-agent@sha256:ba3e81a1cefcc178729891a7af31269e65b94a72d880f0cb144d3ddbbceaeaba + image: registry.bstein.dev/bstein/hermes-agent@sha256:15c5c538c0b58686af2e54e10bc870b23284789d485a609349df24ed3053622f imagePullPolicy: IfNotPresent command: - /opt/hermes/bin/hermes-session-migrate @@ -174,7 +174,7 @@ spec: memory: 64Mi containers: - name: hermes-chat - image: registry.bstein.dev/bstein/hermes-agent@sha256:ba3e81a1cefcc178729891a7af31269e65b94a72d880f0cb144d3ddbbceaeaba + image: registry.bstein.dev/bstein/hermes-agent@sha256:15c5c538c0b58686af2e54e10bc870b23284789d485a609349df24ed3053622f imagePullPolicy: IfNotPresent args: - gateway diff --git a/services/hermes/deployment.yaml b/services/hermes/deployment.yaml index aa3e5c28..74d14125 100644 --- a/services/hermes/deployment.yaml +++ b/services/hermes/deployment.yaml @@ -134,7 +134,7 @@ spec: memory: 64Mi containers: - name: hermes - image: registry.bstein.dev/bstein/hermes-agent@sha256:ba3e81a1cefcc178729891a7af31269e65b94a72d880f0cb144d3ddbbceaeaba + image: registry.bstein.dev/bstein/hermes-agent@sha256:15c5c538c0b58686af2e54e10bc870b23284789d485a609349df24ed3053622f imagePullPolicy: IfNotPresent args: - gateway From f1f4deba855432f1c4141a89a114888ae3ff5587 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 17:26:58 -0300 Subject: [PATCH 703/991] feat(hermes): make cluster triage immediately usable --- services/hermes/configmap.yaml | 34 +++++++++++++++ services/hermes/deployment.yaml | 5 ++- services/hermes/rbac.yaml | 8 +++- .../triage-titan-test-failures/SKILL.md | 41 +++++++++++++++++++ services/maintenance/ariadne-deployment.yaml | 2 +- 5 files changed, 86 insertions(+), 4 deletions(-) diff --git a/services/hermes/configmap.yaml b/services/hermes/configmap.yaml index 4f7d9196..c89c7c15 100644 --- a/services/hermes/configmap.yaml +++ b/services/hermes/configmap.yaml @@ -110,6 +110,10 @@ data: read-only state. Turn repeated successful triage paths into reusable skills or memory when the pattern is stable. + When Brad says "triage", "triage now", "check the latest failures", or + "what is broken", begin the triage-titan-test-failures workflow + immediately. Do not make him choose a tool, page, or evidence source first. + Stay Flux-first. Do not mutate the cluster directly. Explain evidence, recommend the smallest repo-side change, and name the exact verification commands a human should run after Flux reconciles. @@ -119,6 +123,11 @@ data: You are Hermes running inside the Titan Kubernetes cluster as a read-only testing and operations triage assistant. + Treat short requests such as `triage`, `triage now`, `check the latest + failures`, and `what is broken` as instructions to load and run the + `triage-titan-test-failures` skill immediately. Ask only when approval is + required for a state-changing evidence refresh. + Ariadne owns deterministic evidence collection and local diagnosis. Start every testing triage by reading: @@ -152,3 +161,28 @@ data: Do not run mutating commands such as `kubectl apply`, `delete`, `scale`, `patch`, `cordon`, `uncordon`, `drain`, or `rollout restart`. Do not read Kubernetes Secret values. Draft repo changes or operator steps instead. + START-HERE.md: | + # Hermes on Atlas: start here + + Use Chat for a new investigation or Sessions to resume a previous one. + The shortest useful prompts are: + + - `Triage the latest test failure.` + - `What is broken in the cluster right now?` + - `Triage build and save the report.` + + Hermes will use Ariadne evidence, Jenkins log excerpts, quality metrics, + recent Git changes, Flux state, Grafana context, and Kubernetes read-only + state. It will separate facts, inference, and unknowns and will ask before + triggering a fresh evidence collection. + + Two real examples are already available under Sessions: + + 1. `Proof 1 - Soteria 269 SonarQube triage` + 2. `Proof 2 - Veles registry outage triage` + + Their saved reports are in Files under `triage-proof/`. + + Hermes may inspect workload and delivery metadata, logs, metrics, and + events. Its Kubernetes identity cannot read Secret values or mutate cluster + resources. Apply fixes through the titan-iac GitOps workflow after review. diff --git a/services/hermes/deployment.yaml b/services/hermes/deployment.yaml index 74d14125..b4d5154f 100644 --- a/services/hermes/deployment.yaml +++ b/services/hermes/deployment.yaml @@ -24,7 +24,7 @@ spec: ai.bstein.dev/model: openai-codex/gpt-5.6-terra with local gpt-oss:20b fallback ai.bstein.dev/role: testing-triage ai.bstein.dev/placement: arm64 gateway lane (rpi5 preferred) - ai.bstein.dev/config-rev: "20260802-session-stability" + ai.bstein.dev/config-rev: "20260802-triage-ready" spec: serviceAccountName: hermes-triage automountServiceAccountToken: true @@ -82,10 +82,11 @@ spec: - -c - | set -eu - mkdir -p /opt/data/workspace /opt/data/home/.local/bin /opt/data/logs + mkdir -p /opt/data/workspace/triage-proof /opt/data/home/.local/bin /opt/data/logs cp /config/config.yaml /opt/data/config.yaml cp /config/SOUL.md /opt/data/SOUL.md cp /config/AGENTS.md /opt/data/workspace/AGENTS.md + cp /config/START-HERE.md /opt/data/workspace/START-HERE.md touch /opt/data/.env if ! grep -q '^API_SERVER_KEY=' /opt/data/.env; then api_key="$(dd if=/dev/urandom bs=32 count=1 2>/dev/null | od -An -tx1 | tr -d ' \n')" diff --git a/services/hermes/rbac.yaml b/services/hermes/rbac.yaml index ae44ff15..bad9a4d2 100644 --- a/services/hermes/rbac.yaml +++ b/services/hermes/rbac.yaml @@ -22,6 +22,7 @@ rules: - pods - pods/log - replicationcontrollers + - serviceaccounts - services verbs: ["get", "list", "watch"] - apiGroups: ["apps"] @@ -54,6 +55,12 @@ rules: - gitrepositories - helmrepositories verbs: ["get", "list", "watch"] + - apiGroups: ["image.toolkit.fluxcd.io"] + resources: + - imagepolicies + - imagerepositories + - imageupdateautomations + verbs: ["get", "list", "watch"] --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding @@ -67,4 +74,3 @@ subjects: - kind: ServiceAccount name: hermes-triage namespace: hermes - diff --git a/services/hermes/skills/triage-titan-test-failures/SKILL.md b/services/hermes/skills/triage-titan-test-failures/SKILL.md index b1600a9e..c4a4d551 100644 --- a/services/hermes/skills/triage-titan-test-failures/SKILL.md +++ b/services/hermes/skills/triage-titan-test-failures/SKILL.md @@ -52,6 +52,47 @@ Work in this order: 5. Check Pushgateway and Grafana evidence for branch gaps, stale metrics, aliases, or missing zero-state telemetry. 6. State unknowns explicitly. Never invent a log line, metric, commit, pod condition, or root cause. +For recent Git context, map the canonical suite to its Gitea repository and +read the latest commits. The current mappings are: + +- `ananke` -> `bstein/ananke` +- `ariadne` -> `bstein/Ariadne` +- `atlasbot` -> `bstein/atlasbot` +- `bstein_home` -> `bstein/bstein-dev-home` +- `data_prepper` -> `bstein/titan-iac` +- `metis` -> `bstein/metis` +- `pegasus` -> `bstein/pegasus` +- `soteria` -> `bstein/soteria` +- `titan_iac` -> `bstein/titan-iac` + +Use the read-only Gitea API and compare commit timestamps to the failing build: + +```sh +curl -fsS "$GITEA_BASE_URL/api/v1/repos///commits?limit=10" +``` + +For quality telemetry, query VictoriaMetrics directly when the bundle is stale +or a specific label needs confirmation. URL-encode PromQL rather than manually +escaping it: + +```sh +curl -G -fsS --data-urlencode \ + 'query=platform_quality_gate_runs_total{suite=""}' \ + "$VICTORIA_METRICS_URL/api/v1/query" +curl -G -fsS --data-urlencode \ + 'query=_quality_gate_checks_total' \ + "$VICTORIA_METRICS_URL/api/v1/query" +``` + +For image-pull failures, inspect the pod event, its ServiceAccount metadata, +and Flux image objects without reading referenced Secret values: + +```sh +kubectl -n describe pod +kubectl -n get serviceaccount -o yaml +kubectl get imagerepositories,imagepolicies,imageupdateautomations -A +``` + If the latest diagnosis is unavailable, the minimum acceptable result still analyzes the deterministic bundle's failed suites, build/check evidence, freshness, and environment observations. Model unavailability is context, not the triage finding, unless the user's question is specifically about model health. Use read-only commands such as `kubectl get`, `kubectl describe`, `kubectl logs`, and HTTP GET requests. Do not read Secret values or run mutating Kubernetes, Flux, Vault, Jenkins, or Git commands. diff --git a/services/maintenance/ariadne-deployment.yaml b/services/maintenance/ariadne-deployment.yaml index 6b57cf85..d40b4a4a 100644 --- a/services/maintenance/ariadne-deployment.yaml +++ b/services/maintenance/ariadne-deployment.yaml @@ -431,7 +431,7 @@ spec: - name: ARIADNE_VM_URL value: http://victoria-metrics-single-server.monitoring.svc.cluster.local:8428 - name: ARIADNE_CLUSTER_STATE_VM_TIMEOUT_SEC - value: "5" + value: "30" - name: ARIADNE_ALERTMANAGER_URL value: http://alertmanager.monitoring.svc.cluster.local - name: OPENSEARCH_URL From 61c3c0239dcf053f74b296db1c9e1b6d243dc363 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Sun, 2 Aug 2026 20:54:01 +0000 Subject: [PATCH 704/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 0caf1636..45adcb45 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-380 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-381 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-265-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From 67debe335135fe912a5f06968576c8a0577f47fb Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 19:04:14 -0300 Subject: [PATCH 705/991] fix(hermes): remove stale Veles proof --- services/hermes/configmap.yaml | 4 ++-- services/hermes/deployment.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/hermes/configmap.yaml b/services/hermes/configmap.yaml index c89c7c15..5c5b6ef7 100644 --- a/services/hermes/configmap.yaml +++ b/services/hermes/configmap.yaml @@ -176,10 +176,10 @@ data: state. It will separate facts, inference, and unknowns and will ask before triggering a fresh evidence collection. - Two real examples are already available under Sessions: + Two validated CI examples are already available under Sessions: 1. `Proof 1 - Soteria 269 SonarQube triage` - 2. `Proof 2 - Veles registry outage triage` + 2. `Proof 3 - titan-iac 1712 retained-artifact triage` Their saved reports are in Files under `triage-proof/`. diff --git a/services/hermes/deployment.yaml b/services/hermes/deployment.yaml index b4d5154f..a50f377b 100644 --- a/services/hermes/deployment.yaml +++ b/services/hermes/deployment.yaml @@ -24,7 +24,7 @@ spec: ai.bstein.dev/model: openai-codex/gpt-5.6-terra with local gpt-oss:20b fallback ai.bstein.dev/role: testing-triage ai.bstein.dev/placement: arm64 gateway lane (rpi5 preferred) - ai.bstein.dev/config-rev: "20260802-triage-ready" + ai.bstein.dev/config-rev: "20260802-triage-proof-correction" spec: serviceAccountName: hermes-triage automountServiceAccountToken: true From 4dab530baf465d1ad0cdee42429558d6c7d75a75 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 19:36:44 -0300 Subject: [PATCH 706/991] monitoring(nodes): clamp CPU charts to physical range --- scripts/dashboards_render_atlas.py | 3 ++- scripts/tests/test_dashboards_render_atlas.py | 2 ++ services/monitoring/dashboards/atlas-nodes.json | 4 ++-- services/monitoring/dashboards/atlas-overview.json | 6 +++--- services/monitoring/grafana-dashboard-nodes.yaml | 4 ++-- services/monitoring/grafana-dashboard-overview.yaml | 6 +++--- 6 files changed, 14 insertions(+), 11 deletions(-) diff --git a/scripts/dashboards_render_atlas.py b/scripts/dashboards_render_atlas.py index cda8aad1..d80ba1c2 100644 --- a/scripts/dashboards_render_atlas.py +++ b/scripts/dashboards_render_atlas.py @@ -184,7 +184,8 @@ def scoped_node_expr(base, scope=""): def node_cpu_expr(scope=""): idle = 'avg by (instance) (rate(node_cpu_seconds_total{mode="idle"}[5m]))' - base = f"(1 - {idle}) * 100" + # Scrape stalls can briefly report an impossible idle rate after recovery. + base = f"clamp_max(clamp_min((1 - {idle}) * 100, 0), 100)" return scoped_node_expr(base, scope) diff --git a/scripts/tests/test_dashboards_render_atlas.py b/scripts/tests/test_dashboards_render_atlas.py index c78c897c..f6ad4875 100644 --- a/scripts/tests/test_dashboards_render_atlas.py +++ b/scripts/tests/test_dashboards_render_atlas.py @@ -47,6 +47,8 @@ def test_node_filter_and_expr_helpers(): cpu_expr = mod.node_cpu_expr("titan-.*") mem_expr = mod.node_mem_expr("titan-.*") assert "node_cpu_seconds_total" in cpu_expr + assert "clamp_max(clamp_min(" in cpu_expr + assert "* 100, 0), 100)" in cpu_expr assert "node_memory_MemAvailable_bytes" in mem_expr diff --git a/services/monitoring/dashboards/atlas-nodes.json b/services/monitoring/dashboards/atlas-nodes.json index ea2248e8..76467aaf 100644 --- a/services/monitoring/dashboards/atlas-nodes.json +++ b/services/monitoring/dashboards/atlas-nodes.json @@ -409,7 +409,7 @@ }, "targets": [ { - "expr": "avg by (node) (((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", + "expr": "avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", "refId": "A", "legendFormat": "{{node}}" } @@ -489,7 +489,7 @@ }, "targets": [ { - "expr": "(avg by (node) (((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", + "expr": "(avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}" } diff --git a/services/monitoring/dashboards/atlas-overview.json b/services/monitoring/dashboards/atlas-overview.json index d4e5a9b7..9a469799 100644 --- a/services/monitoring/dashboards/atlas-overview.json +++ b/services/monitoring/dashboards/atlas-overview.json @@ -518,7 +518,7 @@ }, "targets": [ { - "expr": "label_replace(topk(1, avg by (node) (((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))), \"__name__\", \"$1\", \"node\", \"(.*)\")", + "expr": "label_replace(topk(1, avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))), \"__name__\", \"$1\", \"node\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}", "instant": true @@ -3867,7 +3867,7 @@ }, "targets": [ { - "expr": "(avg by (node) (((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", + "expr": "(avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}" } @@ -3963,7 +3963,7 @@ }, "targets": [ { - "expr": "(avg by (node) (((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", + "expr": "(avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}" } diff --git a/services/monitoring/grafana-dashboard-nodes.yaml b/services/monitoring/grafana-dashboard-nodes.yaml index 4cd65e0b..becabe30 100644 --- a/services/monitoring/grafana-dashboard-nodes.yaml +++ b/services/monitoring/grafana-dashboard-nodes.yaml @@ -418,7 +418,7 @@ data: }, "targets": [ { - "expr": "avg by (node) (((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", + "expr": "avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", "refId": "A", "legendFormat": "{{node}}" } @@ -498,7 +498,7 @@ data: }, "targets": [ { - "expr": "(avg by (node) (((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", + "expr": "(avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}" } diff --git a/services/monitoring/grafana-dashboard-overview.yaml b/services/monitoring/grafana-dashboard-overview.yaml index bfed0763..a4519091 100644 --- a/services/monitoring/grafana-dashboard-overview.yaml +++ b/services/monitoring/grafana-dashboard-overview.yaml @@ -527,7 +527,7 @@ data: }, "targets": [ { - "expr": "label_replace(topk(1, avg by (node) (((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))), \"__name__\", \"$1\", \"node\", \"(.*)\")", + "expr": "label_replace(topk(1, avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))), \"__name__\", \"$1\", \"node\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}", "instant": true @@ -3876,7 +3876,7 @@ data: }, "targets": [ { - "expr": "(avg by (node) (((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", + "expr": "(avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}" } @@ -3972,7 +3972,7 @@ data: }, "targets": [ { - "expr": "(avg by (node) (((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", + "expr": "(avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}" } From c53ccf0aea7f33178211b9a9abf72164a9c6cae9 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 00:24:54 +0000 Subject: [PATCH 707/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 6fa2e017..15ead7cb 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.128 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.129 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.128 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.129 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 3b350db4..efa4ba80 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.128 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.129 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From d26cc9a4a052ebeac1cc0eea48c63e4b255bdeed Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 00:25:51 +0000 Subject: [PATCH 708/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 944db628..dce66bc0 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.128 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.129 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From dbca64e718c36027b03cbb05b93481f403fc7ebf Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 00:28:43 +0000 Subject: [PATCH 709/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 15ead7cb..e44f7f58 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.128 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.129 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.128 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index b7d5b304..640305a2 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.128 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.129 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.128 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.128" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.128" From 1888551344e5a7f0f8572ee1f9dd871e6b2d411d Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 00:30:24 +0000 Subject: [PATCH 710/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index e44f7f58..4f00d1f8 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.129 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.128 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.129 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 640305a2..0ed0c1e6 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.129 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.128 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.129 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.128" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.128" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 7238f097a75511bae9b0b4729e1778aba48e061b Mon Sep 17 00:00:00 2001 From: jenkins Date: Sun, 2 Aug 2026 21:31:40 -0300 Subject: [PATCH 711/991] Deploy Cassandra 0.8.129 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 4f00d1f8..c2eefb85 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-02-0.8.128-repair-cached-guide-chunks" + cassandra.bstein.dev/redeploy: "2026-08-02-0.8.129-typed-strategy-program" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 0ed0c1e6..f2eb5a59 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.129 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.129 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.128" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.128" + CASSANDRA_SIM_WORKER_VERSION: "0.8.129" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.129" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From 261d704f0bda4bab417c676fa621565506635656 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 01:44:02 +0000 Subject: [PATCH 712/991] chore(maintenance): automated image update --- services/maintenance/metis-configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 1b7c5f8e..97b3ec1f 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -15,7 +15,7 @@ data: METIS_MAX_DEVICE_BYTES: "1000000000000" METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" - METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-265-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} + METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-266-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-265-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis From 414c55a08a8700389d2160d2135783d34e000499 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 01:49:02 +0000 Subject: [PATCH 713/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-amd64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-amd64-daemonset.yaml b/services/maintenance/metis-sentinel-amd64-daemonset.yaml index cacfbd19..0b713466 100644 --- a/services/maintenance/metis-sentinel-amd64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-amd64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: amd64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-265-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-266-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} imagePullPolicy: Always envFrom: - configMapRef: From faa45b40a725902ec2875e650bbfbceb2163d25f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 01:51:03 +0000 Subject: [PATCH 714/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- services/maintenance/metis-configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 45adcb45..419dbd1d 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -54,7 +54,7 @@ images: - name: registry.bstein.dev/bstein/ariadne newTag: 0.1.0-381 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis - newTag: 0.1.0-265-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} + newTag: 0.1.0-266-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria newTag: 0.1.0-120 # {"$imagepolicy": "maintenance:soteria:tag"} configMapGenerator: diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 97b3ec1f..4898c616 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -16,7 +16,7 @@ data: METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-266-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} - METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-265-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} + METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-266-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0 From a93d12c37a51cb182b2eddaed76857af3823b34e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 01:51:06 +0000 Subject: [PATCH 715/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-arm64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-arm64-daemonset.yaml b/services/maintenance/metis-sentinel-arm64-daemonset.yaml index 4a0c065f..805e00d6 100644 --- a/services/maintenance/metis-sentinel-arm64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-arm64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: arm64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-265-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-266-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} imagePullPolicy: Always envFrom: - configMapRef: From be115ae70e8a82572fa54738aba777d07475c3ec Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 04:22:17 +0000 Subject: [PATCH 716/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index dce66bc0..1989bd1c 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.129 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.130 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 33675e2bf368b13821c9549c029f6627c847b0b7 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 04:22:23 +0000 Subject: [PATCH 717/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index c2eefb85..193b1363 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.129 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.130 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.129 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.130 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index efa4ba80..729d50d4 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.129 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.130 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 095fee61dec132bec36d8f84ac8741c6f901b633 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 04:26:06 +0000 Subject: [PATCH 718/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 193b1363..0e815e27 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.129 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.130 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.129 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index f2eb5a59..5cec1bc9 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.129 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.130 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.129 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.129" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.129" From 38d33872384c89e43284aa2dff662ca7b36b4818 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 04:27:49 +0000 Subject: [PATCH 719/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 0e815e27..657df7b7 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.130 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.129 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.130 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 5cec1bc9..3aefc9e5 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.130 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.129 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.130 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.129" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.129" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 8caae8a023025c9c3dc85acefd36adef72444cf4 Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 01:28:00 -0300 Subject: [PATCH 720/991] Deploy Cassandra 0.8.130 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 657df7b7..4ae77e2b 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-02-0.8.129-typed-strategy-program" + cassandra.bstein.dev/redeploy: "2026-08-03-0.8.130-hint-trust" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 3aefc9e5..8b498bb0 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.130 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.130 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.129" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.129" + CASSANDRA_SIM_WORKER_VERSION: "0.8.130" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.130" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From 6ae26d0a5b8f840f7d71f69251dfcdaf8b87982e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 05:14:36 +0000 Subject: [PATCH 721/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 419dbd1d..897aee3d 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-381 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-382 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-266-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From c7e45d68ab59e0c1226f7d957770cbcf4698a273 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 05:39:47 +0000 Subject: [PATCH 722/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 4ae77e2b..7250232e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.130 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.131 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.130 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.131 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 729d50d4..40086374 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.130 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.131 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From d8cdbc6b29ccac1c723f3148ca55134edb2e76b2 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 05:39:51 +0000 Subject: [PATCH 723/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 1989bd1c..d0e101fa 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.130 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.131 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 4e17b8733a6b710c762a101c019b86e3f561314e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 05:43:41 +0000 Subject: [PATCH 724/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 7250232e..88f0d33e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.130 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.131 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.130 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 8b498bb0..688914e3 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.130 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.131 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.130 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.130" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.130" From 46b9c5aa70ce434f76c820b33738c4bea5ab7945 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 05:44:43 +0000 Subject: [PATCH 725/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 88f0d33e..17df081c 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.131 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.130 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.131 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 688914e3..53e41cc7 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.131 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.130 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.131 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.130" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.130" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 384b4c6af74dd7386fd1d3fdbe573fe047488828 Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 02:46:36 -0300 Subject: [PATCH 726/991] Deploy Cassandra 0.8.131 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 17df081c..79587064 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-03-0.8.130-hint-trust" + cassandra.bstein.dev/redeploy: "2026-08-03-0.8.131-exact-hint-facts" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 53e41cc7..458f67a5 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.131 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.131 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.130" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.130" + CASSANDRA_SIM_WORKER_VERSION: "0.8.131" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.131" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From a00175b3769f0fb5234624d634007172d68557bb Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 03:58:37 -0300 Subject: [PATCH 727/991] feat(hermes): add actionable Atlas triage skills --- scripts/dashboards_render_atlas.py | 24 ++++--- scripts/tests/test_dashboards_render_atlas.py | 12 ++-- .../cassandra-secrets-ensure-job.yaml | 2 +- services/hermes/configmap.yaml | 63 +++++++++++++++++-- services/hermes/deployment.yaml | 29 ++++++++- services/hermes/kustomization.yaml | 16 +++++ .../agents/openai.yaml | 4 ++ .../triage-titan-test-failures/SKILL.md | 8 ++- .../tune-atlas-alerts/agents/openai.yaml | 4 ++ .../monitoring/dashboards/atlas-network.json | 2 +- .../monitoring/dashboards/atlas-nodes.json | 16 ++--- .../monitoring/dashboards/atlas-overview.json | 38 +++++------ .../monitoring/dashboards/atlas-pods.json | 6 +- .../monitoring/dashboards/atlas-storage.json | 4 +- .../monitoring/grafana-alerting-config.yaml | 18 +++--- .../monitoring/grafana-dashboard-network.yaml | 2 +- .../monitoring/grafana-dashboard-nodes.yaml | 16 ++--- .../grafana-dashboard-overview.yaml | 38 +++++------ .../monitoring/grafana-dashboard-pods.yaml | 6 +- .../monitoring/grafana-dashboard-storage.yaml | 4 +- 20 files changed, 210 insertions(+), 102 deletions(-) create mode 100644 services/hermes/skills/triage-atlas-service-health/agents/openai.yaml create mode 100644 services/hermes/skills/tune-atlas-alerts/agents/openai.yaml diff --git a/scripts/dashboards_render_atlas.py b/scripts/dashboards_render_atlas.py index d80ba1c2..033850bc 100644 --- a/scripts/dashboards_render_atlas.py +++ b/scripts/dashboards_render_atlas.py @@ -110,8 +110,6 @@ WORKER_NODES = [ "titan-06", "titan-07", "titan-08", - "titan-09", - "titan-10", "titan-11", "titan-20", "titan-21", @@ -119,7 +117,6 @@ WORKER_NODES = [ "titan-13", "titan-14", "titan-15", - "titan-16", "titan-17", "titan-18", "titan-19", @@ -435,13 +432,20 @@ def namespace_gpu_share_expr(scope_var): PROBLEM_PODS_EXPR = ( - 'sum(max by (namespace,pod) (kube_pod_status_phase{phase!~"Running|Succeeded"})) ' - "or on() vector(0)" + '((sum(max by(namespace,pod) (' + '(kube_pod_status_phase{phase="Pending",namespace!~"veles"} == 1) ' + 'and on(namespace,pod) ((time() - kube_pod_created{namespace!~"veles"}) > 900)' + ')) or on() vector(0)) + (sum(max by(namespace,pod) (' + '(kube_pod_status_phase{phase=~"Failed|Unknown",namespace!~"veles"} == 1) ' + 'unless on(namespace,pod) kube_pod_owner{owner_kind="Job"}' + ')) or on() vector(0)))' ) CRASHLOOP_EXPR = ( - 'sum(max by (namespace,pod) (kube_pod_container_status_waiting_reason' - '{reason=~"CrashLoopBackOff|ImagePullBackOff"})) ' - "or on() vector(0)" + 'sum(max by(namespace,pod) (kube_pod_container_status_waiting_reason' + '{namespace!~"veles",reason=~"CrashLoopBackOff|ImagePullBackOff"} ' + 'and on(namespace,pod) ' + '((time() - kube_pod_created{namespace!~"veles"}) > 900))) ' + 'or on() vector(0)' ) STUCK_TERMINATING_EXPR = ( 'sum(max by (namespace,pod) (' @@ -1895,8 +1899,8 @@ OVERVIEW_PANEL_DESCRIPTIONS = { "Control Plane Workloads": "Non-core pods running on control-plane nodes; zero is good because control nodes should stay focused.", "Stuck Terminating": "Pods that Kubernetes cannot finish deleting; zero is good, growth means cleanup or storage may be stuck.", "Atlas Availability (365d)": "Rolling one-year Atlas availability; higher is better, below target means users saw downtime.", - "Problem Pods": "Pods in unhealthy phases; zero is good, any count means a workload needs attention.", - "CrashLoop / ImagePull": "Pods restarting or unable to pull images; zero is good, any count usually blocks a service.", + "Problem Pods": "Current-service pods Pending for more than 15 minutes or in an actionable failed phase. Completed Jobs and retained Veles migration workloads are kept on drill-down dashboards but excluded here.", + "CrashLoop / ImagePull": "Current-service pods stuck in CrashLoopBackOff or ImagePullBackOff for more than 15 minutes. Retained Veles migration workloads remain visible on the Pods dashboard.", "Workers Ready": "Worker nodes currently Ready; full count is good, lower means less place to run services.", "Hottest node: CPU": "Highest worker CPU load right now; lower is calmer, hot nodes may need pods moved.", "Hottest node: RAM": "Highest worker memory use right now; lower is safer, high values risk evictions.", diff --git a/scripts/tests/test_dashboards_render_atlas.py b/scripts/tests/test_dashboards_render_atlas.py index f6ad4875..fea6a197 100644 --- a/scripts/tests/test_dashboards_render_atlas.py +++ b/scripts/tests/test_dashboards_render_atlas.py @@ -310,7 +310,7 @@ def test_jobs_dashboard_separates_current_gate_health_from_reliability(): suite_freshness_expr = panels_by_title["Suite Freshness (24h)"]["targets"][0]["expr"] assert "platform_quality:suite_runs:increase_24h" in suite_freshness_expr assert "max_over_time(platform_quality_gate_runs_total" not in suite_freshness_expr - assert "[30d:15m]" in panels_by_title["CI Run Success Rate (30d)"]["targets"][0]["expr"] + assert "[7d:1h]" in panels_by_title["CI Run Success Rate (7d)"]["targets"][0]["expr"] assert panels_by_title["Latest Gate Health by Suite"]["gridPos"]["w"] == 6 assert panels_by_title["CI Run Success by Suite (24h)"]["gridPos"]["w"] == 6 assert panels_by_title["Coverage by Suite (Latest, gate 95)"]["gridPos"] == {"h": 7, "w": 6, "x": 12, "y": 4} @@ -329,7 +329,7 @@ def test_jobs_dashboard_separates_current_gate_health_from_reliability(): rolling_panel = panels_by_title["CI Run Success by Suite (7d rolling)"] assert rolling_panel["type"] == "state-timeline" - assert "[7d:1m]" in rolling_panel["targets"][0]["expr"] + assert "[7d:1h]" in rolling_panel["targets"][0]["expr"] category_panel = panels_by_title["Test Category Health History"] assert category_panel["type"] == "state-timeline" assert "category" in category_panel["targets"][0]["expr"] @@ -487,12 +487,12 @@ def test_jobs_dashboard_collapses_heavy_drilldowns_for_light_first_paint(): assert "platform_quality:sonar_gate_health_percent:latest_1h" in sonar_health_panel["targets"][0]["expr"] assert "sonarqube_project_quality_gate_pass" not in sonar_health_panel["targets"][0]["expr"] - branch_panel = nested_panels_by_title["Primary Branch Clean by Suite (30d)"] - recent_branch_panel = nested_panels_by_title["Recent Branch Evidence by Suite (30d)"] + branch_panel = nested_panels_by_title["Primary Branch Clean by Suite (7d)"] + recent_branch_panel = nested_panels_by_title["Recent Branch Evidence by Suite (7d)"] assert branch_panel["gridPos"]["x"] == 12 assert recent_branch_panel["gridPos"]["x"] == 18 - assert "[30d:15m]" in recent_branch_panel["targets"][0]["expr"] - assert "[30d:15m]" in branch_panel["targets"][0]["expr"] + assert "[7d:1h]" in recent_branch_panel["targets"][0]["expr"] + assert "[7d:1h]" in branch_panel["targets"][0]["expr"] assert branch_panel["fieldConfig"]["defaults"]["unit"] == "percent" assert "unless on(suite)" in branch_panel["targets"][0]["expr"] assert "> bool 0" in branch_panel["targets"][0]["expr"] diff --git a/services/cassandra/bootstrap-jobs/cassandra-secrets-ensure-job.yaml b/services/cassandra/bootstrap-jobs/cassandra-secrets-ensure-job.yaml index 7c4b3f06..4417916f 100644 --- a/services/cassandra/bootstrap-jobs/cassandra-secrets-ensure-job.yaml +++ b/services/cassandra/bootstrap-jobs/cassandra-secrets-ensure-job.yaml @@ -8,7 +8,7 @@ metadata: name: cassandra-secrets-ensure-3 namespace: cassandra spec: - suspend: true + suspend: false backoffLimit: 0 ttlSecondsAfterFinished: 3600 template: diff --git a/services/hermes/configmap.yaml b/services/hermes/configmap.yaml index 5c5b6ef7..8344000e 100644 --- a/services/hermes/configmap.yaml +++ b/services/hermes/configmap.yaml @@ -110,9 +110,11 @@ data: read-only state. Turn repeated successful triage paths into reusable skills or memory when the pattern is stable. - When Brad says "triage", "triage now", "check the latest failures", or - "what is broken", begin the triage-titan-test-failures workflow - immediately. Do not make him choose a tool, page, or evidence source first. + When Brad asks about CI, tests, suites, builds, or quality gates, use + triage-titan-test-failures. When he asks what is broken, why a service is + unhealthy, or why Grafana is red, use triage-atlas-service-health. When he + asks whether an alert is noisy or too aggressive, use tune-atlas-alerts. + Do not make him choose a tool, page, or evidence source first. Stay Flux-first. Do not mutate the cluster directly. Explain evidence, recommend the smallest repo-side change, and name the exact verification @@ -123,9 +125,9 @@ data: You are Hermes running inside the Titan Kubernetes cluster as a read-only testing and operations triage assistant. - Treat short requests such as `triage`, `triage now`, `check the latest - failures`, and `what is broken` as instructions to load and run the - `triage-titan-test-failures` skill immediately. Ask only when approval is + Route test/build/quality-gate requests to `triage-titan-test-failures`, + service/cluster-health requests to `triage-atlas-service-health`, and noisy + Grafana alert requests to `tune-atlas-alerts`. Ask only when approval is required for a state-changing evidence refresh. Ariadne owns deterministic evidence collection and local diagnosis. Start @@ -169,6 +171,7 @@ data: - `Triage the latest test failure.` - `What is broken in the cluster right now?` + - `Why is Grafana red, and which alerts are noise?` - `Triage build and save the report.` Hermes will use Ariadne evidence, Jenkins log excerpts, quality metrics, @@ -176,6 +179,12 @@ data: state. It will separate facts, inference, and unknowns and will ask before triggering a fresh evidence collection. + Hermes now has three focused operator skills: + + 1. `triage-titan-test-failures` for all ten custom CI suites. + 2. `triage-atlas-service-health` for any live namespace or service. + 3. `tune-atlas-alerts` for evidence-backed alert and dashboard corrections. + Two validated CI examples are already available under Sessions: 1. `Proof 1 - Soteria 269 SonarQube triage` @@ -186,3 +195,45 @@ data: Hermes may inspect workload and delivery metadata, logs, metrics, and events. Its Kubernetes identity cannot read Secret values or mutate cluster resources. Apply fixes through the titan-iac GitOps workflow after review. + HERMES-CAPABILITIES.md: | + # What Hermes can do on Atlas + + ## Working now + + - Triage all custom CI suites: Ananke, Ariadne, Atlasbot, bstein_home, + data_prepper, Lesavka, Metis, Pegasus, Soteria, and titan_iac. + - Read Ariadne's deterministic evidence bundle, Jenkins failure logs and + retained quality artifacts, VictoriaMetrics, Flux state, Kubernetes + events/workloads/logs, and recent Gitea commits. + - Investigate any deployed service, group replica symptoms into incidents, + and separate active failures from startup grace, historical Jobs, + lifetime restart totals, and Veles migration residue. + - Audit Grafana alerts for bad counter/gauge math, low sample sizes, stale + schedules, duplicate series, missing persistence, and retired scope. + - Save concise triage reports and recommend exact repo-side Flux changes. + + ## Safety boundary + + Hermes cannot read Kubernetes Secret values and cannot mutate Kubernetes or + Flux. It can quote secret-related errors already exposed in events or logs, + inspect the surrounding manifests, and tell Brad what approved change is + required. This keeps cluster operation supervised. + + ## Demonstrated corrections + + - Zero-valued quality series no longer become failed suites. + - Running Jenkins builds remain in-progress instead of failed. + - Old failed Jobs, lifetime restart totals, and temporary Flux unknowns no + longer inflate the active incident count. + - Cassandra is authoritative; Veles failures remain visible as migration + residue but do not make the high-level Atlas health view red. + - Worker readiness uses the actual 18 Kubernetes workers. + - Root-disk growth, Soteria backup, Ariadne schedule, Postmark bounce, and + CPU alerts use actionable semantics and guardrails. + + ## Good next prompts + + - `Use $triage-atlas-service-health. What is broken right now?` + - `Use $triage-titan-test-failures. Triage the worst current suite.` + - `Use $tune-atlas-alerts. Audit alerts fired in the last 24 hours.` + - `Save this investigation as a reusable skill after I approve the pattern.` diff --git a/services/hermes/deployment.yaml b/services/hermes/deployment.yaml index a50f377b..9634570c 100644 --- a/services/hermes/deployment.yaml +++ b/services/hermes/deployment.yaml @@ -24,7 +24,7 @@ spec: ai.bstein.dev/model: openai-codex/gpt-5.6-terra with local gpt-oss:20b fallback ai.bstein.dev/role: testing-triage ai.bstein.dev/placement: arm64 gateway lane (rpi5 preferred) - ai.bstein.dev/config-rev: "20260802-triage-proof-correction" + ai.bstein.dev/config-rev: "20260803-service-triage-and-alert-skills" spec: serviceAccountName: hermes-triage automountServiceAccountToken: true @@ -87,6 +87,7 @@ spec: cp /config/SOUL.md /opt/data/SOUL.md cp /config/AGENTS.md /opt/data/workspace/AGENTS.md cp /config/START-HERE.md /opt/data/workspace/START-HERE.md + cp /config/HERMES-CAPABILITIES.md /opt/data/workspace/HERMES-CAPABILITIES.md touch /opt/data/.env if ! grep -q '^API_SERVER_KEY=' /opt/data/.env; then api_key="$(dd if=/dev/urandom bs=32 count=1 2>/dev/null | od -An -tx1 | tr -d ' \n')" @@ -198,6 +199,12 @@ spec: - name: mastery-skill mountPath: /opt/data/workspace/skills/master-hermes-on-atlas readOnly: true + - name: service-health-skill + mountPath: /opt/data/workspace/skills/triage-atlas-service-health + readOnly: true + - name: alert-tuning-skill + mountPath: /opt/data/workspace/skills/tune-atlas-alerts + readOnly: true readinessProbe: httpGet: path: /api/status @@ -254,3 +261,23 @@ spec: path: references/mastery-rubric.md - key: two-hour-proof-sprint.md path: references/two-hour-proof-sprint.md + - name: service-health-skill + configMap: + name: hermes-service-health-skill + items: + - key: SKILL.md + path: SKILL.md + - key: openai.yaml + path: agents/openai.yaml + - key: service-map.md + path: references/service-map.md + - name: alert-tuning-skill + configMap: + name: hermes-alert-tuning-skill + items: + - key: SKILL.md + path: SKILL.md + - key: openai.yaml + path: agents/openai.yaml + - key: alert-review.md + path: references/alert-review.md diff --git a/services/hermes/kustomization.yaml b/services/hermes/kustomization.yaml index 04f07d92..5d882e2b 100644 --- a/services/hermes/kustomization.yaml +++ b/services/hermes/kustomization.yaml @@ -41,3 +41,19 @@ configMapGenerator: - two-hour-proof-sprint.md=skills/master-hermes-on-atlas/references/two-hour-proof-sprint.md options: disableNameSuffixHash: true + - name: hermes-service-health-skill + namespace: hermes + files: + - SKILL.md=skills/triage-atlas-service-health/SKILL.md + - openai.yaml=skills/triage-atlas-service-health/agents/openai.yaml + - service-map.md=skills/triage-atlas-service-health/references/service-map.md + options: + disableNameSuffixHash: true + - name: hermes-alert-tuning-skill + namespace: hermes + files: + - SKILL.md=skills/tune-atlas-alerts/SKILL.md + - openai.yaml=skills/tune-atlas-alerts/agents/openai.yaml + - alert-review.md=skills/tune-atlas-alerts/references/alert-review.md + options: + disableNameSuffixHash: true diff --git a/services/hermes/skills/triage-atlas-service-health/agents/openai.yaml b/services/hermes/skills/triage-atlas-service-health/agents/openai.yaml new file mode 100644 index 00000000..c6b4ecc3 --- /dev/null +++ b/services/hermes/skills/triage-atlas-service-health/agents/openai.yaml @@ -0,0 +1,4 @@ +interface: + display_name: "Triage Atlas Service Health" + short_description: "Separate real Atlas incidents from dashboard noise" + default_prompt: "Use $triage-atlas-service-health to identify the active service incidents in Atlas, group duplicate symptoms, and recommend read-only checks and the smallest Flux-tracked fixes." diff --git a/services/hermes/skills/triage-titan-test-failures/SKILL.md b/services/hermes/skills/triage-titan-test-failures/SKILL.md index c4a4d551..7cd837c7 100644 --- a/services/hermes/skills/triage-titan-test-failures/SKILL.md +++ b/services/hermes/skills/triage-titan-test-failures/SKILL.md @@ -45,12 +45,13 @@ Treat Ariadne's bundle as the evidence source of truth. A local-model diagnosis Work in this order: -1. Confirm the failed suite and build are in the canonical scope: `ananke`, `ariadne`, `atlasbot`, `bstein_home`, `data_prepper`, `metis`, `pegasus`, `soteria`, or `titan_iac`. +1. Confirm the failed suite and build are in the canonical scope: `ananke`, `ariadne`, `atlasbot`, `bstein_home`, `data_prepper`, `lesavka`, `metis`, `pegasus`, `soteria`, or `titan_iac`. 2. Identify the first failed gate in the enforced order: `style`, `loc`, `coverage`, `tests`, `gate_glue`, `sonarqube`, `supply_chain`. 3. Correlate the build timestamp with retained Jenkins logs/artifacts, recent Git commits, and Flux revisions. 4. Check whether Kubernetes health, node pressure, image pulls, storage, DNS, or a shared dependency explains the failure better than a repo regression. -5. Check Pushgateway and Grafana evidence for branch gaps, stale metrics, aliases, or missing zero-state telemetry. -6. State unknowns explicitly. Never invent a log line, metric, commit, pod condition, or root cause. +5. Check Pushgateway and Grafana evidence for branch gaps, stale metrics, aliases, or missing zero-state telemetry. A zero-valued series is not a failure. +6. Keep running Jenkins builds in an in-progress collection. Do not count them as failed until Jenkins reports a terminal failure state. +7. State unknowns explicitly. Never invent a log line, metric, commit, pod condition, or root cause. For recent Git context, map the canonical suite to its Gitea repository and read the latest commits. The current mappings are: @@ -60,6 +61,7 @@ read the latest commits. The current mappings are: - `atlasbot` -> `bstein/atlasbot` - `bstein_home` -> `bstein/bstein-dev-home` - `data_prepper` -> `bstein/titan-iac` +- `lesavka` -> `bstein/lesavka` - `metis` -> `bstein/metis` - `pegasus` -> `bstein/pegasus` - `soteria` -> `bstein/soteria` diff --git a/services/hermes/skills/tune-atlas-alerts/agents/openai.yaml b/services/hermes/skills/tune-atlas-alerts/agents/openai.yaml new file mode 100644 index 00000000..fad5a07e --- /dev/null +++ b/services/hermes/skills/tune-atlas-alerts/agents/openai.yaml @@ -0,0 +1,4 @@ +interface: + display_name: "Tune Atlas Alerts" + short_description: "Make Grafana alerts actionable without hiding faults" + default_prompt: "Use $tune-atlas-alerts to audit the currently noisy Atlas alerts, prove which signals are false positives, and propose the smallest generator- or alert-rule corrections." diff --git a/services/monitoring/dashboards/atlas-network.json b/services/monitoring/dashboards/atlas-network.json index 5c057135..90ccaa6c 100644 --- a/services/monitoring/dashboards/atlas-network.json +++ b/services/monitoring/dashboards/atlas-network.json @@ -476,7 +476,7 @@ }, "targets": [ { - "expr": "avg by (node) ((sum(rate(node_network_transmit_bytes_total{device!~\"lo|cni.*|veth.*|flannel.*|docker.*|virbr.*|vxlan.*|wg.*\"}[5m])) or on() vector(0) + sum(rate(node_network_receive_bytes_total{device!~\"lo|cni.*|veth.*|flannel.*|docker.*|virbr.*|vxlan.*|wg.*\"}[5m])) or on() vector(0)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", + "expr": "avg by (node) ((sum(rate(node_network_transmit_bytes_total{device!~\"lo|cni.*|veth.*|flannel.*|docker.*|virbr.*|vxlan.*|wg.*\"}[5m])) or on() vector(0) + sum(rate(node_network_receive_bytes_total{device!~\"lo|cni.*|veth.*|flannel.*|docker.*|virbr.*|vxlan.*|wg.*\"}[5m])) or on() vector(0)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", "refId": "A", "legendFormat": "{{node}}" } diff --git a/services/monitoring/dashboards/atlas-nodes.json b/services/monitoring/dashboards/atlas-nodes.json index 76467aaf..b9320520 100644 --- a/services/monitoring/dashboards/atlas-nodes.json +++ b/services/monitoring/dashboards/atlas-nodes.json @@ -20,7 +20,7 @@ }, "targets": [ { - "expr": "sum(kube_node_status_condition{condition=\"Ready\",status=\"true\",node=~\"titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"})", + "expr": "sum(kube_node_status_condition{condition=\"Ready\",status=\"true\",node=~\"titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"})", "refId": "A" } ], @@ -46,7 +46,7 @@ "unit": "none", "custom": { "displayMode": "auto", - "valueSuffix": "/21" + "valueSuffix": "/18" } }, "overrides": [] @@ -409,7 +409,7 @@ }, "targets": [ { - "expr": "avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", + "expr": "avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", "refId": "A", "legendFormat": "{{node}}" } @@ -449,7 +449,7 @@ }, "targets": [ { - "expr": "avg by (node) ((avg by (instance) ((node_memory_MemTotal_bytes - node_memory_MemAvailable_bytes) / node_memory_MemTotal_bytes * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", + "expr": "avg by (node) ((avg by (instance) ((node_memory_MemTotal_bytes - node_memory_MemAvailable_bytes) / node_memory_MemTotal_bytes * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", "refId": "A", "legendFormat": "{{node}}" } @@ -489,7 +489,7 @@ }, "targets": [ { - "expr": "(avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", + "expr": "(avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}" } @@ -526,7 +526,7 @@ }, "targets": [ { - "expr": "(avg by (node) ((avg by (instance) ((node_memory_MemTotal_bytes - node_memory_MemAvailable_bytes) / node_memory_MemTotal_bytes * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", + "expr": "(avg by (node) ((avg by (instance) ((node_memory_MemTotal_bytes - node_memory_MemAvailable_bytes) / node_memory_MemTotal_bytes * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}" } @@ -563,7 +563,7 @@ }, "targets": [ { - "expr": "avg by (node) ((avg by (instance) ((1 - (node_filesystem_avail_bytes{mountpoint=\"/\",fstype!~\"tmpfs|overlay\"} / node_filesystem_size_bytes{mountpoint=\"/\",fstype!~\"tmpfs|overlay\"})) * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", + "expr": "avg by (node) ((avg by (instance) ((1 - (node_filesystem_avail_bytes{mountpoint=\"/\",fstype!~\"tmpfs|overlay\"} / node_filesystem_size_bytes{mountpoint=\"/\",fstype!~\"tmpfs|overlay\"})) * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", "refId": "A", "legendFormat": "{{node}}" } @@ -601,7 +601,7 @@ }, "targets": [ { - "expr": "avg by (node) ((avg by (instance) ((1 - (node_filesystem_avail_bytes{mountpoint=\"/mnt/astraios\",fstype!~\"tmpfs|overlay\"} / node_filesystem_size_bytes{mountpoint=\"/mnt/astraios\",fstype!~\"tmpfs|overlay\"})) * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", + "expr": "avg by (node) ((avg by (instance) ((1 - (node_filesystem_avail_bytes{mountpoint=\"/mnt/astraios\",fstype!~\"tmpfs|overlay\"} / node_filesystem_size_bytes{mountpoint=\"/mnt/astraios\",fstype!~\"tmpfs|overlay\"})) * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", "refId": "A", "legendFormat": "{{node}}" } diff --git a/services/monitoring/dashboards/atlas-overview.json b/services/monitoring/dashboards/atlas-overview.json index 9a469799..0f1af088 100644 --- a/services/monitoring/dashboards/atlas-overview.json +++ b/services/monitoring/dashboards/atlas-overview.json @@ -304,7 +304,7 @@ }, "targets": [ { - "expr": "sum(max by (namespace,pod) (kube_pod_status_phase{phase!~\"Running|Succeeded\"})) or on() vector(0)", + "expr": "((sum(max by(namespace,pod) ((kube_pod_status_phase{phase=\"Pending\",namespace!~\"veles\"} == 1) and on(namespace,pod) ((time() - kube_pod_created{namespace!~\"veles\"}) > 900))) or on() vector(0)) + (sum(max by(namespace,pod) ((kube_pod_status_phase{phase=~\"Failed|Unknown\",namespace!~\"veles\"} == 1) unless on(namespace,pod) kube_pod_owner{owner_kind=\"Job\"})) or on() vector(0)))", "refId": "A" } ], @@ -362,7 +362,7 @@ "targetBlank": true } ], - "description": "Pods in unhealthy phases; zero is good, any count means a workload needs attention." + "description": "Current-service pods Pending for more than 15 minutes or in an actionable failed phase. Completed Jobs and retained Veles migration workloads are kept on drill-down dashboards but excluded here." }, { "id": 6, @@ -380,7 +380,7 @@ }, "targets": [ { - "expr": "sum(max by (namespace,pod) (kube_pod_container_status_waiting_reason{reason=~\"CrashLoopBackOff|ImagePullBackOff\"})) or on() vector(0)", + "expr": "sum(max by(namespace,pod) (kube_pod_container_status_waiting_reason{namespace!~\"veles\",reason=~\"CrashLoopBackOff|ImagePullBackOff\"} and on(namespace,pod) ((time() - kube_pod_created{namespace!~\"veles\"}) > 900))) or on() vector(0)", "refId": "A" } ], @@ -438,7 +438,7 @@ "targetBlank": true } ], - "description": "Pods restarting or unable to pull images; zero is good, any count usually blocks a service." + "description": "Current-service pods stuck in CrashLoopBackOff or ImagePullBackOff for more than 15 minutes. Retained Veles migration workloads remain visible on the Pods dashboard." }, { "id": 1, @@ -456,14 +456,14 @@ }, "targets": [ { - "expr": "sum(kube_node_status_condition{condition=\"Ready\",status=\"true\",node=~\"titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"})", + "expr": "sum(kube_node_status_condition{condition=\"Ready\",status=\"true\",node=~\"titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"})", "refId": "A" } ], "fieldConfig": { "defaults": { "min": 0, - "max": 21, + "max": 18, "thresholds": { "mode": "absolute", "steps": [ @@ -473,15 +473,15 @@ }, { "color": "dark-orange", - "value": 19 + "value": 16 }, { "color": "dark-yellow", - "value": 20 + "value": 17 }, { "color": "dark-green", - "value": 21 + "value": 18 } ] } @@ -518,7 +518,7 @@ }, "targets": [ { - "expr": "label_replace(topk(1, avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))), \"__name__\", \"$1\", \"node\", \"(.*)\")", + "expr": "label_replace(topk(1, avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))), \"__name__\", \"$1\", \"node\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}", "instant": true @@ -596,7 +596,7 @@ }, "targets": [ { - "expr": "label_replace(topk(1, avg by (node) ((avg by (instance) ((node_memory_MemTotal_bytes - node_memory_MemAvailable_bytes) / node_memory_MemTotal_bytes * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))), \"__name__\", \"$1\", \"node\", \"(.*)\")", + "expr": "label_replace(topk(1, avg by (node) ((avg by (instance) ((node_memory_MemTotal_bytes - node_memory_MemAvailable_bytes) / node_memory_MemTotal_bytes * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))), \"__name__\", \"$1\", \"node\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}", "instant": true @@ -674,7 +674,7 @@ }, "targets": [ { - "expr": "label_replace(topk(1, avg by (node) ((sum by (instance) (rate(node_network_receive_bytes_total{device!~\"lo\"}[5m]) + rate(node_network_transmit_bytes_total{device!~\"lo\"}[5m]))) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))), \"__name__\", \"$1\", \"node\", \"(.*)\")", + "expr": "label_replace(topk(1, avg by (node) ((sum by (instance) (rate(node_network_receive_bytes_total{device!~\"lo\"}[5m]) + rate(node_network_transmit_bytes_total{device!~\"lo\"}[5m]))) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))), \"__name__\", \"$1\", \"node\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}", "instant": true @@ -744,7 +744,7 @@ }, "targets": [ { - "expr": "label_replace(topk(1, avg by (node) ((sum by (instance) (rate(node_disk_read_bytes_total[5m]) + rate(node_disk_written_bytes_total[5m]))) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))), \"__name__\", \"$1\", \"node\", \"(.*)\")", + "expr": "label_replace(topk(1, avg by (node) ((sum by (instance) (rate(node_disk_read_bytes_total[5m]) + rate(node_disk_written_bytes_total[5m]))) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))), \"__name__\", \"$1\", \"node\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}", "instant": true @@ -3867,7 +3867,7 @@ }, "targets": [ { - "expr": "(avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", + "expr": "(avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}" } @@ -3915,7 +3915,7 @@ }, "targets": [ { - "expr": "(avg by (node) ((avg by (instance) ((node_memory_MemTotal_bytes - node_memory_MemAvailable_bytes) / node_memory_MemTotal_bytes * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", + "expr": "(avg by (node) ((avg by (instance) ((node_memory_MemTotal_bytes - node_memory_MemAvailable_bytes) / node_memory_MemTotal_bytes * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}" } @@ -3963,7 +3963,7 @@ }, "targets": [ { - "expr": "(avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", + "expr": "(avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}" } @@ -4001,7 +4001,7 @@ }, "targets": [ { - "expr": "(avg by (node) ((avg by (instance) ((node_memory_MemTotal_bytes - node_memory_MemAvailable_bytes) / node_memory_MemTotal_bytes * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", + "expr": "(avg by (node) ((avg by (instance) ((node_memory_MemTotal_bytes - node_memory_MemAvailable_bytes) / node_memory_MemTotal_bytes * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}" } @@ -4308,7 +4308,7 @@ }, "targets": [ { - "expr": "avg by (node) ((avg by (instance) ((1 - (node_filesystem_avail_bytes{mountpoint=\"/\",fstype!~\"tmpfs|overlay\"} / node_filesystem_size_bytes{mountpoint=\"/\",fstype!~\"tmpfs|overlay\"})) * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", + "expr": "avg by (node) ((avg by (instance) ((1 - (node_filesystem_avail_bytes{mountpoint=\"/\",fstype!~\"tmpfs|overlay\"} / node_filesystem_size_bytes{mountpoint=\"/\",fstype!~\"tmpfs|overlay\"})) * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", "refId": "A", "legendFormat": "{{node}}" } @@ -4357,7 +4357,7 @@ }, "targets": [ { - "expr": "avg by (node) ((avg by (instance) ((1 - (node_filesystem_avail_bytes{mountpoint=\"/mnt/astraios\",fstype!~\"tmpfs|overlay\"} / node_filesystem_size_bytes{mountpoint=\"/mnt/astraios\",fstype!~\"tmpfs|overlay\"})) * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", + "expr": "avg by (node) ((avg by (instance) ((1 - (node_filesystem_avail_bytes{mountpoint=\"/mnt/astraios\",fstype!~\"tmpfs|overlay\"} / node_filesystem_size_bytes{mountpoint=\"/mnt/astraios\",fstype!~\"tmpfs|overlay\"})) * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", "refId": "A", "legendFormat": "{{node}}" } diff --git a/services/monitoring/dashboards/atlas-pods.json b/services/monitoring/dashboards/atlas-pods.json index 648873c8..e3f06b0f 100644 --- a/services/monitoring/dashboards/atlas-pods.json +++ b/services/monitoring/dashboards/atlas-pods.json @@ -20,7 +20,7 @@ }, "targets": [ { - "expr": "sum(max by (namespace,pod) (kube_pod_status_phase{phase!~\"Running|Succeeded\"})) or on() vector(0)", + "expr": "((sum(max by(namespace,pod) ((kube_pod_status_phase{phase=\"Pending\",namespace!~\"veles\"} == 1) and on(namespace,pod) ((time() - kube_pod_created{namespace!~\"veles\"}) > 900))) or on() vector(0)) + (sum(max by(namespace,pod) ((kube_pod_status_phase{phase=~\"Failed|Unknown\",namespace!~\"veles\"} == 1) unless on(namespace,pod) kube_pod_owner{owner_kind=\"Job\"})) or on() vector(0)))", "refId": "A" } ], @@ -80,7 +80,7 @@ }, "targets": [ { - "expr": "sum(max by (namespace,pod) (kube_pod_container_status_waiting_reason{reason=~\"CrashLoopBackOff|ImagePullBackOff\"})) or on() vector(0)", + "expr": "sum(max by(namespace,pod) (kube_pod_container_status_waiting_reason{namespace!~\"veles\",reason=~\"CrashLoopBackOff|ImagePullBackOff\"} and on(namespace,pod) ((time() - kube_pod_created{namespace!~\"veles\"}) > 900))) or on() vector(0)", "refId": "A" } ], @@ -523,7 +523,7 @@ }, "targets": [ { - "expr": "(sum by (namespace,node) (kube_pod_info{pod!=\"\" , node!=\"\"}) / on(namespace) group_left() clamp_min(sum by (namespace) (kube_pod_info{pod!=\"\"}), 1) * 100) * on(namespace,node) group_left() ((sum by (namespace,node) (kube_pod_info{pod!=\"\" , node!=\"\"}) / on(namespace) group_left() clamp_min(sum by (namespace) (kube_pod_info{pod!=\"\"}), 1) * 100) + on(node) group_left() ((sum by (node) (kube_node_info{node=\"titan-0a\"}) * 0 + 0.001) or (sum by (node) (kube_node_info{node=\"titan-0b\"}) * 0 + 0.002) or (sum by (node) (kube_node_info{node=\"titan-0c\"}) * 0 + 0.003) or (sum by (node) (kube_node_info{node=\"titan-db\"}) * 0 + 0.004) or (sum by (node) (kube_node_info{node=\"titan-jh\"}) * 0 + 0.005) or (sum by (node) (kube_node_info{node=\"titan-04\"}) * 0 + 0.006) or (sum by (node) (kube_node_info{node=\"titan-05\"}) * 0 + 0.007) or (sum by (node) (kube_node_info{node=\"titan-06\"}) * 0 + 0.008) or (sum by (node) (kube_node_info{node=\"titan-07\"}) * 0 + 0.009000000000000001) or (sum by (node) (kube_node_info{node=\"titan-08\"}) * 0 + 0.01) or (sum by (node) (kube_node_info{node=\"titan-09\"}) * 0 + 0.011) or (sum by (node) (kube_node_info{node=\"titan-10\"}) * 0 + 0.012) or (sum by (node) (kube_node_info{node=\"titan-11\"}) * 0 + 0.013000000000000001) or (sum by (node) (kube_node_info{node=\"titan-20\"}) * 0 + 0.014) or (sum by (node) (kube_node_info{node=\"titan-21\"}) * 0 + 0.015) or (sum by (node) (kube_node_info{node=\"titan-12\"}) * 0 + 0.016) or (sum by (node) (kube_node_info{node=\"titan-13\"}) * 0 + 0.017) or (sum by (node) (kube_node_info{node=\"titan-14\"}) * 0 + 0.018000000000000002) or (sum by (node) (kube_node_info{node=\"titan-15\"}) * 0 + 0.019) or (sum by (node) (kube_node_info{node=\"titan-16\"}) * 0 + 0.02) or (sum by (node) (kube_node_info{node=\"titan-17\"}) * 0 + 0.021) or (sum by (node) (kube_node_info{node=\"titan-18\"}) * 0 + 0.022) or (sum by (node) (kube_node_info{node=\"titan-19\"}) * 0 + 0.023) or (sum by (node) (kube_node_info{node=\"titan-22\"}) * 0 + 0.024) or (sum by (node) (kube_node_info{node=\"titan-23\"}) * 0 + 0.025) or (sum by (node) (kube_node_info{node=\"titan-24\"}) * 0 + 0.026000000000000002)) == bool on(namespace) group_left() (max by (namespace) ((sum by (namespace,node) (kube_pod_info{pod!=\"\" , node!=\"\"}) / on(namespace) group_left() clamp_min(sum by (namespace) (kube_pod_info{pod!=\"\"}), 1) * 100) + on(node) group_left() ((sum by (node) (kube_node_info{node=\"titan-0a\"}) * 0 + 0.001) or (sum by (node) (kube_node_info{node=\"titan-0b\"}) * 0 + 0.002) or (sum by (node) (kube_node_info{node=\"titan-0c\"}) * 0 + 0.003) or (sum by (node) (kube_node_info{node=\"titan-db\"}) * 0 + 0.004) or (sum by (node) (kube_node_info{node=\"titan-jh\"}) * 0 + 0.005) or (sum by (node) (kube_node_info{node=\"titan-04\"}) * 0 + 0.006) or (sum by (node) (kube_node_info{node=\"titan-05\"}) * 0 + 0.007) or (sum by (node) (kube_node_info{node=\"titan-06\"}) * 0 + 0.008) or (sum by (node) (kube_node_info{node=\"titan-07\"}) * 0 + 0.009000000000000001) or (sum by (node) (kube_node_info{node=\"titan-08\"}) * 0 + 0.01) or (sum by (node) (kube_node_info{node=\"titan-09\"}) * 0 + 0.011) or (sum by (node) (kube_node_info{node=\"titan-10\"}) * 0 + 0.012) or (sum by (node) (kube_node_info{node=\"titan-11\"}) * 0 + 0.013000000000000001) or (sum by (node) (kube_node_info{node=\"titan-20\"}) * 0 + 0.014) or (sum by (node) (kube_node_info{node=\"titan-21\"}) * 0 + 0.015) or (sum by (node) (kube_node_info{node=\"titan-12\"}) * 0 + 0.016) or (sum by (node) (kube_node_info{node=\"titan-13\"}) * 0 + 0.017) or (sum by (node) (kube_node_info{node=\"titan-14\"}) * 0 + 0.018000000000000002) or (sum by (node) (kube_node_info{node=\"titan-15\"}) * 0 + 0.019) or (sum by (node) (kube_node_info{node=\"titan-16\"}) * 0 + 0.02) or (sum by (node) (kube_node_info{node=\"titan-17\"}) * 0 + 0.021) or (sum by (node) (kube_node_info{node=\"titan-18\"}) * 0 + 0.022) or (sum by (node) (kube_node_info{node=\"titan-19\"}) * 0 + 0.023) or (sum by (node) (kube_node_info{node=\"titan-22\"}) * 0 + 0.024) or (sum by (node) (kube_node_info{node=\"titan-23\"}) * 0 + 0.025) or (sum by (node) (kube_node_info{node=\"titan-24\"}) * 0 + 0.026000000000000002)))))", + "expr": "(sum by (namespace,node) (kube_pod_info{pod!=\"\" , node!=\"\"}) / on(namespace) group_left() clamp_min(sum by (namespace) (kube_pod_info{pod!=\"\"}), 1) * 100) * on(namespace,node) group_left() ((sum by (namespace,node) (kube_pod_info{pod!=\"\" , node!=\"\"}) / on(namespace) group_left() clamp_min(sum by (namespace) (kube_pod_info{pod!=\"\"}), 1) * 100) + on(node) group_left() ((sum by (node) (kube_node_info{node=\"titan-0a\"}) * 0 + 0.001) or (sum by (node) (kube_node_info{node=\"titan-0b\"}) * 0 + 0.002) or (sum by (node) (kube_node_info{node=\"titan-0c\"}) * 0 + 0.003) or (sum by (node) (kube_node_info{node=\"titan-db\"}) * 0 + 0.004) or (sum by (node) (kube_node_info{node=\"titan-jh\"}) * 0 + 0.005) or (sum by (node) (kube_node_info{node=\"titan-04\"}) * 0 + 0.006) or (sum by (node) (kube_node_info{node=\"titan-05\"}) * 0 + 0.007) or (sum by (node) (kube_node_info{node=\"titan-06\"}) * 0 + 0.008) or (sum by (node) (kube_node_info{node=\"titan-07\"}) * 0 + 0.009000000000000001) or (sum by (node) (kube_node_info{node=\"titan-08\"}) * 0 + 0.01) or (sum by (node) (kube_node_info{node=\"titan-11\"}) * 0 + 0.011) or (sum by (node) (kube_node_info{node=\"titan-20\"}) * 0 + 0.012) or (sum by (node) (kube_node_info{node=\"titan-21\"}) * 0 + 0.013000000000000001) or (sum by (node) (kube_node_info{node=\"titan-12\"}) * 0 + 0.014) or (sum by (node) (kube_node_info{node=\"titan-13\"}) * 0 + 0.015) or (sum by (node) (kube_node_info{node=\"titan-14\"}) * 0 + 0.016) or (sum by (node) (kube_node_info{node=\"titan-15\"}) * 0 + 0.017) or (sum by (node) (kube_node_info{node=\"titan-17\"}) * 0 + 0.018000000000000002) or (sum by (node) (kube_node_info{node=\"titan-18\"}) * 0 + 0.019) or (sum by (node) (kube_node_info{node=\"titan-19\"}) * 0 + 0.02) or (sum by (node) (kube_node_info{node=\"titan-22\"}) * 0 + 0.021) or (sum by (node) (kube_node_info{node=\"titan-23\"}) * 0 + 0.022) or (sum by (node) (kube_node_info{node=\"titan-24\"}) * 0 + 0.023)) == bool on(namespace) group_left() (max by (namespace) ((sum by (namespace,node) (kube_pod_info{pod!=\"\" , node!=\"\"}) / on(namespace) group_left() clamp_min(sum by (namespace) (kube_pod_info{pod!=\"\"}), 1) * 100) + on(node) group_left() ((sum by (node) (kube_node_info{node=\"titan-0a\"}) * 0 + 0.001) or (sum by (node) (kube_node_info{node=\"titan-0b\"}) * 0 + 0.002) or (sum by (node) (kube_node_info{node=\"titan-0c\"}) * 0 + 0.003) or (sum by (node) (kube_node_info{node=\"titan-db\"}) * 0 + 0.004) or (sum by (node) (kube_node_info{node=\"titan-jh\"}) * 0 + 0.005) or (sum by (node) (kube_node_info{node=\"titan-04\"}) * 0 + 0.006) or (sum by (node) (kube_node_info{node=\"titan-05\"}) * 0 + 0.007) or (sum by (node) (kube_node_info{node=\"titan-06\"}) * 0 + 0.008) or (sum by (node) (kube_node_info{node=\"titan-07\"}) * 0 + 0.009000000000000001) or (sum by (node) (kube_node_info{node=\"titan-08\"}) * 0 + 0.01) or (sum by (node) (kube_node_info{node=\"titan-11\"}) * 0 + 0.011) or (sum by (node) (kube_node_info{node=\"titan-20\"}) * 0 + 0.012) or (sum by (node) (kube_node_info{node=\"titan-21\"}) * 0 + 0.013000000000000001) or (sum by (node) (kube_node_info{node=\"titan-12\"}) * 0 + 0.014) or (sum by (node) (kube_node_info{node=\"titan-13\"}) * 0 + 0.015) or (sum by (node) (kube_node_info{node=\"titan-14\"}) * 0 + 0.016) or (sum by (node) (kube_node_info{node=\"titan-15\"}) * 0 + 0.017) or (sum by (node) (kube_node_info{node=\"titan-17\"}) * 0 + 0.018000000000000002) or (sum by (node) (kube_node_info{node=\"titan-18\"}) * 0 + 0.019) or (sum by (node) (kube_node_info{node=\"titan-19\"}) * 0 + 0.02) or (sum by (node) (kube_node_info{node=\"titan-22\"}) * 0 + 0.021) or (sum by (node) (kube_node_info{node=\"titan-23\"}) * 0 + 0.022) or (sum by (node) (kube_node_info{node=\"titan-24\"}) * 0 + 0.023)))))", "refId": "A", "instant": true, "format": "table" diff --git a/services/monitoring/dashboards/atlas-storage.json b/services/monitoring/dashboards/atlas-storage.json index 9f989234..aa5cedb0 100644 --- a/services/monitoring/dashboards/atlas-storage.json +++ b/services/monitoring/dashboards/atlas-storage.json @@ -276,7 +276,7 @@ }, "targets": [ { - "expr": "(avg by (node) ((avg by (instance) ((1 - (node_filesystem_avail_bytes{mountpoint=\"/mnt/astreae\",fstype!~\"tmpfs|overlay\"} / node_filesystem_size_bytes{mountpoint=\"/mnt/astreae\",fstype!~\"tmpfs|overlay\"})) * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-1[2-9]|titan-2[2-4]\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", + "expr": "(avg by (node) ((avg by (instance) ((1 - (node_filesystem_avail_bytes{mountpoint=\"/mnt/astreae\",fstype!~\"tmpfs|overlay\"} / node_filesystem_size_bytes{mountpoint=\"/mnt/astreae\",fstype!~\"tmpfs|overlay\"})) * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-1[2-9]|titan-2[2-4]\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}" } @@ -314,7 +314,7 @@ }, "targets": [ { - "expr": "(avg by (node) ((avg by (instance) ((1 - (node_filesystem_avail_bytes{mountpoint=\"/mnt/asteria\",fstype!~\"tmpfs|overlay\"} / node_filesystem_size_bytes{mountpoint=\"/mnt/asteria\",fstype!~\"tmpfs|overlay\"})) * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-1[2-9]|titan-2[2-4]\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", + "expr": "(avg by (node) ((avg by (instance) ((1 - (node_filesystem_avail_bytes{mountpoint=\"/mnt/asteria\",fstype!~\"tmpfs|overlay\"} / node_filesystem_size_bytes{mountpoint=\"/mnt/asteria\",fstype!~\"tmpfs|overlay\"})) * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-1[2-9]|titan-2[2-4]\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}" } diff --git a/services/monitoring/grafana-alerting-config.yaml b/services/monitoring/grafana-alerting-config.yaml index a9024843..6e408752 100644 --- a/services/monitoring/grafana-alerting-config.yaml +++ b/services/monitoring/grafana-alerting-config.yaml @@ -109,7 +109,7 @@ data: model: intervalMs: 60000 maxDataPoints: 43200 - expr: max by (instance, node) ((increase((node_filesystem_size_bytes{mountpoint="/",fstype!~"tmpfs|overlay"} - node_filesystem_free_bytes{mountpoint="/",fstype!~"tmpfs|overlay"})[1h]) / 1024 / 1024 / 1024) * on(instance) group_left(node) label_replace(node_uname_info{nodename!=""}, "node", "$1", "nodename", "(.*)")) + expr: max by (instance, node) ((clamp_min(delta((node_filesystem_size_bytes{mountpoint="/",fstype!~"tmpfs|overlay"} - node_filesystem_avail_bytes{mountpoint="/",fstype!~"tmpfs|overlay"})[1h:1m]), 0) / 1024 / 1024 / 1024) * on(instance) group_left(node) label_replace(node_uname_info{nodename!=""}, "node", "$1", "nodename", "(.*)")) legendFormat: '{{node}}' datasource: type: prometheus @@ -162,7 +162,7 @@ data: model: intervalMs: 60000 maxDataPoints: 43200 - expr: ((1 - avg by (instance) (rate(node_cpu_seconds_total{mode="idle"}[5m]))) * 100) * on(instance) group_left(node) label_replace(node_uname_info{nodename!=""}, "node", "$1", "nodename", "(.*)") + expr: clamp_max(clamp_min(((1 - avg by (instance) (rate(node_cpu_seconds_total{mode="idle"}[5m]))) * 100), 0), 100) * on(instance) group_left(node) label_replace(node_uname_info{nodename!=""}, "node", "$1", "nodename", "(.*)") legendFormat: '{{node}}' datasource: type: prometheus @@ -496,7 +496,7 @@ data: labels: severity: warning - uid: maint-soteria-backup-unhealthy - title: "Soteria reports unhealthy PVC backups" + title: "Soteria reports configured PVC backups unhealthy" condition: C for: "10m" data: @@ -506,7 +506,7 @@ data: to: 0 datasourceUid: atlas-vm model: - expr: sum((1 - pvc_backup_health) > bool 0) or on() vector(0) + expr: sum((pvc_backup_health == 0) and on(namespace,pvc,volume,driver) (pvc_backup_count > 0)) or on() vector(0) intervalMs: 60000 maxDataPoints: 43200 legendFormat: unhealthy-pvcs @@ -540,7 +540,7 @@ data: noDataState: OK execErrState: Alerting annotations: - summary: "One or more PVCs are stale, missing, or failed per Soteria backup health" + summary: "A previously configured PVC backup is stale or failed per Soteria" labels: severity: warning - uid: maint-soteria-b2-scan-unhealthy @@ -650,7 +650,7 @@ data: to: 0 datasourceUid: atlas-vm model: - expr: sum(increase(kube_job_created{namespace="maintenance",job_name=~"soteria-backup-.*"}[10m])) or on() vector(0) + expr: count(kube_job_created{namespace="maintenance",job_name=~"soteria-backup-.*"} > time() - 600) or on() vector(0) intervalMs: 60000 maxDataPoints: 43200 legendFormat: soteria-backup-jobs-created-10m @@ -703,7 +703,7 @@ data: to: 0 datasourceUid: atlas-vm model: - expr: max by (task) (((time() - ariadne_schedule_last_success_timestamp_seconds{task=~"schedule\\..+"}) * on(task) group_left() (1 - ariadne_schedule_last_status{task=~"schedule\\..+"}))) + expr: max by (task) ((((time() - ariadne_schedule_last_error_timestamp_seconds{task=~"schedule\\..+"}) * on(task) group_left() (1 - ariadne_schedule_last_status{task=~"schedule\\..+"})) and on(task) (ariadne_schedule_next_run_timestamp_seconds{task=~"schedule\\..+"} < time() + 3600))) intervalMs: 60000 maxDataPoints: 43200 legendFormat: '{{task}}' @@ -806,7 +806,7 @@ data: model: intervalMs: 60000 maxDataPoints: 43200 - expr: max(postmark_outbound_bounce_rate{window="1d"}) or on() vector(0) + expr: (max(postmark_outbound_bounce_rate{window="1d"}) and on() (max(postmark_outbound_sent{window="1d"}) >= 50) and on() (max(postmark_outbound_bounced{window="1d"}) >= 3)) or on() vector(0) legendFormat: bounce 1d datasource: type: prometheus @@ -838,7 +838,7 @@ data: noDataState: OK execErrState: Error annotations: - summary: "Postmark 1d bounce rate >5%" + summary: "Postmark 1d bounce rate >5% with at least 50 sent and 3 bounced" labels: severity: warning - uid: postmark-api-down diff --git a/services/monitoring/grafana-dashboard-network.yaml b/services/monitoring/grafana-dashboard-network.yaml index 343da7d0..c3faad4b 100644 --- a/services/monitoring/grafana-dashboard-network.yaml +++ b/services/monitoring/grafana-dashboard-network.yaml @@ -485,7 +485,7 @@ data: }, "targets": [ { - "expr": "avg by (node) ((sum(rate(node_network_transmit_bytes_total{device!~\"lo|cni.*|veth.*|flannel.*|docker.*|virbr.*|vxlan.*|wg.*\"}[5m])) or on() vector(0) + sum(rate(node_network_receive_bytes_total{device!~\"lo|cni.*|veth.*|flannel.*|docker.*|virbr.*|vxlan.*|wg.*\"}[5m])) or on() vector(0)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", + "expr": "avg by (node) ((sum(rate(node_network_transmit_bytes_total{device!~\"lo|cni.*|veth.*|flannel.*|docker.*|virbr.*|vxlan.*|wg.*\"}[5m])) or on() vector(0) + sum(rate(node_network_receive_bytes_total{device!~\"lo|cni.*|veth.*|flannel.*|docker.*|virbr.*|vxlan.*|wg.*\"}[5m])) or on() vector(0)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", "refId": "A", "legendFormat": "{{node}}" } diff --git a/services/monitoring/grafana-dashboard-nodes.yaml b/services/monitoring/grafana-dashboard-nodes.yaml index becabe30..480bbf68 100644 --- a/services/monitoring/grafana-dashboard-nodes.yaml +++ b/services/monitoring/grafana-dashboard-nodes.yaml @@ -29,7 +29,7 @@ data: }, "targets": [ { - "expr": "sum(kube_node_status_condition{condition=\"Ready\",status=\"true\",node=~\"titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"})", + "expr": "sum(kube_node_status_condition{condition=\"Ready\",status=\"true\",node=~\"titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"})", "refId": "A" } ], @@ -55,7 +55,7 @@ data: "unit": "none", "custom": { "displayMode": "auto", - "valueSuffix": "/21" + "valueSuffix": "/18" } }, "overrides": [] @@ -418,7 +418,7 @@ data: }, "targets": [ { - "expr": "avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", + "expr": "avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", "refId": "A", "legendFormat": "{{node}}" } @@ -458,7 +458,7 @@ data: }, "targets": [ { - "expr": "avg by (node) ((avg by (instance) ((node_memory_MemTotal_bytes - node_memory_MemAvailable_bytes) / node_memory_MemTotal_bytes * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", + "expr": "avg by (node) ((avg by (instance) ((node_memory_MemTotal_bytes - node_memory_MemAvailable_bytes) / node_memory_MemTotal_bytes * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", "refId": "A", "legendFormat": "{{node}}" } @@ -498,7 +498,7 @@ data: }, "targets": [ { - "expr": "(avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", + "expr": "(avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}" } @@ -535,7 +535,7 @@ data: }, "targets": [ { - "expr": "(avg by (node) ((avg by (instance) ((node_memory_MemTotal_bytes - node_memory_MemAvailable_bytes) / node_memory_MemTotal_bytes * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", + "expr": "(avg by (node) ((avg by (instance) ((node_memory_MemTotal_bytes - node_memory_MemAvailable_bytes) / node_memory_MemTotal_bytes * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}" } @@ -572,7 +572,7 @@ data: }, "targets": [ { - "expr": "avg by (node) ((avg by (instance) ((1 - (node_filesystem_avail_bytes{mountpoint=\"/\",fstype!~\"tmpfs|overlay\"} / node_filesystem_size_bytes{mountpoint=\"/\",fstype!~\"tmpfs|overlay\"})) * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", + "expr": "avg by (node) ((avg by (instance) ((1 - (node_filesystem_avail_bytes{mountpoint=\"/\",fstype!~\"tmpfs|overlay\"} / node_filesystem_size_bytes{mountpoint=\"/\",fstype!~\"tmpfs|overlay\"})) * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", "refId": "A", "legendFormat": "{{node}}" } @@ -610,7 +610,7 @@ data: }, "targets": [ { - "expr": "avg by (node) ((avg by (instance) ((1 - (node_filesystem_avail_bytes{mountpoint=\"/mnt/astraios\",fstype!~\"tmpfs|overlay\"} / node_filesystem_size_bytes{mountpoint=\"/mnt/astraios\",fstype!~\"tmpfs|overlay\"})) * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", + "expr": "avg by (node) ((avg by (instance) ((1 - (node_filesystem_avail_bytes{mountpoint=\"/mnt/astraios\",fstype!~\"tmpfs|overlay\"} / node_filesystem_size_bytes{mountpoint=\"/mnt/astraios\",fstype!~\"tmpfs|overlay\"})) * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", "refId": "A", "legendFormat": "{{node}}" } diff --git a/services/monitoring/grafana-dashboard-overview.yaml b/services/monitoring/grafana-dashboard-overview.yaml index a4519091..740a0278 100644 --- a/services/monitoring/grafana-dashboard-overview.yaml +++ b/services/monitoring/grafana-dashboard-overview.yaml @@ -313,7 +313,7 @@ data: }, "targets": [ { - "expr": "sum(max by (namespace,pod) (kube_pod_status_phase{phase!~\"Running|Succeeded\"})) or on() vector(0)", + "expr": "((sum(max by(namespace,pod) ((kube_pod_status_phase{phase=\"Pending\",namespace!~\"veles\"} == 1) and on(namespace,pod) ((time() - kube_pod_created{namespace!~\"veles\"}) > 900))) or on() vector(0)) + (sum(max by(namespace,pod) ((kube_pod_status_phase{phase=~\"Failed|Unknown\",namespace!~\"veles\"} == 1) unless on(namespace,pod) kube_pod_owner{owner_kind=\"Job\"})) or on() vector(0)))", "refId": "A" } ], @@ -371,7 +371,7 @@ data: "targetBlank": true } ], - "description": "Pods in unhealthy phases; zero is good, any count means a workload needs attention." + "description": "Current-service pods Pending for more than 15 minutes or in an actionable failed phase. Completed Jobs and retained Veles migration workloads are kept on drill-down dashboards but excluded here." }, { "id": 6, @@ -389,7 +389,7 @@ data: }, "targets": [ { - "expr": "sum(max by (namespace,pod) (kube_pod_container_status_waiting_reason{reason=~\"CrashLoopBackOff|ImagePullBackOff\"})) or on() vector(0)", + "expr": "sum(max by(namespace,pod) (kube_pod_container_status_waiting_reason{namespace!~\"veles\",reason=~\"CrashLoopBackOff|ImagePullBackOff\"} and on(namespace,pod) ((time() - kube_pod_created{namespace!~\"veles\"}) > 900))) or on() vector(0)", "refId": "A" } ], @@ -447,7 +447,7 @@ data: "targetBlank": true } ], - "description": "Pods restarting or unable to pull images; zero is good, any count usually blocks a service." + "description": "Current-service pods stuck in CrashLoopBackOff or ImagePullBackOff for more than 15 minutes. Retained Veles migration workloads remain visible on the Pods dashboard." }, { "id": 1, @@ -465,14 +465,14 @@ data: }, "targets": [ { - "expr": "sum(kube_node_status_condition{condition=\"Ready\",status=\"true\",node=~\"titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"})", + "expr": "sum(kube_node_status_condition{condition=\"Ready\",status=\"true\",node=~\"titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"})", "refId": "A" } ], "fieldConfig": { "defaults": { "min": 0, - "max": 21, + "max": 18, "thresholds": { "mode": "absolute", "steps": [ @@ -482,15 +482,15 @@ data: }, { "color": "dark-orange", - "value": 19 + "value": 16 }, { "color": "dark-yellow", - "value": 20 + "value": 17 }, { "color": "dark-green", - "value": 21 + "value": 18 } ] } @@ -527,7 +527,7 @@ data: }, "targets": [ { - "expr": "label_replace(topk(1, avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))), \"__name__\", \"$1\", \"node\", \"(.*)\")", + "expr": "label_replace(topk(1, avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))), \"__name__\", \"$1\", \"node\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}", "instant": true @@ -605,7 +605,7 @@ data: }, "targets": [ { - "expr": "label_replace(topk(1, avg by (node) ((avg by (instance) ((node_memory_MemTotal_bytes - node_memory_MemAvailable_bytes) / node_memory_MemTotal_bytes * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))), \"__name__\", \"$1\", \"node\", \"(.*)\")", + "expr": "label_replace(topk(1, avg by (node) ((avg by (instance) ((node_memory_MemTotal_bytes - node_memory_MemAvailable_bytes) / node_memory_MemTotal_bytes * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))), \"__name__\", \"$1\", \"node\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}", "instant": true @@ -683,7 +683,7 @@ data: }, "targets": [ { - "expr": "label_replace(topk(1, avg by (node) ((sum by (instance) (rate(node_network_receive_bytes_total{device!~\"lo\"}[5m]) + rate(node_network_transmit_bytes_total{device!~\"lo\"}[5m]))) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))), \"__name__\", \"$1\", \"node\", \"(.*)\")", + "expr": "label_replace(topk(1, avg by (node) ((sum by (instance) (rate(node_network_receive_bytes_total{device!~\"lo\"}[5m]) + rate(node_network_transmit_bytes_total{device!~\"lo\"}[5m]))) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))), \"__name__\", \"$1\", \"node\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}", "instant": true @@ -753,7 +753,7 @@ data: }, "targets": [ { - "expr": "label_replace(topk(1, avg by (node) ((sum by (instance) (rate(node_disk_read_bytes_total[5m]) + rate(node_disk_written_bytes_total[5m]))) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))), \"__name__\", \"$1\", \"node\", \"(.*)\")", + "expr": "label_replace(topk(1, avg by (node) ((sum by (instance) (rate(node_disk_read_bytes_total[5m]) + rate(node_disk_written_bytes_total[5m]))) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))), \"__name__\", \"$1\", \"node\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}", "instant": true @@ -3876,7 +3876,7 @@ data: }, "targets": [ { - "expr": "(avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", + "expr": "(avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}" } @@ -3924,7 +3924,7 @@ data: }, "targets": [ { - "expr": "(avg by (node) ((avg by (instance) ((node_memory_MemTotal_bytes - node_memory_MemAvailable_bytes) / node_memory_MemTotal_bytes * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", + "expr": "(avg by (node) ((avg by (instance) ((node_memory_MemTotal_bytes - node_memory_MemAvailable_bytes) / node_memory_MemTotal_bytes * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}" } @@ -3972,7 +3972,7 @@ data: }, "targets": [ { - "expr": "(avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", + "expr": "(avg by (node) ((clamp_max(clamp_min((1 - avg by (instance) (rate(node_cpu_seconds_total{mode=\"idle\"}[5m]))) * 100, 0), 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}" } @@ -4010,7 +4010,7 @@ data: }, "targets": [ { - "expr": "(avg by (node) ((avg by (instance) ((node_memory_MemTotal_bytes - node_memory_MemAvailable_bytes) / node_memory_MemTotal_bytes * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", + "expr": "(avg by (node) ((avg by (instance) ((node_memory_MemTotal_bytes - node_memory_MemAvailable_bytes) / node_memory_MemTotal_bytes * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}" } @@ -4317,7 +4317,7 @@ data: }, "targets": [ { - "expr": "avg by (node) ((avg by (instance) ((1 - (node_filesystem_avail_bytes{mountpoint=\"/\",fstype!~\"tmpfs|overlay\"} / node_filesystem_size_bytes{mountpoint=\"/\",fstype!~\"tmpfs|overlay\"})) * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", + "expr": "avg by (node) ((avg by (instance) ((1 - (node_filesystem_avail_bytes{mountpoint=\"/\",fstype!~\"tmpfs|overlay\"} / node_filesystem_size_bytes{mountpoint=\"/\",fstype!~\"tmpfs|overlay\"})) * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", "refId": "A", "legendFormat": "{{node}}" } @@ -4366,7 +4366,7 @@ data: }, "targets": [ { - "expr": "avg by (node) ((avg by (instance) ((1 - (node_filesystem_avail_bytes{mountpoint=\"/mnt/astraios\",fstype!~\"tmpfs|overlay\"} / node_filesystem_size_bytes{mountpoint=\"/mnt/astraios\",fstype!~\"tmpfs|overlay\"})) * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", + "expr": "avg by (node) ((avg by (instance) ((1 - (node_filesystem_avail_bytes{mountpoint=\"/mnt/astraios\",fstype!~\"tmpfs|overlay\"} / node_filesystem_size_bytes{mountpoint=\"/mnt/astraios\",fstype!~\"tmpfs|overlay\"})) * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))", "refId": "A", "legendFormat": "{{node}}" } diff --git a/services/monitoring/grafana-dashboard-pods.yaml b/services/monitoring/grafana-dashboard-pods.yaml index 51bb6c8b..9a73f02c 100644 --- a/services/monitoring/grafana-dashboard-pods.yaml +++ b/services/monitoring/grafana-dashboard-pods.yaml @@ -29,7 +29,7 @@ data: }, "targets": [ { - "expr": "sum(max by (namespace,pod) (kube_pod_status_phase{phase!~\"Running|Succeeded\"})) or on() vector(0)", + "expr": "((sum(max by(namespace,pod) ((kube_pod_status_phase{phase=\"Pending\",namespace!~\"veles\"} == 1) and on(namespace,pod) ((time() - kube_pod_created{namespace!~\"veles\"}) > 900))) or on() vector(0)) + (sum(max by(namespace,pod) ((kube_pod_status_phase{phase=~\"Failed|Unknown\",namespace!~\"veles\"} == 1) unless on(namespace,pod) kube_pod_owner{owner_kind=\"Job\"})) or on() vector(0)))", "refId": "A" } ], @@ -89,7 +89,7 @@ data: }, "targets": [ { - "expr": "sum(max by (namespace,pod) (kube_pod_container_status_waiting_reason{reason=~\"CrashLoopBackOff|ImagePullBackOff\"})) or on() vector(0)", + "expr": "sum(max by(namespace,pod) (kube_pod_container_status_waiting_reason{namespace!~\"veles\",reason=~\"CrashLoopBackOff|ImagePullBackOff\"} and on(namespace,pod) ((time() - kube_pod_created{namespace!~\"veles\"}) > 900))) or on() vector(0)", "refId": "A" } ], @@ -532,7 +532,7 @@ data: }, "targets": [ { - "expr": "(sum by (namespace,node) (kube_pod_info{pod!=\"\" , node!=\"\"}) / on(namespace) group_left() clamp_min(sum by (namespace) (kube_pod_info{pod!=\"\"}), 1) * 100) * on(namespace,node) group_left() ((sum by (namespace,node) (kube_pod_info{pod!=\"\" , node!=\"\"}) / on(namespace) group_left() clamp_min(sum by (namespace) (kube_pod_info{pod!=\"\"}), 1) * 100) + on(node) group_left() ((sum by (node) (kube_node_info{node=\"titan-0a\"}) * 0 + 0.001) or (sum by (node) (kube_node_info{node=\"titan-0b\"}) * 0 + 0.002) or (sum by (node) (kube_node_info{node=\"titan-0c\"}) * 0 + 0.003) or (sum by (node) (kube_node_info{node=\"titan-db\"}) * 0 + 0.004) or (sum by (node) (kube_node_info{node=\"titan-jh\"}) * 0 + 0.005) or (sum by (node) (kube_node_info{node=\"titan-04\"}) * 0 + 0.006) or (sum by (node) (kube_node_info{node=\"titan-05\"}) * 0 + 0.007) or (sum by (node) (kube_node_info{node=\"titan-06\"}) * 0 + 0.008) or (sum by (node) (kube_node_info{node=\"titan-07\"}) * 0 + 0.009000000000000001) or (sum by (node) (kube_node_info{node=\"titan-08\"}) * 0 + 0.01) or (sum by (node) (kube_node_info{node=\"titan-09\"}) * 0 + 0.011) or (sum by (node) (kube_node_info{node=\"titan-10\"}) * 0 + 0.012) or (sum by (node) (kube_node_info{node=\"titan-11\"}) * 0 + 0.013000000000000001) or (sum by (node) (kube_node_info{node=\"titan-20\"}) * 0 + 0.014) or (sum by (node) (kube_node_info{node=\"titan-21\"}) * 0 + 0.015) or (sum by (node) (kube_node_info{node=\"titan-12\"}) * 0 + 0.016) or (sum by (node) (kube_node_info{node=\"titan-13\"}) * 0 + 0.017) or (sum by (node) (kube_node_info{node=\"titan-14\"}) * 0 + 0.018000000000000002) or (sum by (node) (kube_node_info{node=\"titan-15\"}) * 0 + 0.019) or (sum by (node) (kube_node_info{node=\"titan-16\"}) * 0 + 0.02) or (sum by (node) (kube_node_info{node=\"titan-17\"}) * 0 + 0.021) or (sum by (node) (kube_node_info{node=\"titan-18\"}) * 0 + 0.022) or (sum by (node) (kube_node_info{node=\"titan-19\"}) * 0 + 0.023) or (sum by (node) (kube_node_info{node=\"titan-22\"}) * 0 + 0.024) or (sum by (node) (kube_node_info{node=\"titan-23\"}) * 0 + 0.025) or (sum by (node) (kube_node_info{node=\"titan-24\"}) * 0 + 0.026000000000000002)) == bool on(namespace) group_left() (max by (namespace) ((sum by (namespace,node) (kube_pod_info{pod!=\"\" , node!=\"\"}) / on(namespace) group_left() clamp_min(sum by (namespace) (kube_pod_info{pod!=\"\"}), 1) * 100) + on(node) group_left() ((sum by (node) (kube_node_info{node=\"titan-0a\"}) * 0 + 0.001) or (sum by (node) (kube_node_info{node=\"titan-0b\"}) * 0 + 0.002) or (sum by (node) (kube_node_info{node=\"titan-0c\"}) * 0 + 0.003) or (sum by (node) (kube_node_info{node=\"titan-db\"}) * 0 + 0.004) or (sum by (node) (kube_node_info{node=\"titan-jh\"}) * 0 + 0.005) or (sum by (node) (kube_node_info{node=\"titan-04\"}) * 0 + 0.006) or (sum by (node) (kube_node_info{node=\"titan-05\"}) * 0 + 0.007) or (sum by (node) (kube_node_info{node=\"titan-06\"}) * 0 + 0.008) or (sum by (node) (kube_node_info{node=\"titan-07\"}) * 0 + 0.009000000000000001) or (sum by (node) (kube_node_info{node=\"titan-08\"}) * 0 + 0.01) or (sum by (node) (kube_node_info{node=\"titan-09\"}) * 0 + 0.011) or (sum by (node) (kube_node_info{node=\"titan-10\"}) * 0 + 0.012) or (sum by (node) (kube_node_info{node=\"titan-11\"}) * 0 + 0.013000000000000001) or (sum by (node) (kube_node_info{node=\"titan-20\"}) * 0 + 0.014) or (sum by (node) (kube_node_info{node=\"titan-21\"}) * 0 + 0.015) or (sum by (node) (kube_node_info{node=\"titan-12\"}) * 0 + 0.016) or (sum by (node) (kube_node_info{node=\"titan-13\"}) * 0 + 0.017) or (sum by (node) (kube_node_info{node=\"titan-14\"}) * 0 + 0.018000000000000002) or (sum by (node) (kube_node_info{node=\"titan-15\"}) * 0 + 0.019) or (sum by (node) (kube_node_info{node=\"titan-16\"}) * 0 + 0.02) or (sum by (node) (kube_node_info{node=\"titan-17\"}) * 0 + 0.021) or (sum by (node) (kube_node_info{node=\"titan-18\"}) * 0 + 0.022) or (sum by (node) (kube_node_info{node=\"titan-19\"}) * 0 + 0.023) or (sum by (node) (kube_node_info{node=\"titan-22\"}) * 0 + 0.024) or (sum by (node) (kube_node_info{node=\"titan-23\"}) * 0 + 0.025) or (sum by (node) (kube_node_info{node=\"titan-24\"}) * 0 + 0.026000000000000002)))))", + "expr": "(sum by (namespace,node) (kube_pod_info{pod!=\"\" , node!=\"\"}) / on(namespace) group_left() clamp_min(sum by (namespace) (kube_pod_info{pod!=\"\"}), 1) * 100) * on(namespace,node) group_left() ((sum by (namespace,node) (kube_pod_info{pod!=\"\" , node!=\"\"}) / on(namespace) group_left() clamp_min(sum by (namespace) (kube_pod_info{pod!=\"\"}), 1) * 100) + on(node) group_left() ((sum by (node) (kube_node_info{node=\"titan-0a\"}) * 0 + 0.001) or (sum by (node) (kube_node_info{node=\"titan-0b\"}) * 0 + 0.002) or (sum by (node) (kube_node_info{node=\"titan-0c\"}) * 0 + 0.003) or (sum by (node) (kube_node_info{node=\"titan-db\"}) * 0 + 0.004) or (sum by (node) (kube_node_info{node=\"titan-jh\"}) * 0 + 0.005) or (sum by (node) (kube_node_info{node=\"titan-04\"}) * 0 + 0.006) or (sum by (node) (kube_node_info{node=\"titan-05\"}) * 0 + 0.007) or (sum by (node) (kube_node_info{node=\"titan-06\"}) * 0 + 0.008) or (sum by (node) (kube_node_info{node=\"titan-07\"}) * 0 + 0.009000000000000001) or (sum by (node) (kube_node_info{node=\"titan-08\"}) * 0 + 0.01) or (sum by (node) (kube_node_info{node=\"titan-11\"}) * 0 + 0.011) or (sum by (node) (kube_node_info{node=\"titan-20\"}) * 0 + 0.012) or (sum by (node) (kube_node_info{node=\"titan-21\"}) * 0 + 0.013000000000000001) or (sum by (node) (kube_node_info{node=\"titan-12\"}) * 0 + 0.014) or (sum by (node) (kube_node_info{node=\"titan-13\"}) * 0 + 0.015) or (sum by (node) (kube_node_info{node=\"titan-14\"}) * 0 + 0.016) or (sum by (node) (kube_node_info{node=\"titan-15\"}) * 0 + 0.017) or (sum by (node) (kube_node_info{node=\"titan-17\"}) * 0 + 0.018000000000000002) or (sum by (node) (kube_node_info{node=\"titan-18\"}) * 0 + 0.019) or (sum by (node) (kube_node_info{node=\"titan-19\"}) * 0 + 0.02) or (sum by (node) (kube_node_info{node=\"titan-22\"}) * 0 + 0.021) or (sum by (node) (kube_node_info{node=\"titan-23\"}) * 0 + 0.022) or (sum by (node) (kube_node_info{node=\"titan-24\"}) * 0 + 0.023)) == bool on(namespace) group_left() (max by (namespace) ((sum by (namespace,node) (kube_pod_info{pod!=\"\" , node!=\"\"}) / on(namespace) group_left() clamp_min(sum by (namespace) (kube_pod_info{pod!=\"\"}), 1) * 100) + on(node) group_left() ((sum by (node) (kube_node_info{node=\"titan-0a\"}) * 0 + 0.001) or (sum by (node) (kube_node_info{node=\"titan-0b\"}) * 0 + 0.002) or (sum by (node) (kube_node_info{node=\"titan-0c\"}) * 0 + 0.003) or (sum by (node) (kube_node_info{node=\"titan-db\"}) * 0 + 0.004) or (sum by (node) (kube_node_info{node=\"titan-jh\"}) * 0 + 0.005) or (sum by (node) (kube_node_info{node=\"titan-04\"}) * 0 + 0.006) or (sum by (node) (kube_node_info{node=\"titan-05\"}) * 0 + 0.007) or (sum by (node) (kube_node_info{node=\"titan-06\"}) * 0 + 0.008) or (sum by (node) (kube_node_info{node=\"titan-07\"}) * 0 + 0.009000000000000001) or (sum by (node) (kube_node_info{node=\"titan-08\"}) * 0 + 0.01) or (sum by (node) (kube_node_info{node=\"titan-11\"}) * 0 + 0.011) or (sum by (node) (kube_node_info{node=\"titan-20\"}) * 0 + 0.012) or (sum by (node) (kube_node_info{node=\"titan-21\"}) * 0 + 0.013000000000000001) or (sum by (node) (kube_node_info{node=\"titan-12\"}) * 0 + 0.014) or (sum by (node) (kube_node_info{node=\"titan-13\"}) * 0 + 0.015) or (sum by (node) (kube_node_info{node=\"titan-14\"}) * 0 + 0.016) or (sum by (node) (kube_node_info{node=\"titan-15\"}) * 0 + 0.017) or (sum by (node) (kube_node_info{node=\"titan-17\"}) * 0 + 0.018000000000000002) or (sum by (node) (kube_node_info{node=\"titan-18\"}) * 0 + 0.019) or (sum by (node) (kube_node_info{node=\"titan-19\"}) * 0 + 0.02) or (sum by (node) (kube_node_info{node=\"titan-22\"}) * 0 + 0.021) or (sum by (node) (kube_node_info{node=\"titan-23\"}) * 0 + 0.022) or (sum by (node) (kube_node_info{node=\"titan-24\"}) * 0 + 0.023)))))", "refId": "A", "instant": true, "format": "table" diff --git a/services/monitoring/grafana-dashboard-storage.yaml b/services/monitoring/grafana-dashboard-storage.yaml index 506cee4a..d89f46b0 100644 --- a/services/monitoring/grafana-dashboard-storage.yaml +++ b/services/monitoring/grafana-dashboard-storage.yaml @@ -285,7 +285,7 @@ data: }, "targets": [ { - "expr": "(avg by (node) ((avg by (instance) ((1 - (node_filesystem_avail_bytes{mountpoint=\"/mnt/astreae\",fstype!~\"tmpfs|overlay\"} / node_filesystem_size_bytes{mountpoint=\"/mnt/astreae\",fstype!~\"tmpfs|overlay\"})) * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-1[2-9]|titan-2[2-4]\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", + "expr": "(avg by (node) ((avg by (instance) ((1 - (node_filesystem_avail_bytes{mountpoint=\"/mnt/astreae\",fstype!~\"tmpfs|overlay\"} / node_filesystem_size_bytes{mountpoint=\"/mnt/astreae\",fstype!~\"tmpfs|overlay\"})) * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-1[2-9]|titan-2[2-4]\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}" } @@ -323,7 +323,7 @@ data: }, "targets": [ { - "expr": "(avg by (node) ((avg by (instance) ((1 - (node_filesystem_avail_bytes{mountpoint=\"/mnt/asteria\",fstype!~\"tmpfs|overlay\"} / node_filesystem_size_bytes{mountpoint=\"/mnt/asteria\",fstype!~\"tmpfs|overlay\"})) * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-09|titan-10|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-16|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-1[2-9]|titan-2[2-4]\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", + "expr": "(avg by (node) ((avg by (instance) ((1 - (node_filesystem_avail_bytes{mountpoint=\"/mnt/asteria\",fstype!~\"tmpfs|overlay\"} / node_filesystem_size_bytes{mountpoint=\"/mnt/asteria\",fstype!~\"tmpfs|overlay\"})) * 100)) * on(instance) group_left(node) label_replace(node_uname_info{nodename=~\"titan-0a|titan-0b|titan-0c|titan-db|titan-jh|titan-04|titan-05|titan-06|titan-07|titan-08|titan-11|titan-20|titan-21|titan-12|titan-13|titan-14|titan-15|titan-17|titan-18|titan-19|titan-22|titan-23|titan-24\"}, \"node\", \"$1\", \"nodename\", \"(.*)\"))) * on(node) group_left() label_replace(node_uname_info{nodename=~\"titan-1[2-9]|titan-2[2-4]\"}, \"node\", \"$1\", \"nodename\", \"(.*)\")", "refId": "A", "legendFormat": "{{node}}" } From 1d56aebaf7918c240208420248df1bcee00c91aa Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 03:59:00 -0300 Subject: [PATCH 728/991] feat(hermes): package Atlas skill instructions --- .../triage-atlas-service-health/SKILL.md | 62 +++++++++++++++++++ .../references/service-map.md | 22 +++++++ .../hermes/skills/tune-atlas-alerts/SKILL.md | 39 ++++++++++++ .../references/alert-review.md | 16 +++++ 4 files changed, 139 insertions(+) create mode 100644 services/hermes/skills/triage-atlas-service-health/SKILL.md create mode 100644 services/hermes/skills/triage-atlas-service-health/references/service-map.md create mode 100644 services/hermes/skills/tune-atlas-alerts/SKILL.md create mode 100644 services/hermes/skills/tune-atlas-alerts/references/alert-review.md diff --git a/services/hermes/skills/triage-atlas-service-health/SKILL.md b/services/hermes/skills/triage-atlas-service-health/SKILL.md new file mode 100644 index 00000000..934a2957 --- /dev/null +++ b/services/hermes/skills/triage-atlas-service-health/SKILL.md @@ -0,0 +1,62 @@ +--- +name: triage-atlas-service-health +description: Diagnose active Atlas service and infrastructure problems from Grafana, Ariadne, Flux, Kubernetes events, workload state, and logs. Use when asked what is broken, why a Grafana health panel is red, whether an outage is real, or how to fix a service through titan-iac. Covers every deployed namespace while distinguishing current services from migration residue and historical noise. +--- + +# Triage Atlas Service Health + +Investigate read-only, group symptoms into incidents, and recommend the smallest Flux-tracked fix. + +## Establish the current scope + +1. Read `references/service-map.md` for custom-service ownership and migrations. +2. Discover the live inventory instead of relying only on the map: + + ```sh + kubectl get namespaces + kubectl get deploy,statefulset,daemonset -A + kubectl get ingress -A + kubectl -n flux-system get kustomizations.kustomize.toolkit.fluxcd.io + ``` + +3. Treat Cassandra as authoritative for functionality migrated from Veles. Report Veles failures as migration residue unless a live route or dependency proves current impact. + +## Decide whether the signal is actionable + +Use all of these checks before calling something an incident: + +- Current state: prefer an active condition over lifetime restart totals or old failed Jobs. +- Persistence: ignore normal startup states under 15 minutes unless users are already affected. +- Ownership: group replica pods by Deployment, StatefulSet, DaemonSet, Job, or CronJob. +- Delivery: a Flux object with `Ready=null` may be reconciling; `Ready=false` or a suspended required object is actionable. +- Authority: separate current workloads from retired, migrated, or deliberately suspended resources. +- Correlation: confirm a red Grafana panel with the underlying metric and at least one independent source such as events, logs, readiness, or Flux state. + +Run the narrowest relevant checks: + +```sh +kubectl get pods -A --field-selector status.phase!=Running,status.phase!=Succeeded -o wide +kubectl get events -A --sort-by=.lastTimestamp +kubectl -n get deploy,statefulset,daemonset,job,cronjob +kubectl -n describe pod +kubectl -n logs --all-containers --tail=200 +kubectl -n flux-system get kustomizations.kustomize.toolkit.fluxcd.io +curl -G -fsS --data-urlencode 'query=' "$VICTORIA_METRICS_URL/api/v1/query" +``` + +Never read Kubernetes Secret values. Secret-key errors quoted by a pod event or log are valid evidence; inspect the SecretProviderClass and Vault policy manifests, not the secret contents. + +## Produce one incident per cause + +Deduplicate replica pods and repeated alerts with a signature of service, workload, failing condition, and likely dependency. Return: + +- `Finding`: current incident, degraded-but-serving, migration residue, historical noise, or healthy. +- `Impact`: the user-facing service and affected capability. +- `Evidence`: timestamps, workload condition, event/log excerpt, metric, and Flux revision. +- `Noise removed`: signals inspected but not counted, with the reason. +- `Likely cause`: causal chain, marking inference explicitly. +- `Next checks`: ordered read-only commands. +- `Repo-side fix`: exact titan-iac or application path and smallest proposed change. +- `Approval required`: every write, reconcile, credential, or external-system action. + +Do not claim a proposed change is applied. Do not mutate the cluster; Atlas is Flux-owned. diff --git a/services/hermes/skills/triage-atlas-service-health/references/service-map.md b/services/hermes/skills/triage-atlas-service-health/references/service-map.md new file mode 100644 index 00000000..bd43cd24 --- /dev/null +++ b/services/hermes/skills/triage-atlas-service-health/references/service-map.md @@ -0,0 +1,22 @@ +# Atlas custom-service map + +Use this map for ownership and canonical names. Discover third-party services live from Flux and Kubernetes. + +| Capability | Canonical workload/repository | Notes | +| --- | --- | --- | +| Cluster automation and state analysis | Ariadne / `bstein/Ariadne` | Runs in `maintenance`; provides deterministic triage bundles. | +| Quality policy and CI telemetry | titan-iac / `bstein/titan-iac` | Owns Jenkins configuration, Grafana generators, alert provisioning, and Data Prepper pipeline. | +| Simulation registry and execution | Cassandra / Cassandra application repository | Cassandra is authoritative after the Veles migration. | +| Legacy simulation stack | Veles | Retained migration residue; do not call it a current outage without dependency evidence. | +| Backup and maintenance policy | Soteria / `bstein/soteria` | Backup inventory and maintenance signals run in `maintenance`. | +| Media client | Pegasus / `bstein/pegasus` | Correlate with Jellyfin and OIDC dependencies. | +| Cluster sentinel | Metis / `bstein/metis` | Runs through the maintenance stack. | +| User and service automation | Ananke / `bstein/ananke` | In-scope CI suite and custom software. | +| Chat automation | Atlasbot / `bstein/atlasbot` | In-scope CI suite and custom software. | +| Public site | bstein_home / `bstein/bstein-dev-home` | Canonical metric suite uses underscore form. | +| Data Prepper integration | data_prepper / `bstein/titan-iac` | Pipeline is under `services/logging`. | +| Desktop test application | Lesavka / `bstein/lesavka` | Test suite is in scope; some runtime evidence may come from titan-jh. | +| Hermes operator | `hermes` namespace / `services/hermes` | Read-only cluster operator with Codex primary and local fallback. | +| Hermes consumer chat | `hermes-chat` namespace / `services/hermes-chat` | Isolated from cluster operation; do not use it for infrastructure triage. | + +Canonical CI suites are `ananke`, `ariadne`, `atlasbot`, `bstein_home`, `data_prepper`, `lesavka`, `metis`, `pegasus`, `soteria`, and `titan_iac`. diff --git a/services/hermes/skills/tune-atlas-alerts/SKILL.md b/services/hermes/skills/tune-atlas-alerts/SKILL.md new file mode 100644 index 00000000..74a72866 --- /dev/null +++ b/services/hermes/skills/tune-atlas-alerts/SKILL.md @@ -0,0 +1,39 @@ +--- +name: tune-atlas-alerts +description: Audit and tune noisy Atlas Grafana alerts using live VictoriaMetrics evidence, Grafana notification history, persistence, minimum sample sizes, and generator ownership. Use when alerts are over-aggressive, a panel is red without user impact, PromQL behaves impossibly, or a Flux-tracked alert/dashboard correction is needed. +--- + +# Tune Atlas Alerts + +Reduce false positives without hiding real failures. Read `references/alert-review.md` before recommending a rule change. + +## Audit the signal + +1. Find the provisioned rule in `services/monitoring/grafana-alerting-config.yaml`. +2. If the issue is a dashboard panel, find its Python source in `scripts/dashboards_render_atlas.py`; never hand-edit generated JSON or ConfigMaps. +3. Query the exact PromQL against VictoriaMetrics and inspect the labels and raw inputs. +4. Compare current value, recent history, notification frequency, and a second source such as Kubernetes events or service metrics. +5. Classify the problem as bad math, lifetime-versus-rate confusion, missing persistence, low sample size, duplicate series, retired scope, rollout noise, real backlog, or real incident. + +Useful read-only commands: + +```sh +curl -G -fsS --data-urlencode 'query=' "$VICTORIA_METRICS_URL/api/v1/query" +kubectl -n monitoring logs deploy/grafana --since=24h +kubectl -n monitoring get configmap grafana-alerting-config -o yaml +kubectl -n get events --sort-by=.lastTimestamp +``` + +## Design the correction + +- Use `rate`, `increase`, or `delta` according to counter/gauge semantics; clamp percentages to 0..100. +- Require persistence for startup, rollout, and scheduling conditions. +- Add a minimum denominator and absolute count to percentage alerts with small samples. +- Alert on configured resources that regressed; keep unenrolled inventory visible as backlog instead of paging continuously. +- Exclude retired or migrated resources from high-level health, while retaining them on detailed dashboards. +- Deduplicate replicas and scrape targets using stable service/workload labels. +- Preserve a drill-down path to the raw evidence. + +Validate changed PromQL live, run the dashboard generator, test the generator, render the monitoring kustomization, and use a client-side dry-run. Report before/after values and what failure will still trigger the rule. + +Hermes is read-only in the cluster. Draft or explain repo changes and mark reconcile or deployment actions as approval-required. diff --git a/services/hermes/skills/tune-atlas-alerts/references/alert-review.md b/services/hermes/skills/tune-atlas-alerts/references/alert-review.md new file mode 100644 index 00000000..7468ffa6 --- /dev/null +++ b/services/hermes/skills/tune-atlas-alerts/references/alert-review.md @@ -0,0 +1,16 @@ +# Alert review checklist + +For every alert, record: + +1. User impact or operator action the alert demands. +2. Metric type: counter, gauge, timestamp, state marker, or recording rule. +3. Scope and deduplication labels. +4. Persistence window and startup grace. +5. Minimum sample size for ratios. +6. No-data and query-error behavior. +7. Current value and a recent range query. +8. Notification frequency in Grafana logs. +9. Current, migrated, suspended, or historical resource status. +10. Exact Flux-tracked source, generated artifacts, tests, and rollback condition. + +A rule is useful only when its firing state implies a specific human action. Backlogs and unenrolled resources belong on dashboards unless they have crossed an explicitly accepted operational deadline. From e306506eb0edd5e72f5f44236e629539275a66f6 Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 04:02:30 -0300 Subject: [PATCH 729/991] chore(cassandra): resuspend completed secret bootstrap --- .../cassandra/bootstrap-jobs/cassandra-secrets-ensure-job.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/bootstrap-jobs/cassandra-secrets-ensure-job.yaml b/services/cassandra/bootstrap-jobs/cassandra-secrets-ensure-job.yaml index 4417916f..7c4b3f06 100644 --- a/services/cassandra/bootstrap-jobs/cassandra-secrets-ensure-job.yaml +++ b/services/cassandra/bootstrap-jobs/cassandra-secrets-ensure-job.yaml @@ -8,7 +8,7 @@ metadata: name: cassandra-secrets-ensure-3 namespace: cassandra spec: - suspend: false + suspend: true backoffLimit: 0 ttlSecondsAfterFinished: 3600 template: From 8e7327a7ef441438d93b04afd24faa4926cb8cc8 Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 04:05:33 -0300 Subject: [PATCH 730/991] fix(monitoring): reload provisioned Grafana rules --- services/monitoring/helmrelease.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/monitoring/helmrelease.yaml b/services/monitoring/helmrelease.yaml index f976dbb5..6fd6d1ff 100644 --- a/services/monitoring/helmrelease.yaml +++ b/services/monitoring/helmrelease.yaml @@ -343,7 +343,7 @@ spec: vault.hashicorp.com/agent-requests-mem: "64Mi" vault.hashicorp.com/agent-limits-cpu: "250m" vault.hashicorp.com/agent-limits-mem: "128Mi" - monitoring.bstein.dev/restart-rev: "12" + monitoring.bstein.dev/restart-rev: "13" vault.hashicorp.com/agent-inject-secret-grafana-env.sh: "kv/data/atlas/monitoring/grafana-admin" vault.hashicorp.com/agent-inject-template-grafana-env.sh: | {{ with secret "kv/data/atlas/monitoring/grafana-admin" }} From 17ea531d803748ea729a5771dc810a8dd205e1b1 Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 04:13:59 -0300 Subject: [PATCH 731/991] fix(hermes): classify Veles as migration residue --- .../hermes/skills/triage-atlas-service-health/SKILL.md | 8 ++++++-- .../triage-atlas-service-health/references/service-map.md | 2 +- 2 files changed, 7 insertions(+), 3 deletions(-) diff --git a/services/hermes/skills/triage-atlas-service-health/SKILL.md b/services/hermes/skills/triage-atlas-service-health/SKILL.md index 934a2957..f3db0ff4 100644 --- a/services/hermes/skills/triage-atlas-service-health/SKILL.md +++ b/services/hermes/skills/triage-atlas-service-health/SKILL.md @@ -19,7 +19,11 @@ Investigate read-only, group symptoms into incidents, and recommend the smallest kubectl -n flux-system get kustomizations.kustomize.toolkit.fluxcd.io ``` -3. Treat Cassandra as authoritative for functionality migrated from Veles. Report Veles failures as migration residue unless a live route or dependency proves current impact. +3. Cassandra is authoritative for functionality migrated from Veles. Veles is + retired migration residue: its failed pods, old Jobs, and legacy Service or + Ingress objects are not current user impact. Escalate Veles only when direct + evidence proves Cassandra still depends on it or the Veles-to-Cassandra + redirect itself is failing. ## Decide whether the signal is actionable @@ -29,7 +33,7 @@ Use all of these checks before calling something an incident: - Persistence: ignore normal startup states under 15 minutes unless users are already affected. - Ownership: group replica pods by Deployment, StatefulSet, DaemonSet, Job, or CronJob. - Delivery: a Flux object with `Ready=null` may be reconciling; `Ready=false` or a suspended required object is actionable. -- Authority: separate current workloads from retired, migrated, or deliberately suspended resources. +- Authority: separate current workloads from retired, migrated, or deliberately suspended resources. Never describe Veles as unavailable or degraded user-facing service merely because its retained pods are unhealthy. - Correlation: confirm a red Grafana panel with the underlying metric and at least one independent source such as events, logs, readiness, or Flux state. Run the narrowest relevant checks: diff --git a/services/hermes/skills/triage-atlas-service-health/references/service-map.md b/services/hermes/skills/triage-atlas-service-health/references/service-map.md index bd43cd24..f8eefafb 100644 --- a/services/hermes/skills/triage-atlas-service-health/references/service-map.md +++ b/services/hermes/skills/triage-atlas-service-health/references/service-map.md @@ -7,7 +7,7 @@ Use this map for ownership and canonical names. Discover third-party services li | Cluster automation and state analysis | Ariadne / `bstein/Ariadne` | Runs in `maintenance`; provides deterministic triage bundles. | | Quality policy and CI telemetry | titan-iac / `bstein/titan-iac` | Owns Jenkins configuration, Grafana generators, alert provisioning, and Data Prepper pipeline. | | Simulation registry and execution | Cassandra / Cassandra application repository | Cassandra is authoritative after the Veles migration. | -| Legacy simulation stack | Veles | Retained migration residue; do not call it a current outage without dependency evidence. | +| Legacy simulation stack | Veles | Retired migration residue. Pod failures are not current impact; only a proven Cassandra dependency or broken redirect is actionable. | | Backup and maintenance policy | Soteria / `bstein/soteria` | Backup inventory and maintenance signals run in `maintenance`. | | Media client | Pegasus / `bstein/pegasus` | Correlate with Jellyfin and OIDC dependencies. | | Cluster sentinel | Metis / `bstein/metis` | Runs through the maintenance stack. | From 82ef5f9444266efebe64c26c7bb840611c52faa5 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 07:18:05 +0000 Subject: [PATCH 732/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 897aee3d..011461ff 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-382 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-384 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-266-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From 225f33df89d3a192cbba6e1ed285535011274b34 Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 04:30:16 -0300 Subject: [PATCH 733/991] docs(hermes): publish Atlas triage proofs --- services/hermes/configmap.yaml | 70 ++++++++++++++++++++++++++++++++- services/hermes/deployment.yaml | 3 +- 2 files changed, 71 insertions(+), 2 deletions(-) diff --git a/services/hermes/configmap.yaml b/services/hermes/configmap.yaml index 8344000e..8c397638 100644 --- a/services/hermes/configmap.yaml +++ b/services/hermes/configmap.yaml @@ -52,7 +52,7 @@ data: home_mode: auto approvals: - mode: manual + mode: smart deny: - "*kubectl apply*" - "*kubectl delete*" @@ -231,9 +231,77 @@ data: - Root-disk growth, Soteria backup, Ariadne schedule, Postmark bounce, and CPU alerts use actionable semantics and guardrails. + The evidence and verification for these changes are in + `triage-proof/ATLAS-TRIAGE-PROOFS.md`. + ## Good next prompts - `Use $triage-atlas-service-health. What is broken right now?` - `Use $triage-titan-test-failures. Triage the worst current suite.` - `Use $tune-atlas-alerts. Audit alerts fired in the last 24 hours.` - `Save this investigation as a reusable skill after I approve the pattern.` + ATLAS-TRIAGE-PROOFS.md: | + # Atlas triage proofs + + This file is the short evidence trail for what Hermes can do today. The + operator skills remain read-only: fixes are reviewed and delivered through + Git and Flux. + + ## Proof 1: Cassandra secret-sync recovery + + - Finding: `cassandra-vault-sync` was stuck because the expected + `VELES_BYOK_ENCRYPTION_KEY` migration input was absent from Cassandra's + Vault path. + - Action: the existing Flux-tracked, suspended one-shot migration Job was + enabled, completed successfully, and immediately returned to suspended. + - Verification: Cassandra frontend, backend, PostgreSQL, and Vault sync all + became Ready. No Kubernetes Secret value was read or committed. + - Why this matters: Hermes can correlate workload state, logs, Vault policy + manifests, and migration ownership without confusing Veles residue with + a current Veles outage. + + ## Proof 2: Grafana alert-noise correction + + - Removed retired Veles pods and completed Jobs from high-level incident + counts while preserving them on drill-down dashboards. + - Added 15-minute persistence to Pending, CrashLoopBackOff, and image-pull + summaries. + - Replaced invalid `increase()` use on gauges, bounded CPU percentages, + required meaningful Postmark sample sizes, and scoped Soteria/Ariadne + alerts to configured current work. + - Live verification on 2026-08-03: `Problem Pods=0`, + `CrashLoop/ImagePull=0`, and `Workers Ready=18/18`. + + ## Proof 3: all-suite testing triage + + - Ariadne build 384 passed 676 tests and the exact coverage contract: + 82 source files at or above 95%. + - Deployed image: `registry.bstein.dev/bstein/ariadne:0.1.0-384`. + - The deterministic bundle covers Ananke, Ariadne, Atlasbot, bstein_home, + data_prepper, Lesavka, Metis, Pegasus, Soteria, and titan_iac. + - Zero-valued quality metrics are healthy, running Jenkins builds are + in-progress, old failed Jobs are historical, and Veles objects are + migration residue. They no longer inflate the active failure set. + - Failed builds still include direct Jenkins console and retained artifact + links so Hermes can identify the first failed gate and smallest repo fix. + + ## Proof 4: Cassandra generator failure classification + + - Finding: the Cassandra serving path is healthy, but generation Job + `cassandra-generator-3ce198971b` failed. + - Evidence: the primary OpenAI request returned HTTP 429 because its credit + balance was exhausted. Codex CLI fallback ran, but the strict promotion + gate still rejected unresolved high-impact hint claims and blocked the + semantic scenarios. + - Impact: one generation capability/request failed; this is not a Cassandra + registry outage and not a Veles outage. + - Next action: restore provider credits or continue through Codex fallback, + then resolve the reported hint claims before retrying. This needs operator + approval because it can spend money or rerun an expensive generation. + + ## Use Hermes next + + - `What is broken in the cluster right now?` + - `Triage the worst current CI suite and link the evidence.` + - `Audit Grafana alerts from the last 24 hours and separate incidents from noise.` + - `Explain the Cassandra generator failure and give me the smallest safe next step.` diff --git a/services/hermes/deployment.yaml b/services/hermes/deployment.yaml index 9634570c..8fa2ec2b 100644 --- a/services/hermes/deployment.yaml +++ b/services/hermes/deployment.yaml @@ -24,7 +24,7 @@ spec: ai.bstein.dev/model: openai-codex/gpt-5.6-terra with local gpt-oss:20b fallback ai.bstein.dev/role: testing-triage ai.bstein.dev/placement: arm64 gateway lane (rpi5 preferred) - ai.bstein.dev/config-rev: "20260803-service-triage-and-alert-skills" + ai.bstein.dev/config-rev: "20260803-triage-proofs-and-smart-approvals" spec: serviceAccountName: hermes-triage automountServiceAccountToken: true @@ -88,6 +88,7 @@ spec: cp /config/AGENTS.md /opt/data/workspace/AGENTS.md cp /config/START-HERE.md /opt/data/workspace/START-HERE.md cp /config/HERMES-CAPABILITIES.md /opt/data/workspace/HERMES-CAPABILITIES.md + cp /config/ATLAS-TRIAGE-PROOFS.md /opt/data/workspace/triage-proof/ATLAS-TRIAGE-PROOFS.md touch /opt/data/.env if ! grep -q '^API_SERVER_KEY=' /opt/data/.env; then api_key="$(dd if=/dev/urandom bs=32 count=1 2>/dev/null | od -An -tx1 | tr -d ' \n')" From 961be498fabc4cd218f6302ed30dad6e42924728 Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 04:37:07 -0300 Subject: [PATCH 734/991] docs(hermes): map custom service runtimes --- services/hermes/configmap.yaml | 10 ++++++ services/hermes/deployment.yaml | 2 +- .../references/service-map.md | 32 +++++++++---------- .../triage-titan-test-failures/SKILL.md | 5 +++ 4 files changed, 32 insertions(+), 17 deletions(-) diff --git a/services/hermes/configmap.yaml b/services/hermes/configmap.yaml index 8c397638..51debef5 100644 --- a/services/hermes/configmap.yaml +++ b/services/hermes/configmap.yaml @@ -299,6 +299,16 @@ data: then resolve the reported hint claims before retrying. This needs operator approval because it can spend money or rerun an expensive generation. + ## Proof 5: live Hermes Soteria triage + + - Hermes read the fresh 2026-08-03 Ariadne bundle without an approval + timeout and chose Soteria build 270 as the worst terminal failure. + - It proved that all 318 tests passed and local coverage was 96.195%, then + isolated the enforced failure to SonarQube reporting new-code coverage + as 0.0%. It did not blame the optional supply-chain advisory. + - It kept running titan-iac, Data Prepper, and Lesavka builds out of the + terminal-failure list and requested approval before any rerun or edit. + ## Use Hermes next - `What is broken in the cluster right now?` diff --git a/services/hermes/deployment.yaml b/services/hermes/deployment.yaml index 8fa2ec2b..a09c54b7 100644 --- a/services/hermes/deployment.yaml +++ b/services/hermes/deployment.yaml @@ -24,7 +24,7 @@ spec: ai.bstein.dev/model: openai-codex/gpt-5.6-terra with local gpt-oss:20b fallback ai.bstein.dev/role: testing-triage ai.bstein.dev/placement: arm64 gateway lane (rpi5 preferred) - ai.bstein.dev/config-rev: "20260803-triage-proofs-and-smart-approvals" + ai.bstein.dev/config-rev: "20260803-all-service-triage-map" spec: serviceAccountName: hermes-triage automountServiceAccountToken: true diff --git a/services/hermes/skills/triage-atlas-service-health/references/service-map.md b/services/hermes/skills/triage-atlas-service-health/references/service-map.md index f8eefafb..9d0105f1 100644 --- a/services/hermes/skills/triage-atlas-service-health/references/service-map.md +++ b/services/hermes/skills/triage-atlas-service-health/references/service-map.md @@ -2,21 +2,21 @@ Use this map for ownership and canonical names. Discover third-party services live from Flux and Kubernetes. -| Capability | Canonical workload/repository | Notes | -| --- | --- | --- | -| Cluster automation and state analysis | Ariadne / `bstein/Ariadne` | Runs in `maintenance`; provides deterministic triage bundles. | -| Quality policy and CI telemetry | titan-iac / `bstein/titan-iac` | Owns Jenkins configuration, Grafana generators, alert provisioning, and Data Prepper pipeline. | -| Simulation registry and execution | Cassandra / Cassandra application repository | Cassandra is authoritative after the Veles migration. | -| Legacy simulation stack | Veles | Retired migration residue. Pod failures are not current impact; only a proven Cassandra dependency or broken redirect is actionable. | -| Backup and maintenance policy | Soteria / `bstein/soteria` | Backup inventory and maintenance signals run in `maintenance`. | -| Media client | Pegasus / `bstein/pegasus` | Correlate with Jellyfin and OIDC dependencies. | -| Cluster sentinel | Metis / `bstein/metis` | Runs through the maintenance stack. | -| User and service automation | Ananke / `bstein/ananke` | In-scope CI suite and custom software. | -| Chat automation | Atlasbot / `bstein/atlasbot` | In-scope CI suite and custom software. | -| Public site | bstein_home / `bstein/bstein-dev-home` | Canonical metric suite uses underscore form. | -| Data Prepper integration | data_prepper / `bstein/titan-iac` | Pipeline is under `services/logging`. | -| Desktop test application | Lesavka / `bstein/lesavka` | Test suite is in scope; some runtime evidence may come from titan-jh. | -| Hermes operator | `hermes` namespace / `services/hermes` | Read-only cluster operator with Codex primary and local fallback. | -| Hermes consumer chat | `hermes-chat` namespace / `services/hermes-chat` | Isolated from cluster operation; do not use it for infrastructure triage. | +| Capability | Canonical workload/repository | Runtime location | Notes | +| --- | --- | --- | --- | +| Cluster automation and state analysis | Ariadne / `bstein/Ariadne` | `maintenance/ariadne` | Provides deterministic triage bundles. | +| Quality policy and CI telemetry | titan-iac / `bstein/titan-iac` | Jenkins plus Flux; no single app Deployment | Owns Jenkins configuration, Grafana generators, alert provisioning, and the Data Prepper pipeline. | +| Simulation registry and execution | Cassandra / Cassandra application repository | `cassandra/cassandra-frontend`, `cassandra-backend`, `cassandra-postgres`, `cassandra-vault-sync` | Cassandra is authoritative after the Veles migration. | +| Legacy simulation stack | Veles | `veles` namespace | Retired migration residue. Pod failures are not current impact; only a proven Cassandra dependency or broken redirect is actionable. | +| Backup and maintenance policy | Soteria / `bstein/soteria` | `maintenance/soteria` | Correlate CI failures separately from runtime backup health. | +| Media client | Pegasus / `bstein/pegasus` | `jellyfin/pegasus` | Correlate with Jellyfin and OIDC dependencies. | +| Cluster sentinel | Metis / `bstein/metis` | `maintenance/metis` plus sentinel DaemonSets | Distinguish controller health from per-node sentinel evidence. | +| User and service automation | Ananke / `bstein/ananke` | No current dedicated in-cluster Deployment | Treat its Jenkins suite as the authoritative runtime evidence unless discovery proves otherwise. | +| Chat automation | Atlasbot / `bstein/atlasbot` | `comms/atlasbot` | Correlate with comms and OIDC dependencies. | +| Public site | bstein_home / `bstein/bstein-dev-home` | `bstein-dev-home` frontend, backend, and Vault sync | Canonical metric suite uses underscore form. | +| Data Prepper integration | data_prepper / `bstein/titan-iac` | `logging/data-prepper` | Pipeline is under `services/logging`. | +| Desktop test application | Lesavka / `bstein/lesavka` | Desktop test host, not a normal Kubernetes Deployment | Test suite is in scope; runtime evidence may come from titan-jh. | +| Hermes operator | `hermes` namespace / `services/hermes` | `hermes/hermes`, model gate, and Ollama | Read-only cluster operator with Codex primary and local fallback. | +| Hermes consumer chat | `hermes-chat` namespace / `services/hermes-chat` | `hermes-chat/hermes-chat` | Isolated from cluster operation; do not use it for infrastructure triage. | Canonical CI suites are `ananke`, `ariadne`, `atlasbot`, `bstein_home`, `data_prepper`, `lesavka`, `metis`, `pegasus`, `soteria`, and `titan_iac`. diff --git a/services/hermes/skills/triage-titan-test-failures/SKILL.md b/services/hermes/skills/triage-titan-test-failures/SKILL.md index 7cd837c7..013ede38 100644 --- a/services/hermes/skills/triage-titan-test-failures/SKILL.md +++ b/services/hermes/skills/triage-titan-test-failures/SKILL.md @@ -37,6 +37,11 @@ Treat Ariadne's bundle as the evidence source of truth. A local-model diagnosis - Ariadne runs as the `ariadne` Deployment and Service in the `maintenance` namespace. - Hermes local inference runs through `hermes-model-gate` in the `hermes` namespace. Ollama is the `hermes-ollama` Deployment and Service in that namespace. - OpenClaw is not part of this inference path. Never suggest an `openclaw` resource unless a read-only query first proves one exists. +- Custom runtime namespaces do not always match suite names. In particular, + Soteria, Metis, and Ariadne run in `maintenance`; Pegasus runs in `jellyfin`; + Atlasbot runs in `comms`; Data Prepper runs in `logging`; and Lesavka is a + desktop-hosted application. Read the service-health skill's + `references/service-map.md` before claiming that a suite has no runtime. - A connection error recorded inside an older diagnosis proves only that the model request failed at that timestamp. It does not prove the service is currently down. - Never invent a namespace, workload, container, port, URL, log line, metric, commit, or pod condition. Verify a target with a read-only query before presenting an exact follow-up command; otherwise state what must be discovered first. - HTTP POST collection and diagnosis endpoints are state-changing operations. Put them only under `Approval required`; never describe them as read-only or include them in the read-only command list. From 6b7018e1cceca9291c0d8b715bf8f42538a5caed Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 07:38:04 +0000 Subject: [PATCH 735/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index d0e101fa..cfa59933 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.131 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.132 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 945b7ebcf2eae1e4017235bf4729e468e9eb145e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 07:38:08 +0000 Subject: [PATCH 736/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 79587064..04c6cd4b 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.131 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.132 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.131 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.132 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 40086374..2e185294 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.131 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.132 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 02fd13c9f6aa47f6cb7c8ba8fa9d850457622768 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 07:41:06 +0000 Subject: [PATCH 737/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 04c6cd4b..cee7aa66 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.131 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.132 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.131 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 458f67a5..709b1162 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.131 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.132 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.131 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.131" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.131" From d2058ffee58036814aff95b119e6b73f9e14778a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 07:43:05 +0000 Subject: [PATCH 738/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index cee7aa66..d4a97598 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.132 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.131 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.132 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 709b1162..af5ebfb5 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.132 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.131 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.132 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.131" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.131" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 0b9bde11f5b0e058b0c3529fe7689a55d616d3ec Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 04:43:14 -0300 Subject: [PATCH 739/991] Deploy Cassandra 0.8.132 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index d4a97598..284599ba 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-03-0.8.131-exact-hint-facts" + cassandra.bstein.dev/redeploy: "2026-08-03-0.8.132-hint-adjudication" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index af5ebfb5..917079d8 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.132 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.132 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.131" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.131" + CASSANDRA_SIM_WORKER_VERSION: "0.8.132" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.132" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From 582fb042fd5401b652663605bb4c12ae74db7ca0 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 08:20:08 +0000 Subject: [PATCH 740/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index cfa59933..1ecc511b 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.132 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.133 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From c8a90dcfa149dc78e211c3b001bdbe03bdfa83f1 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 08:20:14 +0000 Subject: [PATCH 741/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 284599ba..56cfa540 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.132 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.133 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.132 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.133 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 2e185294..9d26a3d6 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.132 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.133 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 8af8bca6e2e04703ea170b87d42cccda006ae3b7 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 08:24:13 +0000 Subject: [PATCH 742/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 56cfa540..6fc7f1b0 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.132 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.133 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.132 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 917079d8..65713d47 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.132 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.133 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.132 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.132" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.132" From 6cd586667d6cc1c7cddad2dc4d3b6838fed74382 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 08:25:10 +0000 Subject: [PATCH 743/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 6fc7f1b0..a94af44e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.133 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.132 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.133 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 65713d47..a281209e 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.133 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.132 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.133 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.132" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.132" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 4c69544b943757ed0ee44fdca2afc3d0bdef3f65 Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 05:26:50 -0300 Subject: [PATCH 744/991] Deploy Cassandra 0.8.133 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index a94af44e..95795ad6 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-03-0.8.132-hint-adjudication" + cassandra.bstein.dev/redeploy: "2026-08-03-0.8.133-architecture-ir" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index a281209e..34708261 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.133 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.133 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.132" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.132" + CASSANDRA_SIM_WORKER_VERSION: "0.8.133" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.133" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From 0e7490cd84688c68b9e847e98e8d953212a5d4d5 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 09:42:24 +0000 Subject: [PATCH 745/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 3de04a22..2f038437 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -20,7 +20,7 @@ resources: - ingress.yaml images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend - newTag: 0.1.1-438 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} + newTag: 0.1.1-440 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend newTag: 0.1.1-438 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: From 67d9f6c54185278d7986c792811cce6f6d6e3987 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 09:43:18 +0000 Subject: [PATCH 746/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 1ecc511b..10adbe48 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.133 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.134 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 02aa8b39ba42c4188cbbd0d30c4c6c19c433f525 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 09:43:25 +0000 Subject: [PATCH 747/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 95795ad6..efb7a71d 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.133 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.134 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.133 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.134 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 9d26a3d6..d782aac1 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.133 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.134 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From db5cf82744807a56041168439808c9130ab714bd Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 09:43:32 +0000 Subject: [PATCH 748/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 2f038437..487f20a8 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -22,7 +22,7 @@ images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend newTag: 0.1.1-440 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend - newTag: 0.1.1-438 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} + newTag: 0.1.1-440 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: - name: chat-ai-gateway namespace: bstein-dev-home From 16ea6bfc578d89fbbe6d2e3f92545728e7e18ca3 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 09:46:22 +0000 Subject: [PATCH 749/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index efb7a71d..ea34e06a 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.133 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.134 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.133 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 34708261..5bf52c8e 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.133 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.134 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.133 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.133" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.133" From 6e502b7bd6ce8c1da5ccbbf8d70fc88bc0bb18e9 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 09:48:19 +0000 Subject: [PATCH 750/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index ea34e06a..602cf2a1 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.134 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.133 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.134 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 5bf52c8e..29df23ad 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.134 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.133 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.134 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.133" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.133" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From a34c1aad07587289d10e0f03a191a588ea8ffed6 Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 06:49:09 -0300 Subject: [PATCH 751/991] Deploy Cassandra 0.8.134 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 602cf2a1..287e4f0d 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-03-0.8.133-architecture-ir" + cassandra.bstein.dev/redeploy: "2026-08-03-0.8.134-semantic-probes" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 29df23ad..fa364833 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.134 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.134 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.133" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.133" + CASSANDRA_SIM_WORKER_VERSION: "0.8.134" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.134" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From ec4eb9309779113bb631cf391dfa8574bdbee41c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 10:41:32 +0000 Subject: [PATCH 752/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 287e4f0d..6b1f0085 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.134 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.135 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.134 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.135 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index d782aac1..8557c6f2 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.134 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.135 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From c64bcd22f8c2d092e80333967e1ea8a750b963e5 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 10:42:24 +0000 Subject: [PATCH 753/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 10adbe48..27ba3c7a 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.134 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.135 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From cdf07ae7c435216af672c816186719bafa973902 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 10:45:28 +0000 Subject: [PATCH 754/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 6b1f0085..dc944211 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.134 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.135 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.134 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index fa364833..b8ad8d20 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.134 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.135 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.134 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.134" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.134" From 5709bf552ac8948523572d5dc5c5c23933b78778 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 10:46:26 +0000 Subject: [PATCH 755/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index dc944211..a10ea389 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.135 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.134 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.135 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index b8ad8d20..57016990 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.135 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.134 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.135 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.134" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.134" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 5825476e8e19c051bb23e6068a089e77c9c4ba07 Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 07:49:18 -0300 Subject: [PATCH 756/991] Deploy Cassandra 0.8.135 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index a10ea389..a118fd70 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-03-0.8.134-semantic-probes" + cassandra.bstein.dev/redeploy: "2026-08-03-0.8.135-typed-lane-runtime" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 57016990..5c5bf0e1 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.135 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.135 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.134" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.134" + CASSANDRA_SIM_WORKER_VERSION: "0.8.135" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.135" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From ba5d7e7c349dcaaca2edab20e08acd3370c213a8 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 11:25:34 +0000 Subject: [PATCH 757/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index a118fd70..49136e93 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.135 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.136 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.135 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.136 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 8557c6f2..4a9f4600 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.135 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.136 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From aaa6a97cfc8f226ca15bf7d290a5eac458be42aa Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 11:26:30 +0000 Subject: [PATCH 758/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 27ba3c7a..4e3d59d8 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.135 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.136 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 9a36a1672a82cc311dfd4c33f9975c93274a94c0 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 11:29:33 +0000 Subject: [PATCH 759/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 49136e93..931084fd 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.135 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.136 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.135 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 5c5bf0e1..76292599 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.135 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.136 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.135 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.135" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.135" From 977fb0639158d44500f54004f688fc44ef57994c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 11:31:31 +0000 Subject: [PATCH 760/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 931084fd..d7fe4a4d 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.136 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.135 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.136 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 76292599..4d327872 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.136 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.135 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.136 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.135" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.135" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From e447dfae78e246526bd8ec8b2a795ef8280fba7c Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 08:38:58 -0300 Subject: [PATCH 761/991] Deploy Cassandra 0.8.136 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index d7fe4a4d..dbc02fa5 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-03-0.8.135-typed-lane-runtime" + cassandra.bstein.dev/redeploy: "2026-08-03-0.8.136-advisory-claim-rendering" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 4d327872..b56f1de2 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.136 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.136 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.135" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.135" + CASSANDRA_SIM_WORKER_VERSION: "0.8.136" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.136" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From 2d248a6fba5508858a3e99d5766ec230db91644f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 12:43:39 +0000 Subject: [PATCH 762/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 4e3d59d8..7bc377d5 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.136 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.137 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From d548e80f46f8bcbeae44a3e355ad63ee8df2249d Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 12:43:44 +0000 Subject: [PATCH 763/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index dbc02fa5..821c5c8d 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.136 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.137 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.136 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.137 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 4a9f4600..a61f8c4a 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.136 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.137 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From a6817fb45a8e6fa4b4b98c7ec06b2fa24bee65c2 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 12:46:42 +0000 Subject: [PATCH 764/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 821c5c8d..9fd35336 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.136 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.137 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.136 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index b56f1de2..197b2375 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.136 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.137 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.136 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.136" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.136" From 6876fae96206f45c220aa0b86d282f628cf5a8c4 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 12:48:40 +0000 Subject: [PATCH 765/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 9fd35336..720c399e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.137 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.136 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.137 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 197b2375..fe2af98f 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.137 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.136 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.137 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.136" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.136" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 098bff501500acf4d4fe0f15f1a51c38df2bf92a Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 09:49:45 -0300 Subject: [PATCH 766/991] Deploy Cassandra 0.8.137 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 720c399e..88c77257 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-03-0.8.136-advisory-claim-rendering" + cassandra.bstein.dev/redeploy: "2026-08-03-0.8.137-typed-connection-semantics" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index fe2af98f..4adff06b 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.137 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.137 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.136" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.136" + CASSANDRA_SIM_WORKER_VERSION: "0.8.137" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.137" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From e78c8cf7618d5fb1462f0a61e7d7fb2f3552219b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 13:06:44 +0000 Subject: [PATCH 767/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 88c77257..f0083cc8 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.137 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.138 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.137 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.138 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index a61f8c4a..0c7c798f 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.137 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.138 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 55ae72a3c67f6c62ee6d5530093a8d5e989397f7 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 13:07:45 +0000 Subject: [PATCH 768/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 7bc377d5..39a53906 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.137 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.138 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 4d186866bd1668d958056a79741dbad37bed9f70 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 13:10:44 +0000 Subject: [PATCH 769/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index f0083cc8..ae9c49a9 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.137 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.138 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.137 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 4adff06b..66c1a91b 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.137 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.138 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.137 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.137" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.137" From f8b0a20a4c3aad7808c3ff604f1b4b95556893ef Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 13:11:42 +0000 Subject: [PATCH 770/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index ae9c49a9..1a096a7f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.138 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.137 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.138 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 66c1a91b..a09ebb50 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.138 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.137 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.138 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.137" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.137" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From feaf65cd0c70f1d74a71939b679faa2ea5f3af2a Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 10:13:39 -0300 Subject: [PATCH 771/991] Deploy Cassandra 0.8.138 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 1a096a7f..5aee4be4 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-03-0.8.137-typed-connection-semantics" + cassandra.bstein.dev/redeploy: "2026-08-03-0.8.138-cancellation-aware-worker" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index a09ebb50..928f2040 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.138 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.138 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.137" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.137" + CASSANDRA_SIM_WORKER_VERSION: "0.8.138" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.138" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From d5d97bfaef95010aa5e4a0384a3edc3d62460ff0 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 13:39:48 +0000 Subject: [PATCH 772/991] chore(maintenance): automated image update --- services/maintenance/metis-configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 4898c616..65fc2c6a 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -15,7 +15,7 @@ data: METIS_MAX_DEVICE_BYTES: "1000000000000" METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" - METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-266-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} + METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-267-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-266-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis From 06b3e8d40da91de2758b3198d4c00989aab542cd Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 13:41:50 +0000 Subject: [PATCH 773/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-amd64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-amd64-daemonset.yaml b/services/maintenance/metis-sentinel-amd64-daemonset.yaml index 0b713466..b6b85cf5 100644 --- a/services/maintenance/metis-sentinel-amd64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-amd64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: amd64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-266-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-267-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} imagePullPolicy: Always envFrom: - configMapRef: From 16bc489e862c848d4150a5f4bf7b688e4578167c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 13:42:49 +0000 Subject: [PATCH 774/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- services/maintenance/metis-configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 011461ff..8f81a5d0 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -54,7 +54,7 @@ images: - name: registry.bstein.dev/bstein/ariadne newTag: 0.1.0-384 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis - newTag: 0.1.0-266-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} + newTag: 0.1.0-267-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria newTag: 0.1.0-120 # {"$imagepolicy": "maintenance:soteria:tag"} configMapGenerator: diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 65fc2c6a..9efc43e9 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -16,7 +16,7 @@ data: METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-267-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} - METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-266-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} + METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-267-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0 From c3cb6bc941dbbc7e74ac6f01c3071a403a3fb932 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 13:43:50 +0000 Subject: [PATCH 775/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-arm64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-arm64-daemonset.yaml b/services/maintenance/metis-sentinel-arm64-daemonset.yaml index 805e00d6..589e74fb 100644 --- a/services/maintenance/metis-sentinel-arm64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-arm64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: arm64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-266-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-267-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} imagePullPolicy: Always envFrom: - configMapRef: From 8407f6a6f5adc504d1973d531ad74969415728bc Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 14:20:50 +0000 Subject: [PATCH 776/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 39a53906..d4e61f1e 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.138 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.139 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 869e23b532143eaa0d0de0f3a921ce5c9fcab76f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 14:20:54 +0000 Subject: [PATCH 777/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 5aee4be4..55eb2ca7 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.138 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.139 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.138 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.139 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 0c7c798f..b4b88339 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.138 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.139 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 67ec01ea89c9932ffa64166de452135da8733435 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 14:23:52 +0000 Subject: [PATCH 778/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 55eb2ca7..539f071a 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.138 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.139 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.138 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 928f2040..9aa6ea5a 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.138 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.139 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.138 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.138" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.138" From 507b9956aae1fe7f138ccb86b739e08de36bcca1 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 14:24:50 +0000 Subject: [PATCH 779/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 539f071a..04b86eb2 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.139 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.138 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.139 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 9aa6ea5a..42bf4681 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.139 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.138 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.139 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.138" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.138" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From d589c8dc8fdaaed2cb21b34306d8d22d3d1984ce Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 11:26:17 -0300 Subject: [PATCH 780/991] Deploy Cassandra 0.8.139 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 04b86eb2..4a0455df 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-03-0.8.138-cancellation-aware-worker" + cassandra.bstein.dev/redeploy: "2026-08-03-0.8.139-source-zone-semantics" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 42bf4681..75cc14e8 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.139 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.139 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.138" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.138" + CASSANDRA_SIM_WORKER_VERSION: "0.8.139" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.139" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From df9b6e0b62566ac723d8c4c87506ef94bc00701a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 15:31:02 +0000 Subject: [PATCH 781/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 4a0455df..99d26603 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.139 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.140 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.139 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.140 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index b4b88339..d58ec926 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.139 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.140 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From f83c414eaa574e043100d7b831b24190829ac4ed Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 15:31:57 +0000 Subject: [PATCH 782/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index d4e61f1e..6e4c704a 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.139 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.140 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 6bc1f4c4054afe0ca6eee615cc3e924af821c9d7 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 15:35:01 +0000 Subject: [PATCH 783/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 99d26603..5884c50d 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.139 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.140 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.139 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 75cc14e8..79981e5f 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.139 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.140 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.139 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.139" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.139" From e69bc265f1e66895a795dc1ed3ab8a923271ff5b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 15:36:58 +0000 Subject: [PATCH 784/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 5884c50d..f7c2ae01 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.140 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.139 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.140 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 79981e5f..0180cb17 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.140 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.139 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.140 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.139" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.139" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 9d9927d28221a5586f92e25f2642a8b956f3ee33 Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 12:39:06 -0300 Subject: [PATCH 785/991] Deploy Cassandra 0.8.140 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index f7c2ae01..03d491b2 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-03-0.8.139-source-zone-semantics" + cassandra.bstein.dev/redeploy: "2026-08-03-0.8.140-lane-function-authority" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 0180cb17..d24370cd 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.140 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.140 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.139" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.139" + CASSANDRA_SIM_WORKER_VERSION: "0.8.140" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.140" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From 139ab67f21c8f86605df8c6e0a685e5e5a2535a1 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 16:03:05 +0000 Subject: [PATCH 786/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 03d491b2..4925510d 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.140 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.141 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.140 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.141 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index d58ec926..0ac87fd1 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.140 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.141 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 049653433287793c559a7772b8a85e12edf74e0b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 16:04:00 +0000 Subject: [PATCH 787/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 6e4c704a..3cbc3bb0 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.140 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.141 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From fd0ad611f6a445f8ba77940dcf573ae29d7419d7 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 16:07:04 +0000 Subject: [PATCH 788/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 4925510d..c243b206 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.140 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.141 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.140 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index d24370cd..33a48205 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.140 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.141 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.140 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.140" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.140" From ed4303750e75e8ee54c20146b780f3e6b27f8aa7 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 16:09:02 +0000 Subject: [PATCH 789/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index c243b206..64a438b3 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.141 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.140 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.141 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 33a48205..64a280a4 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.141 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.140 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.141 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.140" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.140" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From d49fe52a31c0f9086e4d17e164d36065307215d6 Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 13:13:54 -0300 Subject: [PATCH 790/991] Deploy Cassandra 0.8.141 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 64a438b3..c2f8a655 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-03-0.8.140-lane-function-authority" + cassandra.bstein.dev/redeploy: "2026-08-03-0.8.141-resumable-understanding" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 64a280a4..3e7a1d51 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.141 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.141 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.140" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.140" + CASSANDRA_SIM_WORKER_VERSION: "0.8.141" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.141" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From 89500e928ec503c190d94052550ee6b6f1e9b498 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 17:10:45 +0000 Subject: [PATCH 791/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/frontend-deployment.yaml | 2 +- services/cassandra/retention-cronjob.yaml | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index c2f8a655..5c08f71e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.141 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.142 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.141 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.142 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 3cbc3bb0..435ff0a2 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.141 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.142 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 0ac87fd1..b28ff223 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.141 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.142 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From ce9d9b34f3ff42e26b285fbd20ba977b4f188061 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 17:14:44 +0000 Subject: [PATCH 792/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 8f81a5d0..1628077d 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-384 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-385 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-267-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From a7d0638295784928dbee9b6b3ffd16c607c23bdb Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 17:14:54 +0000 Subject: [PATCH 793/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 5c08f71e..49e1be99 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.141 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.142 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.141 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 3e7a1d51..c1812c11 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.141 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.142 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.141 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.141" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.141" From 30b6dc7c1087b5cb14c2663231c9854e4890e15b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 17:16:40 +0000 Subject: [PATCH 794/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 49e1be99..e76a1d7d 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.142 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.141 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.142 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index c1812c11..d3a31456 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.142 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.141 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.142 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.141" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.141" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From dd455319348bfc35ab72abffdccbe8477d5244f7 Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 14:17:18 -0300 Subject: [PATCH 795/991] Deploy Cassandra 0.8.142 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index e76a1d7d..234de4f2 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-03-0.8.141-resumable-understanding" + cassandra.bstein.dev/redeploy: "2026-08-03-0.8.142-executable-lane-policy" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index d3a31456..cea39122 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.142 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.142 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.141" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.141" + CASSANDRA_SIM_WORKER_VERSION: "0.8.142" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.142" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From 296954c624b9b08948fa8dae0901b0acc14c70ed Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 17:53:44 +0000 Subject: [PATCH 796/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 234de4f2..8a46bcfb 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.142 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.143 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.142 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.143 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index b28ff223..143a7739 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.142 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.143 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From f9857d9f8bdc442513ddcaaaabf1d7f0a7145734 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 17:54:42 +0000 Subject: [PATCH 797/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 435ff0a2..f390670a 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.142 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.143 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From ec1ec322938c34d4b6e6654c800d98b10f628462 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 17:57:46 +0000 Subject: [PATCH 798/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 8a46bcfb..cbf33f44 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.142 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.143 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.142 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index cea39122..26043f8b 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.142 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.143 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.142 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.142" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.142" From fc8d872fda074c5a96412ab526750243eabc98f2 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 18:10:45 +0000 Subject: [PATCH 799/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index cbf33f44..5248d282 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.143 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.142 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.143 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 26043f8b..75fc59d2 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.143 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.142 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.143 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.142" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.142" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 93c038f46542c3c87bb8f78a86ae54c2cad3d524 Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 15:22:43 -0300 Subject: [PATCH 800/991] Deploy Cassandra 0.8.143 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 5248d282..c41e017a 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-03-0.8.142-executable-lane-policy" + cassandra.bstein.dev/redeploy: "2026-08-03-0.8.143-entry-hazard-convergence" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 75fc59d2..b24fef89 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.143 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.143 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.142" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.142" + CASSANDRA_SIM_WORKER_VERSION: "0.8.143" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.143" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From 1c070d96d4dbedc4ea2bd5638f5cfca13998fb7f Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 15:58:16 -0300 Subject: [PATCH 801/991] monitoring(grafana): use Texas timezone --- services/monitoring/helmrelease.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/services/monitoring/helmrelease.yaml b/services/monitoring/helmrelease.yaml index 6fd6d1ff..3774d165 100644 --- a/services/monitoring/helmrelease.yaml +++ b/services/monitoring/helmrelease.yaml @@ -461,6 +461,8 @@ spec: hide_version: true users: default_theme: dark + date_formats: + default_timezone: America/Chicago ingress: enabled: true ingressClassName: traefik From e3a84a7968b0e61a4d91370cbae85685cfafe3e2 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 19:09:52 +0000 Subject: [PATCH 802/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index c41e017a..cf7dc36d 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.143 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.144 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.143 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.144 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 143a7739..0364a0e7 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.143 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.144 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 31364c8944c4f02d69b5b431fe5b3d77814b4edf Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 19:10:50 +0000 Subject: [PATCH 803/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index f390670a..9d4f5ca3 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.143 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.144 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 1a1f16f9c9ec9cf01e251c300d39699b6b6039db Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 19:13:54 +0000 Subject: [PATCH 804/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index cf7dc36d..8dc585f0 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.143 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.144 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.143 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index b24fef89..1e22eff0 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.143 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.144 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.143 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.143" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.143" From d89ac3d32fd927b098a118c537331b3688e7abb1 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 19:14:51 +0000 Subject: [PATCH 805/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 8dc585f0..34ddcd15 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.144 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.143 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.144 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 1e22eff0..928a4081 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.144 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.143 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.144 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.143" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.143" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 162d98b8f0f48420271849e991b5ab30970766a9 Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 16:17:53 -0300 Subject: [PATCH 806/991] Deploy Cassandra 0.8.144 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 34ddcd15..e636c34d 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-03-0.8.143-entry-hazard-convergence" + cassandra.bstein.dev/redeploy: "2026-08-03-0.8.144-native-connection-gate" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 928a4081..ce0c0892 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.144 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.144 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.143" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.143" + CASSANDRA_SIM_WORKER_VERSION: "0.8.144" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.144" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From 11bea2fd130d9344a06522b13f914d9a770ac5ca Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 19:36:55 +0000 Subject: [PATCH 807/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index e636c34d..50d1b20e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.144 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.145 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.144 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.145 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 0364a0e7..51ee6d66 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.144 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.145 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From a6c1ed805a374404996f0ff335d877f76f3aa8ec Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 19:37:56 +0000 Subject: [PATCH 808/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 9d4f5ca3..2648e571 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.144 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.145 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 0d4df72da03de8e299c763465d49fae45d7781e9 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 19:40:57 +0000 Subject: [PATCH 809/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 50d1b20e..a19d210a 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.144 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.145 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.144 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index ce0c0892..600b733a 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.144 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.145 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.144 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.144" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.144" From 165b76b2c8bd6a5d6442b0c31bdd450c42a99a8c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 19:52:55 +0000 Subject: [PATCH 810/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index a19d210a..15ffdfbc 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.145 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.144 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.145 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 600b733a..638f7c2f 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.145 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.144 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.145 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.144" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.144" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 90562c0fc186ff6c62abe0dc9e8a549ae36edd83 Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 16:55:04 -0300 Subject: [PATCH 811/991] Deploy Cassandra 0.8.145 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 15ffdfbc..1abb265e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-03-0.8.144-native-connection-gate" + cassandra.bstein.dev/redeploy: "2026-08-03-0.8.145-retry-cache" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 638f7c2f..59f52095 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.145 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.145 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.144" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.144" + CASSANDRA_SIM_WORKER_VERSION: "0.8.145" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.145" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From e87b5dd774a61b6697bf0dd37f5a8264db15e799 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 20:42:03 +0000 Subject: [PATCH 812/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 2648e571..1cea9884 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.145 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.146 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 531b78ed0a12f238fdfbdf46d35ae43127dcf3a7 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 20:42:09 +0000 Subject: [PATCH 813/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 1abb265e..12fce088 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.145 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.146 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.145 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.146 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 51ee6d66..bca54cf8 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.145 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.146 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 1b5b3b96321507767e4951498938583bc4b58d2a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 20:46:03 +0000 Subject: [PATCH 814/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 12fce088..0e194dcc 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.145 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.146 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.145 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 59f52095..32f5c8fc 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.145 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.146 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.145 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.145" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.145" From 2e7316a06be54da14e41b3f398913146ddeebd8c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 20:47:01 +0000 Subject: [PATCH 815/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 0e194dcc..fda7ddad 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.146 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.145 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.146 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 32f5c8fc..8a2e5fb3 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.146 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.145 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.146 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.145" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.145" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 3306810afb2fbafbdc44f1ab8390ecb9f2650a6d Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 17:49:21 -0300 Subject: [PATCH 816/991] Deploy Cassandra 0.8.146 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index fda7ddad..fe47a2b2 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-03-0.8.145-retry-cache" + cassandra.bstein.dev/redeploy: "2026-08-03-0.8.146-section-repair-quality" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 8a2e5fb3..d97e0224 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.146 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.146 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.145" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.145" + CASSANDRA_SIM_WORKER_VERSION: "0.8.146" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.146" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From e0e46de861b59f67b51d3528c957fe345c666db5 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 21:52:09 +0000 Subject: [PATCH 817/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index 487f20a8..e336855d 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -22,7 +22,7 @@ images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend newTag: 0.1.1-440 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend - newTag: 0.1.1-440 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} + newTag: 0.1.1-441 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: - name: chat-ai-gateway namespace: bstein-dev-home From 4d8e62f4fab7b9fef0222952fc069a964452b53d Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 21:52:13 +0000 Subject: [PATCH 818/991] chore(bstein-dev-home): automated image update --- services/bstein-dev-home/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml index e336855d..977326b8 100644 --- a/services/bstein-dev-home/kustomization.yaml +++ b/services/bstein-dev-home/kustomization.yaml @@ -20,7 +20,7 @@ resources: - ingress.yaml images: - name: registry.bstein.dev/bstein/bstein-dev-home-frontend - newTag: 0.1.1-440 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} + newTag: 0.1.1-441 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"} - name: registry.bstein.dev/bstein/bstein-dev-home-backend newTag: 0.1.1-441 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"} configMapGenerator: From 799629656402a4e7b3f7e767b495e300cc14999e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 22:02:09 +0000 Subject: [PATCH 819/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 1cea9884..d7f12a20 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.146 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.147 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 6c1c4278ca84c1fa3e754e6346d75c0e781befb2 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 22:02:15 +0000 Subject: [PATCH 820/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index fe47a2b2..f1ab884e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.146 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.147 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.146 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.147 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index bca54cf8..0f79c65a 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.146 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.147 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From ac6cea2ccfed2e48e0433d941af3230bd0aee783 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 22:05:11 +0000 Subject: [PATCH 821/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index f1ab884e..f45932f1 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.146 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.147 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.146 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index d97e0224..6dcb5247 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.146 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.147 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.146 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.146" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.146" From 04d3935725cc118c0afb14f70aff8089211221a3 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 22:07:10 +0000 Subject: [PATCH 822/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index f45932f1..a9ae23a3 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.147 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.146 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.147 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 6dcb5247..83a41f5c 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.147 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.146 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.147 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.146" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.146" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 8240a0300e0050c324fd534417b843335d405010 Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 19:07:20 -0300 Subject: [PATCH 823/991] Deploy Cassandra 0.8.147 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index a9ae23a3..2d433c3a 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-03-0.8.146-section-repair-quality" + cassandra.bstein.dev/redeploy: "2026-08-03-0.8.147-claim-entry-convergence" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 83a41f5c..c90fd363 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.147 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.147 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.146" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.146" + CASSANDRA_SIM_WORKER_VERSION: "0.8.147" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.147" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From 9ab12d0da20abad8540424ae6599c189dc6755fd Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 23:36:19 +0000 Subject: [PATCH 824/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index d7f12a20..88290b99 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.147 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.148 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From e03fead7a9a4dd641de9d8eb220a736ccff83ab6 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 23:36:24 +0000 Subject: [PATCH 825/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 2d433c3a..73a4804a 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.147 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.148 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.147 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.148 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 0f79c65a..e388facf 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.147 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.148 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From bd9af1cabb83a218fbd21a3214550d9669183848 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 23:39:21 +0000 Subject: [PATCH 826/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 73a4804a..0adc07e2 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.147 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.148 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.147 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index c90fd363..2b7e71a6 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.147 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.148 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.147 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.147" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.147" From 1b4d805419f7162170b336e533c54febd275f77c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Mon, 3 Aug 2026 23:40:23 +0000 Subject: [PATCH 827/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 0adc07e2..473dd13f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.148 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.147 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.148 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 2b7e71a6..0bed6efc 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.148 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.147 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.148 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.147" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.147" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From f42cccba7eb1056ea32589d0c8d609883c00c9be Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 20:42:58 -0300 Subject: [PATCH 828/991] Deploy Cassandra 0.8.148 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 473dd13f..039fab7f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-03-0.8.147-claim-entry-convergence" + cassandra.bstein.dev/redeploy: "2026-08-03-0.8.148-strategy-action-lanes" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 0bed6efc..eac3690a 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.148 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.148 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.147" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.147" + CASSANDRA_SIM_WORKER_VERSION: "0.8.148" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.148" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From cdec6103f20cd107df165ba68fe17a8b30e90b9b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 00:07:22 +0000 Subject: [PATCH 829/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 88290b99..acf8aed7 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.148 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.149 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From e6662f52cf8564eee4a836827830c59a7e2d97ff Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 00:07:27 +0000 Subject: [PATCH 830/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 039fab7f..3f6c916e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.148 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.149 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.148 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.149 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index e388facf..25d23b46 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.148 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.149 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From a7d2ef9c76769bbc46a0deca1f5eee045d2ee01a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 00:10:25 +0000 Subject: [PATCH 831/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 3f6c916e..5cef4492 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.148 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.149 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.148 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index eac3690a..f6f3e74c 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.148 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.149 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.148 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.148" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.148" From 7d4b3315ea79e86d4fb0c275895b8ec5834536c9 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 00:12:24 +0000 Subject: [PATCH 832/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 5cef4492..63f46f2f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.149 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.148 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.149 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index f6f3e74c..a85ca62b 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.149 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.148 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.149 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.148" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.148" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 1f24b0162b8ce382f25bdb15b871f93fdb6cef05 Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 21:16:32 -0300 Subject: [PATCH 833/991] Deploy Cassandra 0.8.149 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 63f46f2f..72a67574 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-03-0.8.148-strategy-action-lanes" + cassandra.bstein.dev/redeploy: "2026-08-03-0.8.149-typed-lane-roster" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index a85ca62b..6b0b64d1 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.149 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.149 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.148" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.148" + CASSANDRA_SIM_WORKER_VERSION: "0.8.149" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.149" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From c14df5b4020b61acc68d99691f9b353d4284aec8 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 01:11:31 +0000 Subject: [PATCH 834/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 72a67574..0aeca27c 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.149 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.150 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.149 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.150 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 25d23b46..bfdedee5 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.149 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.150 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From e78f0df10bc887e8938aabd87206747ea03c5b9f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 01:12:32 +0000 Subject: [PATCH 835/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index acf8aed7..c0e12d8c 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.149 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.150 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 5a6fc773eedd8d60e3743254abb2018831447766 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 01:15:31 +0000 Subject: [PATCH 836/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 0aeca27c..2a6cf3fd 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.149 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.150 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.149 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 6b0b64d1..c32feb70 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.149 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.150 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.149 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.149" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.149" From 218cea7b7ba77d6e69cdaacf9224684442c69f09 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 01:16:31 +0000 Subject: [PATCH 837/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 2a6cf3fd..fcb7861e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.150 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.149 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.150 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index c32feb70..9d295e86 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.150 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.149 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.150 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.149" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.149" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 51d1c844802f6b3e56dde682d24282dd315b93dd Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 22:17:34 -0300 Subject: [PATCH 838/991] Deploy Cassandra 0.8.150 --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index fcb7861e..c01e5242 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -22,7 +22,7 @@ spec: labels: app: cassandra-backend annotations: - cassandra.bstein.dev/redeploy: "2026-08-03-0.8.149-typed-lane-roster" + cassandra.bstein.dev/redeploy: "2026-08-04-0.8.150-lane-semantics" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 9d295e86..561720fb 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -21,8 +21,8 @@ data: CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.150 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.150 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} - CASSANDRA_SIM_WORKER_VERSION: "0.8.149" - CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.149" + CASSANDRA_SIM_WORKER_VERSION: "0.8.150" + CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" CASSANDRA_SIM_SERVICE_ACCOUNT: cassandra-sim CASSANDRA_GENERATOR_WORKER_SERVICE_ACCOUNT: cassandra-generator From 96b8d2e453356b582cf328a3a3d1c962ce8b7fed Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 01:40:34 +0000 Subject: [PATCH 839/991] chore(maintenance): automated image update --- services/maintenance/metis-configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 9efc43e9..70fea300 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -15,7 +15,7 @@ data: METIS_MAX_DEVICE_BYTES: "1000000000000" METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" - METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-267-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} + METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-268-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-267-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis From b4efe800efd37824639faca674583fb381946266 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 01:44:37 +0000 Subject: [PATCH 840/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-amd64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-amd64-daemonset.yaml b/services/maintenance/metis-sentinel-amd64-daemonset.yaml index b6b85cf5..8c31fa6b 100644 --- a/services/maintenance/metis-sentinel-amd64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-amd64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: amd64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-267-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-268-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} imagePullPolicy: Always envFrom: - configMapRef: From 1772f2739268a17bce1ab9cb9e27107be7d82f6d Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 01:46:36 +0000 Subject: [PATCH 841/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- services/maintenance/metis-configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 1628077d..07be8d25 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -54,7 +54,7 @@ images: - name: registry.bstein.dev/bstein/ariadne newTag: 0.1.0-385 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis - newTag: 0.1.0-267-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} + newTag: 0.1.0-268-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria newTag: 0.1.0-120 # {"$imagepolicy": "maintenance:soteria:tag"} configMapGenerator: diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 70fea300..0ff47742 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -16,7 +16,7 @@ data: METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-268-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} - METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-267-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} + METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-268-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0 From a0efdf560fb3df4df0235f361e41f4ab9da72ceb Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 01:47:38 +0000 Subject: [PATCH 842/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-arm64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-arm64-daemonset.yaml b/services/maintenance/metis-sentinel-arm64-daemonset.yaml index 589e74fb..7eaf729d 100644 --- a/services/maintenance/metis-sentinel-arm64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-arm64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: arm64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-267-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-268-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} imagePullPolicy: Always envFrom: - configMapRef: From 79743665e70d98e016df8df1883c9714980441bd Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 02:08:38 +0000 Subject: [PATCH 843/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index c01e5242..042a98cb 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.150 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.151 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.150 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.151 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index bfdedee5..c900f4df 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.150 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.151 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From d9094a26c4713c5190bf714a07df82d03b26d1de Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 02:08:43 +0000 Subject: [PATCH 844/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index c0e12d8c..2d48bcd2 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.150 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.151 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 3ad632dda5dbea7b7b99d08c932ffce37e4d6bde Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 02:11:38 +0000 Subject: [PATCH 845/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 042a98cb..94e183de 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.150 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.151 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.150 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 561720fb..b409c4ca 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.150 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.151 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.150 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" From f3dfe198f7431959ab34597741cd57027d68f30a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 02:13:38 +0000 Subject: [PATCH 846/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 94e183de..ae24bf0f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.151 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.150 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.151 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index b409c4ca..d73bdb0e 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.151 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.150 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.151 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 10d234e40007f9bde2e1c50bcdd46e9a699fa772 Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 3 Aug 2026 23:28:36 -0300 Subject: [PATCH 847/991] hermes: add operator mastery guide --- services/hermes/NOTES.md | 239 +++++++++++++++++++++++++++++ services/hermes/configmap.yaml | 34 +++- services/hermes/deployment.yaml | 8 +- services/hermes/kustomization.yaml | 6 + 4 files changed, 282 insertions(+), 5 deletions(-) create mode 100644 services/hermes/NOTES.md diff --git a/services/hermes/NOTES.md b/services/hermes/NOTES.md new file mode 100644 index 00000000..2c107c0f --- /dev/null +++ b/services/hermes/NOTES.md @@ -0,0 +1,239 @@ +# Hermes on Atlas: operator guide + +This is the mental model and demonstration script for the operator instance at +`agent.bstein.dev`. Read it once, then prove each section in the live UI. The +consumer instance at `chat.bstein.dev` is intentionally separate and is not the +place to perform infrastructure triage. + +## The one-sentence explanation + +Hermes is the persistent agent runtime and control surface; Codex or the local +GPU model supplies reasoning, while Hermes supplies sessions, tools, skills, +approval rules, identity, and the repeatable procedure that connects the model +to Atlas evidence. + +Hermes is not the model. Replacing `gpt-5.6-terra` with `gpt-oss:20b` changes the +reasoning engine, but it does not replace the Hermes sessions, tools, skills, +files, permission boundary, or workflow. + +## Request and evidence path + +```text +browser + -> Keycloak login + -> oauth2-proxy exact-user check + -> operator Hermes pod and persistent workspace + -> SOUL.md + AGENTS.md + selected skill + -> Codex primary model + -> read-only terminal/web/file tools + -> Ariadne deterministic evidence + -> retained Jenkins logs and artifacts + -> Gitea commits and Flux state + -> Kubernetes workloads, events, logs, and dependencies + -> Pushgateway data queried through VictoriaMetrics + -> Grafana query and alert context + -> structured finding and proposed repo-side change + -> human review and approval + -> Git/Flux delivery outside Hermes + +provider failure + -> hermes-model-gate + -> Hermes owns titan-24: Ollama serves gpt-oss:20b + -> Wolf owns titan-24: gate returns 503; local inference yields +``` + +The operator agent pod runs on an ARM worker and does not reserve the GPU. +Ollama is the component on `titan-24` that owns GPU memory. The Lease +`hermes/titan-24-gpu-owner` controls whether the model gate admits local +inference. Normal operator conversations use independently authenticated Codex +first, so Wolf ownership does not need to block the web agent. + +## Who does what + +| Component | Responsibility | What it does not prove | +| --- | --- | --- | +| Hermes | Maintains the conversation, chooses tools/skills, reasons over evidence, saves reports, and enforces the approval experience | It is not the inference model and does not automatically have cluster-admin access | +| Ariadne | Collects and normalizes deterministic cluster, Jenkins, and quality evidence into a timestamped bundle; may optionally run a local diagnosis | Its diagnosis is not authoritative when stale, empty, or contradicted by the bundle | +| Jenkins | Runs the suites and retains console/artifact evidence | A final `exit 1` alone does not identify the first failed gate | +| Pushgateway | Receives suite/build quality telemetry | A cumulative counter is not the current build result | +| VictoriaMetrics | Stores and answers PromQL for quality and environment telemetry | A Grafana color is not direct proof of root cause | +| Grafana | Visualizes and alerts on VictoriaMetrics data | A red panel must be traced to its query, labels, time range, and raw series | +| Flux | Applies reviewed Git state to the cluster | A recent reconciliation is correlation until the changed path matches the failure | +| Kubernetes | Supplies workload, event, log, node, storage, and dependency evidence | An unrelated unhealthy pod is not proof that CI failed because of the cluster | + +Direct Jenkins artifact requests currently require authorization and can return +HTTP 403. That does not break the workflow: Ariadne retains selected Jenkins +console tails and named artifact contents in its deterministic bundle. A report +must say `retained Ariadne evidence` when that fallback is used; it must not +pretend direct Jenkins access succeeded. + +## The actual supervised triage algorithm + +1. Classify the request as test/build triage, service health, or alert tuning. +2. Read the latest Ariadne diagnosis and deterministic bundle with HTTP GET. +3. Compare their timestamps. The deterministic bundle remains authoritative. +4. Select a terminal failed build. Keep running or unknown builds out of the + terminal-failure list. +5. Identify the first enforced failed gate in this order: + `style -> loc -> coverage -> tests -> gate_glue -> sonarqube -> supply_chain`. +6. Cite the smallest decisive Jenkins log/artifact evidence. State whether it + came directly from Jenkins or from Ariadne retention. +7. Query the matching build/check/test series in VictoriaMetrics. Distinguish a + current gauge from a cumulative counter and ignore zero-valued failure + series. +8. Correlate recent Gitea commits and the relevant Flux revision by timestamp + and affected path. Recency alone is not causation. +9. Check only the Kubernetes resources capable of explaining that failure. + Classify observations as direct, contributing candidate, or background. +10. Return `Finding`, `Confidence`, `Evidence`, `Likely cause`, `Blast radius`, + `Next checks`, `Repo-side fix`, and `Approval required`. +11. Stop at a proposal. A human reviews the patch or action; Git and Flux remain + the delivery path. + +## What Hermes can read and what it cannot do + +The live `hermes-triage` ServiceAccount can get/list/watch ordinary workload, +log, event, ingress, storage, Flux, and image-automation metadata. It cannot +read Kubernetes Secret values, create exec sessions, patch Deployments, or +patch Flux Kustomizations. The configured command deny list also blocks common +Kubernetes and Flux mutations. + +The security boundary is layered: + +1. Keycloak authenticates the person. +2. oauth2-proxy restricts the operator surface to Brad. +3. The operator has a separate namespace, PVC, configuration, and ServiceAccount. +4. Kubernetes RBAC is the hard API authorization boundary. +5. NetworkPolicy limits reachable paths where configured. +6. Hermes approvals and instructions provide a user-facing safety layer. + +A skill is procedure and context, not a permission grant. Adding a sentence to +a skill cannot bypass Kubernetes RBAC. + +## What “Hermes learns the workflow” means + +It does not silently retrain model weights on cluster data. Learning here means +that a successful repeated procedure is written as a reusable skill on the +operator PVC or versioned in Git. The skill describes when it should trigger, +the evidence order, interpretation rules, output contract, and safety boundary. + +The current workflow has a versioned top-level skill and persisted specialist +skills for: + +- orchestration and evidence reporting; +- retained Jenkins evidence; +- quality metrics; +- Gitea/Flux correlation; +- Kubernetes failure classification; +- Grafana metric provenance; +- Soteria backup health; +- approval-required actions. + +The model still evaluates fresh variable evidence on every incident. The skill +makes the process repeatable; it does not freeze the answer. + +## The four operator skills to remember + +- `triage-titan-test-failures`: CI, tests, builds, quality gates, and suspected + test-environment regressions. +- `triage-atlas-service-health`: active service or cluster incidents and red + high-level health panels. +- `tune-atlas-alerts`: noisy alerts, impossible metrics, bad PromQL, and + generator-owned Grafana corrections. +- `master-hermes-on-atlas`: hands-on training, assessments, architecture, and + claim audits. + +Do not start by choosing raw tools. State the operational question and let the +skill route to the narrow evidence source. + +## Two live, repeatable proof cases + +### Proof 6: Soteria build 272 + +- Terminal result: failure. +- Tests: 318 passed, zero failed. +- Local coverage: 96.195 percent. +- First enforced failure: SonarQube `new_coverage=0.0` against threshold 80. +- Runtime: Soteria remained Ready. +- Correct conclusion: a Sonar new-code policy/reporting problem, not a test or + Kubernetes capacity failure. +- Correct restraint: do not weaken the policy until scanner import and baseline + evidence identifies whether the issue is configuration or legitimate new + uncovered code. + +### Proof 7: Ananke build 242 + +- Terminal result: failure. +- Local coverage gate: 61.8 percent and failed. +- Other checks: tests, SonarQube, supply-chain, LOC, docs naming, and gate glue + were healthy. +- Sonar new-code coverage: 93.1 percent, which is a different scope. +- Correct conclusion: local coverage input/scope caused the enforced failure; + do not call the Sonar number contradictory without comparing inputs. +- Correct restraint: do not lower the threshold until the retained local gate + inputs are readable. + +The full sessions and redacted Markdown exports are in Sessions and +`Files/triage-proof`. + +## Five-minute demonstration + +1. Open Models and show `openai-codex/gpt-5.6-terra` as primary and + `gpt-oss:20b` as local fallback. +2. Open Skills and show the four operator skills plus the persisted component + skills. +3. Open `Proof 6 - Soteria 272 Sonar new coverage triage` in Sessions. +4. Point out the timestamped bundle, exact build/artifact evidence, metric + corroboration, healthy runtime, fact/inference separation, and approval + boundary. +5. Open Proof 7 and explain why local coverage and Sonar new-code coverage can + differ without either number being fabricated. +6. End by showing that Hermes proposes a repo-side correction but cannot patch + the Deployment or Flux Kustomization with its ServiceAccount. + +Use this short explanation: + +> Hermes is the persistent, permissioned workflow layer around the model. In +> this cluster Ariadne collects deterministic evidence, Hermes correlates it +> with retained Jenkins artifacts, Git/Flux state, Kubernetes health, and +> quality metrics, and then returns a supervised proposal. Repeated procedures +> become explicit skills. Kubernetes RBAC prevents the agent from turning a +> diagnosis into an unreviewed infrastructure change. + +## Prompts that exercise the real system + +- `Use $triage-titan-test-failures. Triage the worst current terminal CI failure and link every decisive piece of evidence.` +- `Use $triage-titan-test-failures. Triage Ananke build 242. Separate local coverage from Sonar new-code coverage.` +- `Use $triage-atlas-service-health. Explain the VictoriaMetrics outage from current state and retained events; separate recovered impact from current impact.` +- `Use $tune-atlas-alerts. Trace one currently firing alert to its generated source and raw PromQL, but do not edit it.` +- `Use $master-hermes-on-atlas. Assess me on the request path and permission boundary. One question at a time.` + +## Honest limits + +- Hermes does not currently apply production or cluster changes autonomously. +- Direct Jenkins console/artifact access may be forbidden; Ariadne retention is + the current fallback and must be named as provenance. +- Local `gpt-oss:20b` is useful for bounded work but is slower and less reliable + for multi-source triage than Codex. +- The current Ariadne local diagnosis can return an empty model response. That + does not invalidate the deterministic bundle or prevent Codex-backed Hermes + from triaging it. +- A single successful case demonstrates capability, not mastery. Mastery means + leading different real incidents, improving the skill after failures, and + teaching the architecture without prompts. + +## Your shortest path to fluency + +1. Explain the request diagram without looking. +2. Explain why Ariadne and Hermes are separate components. +3. Reproduce Proof 6 from the raw bundle and metrics. +4. Reproduce Proof 7 and explain the two coverage scopes. +5. Produce the live RBAC allow/deny matrix with `kubectl auth can-i`. +6. Create one small writable skill from a repeated sub-workflow, test a trigger + and non-trigger case, then improve it. +7. Lead one new incident while Hermes coaches rather than answers for you. +8. Teach the five-minute demonstration to another person. + +At that point the interview claims are demonstrable. Continue repeating real +incidents before describing yourself as fully autonomous or the system as +self-correcting. diff --git a/services/hermes/configmap.yaml b/services/hermes/configmap.yaml index 51debef5..becb0da1 100644 --- a/services/hermes/configmap.yaml +++ b/services/hermes/configmap.yaml @@ -185,12 +185,14 @@ data: 2. `triage-atlas-service-health` for any live namespace or service. 3. `tune-atlas-alerts` for evidence-backed alert and dashboard corrections. - Two validated CI examples are already available under Sessions: + Validated CI examples are available under Sessions, including: - 1. `Proof 1 - Soteria 269 SonarQube triage` - 2. `Proof 3 - titan-iac 1712 retained-artifact triage` + 1. `Proof 6 - Soteria 272 Sonar new coverage triage` + 2. `Proof 7 - Ananke 242 local coverage triage` - Their saved reports are in Files under `triage-proof/`. + Their saved reports are in Files under `triage-proof/`. Read + `HERMES-OPERATOR-RUNBOOK.md` for the system mental model and five-minute + demonstration. Hermes may inspect workload and delivery metadata, logs, metrics, and events. Its Kubernetes identity cannot read Secret values or mutate cluster @@ -309,6 +311,30 @@ data: - It kept running titan-iac, Data Prepper, and Lesavka builds out of the terminal-failure list and requested approval before any rerun or edit. + ## Proof 6: Soteria build 272 Sonar new-coverage triage + + - Hermes read the fresh 2026-08-04 Ariadne bundle and selected terminal + Soteria build 272. + - It proved that all 318 tests passed and local coverage was 96.195%, then + isolated the enforced failure to SonarQube `new_coverage=0.0` against the + threshold of 80. + - It corroborated the retained Jenkins evidence with current quality + metrics and healthy Soteria/Flux state, and did not blame Kubernetes. + - It proposed no change until scanner import and baseline evidence can + distinguish configuration error from genuinely uncovered new code. + + ## Proof 7: Ananke build 242 local-coverage triage + + - Hermes selected terminal Ananke build 242 and isolated the first failure + to the local coverage gate at 61.8%. + - It showed that tests, SonarQube, supply chain, LOC, docs naming, gate glue, + Flux, and cluster readiness were healthy. + - It distinguished the local 61.8% scope from SonarQube's 93.1% new-code + scope instead of treating the numbers as interchangeable. + - Direct Jenkins artifact reads returned HTTP 403, so it explicitly named + Ariadne's retained bundle as evidence provenance and stopped short of an + unsupported fix. + ## Use Hermes next - `What is broken in the cluster right now?` diff --git a/services/hermes/deployment.yaml b/services/hermes/deployment.yaml index a09c54b7..459b19e4 100644 --- a/services/hermes/deployment.yaml +++ b/services/hermes/deployment.yaml @@ -24,7 +24,7 @@ spec: ai.bstein.dev/model: openai-codex/gpt-5.6-terra with local gpt-oss:20b fallback ai.bstein.dev/role: testing-triage ai.bstein.dev/placement: arm64 gateway lane (rpi5 preferred) - ai.bstein.dev/config-rev: "20260803-all-service-triage-map" + ai.bstein.dev/config-rev: "20260804-operator-guide" spec: serviceAccountName: hermes-triage automountServiceAccountToken: true @@ -88,6 +88,7 @@ spec: cp /config/AGENTS.md /opt/data/workspace/AGENTS.md cp /config/START-HERE.md /opt/data/workspace/START-HERE.md cp /config/HERMES-CAPABILITIES.md /opt/data/workspace/HERMES-CAPABILITIES.md + cp /guide/OPERATOR-RUNBOOK.md /opt/data/workspace/HERMES-OPERATOR-RUNBOOK.md cp /config/ATLAS-TRIAGE-PROOFS.md /opt/data/workspace/triage-proof/ATLAS-TRIAGE-PROOFS.md touch /opt/data/.env if ! grep -q '^API_SERVER_KEY=' /opt/data/.env; then @@ -104,6 +105,8 @@ spec: mountPath: /opt/data - name: config mountPath: /config + - name: operator-guide + mountPath: /guide resources: requests: cpu: 25m @@ -234,6 +237,9 @@ spec: - name: config configMap: name: hermes-config + - name: operator-guide + configMap: + name: hermes-operator-guide - name: tools emptyDir: {} - name: triage-skill diff --git a/services/hermes/kustomization.yaml b/services/hermes/kustomization.yaml index 5d882e2b..6033f3e5 100644 --- a/services/hermes/kustomization.yaml +++ b/services/hermes/kustomization.yaml @@ -22,6 +22,12 @@ resources: - agent-ingress.yaml configMapGenerator: + - name: hermes-operator-guide + namespace: hermes + files: + - OPERATOR-RUNBOOK.md=NOTES.md + options: + disableNameSuffixHash: true - name: hermes-triage-skill namespace: hermes files: From cee73e16a5973fa9597d5ca5d77aea15045dbc64 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 02:33:40 +0000 Subject: [PATCH 848/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index ae24bf0f..7b5d6473 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.151 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.152 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.151 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.152 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index c900f4df..29dd878d 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.151 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.152 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 2c6f67926b2c4b65006115062fce0b1d57d2183f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 02:33:45 +0000 Subject: [PATCH 849/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 2d48bcd2..67b6a804 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.151 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.152 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 60e74de338920af6e25f56d66d54183c8e78c595 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 02:36:41 +0000 Subject: [PATCH 850/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 7b5d6473..9dadd487 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.151 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.152 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.151 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index d73bdb0e..e049bf3a 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.151 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.152 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.151 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" From f54080ce8d023b72b82c50a167acbbfdf709e720 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 02:38:41 +0000 Subject: [PATCH 851/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 9dadd487..dfdd464b 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.152 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.151 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.152 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index e049bf3a..b91599a0 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.152 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.151 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.152 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 71e5fee27057371f23464ab8770a3b6ce588d4f4 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 03:10:44 +0000 Subject: [PATCH 852/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index dfdd464b..e543ee50 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.152 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.153 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.152 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.153 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 29dd878d..983599b5 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.152 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.153 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 934c0cf19ba82a6c8829297c570e5094e995d5bd Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 03:11:45 +0000 Subject: [PATCH 853/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 67b6a804..42ab618f 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.152 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.153 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 2f1e3f5c19a5032b303c3c3dd50dcf3285c8b81f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 03:14:45 +0000 Subject: [PATCH 854/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index e543ee50..8c94b53d 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.152 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.153 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.152 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index b91599a0..464d0265 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.152 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.153 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.152 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" From 6a23e55d77bc24c2bea397236d6738fe4463cbea Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 03:15:47 +0000 Subject: [PATCH 855/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 8c94b53d..90a28c0a 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.153 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.152 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.153 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 464d0265..ba009a8c 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.153 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.152 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.153 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From fd319977aa0910f9bd7b269ceb7677363da54a5a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 03:23:46 +0000 Subject: [PATCH 856/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 90a28c0a..2a4fd981 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.153 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.154 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.153 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.154 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 983599b5..14075a38 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.153 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.154 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 9cdc025bd9c8660dbbf5c830a415ccede7b4135e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 03:24:45 +0000 Subject: [PATCH 857/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 42ab618f..b793dc8c 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.153 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.154 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From b8a33db48c85b7232cfa657ab2bdef4c58aecc84 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 03:27:47 +0000 Subject: [PATCH 858/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 2a4fd981..b9feaeee 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.153 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.154 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.153 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index ba009a8c..4c51a70a 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.153 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.154 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.153 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" From 7a57649883d55d5d10be2ca79661421bf86fad14 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 03:28:46 +0000 Subject: [PATCH 859/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index b9feaeee..175b9f2e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.154 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.153 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.154 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 4c51a70a..976fb2d6 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.154 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.153 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.154 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 2e3a73fb3f1ba2406dac272ce2e07e77166af772 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 04:27:54 +0000 Subject: [PATCH 860/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 175b9f2e..03ff7137 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.154 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.155 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.154 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.155 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 14075a38..0a075ceb 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.154 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.155 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 107dafad0e3063b469dd51d13a91f266af6fa923 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 04:28:52 +0000 Subject: [PATCH 861/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index b793dc8c..b89f7e8d 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.154 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.155 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 1ab12809df204b1d3450dcc4137fa1964cfdea4c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 04:31:54 +0000 Subject: [PATCH 862/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 03ff7137..43c0f1e6 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.154 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.155 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.154 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 976fb2d6..90593b2d 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.154 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.155 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.154 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" From 6d997d483e05a354da05bacbd5aa9a89b43af2f2 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 04:32:54 +0000 Subject: [PATCH 863/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 43c0f1e6..6803073c 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.155 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.154 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.155 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 90593b2d..99a3cc96 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.155 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.154 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.155 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From d2c8776c02cc45fb282670bad622f7cd0773ff03 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 05:15:01 +0000 Subject: [PATCH 864/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 07be8d25..54b19ed1 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-385 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-386 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-268-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From 882ddd45d26ad2204800f49a97e68ef068c0be47 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 05:39:04 +0000 Subject: [PATCH 865/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index b89f7e8d..9e608133 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.155 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.156 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 3fceba6be08a61597d29c584ec9702e1fef193df Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 05:39:10 +0000 Subject: [PATCH 866/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 6803073c..a8b3818f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.155 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.156 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.155 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.156 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 0a075ceb..6d815a61 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.155 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.156 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 9df03de2574cfdb56d84ddaf9fe849819dbc9e20 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 05:42:04 +0000 Subject: [PATCH 867/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index a8b3818f..4e822125 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.155 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.156 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.155 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 99a3cc96..9af6830a 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.155 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.156 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.155 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" From ed2364133fc9534ce59ee7f0181326691da5faeb Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 05:44:03 +0000 Subject: [PATCH 868/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 4e822125..89220fd2 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.156 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.155 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.156 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 9af6830a..fdaa758c 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.156 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.155 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.156 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 31ffebd40b04ea64611e1cef8f6c8697bcba194f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 07:14:17 +0000 Subject: [PATCH 869/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 89220fd2..050b5da7 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.156 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.157 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.156 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.157 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 6d815a61..f1170be5 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.156 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.157 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 1bc6a4bff71211c67b78c293a97a8a91ac3ca610 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 07:15:15 +0000 Subject: [PATCH 870/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 9e608133..1d5be6be 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.156 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.157 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 7adb68ccc582e6dd7772242bbb8d4fc7a593507b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 07:18:16 +0000 Subject: [PATCH 871/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 050b5da7..c807d42d 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.156 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.157 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.156 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index fdaa758c..b9587bbe 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.156 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.157 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.156 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" From 180d028d3bdd98a5e8d20d9a4a778f7381288c00 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 07:19:13 +0000 Subject: [PATCH 872/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index c807d42d..d2a7f61e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.157 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.156 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.157 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index b9587bbe..7a75f4f7 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.157 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.156 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.157 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From a5b8deb1654bd375773fba1a89d4f5d34a9e2180 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 07:50:31 +0000 Subject: [PATCH 873/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index d2a7f61e..af13d999 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.157 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.158 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.157 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.158 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index f1170be5..5a7704a1 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.157 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.158 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From ef3cfd017295bac1f4d11e0da9e96a7c99f12e72 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 07:50:35 +0000 Subject: [PATCH 874/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 1d5be6be..6f9fa062 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.157 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.158 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From ece09a855c18ecd63f00bf3ef4da019f2cdd3be3 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 07:53:35 +0000 Subject: [PATCH 875/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index af13d999..3d046f11 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.157 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.158 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.157 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 7a75f4f7..a31e27d2 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.157 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.158 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.157 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" From ebe713c56b529e8406929a0113c312cd8cf3874c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 07:55:22 +0000 Subject: [PATCH 876/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 3d046f11..03e59754 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.158 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.157 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.158 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index a31e27d2..b7dc953b 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.158 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.157 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.158 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 691a0e272391dd9b03059738c27631edf2e144a0 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 09:09:31 +0000 Subject: [PATCH 877/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 03e59754..a5333d11 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.158 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.159 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.158 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.159 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 5a7704a1..19a8f1b5 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.158 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.159 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 708689eefd14e8adf592ad3b8d344ad48502e9f9 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 09:09:35 +0000 Subject: [PATCH 878/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 6f9fa062..ce9a1caa 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.158 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.159 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 147d75ddab5d677a7e5ec97f05585ac9acb4d8e4 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 09:12:35 +0000 Subject: [PATCH 879/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index a5333d11..25cf5ba8 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.158 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.159 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.158 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index b7dc953b..e969a75f 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.158 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.159 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.158 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" From a74318aa2ae896647b1971500a1473b445d4f384 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 09:13:34 +0000 Subject: [PATCH 880/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 25cf5ba8..70468aba 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.159 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.158 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.159 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index e969a75f..6e365083 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.159 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.158 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.159 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From b1d3c2155026efd72e12a247423a0d59b09a87a6 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 10:21:40 +0000 Subject: [PATCH 881/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 70468aba..9c428513 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.159 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.160 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.159 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.160 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 19a8f1b5..fc11783a 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.159 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.160 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From e243ef578cb68ece61214d25edefcfcfb817160c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 10:21:45 +0000 Subject: [PATCH 882/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index ce9a1caa..abd6f4a4 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.159 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.160 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 50b37fa4f7a2f70180f3fd26a88ceee3127be919 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 10:24:44 +0000 Subject: [PATCH 883/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 9c428513..dee6ac5f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.159 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.160 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.159 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 6e365083..66124522 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.159 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.160 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.159 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" From 6a352cec0d632645fa00f781986ae6bd12bb2d80 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 10:26:42 +0000 Subject: [PATCH 884/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index dee6ac5f..2feb8d59 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.160 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.159 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.160 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 66124522..a4306804 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.160 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.159 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.160 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From e4e8483991ec709003377fb8169b0c0877fa133c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 12:09:39 +0000 Subject: [PATCH 885/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 2feb8d59..9a580d2a 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.160 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.161 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.160 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.161 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index fc11783a..26a3b8fb 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.160 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.161 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From d0e751f997940a01ea37b8ba1a778377cba0f5a8 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 12:09:46 +0000 Subject: [PATCH 886/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index abd6f4a4..bd427ffd 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.160 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.161 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From f741f32ceec2e90da851ab99039cf6f7f002f07b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 12:12:46 +0000 Subject: [PATCH 887/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 9a580d2a..ef950bc4 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.160 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.161 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.160 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index a4306804..7f15f0f2 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.160 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.161 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.160 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" From 2406f2bf6d51b72506cd88efe3da7fe4e0cf29e6 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 12:13:44 +0000 Subject: [PATCH 888/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index ef950bc4..54ff5fef 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.161 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.160 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.161 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 7f15f0f2..c14085ae 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.161 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.160 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.161 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 370c2b376ecb3c2e3aac04ebd43837ca508b3b4e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 12:55:42 +0000 Subject: [PATCH 889/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 54ff5fef..37ebc9cf 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.161 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.162 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.161 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.162 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 26a3b8fb..1bdce4f0 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.161 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.162 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From fe3f8ce202c1fcd812694b082efc209cf240e721 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 12:55:51 +0000 Subject: [PATCH 890/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index bd427ffd..d68a3b7d 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.161 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.162 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 36e60e2be6df297eceda8df69253fc19da97707b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 13:02:52 +0000 Subject: [PATCH 891/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 37ebc9cf..c8db37ac 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.161 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.162 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.161 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index c14085ae..acbf7942 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.161 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.162 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.161 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" From c0e43e6627b0eb97fddf73130ad87fabbb15b99d Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 13:12:50 +0000 Subject: [PATCH 892/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index c8db37ac..56fde637 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.162 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.161 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.162 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index acbf7942..1b369198 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.162 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.161 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.162 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 7fe98319f35b18848b78f5240c0b08e8a0f71d0a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 13:17:44 +0000 Subject: [PATCH 893/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 56fde637..ae30a3d8 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.162 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.163 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.162 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.163 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 1bdce4f0..4e84178d 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.162 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.163 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From b8d57f678b1f4da306d023d912dad8cf061155cc Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 13:17:53 +0000 Subject: [PATCH 894/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index d68a3b7d..af0b3d5e 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.162 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.163 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From a0a7c9caa9e38b469ebfc05ad2c86c9473c247c4 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 13:25:55 +0000 Subject: [PATCH 895/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index ae30a3d8..2895229b 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.162 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.163 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.162 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 1b369198..c8507188 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.162 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.163 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.162 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" From 2ce41e38521b5226d86dc20518d3c3d83b80c859 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 13:34:52 +0000 Subject: [PATCH 896/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 2895229b..d0fa9408 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.163 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.162 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.163 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index c8507188..89829364 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.163 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.162 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.163 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 6c3017bb03df6a9132061104a885ba5ed0eb85e4 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 13:41:03 +0000 Subject: [PATCH 897/991] chore(maintenance): automated image update --- services/maintenance/metis-configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 0ff47742..d1aeb2d0 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -15,7 +15,7 @@ data: METIS_MAX_DEVICE_BYTES: "1000000000000" METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" - METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-268-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} + METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-269-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-268-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis From 36aacb4ee686e9160b0e057e72d503c144319cd8 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 13:46:03 +0000 Subject: [PATCH 898/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-amd64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-amd64-daemonset.yaml b/services/maintenance/metis-sentinel-amd64-daemonset.yaml index 8c31fa6b..acccd89c 100644 --- a/services/maintenance/metis-sentinel-amd64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-amd64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: amd64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-268-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-269-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} imagePullPolicy: Always envFrom: - configMapRef: From 311c89866831958d969e0bae43c7461a22594c83 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 13:48:04 +0000 Subject: [PATCH 899/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-arm64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-arm64-daemonset.yaml b/services/maintenance/metis-sentinel-arm64-daemonset.yaml index 7eaf729d..99317368 100644 --- a/services/maintenance/metis-sentinel-arm64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-arm64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: arm64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-268-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-269-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} imagePullPolicy: Always envFrom: - configMapRef: From 3dafe917edcfbfbee9b548e0f4d785cfd1850cd6 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 13:48:08 +0000 Subject: [PATCH 900/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- services/maintenance/metis-configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 54b19ed1..62599e3d 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -54,7 +54,7 @@ images: - name: registry.bstein.dev/bstein/ariadne newTag: 0.1.0-386 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis - newTag: 0.1.0-268-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} + newTag: 0.1.0-269-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria newTag: 0.1.0-120 # {"$imagepolicy": "maintenance:soteria:tag"} configMapGenerator: diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index d1aeb2d0..5ac781d3 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -16,7 +16,7 @@ data: METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-269-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} - METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-268-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} + METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-269-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0 From 2dcb5e99bad3c53324d3f9084bf2fb6d8e3f816d Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 14:18:50 +0000 Subject: [PATCH 901/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index d0fa9408..053a61f6 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.163 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.164 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.163 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.164 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 4e84178d..855a39eb 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.163 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.164 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 8a186835ab9b23a8837e23143eaf06de2708bbe7 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 14:20:00 +0000 Subject: [PATCH 902/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index af0b3d5e..af26403f 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.163 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.164 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From d125557175069cb707c6ccc8b9be9c2c83c286c2 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 14:27:00 +0000 Subject: [PATCH 903/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 053a61f6..9a84f52f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.163 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.164 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.163 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 89829364..488ea5a1 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.163 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.164 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.163 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" From efd2ee88e273f7590d3222317970457408dfd238 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 14:36:58 +0000 Subject: [PATCH 904/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 9a84f52f..17c005bb 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.164 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.163 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.164 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 488ea5a1..e99b90f3 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.164 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.163 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.164 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 0aa987911aa70f4db38e38bbe00b33f4fe84f555 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 15:13:56 +0000 Subject: [PATCH 905/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 17c005bb..b2523d74 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.164 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.165 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.164 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.165 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 855a39eb..350b5205 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.164 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.8.165 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 112a84d8560ddbefb01fde69ef5ebef75cf73f5e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 15:14:06 +0000 Subject: [PATCH 906/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index af26403f..2b91776f 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.164 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.165 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 7f90dc2f8ff40d88e48e9e66fc816a4d4fca680f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 15:22:06 +0000 Subject: [PATCH 907/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index b2523d74..ea0f6a1b 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.164 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.165 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.164 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index e99b90f3..ace1030f 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.164 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.165 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.164 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" From e354f3f83a0e9c0a517b2c865be63e141d4420b3 Mon Sep 17 00:00:00 2001 From: jenkins Date: Tue, 4 Aug 2026 12:22:05 -0300 Subject: [PATCH 908/991] monitoring: prevent query pool starvation --- .../tests/test_monitoring_query_capacity.py | 59 ++++++++++ services/monitoring/helmrelease.yaml | 26 ++++- .../vmalert-atlas-availability.yaml | 109 +----------------- 3 files changed, 84 insertions(+), 110 deletions(-) create mode 100644 scripts/tests/test_monitoring_query_capacity.py diff --git a/scripts/tests/test_monitoring_query_capacity.py b/scripts/tests/test_monitoring_query_capacity.py new file mode 100644 index 00000000..afd44a72 --- /dev/null +++ b/scripts/tests/test_monitoring_query_capacity.py @@ -0,0 +1,59 @@ +"""Protect the monitoring backend from known query-starvation regressions.""" + +from pathlib import Path + +import yaml + + +REPO_ROOT = Path(__file__).resolve().parents[2] + + +def _documents(path: Path) -> list[dict]: + """Load every non-empty YAML document from a repository manifest.""" + return [document for document in yaml.safe_load_all(path.read_text()) if document] + + +def test_victoria_metrics_has_dashboard_burst_headroom() -> None: + """Keep search capacity and pod resources above the proven failure floor.""" + manifests = _documents(REPO_ROOT / "services/monitoring/helmrelease.yaml") + release = next( + manifest + for manifest in manifests + if manifest.get("kind") == "HelmRelease" + and manifest.get("metadata", {}).get("name") == "victoria-metrics-single" + ) + server = release["spec"]["values"]["server"] + + assert int(server["extraArgs"]["search.maxConcurrentRequests"]) >= 4 + assert server["extraArgs"]["search.maxQueryDuration"] == "1m" + assert server["extraArgs"]["search.maxQueueDuration"] == "30s" + assert server["resources"]["requests"]["memory"] == "2Gi" + assert server["resources"]["limits"]["cpu"] == "2" + assert server["resources"]["limits"]["memory"] == "4Gi" + + +def test_yearly_availability_reuses_the_hourly_rollup() -> None: + """Prevent the yearly rule from rescanning raw cluster metrics for 365 days.""" + manifest = _documents( + REPO_ROOT / "services/monitoring/vmalert-atlas-availability.yaml" + )[0] + rules = yaml.safe_load(manifest["data"]["atlas-availability.yaml"])["groups"][0] + yearly = next( + rule + for rule in rules["rules"] + if rule["record"] == "atlas:availability:ratio_365d" + ) + + assert "atlas:availability:ratio_1h" in yearly["expr"] + assert "kube_node_status_condition" not in yearly["expr"] + assert "[365d:1h]" not in yearly["expr"] + + +def test_quality_rollups_do_not_run_every_minute() -> None: + """Keep high-cardinality quality rollups below the backend saturation cadence.""" + manifest = _documents( + REPO_ROOT / "services/monitoring/vmalert-atlas-availability.yaml" + )[0] + quality = yaml.safe_load(manifest["data"]["platform-quality.yaml"])["groups"][0] + + assert quality["interval"] == "5m" diff --git a/services/monitoring/helmrelease.yaml b/services/monitoring/helmrelease.yaml index 3774d165..f83c7df1 100644 --- a/services/monitoring/helmrelease.yaml +++ b/services/monitoring/helmrelease.yaml @@ -85,17 +85,20 @@ spec: extraArgs: retentionPeriod: "1y" # VM flag -retentionPeriod=1y. :contentReference[oaicite:11]{index=11} promscrape.configCheckInterval: "30s" + search.maxConcurrentRequests: "4" + search.maxQueryDuration: "1m" + search.maxQueueDuration: "30s" persistentVolume: enabled: true size: 100Gi resources: requests: - cpu: 250m - memory: 1Gi - limits: - cpu: "1" + cpu: 500m memory: 2Gi + limits: + cpu: "2" + memory: 4Gi affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -112,6 +115,21 @@ spec: - titan-21 - titan-22 - titan-24 + preferredDuringSchedulingIgnoredDuringExecution: + - weight: 100 + preference: + matchExpressions: + - key: hardware + operator: In + values: + - rpi5 + - weight: 50 + preference: + matchExpressions: + - key: hardware + operator: In + values: + - rpi4 # Enable built-in Kubernetes scraping scrape: diff --git a/services/monitoring/vmalert-atlas-availability.yaml b/services/monitoring/vmalert-atlas-availability.yaml index a1138d75..d1738fc1 100644 --- a/services/monitoring/vmalert-atlas-availability.yaml +++ b/services/monitoring/vmalert-atlas-availability.yaml @@ -30,119 +30,16 @@ data: rollup: hourly - record: atlas:availability:ratio_365d expr: | - clamp_max(( - ( - sum(sum_over_time(( - min( - ( - sum(kube_node_status_condition{condition="Ready",status="true",node=~"titan-0a|titan-0b|titan-0c"}) - / 3 - ), - ( - sum(kube_deployment_status_replicas_available{namespace=~"traefik|kube-system",deployment="traefik"}) - / clamp_min(sum(kube_deployment_spec_replicas{namespace=~"traefik|kube-system",deployment="traefik"}), 1) - ) - ) - )[365d:1h])) - or on() vector(0) - ) - + - clamp_min( - 8761 - - - ( - clamp_min( - floor( - ( - time() - - - ( - min(min_over_time(timestamp( - min( - ( - sum(kube_node_status_condition{condition="Ready",status="true",node=~"titan-0a|titan-0b|titan-0c"}) - / 3 - ), - ( - sum(kube_deployment_status_replicas_available{namespace=~"traefik|kube-system",deployment="traefik"}) - / clamp_min(sum(kube_deployment_spec_replicas{namespace=~"traefik|kube-system",deployment="traefik"}), 1) - ) - ) - )[365d:1h])) - or on() vector(time() + 3600) - ) - ) - / 3600 - ) - + 1, - 0 - ) - ), - 0 - ) + avg_over_time( + atlas:availability:ratio_1h{scope="atlas"}[365d] ) - / - clamp_min( - ( - ( - sum(count_over_time(( - min( - ( - sum(kube_node_status_condition{condition="Ready",status="true",node=~"titan-0a|titan-0b|titan-0c"}) - / 3 - ), - ( - sum(kube_deployment_status_replicas_available{namespace=~"traefik|kube-system",deployment="traefik"}) - / clamp_min(sum(kube_deployment_spec_replicas{namespace=~"traefik|kube-system",deployment="traefik"}), 1) - ) - ) - )[365d:1h])) - or on() vector(0) - ) - + - clamp_min( - 8761 - - - ( - clamp_min( - floor( - ( - time() - - - ( - min(min_over_time(timestamp( - min( - ( - sum(kube_node_status_condition{condition="Ready",status="true",node=~"titan-0a|titan-0b|titan-0c"}) - / 3 - ), - ( - sum(kube_deployment_status_replicas_available{namespace=~"traefik|kube-system",deployment="traefik"}) - / clamp_min(sum(kube_deployment_spec_replicas{namespace=~"traefik|kube-system",deployment="traefik"}), 1) - ) - ) - )[365d:1h])) - or on() vector(time() + 3600) - ) - ) - / 3600 - ) - + 1, - 0 - ) - ), - 0 - ) - ), - 1 - ), 1) labels: scope: atlas rollup: yearly platform-quality.yaml: | groups: - name: platform.quality - interval: 1m + interval: 5m rules: - record: platform_quality:test_case_status:count_1h expr: | From 7c6e7f973641904252914bba26cfe5cceb4ac1e2 Mon Sep 17 00:00:00 2001 From: jenkins Date: Tue, 4 Aug 2026 12:24:38 -0300 Subject: [PATCH 909/991] monitoring: reload vmalert rules automatically --- scripts/tests/test_monitoring_query_capacity.py | 13 +++++++++++++ services/monitoring/vmalert-atlas-availability.yaml | 1 + 2 files changed, 14 insertions(+) diff --git a/scripts/tests/test_monitoring_query_capacity.py b/scripts/tests/test_monitoring_query_capacity.py index afd44a72..8b33e68c 100644 --- a/scripts/tests/test_monitoring_query_capacity.py +++ b/scripts/tests/test_monitoring_query_capacity.py @@ -57,3 +57,16 @@ def test_quality_rollups_do_not_run_every_minute() -> None: quality = yaml.safe_load(manifest["data"]["platform-quality.yaml"])["groups"][0] assert quality["interval"] == "5m" + + +def test_vmalert_reloads_updated_rule_files() -> None: + """Make Flux ConfigMap updates take effect without manual pod revision bumps.""" + manifests = _documents( + REPO_ROOT / "services/monitoring/vmalert-atlas-availability.yaml" + ) + deployment = next( + manifest for manifest in manifests if manifest.get("kind") == "Deployment" + ) + args = deployment["spec"]["template"]["spec"]["containers"][0]["args"] + + assert "-configCheckInterval=30s" in args diff --git a/services/monitoring/vmalert-atlas-availability.yaml b/services/monitoring/vmalert-atlas-availability.yaml index d1738fc1..d387fa0b 100644 --- a/services/monitoring/vmalert-atlas-availability.yaml +++ b/services/monitoring/vmalert-atlas-availability.yaml @@ -316,6 +316,7 @@ spec: - -datasource.queryStep=1h - -remoteWrite.url=http://victoria-metrics-single-server:8428 - -rule=/etc/vmalert/rules/*.yaml + - -configCheckInterval=30s - -evaluationInterval=15m - -httpListenAddr=:8880 ports: From 58f5537d168902a9e04c009d3085691e7ca56d7a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 15:31:04 +0000 Subject: [PATCH 910/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index ea0f6a1b..29b284b4 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.165 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.164 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.165 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index ace1030f..6f598203 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.165 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.164 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.165 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From e9b4404e02a62273466ad96ace7756f43e90aebd Mon Sep 17 00:00:00 2001 From: jenkins Date: Tue, 4 Aug 2026 12:33:52 -0300 Subject: [PATCH 911/991] monitoring: render test category zero state --- scripts/dashboards_render_atlas.py | 4 ++-- scripts/tests/test_dashboards_render_atlas.py | 1 + services/monitoring/dashboards/atlas-overview.json | 2 +- services/monitoring/grafana-dashboard-overview.yaml | 2 +- 4 files changed, 5 insertions(+), 4 deletions(-) diff --git a/scripts/dashboards_render_atlas.py b/scripts/dashboards_render_atlas.py index 033850bc..ef6ccca0 100644 --- a/scripts/dashboards_render_atlas.py +++ b/scripts/dashboards_render_atlas.py @@ -2363,10 +2363,10 @@ def build_overview(): } overview_avg_coverage = f"(avg(({QUALITY_GATE_COVERAGE_BY_SUITE})) or on() vector(0))" overview_category_health = ( - f'avg by (category) ({PLATFORM_TEST_CATEGORY_HEALTH_ROLLUP}{{' + f'(avg by (category) ({PLATFORM_TEST_CATEGORY_HEALTH_ROLLUP}{{' f'suite=~"{PLATFORM_TEST_SUITE_CANONICAL_MATCHER}",branch!="",branch=~"main|master|origin/main|origin/master",' f'category=~"{PLATFORM_TEST_OVERVIEW_CATEGORY_REGEX}"' - "})" + '})) or label_set(vector(0), "category", "none")' ) for panel_id, title, draw_expr, runtime_expr, y_pos in [ (40, "Pyrphoros UPS Current", ANANKE_UPS_DRAW_WATTS_DB, ANANKE_UPS_RUNTIME_DB, 7), diff --git a/scripts/tests/test_dashboards_render_atlas.py b/scripts/tests/test_dashboards_render_atlas.py index fea6a197..8b31c444 100644 --- a/scripts/tests/test_dashboards_render_atlas.py +++ b/scripts/tests/test_dashboards_render_atlas.py @@ -150,6 +150,7 @@ def test_overview_uses_readable_quality_power_and_gitops_panels(): assert panels_by_title["Test Category Health"]["options"]["showValue"] == "auto" assert panels_by_title["Test Category Health"]["options"]["rowHeight"] == 0.9 assert panels_by_title["Test Category Health"]["targets"][0]["legendFormat"] == "{{category}}" + assert 'label_set(vector(0), "category", "none")' in panels_by_title["Test Category Health"]["targets"][0]["expr"] assert not any(variable["name"] == "overview_suite" for variable in dashboard["templating"]["list"]) pvc_backup_expr = panels_by_title["PVC Backup Health / Age"]["targets"][0]["expr"] diff --git a/services/monitoring/dashboards/atlas-overview.json b/services/monitoring/dashboards/atlas-overview.json index 0f1af088..a97ec2db 100644 --- a/services/monitoring/dashboards/atlas-overview.json +++ b/services/monitoring/dashboards/atlas-overview.json @@ -2819,7 +2819,7 @@ }, "targets": [ { - "expr": "avg by (category) (platform_quality:test_category_health_rate:percent_1h{suite=~\"ariadne|metis|ananke|atlasbot|pegasus|soteria|titan_iac|bstein_home|data_prepper|lesavka\",branch!=\"\",branch=~\"main|master|origin/main|origin/master\",category=~\"api|chaos|compatibility|component|contract|e2e|integration|performance|regression|reliability|security|smoke|system|ui\"})", + "expr": "(avg by (category) (platform_quality:test_category_health_rate:percent_1h{suite=~\"ariadne|metis|ananke|atlasbot|pegasus|soteria|titan_iac|bstein_home|data_prepper|lesavka\",branch!=\"\",branch=~\"main|master|origin/main|origin/master\",category=~\"api|chaos|compatibility|component|contract|e2e|integration|performance|regression|reliability|security|smoke|system|ui\"})) or label_set(vector(0), \"category\", \"none\")", "refId": "A", "legendFormat": "{{category}}", "format": "time_series", diff --git a/services/monitoring/grafana-dashboard-overview.yaml b/services/monitoring/grafana-dashboard-overview.yaml index 740a0278..377ff7c3 100644 --- a/services/monitoring/grafana-dashboard-overview.yaml +++ b/services/monitoring/grafana-dashboard-overview.yaml @@ -2828,7 +2828,7 @@ data: }, "targets": [ { - "expr": "avg by (category) (platform_quality:test_category_health_rate:percent_1h{suite=~\"ariadne|metis|ananke|atlasbot|pegasus|soteria|titan_iac|bstein_home|data_prepper|lesavka\",branch!=\"\",branch=~\"main|master|origin/main|origin/master\",category=~\"api|chaos|compatibility|component|contract|e2e|integration|performance|regression|reliability|security|smoke|system|ui\"})", + "expr": "(avg by (category) (platform_quality:test_category_health_rate:percent_1h{suite=~\"ariadne|metis|ananke|atlasbot|pegasus|soteria|titan_iac|bstein_home|data_prepper|lesavka\",branch!=\"\",branch=~\"main|master|origin/main|origin/master\",category=~\"api|chaos|compatibility|component|contract|e2e|integration|performance|regression|reliability|security|smoke|system|ui\"})) or label_set(vector(0), \"category\", \"none\")", "refId": "A", "legendFormat": "{{category}}", "format": "time_series", From 2e16a2981d03bea923f1b0f3db6c2df0accd4757 Mon Sep 17 00:00:00 2001 From: jenkins Date: Tue, 4 Aug 2026 13:22:18 -0300 Subject: [PATCH 912/991] hermes: expose operator docs in file root --- services/hermes/deployment.yaml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/services/hermes/deployment.yaml b/services/hermes/deployment.yaml index 459b19e4..247d947c 100644 --- a/services/hermes/deployment.yaml +++ b/services/hermes/deployment.yaml @@ -24,7 +24,7 @@ spec: ai.bstein.dev/model: openai-codex/gpt-5.6-terra with local gpt-oss:20b fallback ai.bstein.dev/role: testing-triage ai.bstein.dev/placement: arm64 gateway lane (rpi5 preferred) - ai.bstein.dev/config-rev: "20260804-operator-guide" + ai.bstein.dev/config-rev: "20260804-root-operator-docs" spec: serviceAccountName: hermes-triage automountServiceAccountToken: true @@ -90,6 +90,10 @@ spec: cp /config/HERMES-CAPABILITIES.md /opt/data/workspace/HERMES-CAPABILITIES.md cp /guide/OPERATOR-RUNBOOK.md /opt/data/workspace/HERMES-OPERATOR-RUNBOOK.md cp /config/ATLAS-TRIAGE-PROOFS.md /opt/data/workspace/triage-proof/ATLAS-TRIAGE-PROOFS.md + cp /config/START-HERE.md /opt/data/START-HERE.md + cp /config/HERMES-CAPABILITIES.md /opt/data/HERMES-CAPABILITIES.md + cp /guide/OPERATOR-RUNBOOK.md /opt/data/HERMES-OPERATOR-RUNBOOK.md + cp /config/ATLAS-TRIAGE-PROOFS.md /opt/data/ATLAS-TRIAGE-PROOFS.md touch /opt/data/.env if ! grep -q '^API_SERVER_KEY=' /opt/data/.env; then api_key="$(dd if=/dev/urandom bs=32 count=1 2>/dev/null | od -An -tx1 | tr -d ' \n')" From 51a277d9487f7378b2bf1a362dd9d4df9a9127b1 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 17:15:44 +0000 Subject: [PATCH 913/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 62599e3d..0dd4b17c 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-386 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-387 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-269-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From 179976d47be5103391ceee60a0b4449c904fbaa4 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 19:31:26 +0000 Subject: [PATCH 914/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 29b284b4..d2ca1c33 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.165 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.0 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.165 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.0 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 350b5205..6265dc19 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.8.165 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.0 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 092b215342d3f9b806c9737892ec2e071d01c172 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 19:33:32 +0000 Subject: [PATCH 915/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 2b91776f..e3bf1ac6 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.8.165 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.9.0 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 81c19f8569ff857d3c910f8c86aede9c2bd2edf0 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 19:43:35 +0000 Subject: [PATCH 916/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index d2ca1c33..c03c6a3c 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.165 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.0 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.165 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 6f598203..167d0b64 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.8.165 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.0 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.165 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" From e21acf2d5b08299aba7e1e773870af795a262ec9 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 19:53:31 +0000 Subject: [PATCH 917/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index c03c6a3c..142eb59a 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.0 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.165 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.0 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 167d0b64..8527b137 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.0 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.8.165 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.0 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 9adf2df68bb6491858083c5314350931b592d1e2 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 20:00:27 +0000 Subject: [PATCH 918/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 142eb59a..e2c7f630 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.0 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.1 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.0 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.1 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 6265dc19..cdea2f6a 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.0 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.1 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 05b8bf30630fc6db4573e2e09324a493e85359b0 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 20:34:32 +0000 Subject: [PATCH 919/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index e2c7f630..2f65f241 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.1 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.2 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.1 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.2 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index cdea2f6a..b365ca5b 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.1 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.2 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 679efbb3eea02c98285312e4b0ecc2b78c9bda79 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 20:35:40 +0000 Subject: [PATCH 920/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index e3bf1ac6..66228e63 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.9.0 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.9.2 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From bbfa8db56c369831e193f95002635a2270934156 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 20:43:41 +0000 Subject: [PATCH 921/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 2f65f241..ca771e0c 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.0 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.2 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.0 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 8527b137..e8cf22ca 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.0 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.2 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.0 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" From c17298519218ac17ca3df8cd0d30b9eb1f6979a9 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 20:52:36 +0000 Subject: [PATCH 922/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index ca771e0c..95afc379 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.2 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.0 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.2 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index e8cf22ca..4d902b3d 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.2 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.0 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.2 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 3a15b2097da20ed657bf1ccc7d368237a819623b Mon Sep 17 00:00:00 2001 From: jenkins Date: Tue, 4 Aug 2026 17:58:46 -0300 Subject: [PATCH 923/991] vaultwarden: upgrade server to 1.36.0 --- services/vaultwarden/deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/vaultwarden/deployment.yaml b/services/vaultwarden/deployment.yaml index 4cf8f332..bc5209ab 100644 --- a/services/vaultwarden/deployment.yaml +++ b/services/vaultwarden/deployment.yaml @@ -61,7 +61,7 @@ spec: - titan-11 containers: - name: vaultwarden - image: vaultwarden/server:1.35.2 + image: vaultwarden/server:1.36.0@sha256:d626d04934cd1192ad8ced1adb975099fca78cec33ab467d2d3c923cde7f3b0c command: ["/bin/sh", "-c"] args: - >- From 5fabd1a84bcee422de19e42b1e1a9964573702c4 Mon Sep 17 00:00:00 2001 From: jenkins Date: Tue, 4 Aug 2026 18:06:43 -0300 Subject: [PATCH 924/991] monitoring: avoid unstable volume hosts --- scripts/dashboards_render_atlas.py | 10 +++--- scripts/tests/test_dashboards_render_atlas.py | 11 ++++--- .../tests/test_monitoring_query_capacity.py | 31 +++++++++++++++++++ .../monitoring/dashboards/atlas-overview.json | 6 ++-- .../grafana-dashboard-overview.yaml | 6 ++-- services/monitoring/helmrelease.yaml | 9 ++++++ .../vmalert-atlas-availability.yaml | 8 +++-- 7 files changed, 64 insertions(+), 17 deletions(-) diff --git a/scripts/dashboards_render_atlas.py b/scripts/dashboards_render_atlas.py index ef6ccca0..eb46a4df 100644 --- a/scripts/dashboards_render_atlas.py +++ b/scripts/dashboards_render_atlas.py @@ -456,7 +456,9 @@ STUCK_TERMINATING_EXPR = ( ) UPTIME_WINDOW = "365d" # vmalert precomputes the expensive long-window rollup so Grafana only reads one compact series. -UPTIME_RECORDING_METRIC = f'atlas:availability:ratio_{UPTIME_WINDOW}{{scope="atlas"}}' +UPTIME_RECORDING_METRIC = ( + f'atlas:availability:ratio_{UPTIME_WINDOW}{{scope="atlas",definition="serving-v2"}}' +) UPTIME_RECORDING_EXPR = f"last_over_time({UPTIME_RECORDING_METRIC}[24h])" TRAEFIK_READY_EXPR = ( "(" @@ -1898,7 +1900,7 @@ OVERVIEW_PANEL_DESCRIPTIONS = { "Control Plane Ready": "Control-plane nodes currently Ready; full count is good, lower means Kubernetes core capacity is missing.", "Control Plane Workloads": "Non-core pods running on control-plane nodes; zero is good because control nodes should stay focused.", "Stuck Terminating": "Pods that Kubernetes cannot finish deleting; zero is good, growth means cleanup or storage may be stuck.", - "Atlas Availability (365d)": "Rolling one-year Atlas availability; higher is better, below target means users saw downtime.", + "Atlas Serving Availability": "Observed availability with control-plane quorum and at least one Traefik replica serving; partial replica capacity remains available.", "Problem Pods": "Current-service pods Pending for more than 15 minutes or in an actionable failed phase. Completed Jobs and retained Veles migration workloads are kept on drill-down dashboards but excluded here.", "CrashLoop / ImagePull": "Current-service pods stuck in CrashLoopBackOff or ImagePullBackOff for more than 15 minutes. Retained Veles migration workloads remain visible on the Pods dashboard.", "Workers Ready": "Worker nodes currently Ready; full count is good, lower means less place to run services.", @@ -2131,7 +2133,7 @@ def build_overview(): }, { "id": 27, - "title": "Atlas Availability (365d)", + "title": "Atlas Serving Availability", "expr": UPTIME_PERCENT_EXPR, "kind": "stat", "thresholds": UPTIME_PERCENT_THRESHOLDS, @@ -2139,7 +2141,7 @@ def build_overview(): "decimals": 4, "text_mode": "value", "instant": True, - "description": "Rolling 365-day availability from vmalert's precomputed atlas:availability:ratio_365d series. Grafana keeps the last successful rollup for up to 24h so one missed long-window evaluation does not render as No data.", + "description": "Availability over observed samples, up to 365 days: at least two control-plane nodes Ready and at least one Traefik replica serving. Partial replica capacity remains available; monitoring gaps are excluded. Grafana keeps the last successful rollup for up to 24h.", }, { "id": 4, diff --git a/scripts/tests/test_dashboards_render_atlas.py b/scripts/tests/test_dashboards_render_atlas.py index 8b31c444..a38c063c 100644 --- a/scripts/tests/test_dashboards_render_atlas.py +++ b/scripts/tests/test_dashboards_render_atlas.py @@ -57,11 +57,14 @@ def test_overview_availability_panel_uses_recorded_365d_rollup(): dashboard = mod.build_overview() panel = next(panel for panel in flatten_panels(dashboard["panels"]) if panel["id"] == 27) - assert panel["title"] == "Atlas Availability (365d)" - assert panel["targets"][0]["expr"] == 'last_over_time(atlas:availability:ratio_365d{scope="atlas"}[24h])' + assert panel["title"] == "Atlas Serving Availability" + assert panel["targets"][0]["expr"] == ( + 'last_over_time(atlas:availability:ratio_365d{scope="atlas",definition="serving-v2"}[24h])' + ) assert panel["targets"][0]["instant"] is True - assert "precomputed" in panel["description"] - assert "last successful rollup for up to 24h" in panel["description"] + assert "at least one Traefik replica serving" in panel["description"] + assert "Partial replica capacity remains available" in panel["description"] + assert "monitoring gaps are excluded" in panel["description"] def test_overview_uses_readable_quality_power_and_gitops_panels(): diff --git a/scripts/tests/test_monitoring_query_capacity.py b/scripts/tests/test_monitoring_query_capacity.py index 8b33e68c..f5d5da36 100644 --- a/scripts/tests/test_monitoring_query_capacity.py +++ b/scripts/tests/test_monitoring_query_capacity.py @@ -31,6 +31,18 @@ def test_victoria_metrics_has_dashboard_burst_headroom() -> None: assert server["resources"]["limits"]["cpu"] == "2" assert server["resources"]["limits"]["memory"] == "4Gi" + required_terms = server["affinity"]["nodeAffinity"][ + "requiredDuringSchedulingIgnoredDuringExecution" + ]["nodeSelectorTerms"] + hostname_rule = next( + expression + for term in required_terms + for expression in term["matchExpressions"] + if expression["key"] == "kubernetes.io/hostname" + ) + assert hostname_rule["operator"] == "NotIn" + assert {"titan-14", "titan-18"} <= set(hostname_rule["values"]) + def test_yearly_availability_reuses_the_hourly_rollup() -> None: """Prevent the yearly rule from rescanning raw cluster metrics for 365 days.""" @@ -45,10 +57,29 @@ def test_yearly_availability_reuses_the_hourly_rollup() -> None: ) assert "atlas:availability:ratio_1h" in yearly["expr"] + assert 'definition="serving-v2"' in yearly["expr"] assert "kube_node_status_condition" not in yearly["expr"] assert "[365d:1h]" not in yearly["expr"] +def test_availability_counts_serving_state_instead_of_replica_capacity() -> None: + """Treat quorum and any serving ingress replica as available binary states.""" + manifest = _documents( + REPO_ROOT / "services/monitoring/vmalert-atlas-availability.yaml" + )[0] + rules = yaml.safe_load(manifest["data"]["atlas-availability.yaml"])["groups"][0] + hourly = next( + rule + for rule in rules["rules"] + if rule["record"] == "atlas:availability:ratio_1h" + ) + + assert ">= bool 2" in hourly["expr"] + assert "> bool 0" in hourly["expr"] + assert "/ 3" not in hourly["expr"] + assert hourly["labels"]["definition"] == "serving-v2" + + def test_quality_rollups_do_not_run_every_minute() -> None: """Keep high-cardinality quality rollups below the backend saturation cadence.""" manifest = _documents( diff --git a/services/monitoring/dashboards/atlas-overview.json b/services/monitoring/dashboards/atlas-overview.json index a97ec2db..03e580be 100644 --- a/services/monitoring/dashboards/atlas-overview.json +++ b/services/monitoring/dashboards/atlas-overview.json @@ -216,7 +216,7 @@ { "id": 27, "type": "stat", - "title": "Atlas Availability (365d)", + "title": "Atlas Serving Availability", "datasource": { "type": "prometheus", "uid": "atlas-vm" @@ -229,7 +229,7 @@ }, "targets": [ { - "expr": "last_over_time(atlas:availability:ratio_365d{scope=\"atlas\"}[24h])", + "expr": "last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"serving-v2\"}[24h])", "refId": "A", "instant": true } @@ -286,7 +286,7 @@ }, "textMode": "value" }, - "description": "Rolling 365-day availability from vmalert's precomputed atlas:availability:ratio_365d series. Grafana keeps the last successful rollup for up to 24h so one missed long-window evaluation does not render as No data." + "description": "Availability over observed samples, up to 365 days: at least two control-plane nodes Ready and at least one Traefik replica serving. Partial replica capacity remains available; monitoring gaps are excluded. Grafana keeps the last successful rollup for up to 24h." }, { "id": 4, diff --git a/services/monitoring/grafana-dashboard-overview.yaml b/services/monitoring/grafana-dashboard-overview.yaml index 377ff7c3..b9f869a3 100644 --- a/services/monitoring/grafana-dashboard-overview.yaml +++ b/services/monitoring/grafana-dashboard-overview.yaml @@ -225,7 +225,7 @@ data: { "id": 27, "type": "stat", - "title": "Atlas Availability (365d)", + "title": "Atlas Serving Availability", "datasource": { "type": "prometheus", "uid": "atlas-vm" @@ -238,7 +238,7 @@ data: }, "targets": [ { - "expr": "last_over_time(atlas:availability:ratio_365d{scope=\"atlas\"}[24h])", + "expr": "last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"serving-v2\"}[24h])", "refId": "A", "instant": true } @@ -295,7 +295,7 @@ data: }, "textMode": "value" }, - "description": "Rolling 365-day availability from vmalert's precomputed atlas:availability:ratio_365d series. Grafana keeps the last successful rollup for up to 24h so one missed long-window evaluation does not render as No data." + "description": "Availability over observed samples, up to 365 days: at least two control-plane nodes Ready and at least one Traefik replica serving. Partial replica capacity remains available; monitoring gaps are excluded. Grafana keeps the last successful rollup for up to 24h." }, { "id": 4, diff --git a/services/monitoring/helmrelease.yaml b/services/monitoring/helmrelease.yaml index f83c7df1..7242b6c1 100644 --- a/services/monitoring/helmrelease.yaml +++ b/services/monitoring/helmrelease.yaml @@ -111,6 +111,10 @@ spec: - key: kubernetes.io/hostname operator: NotIn values: + # Longhorn engine-image probes repeatedly fail on these + # attachment hosts and can surface volume I/O errors. + - titan-14 + - titan-18 - titan-20 - titan-21 - titan-22 @@ -130,6 +134,11 @@ spec: operator: In values: - rpi4 + - weight: 25 + preference: + matchExpressions: + - key: node-role.kubernetes.io/storage-backbone + operator: Exists # Enable built-in Kubernetes scraping scrape: diff --git a/services/monitoring/vmalert-atlas-availability.yaml b/services/monitoring/vmalert-atlas-availability.yaml index d387fa0b..901ad1f6 100644 --- a/services/monitoring/vmalert-atlas-availability.yaml +++ b/services/monitoring/vmalert-atlas-availability.yaml @@ -17,23 +17,25 @@ data: min( ( sum(kube_node_status_condition{condition="Ready",status="true",node=~"titan-0a|titan-0b|titan-0c"}) - / 3 + >= bool 2 ), ( sum(kube_deployment_status_replicas_available{namespace=~"traefik|kube-system",deployment="traefik"}) - / clamp_min(sum(kube_deployment_spec_replicas{namespace=~"traefik|kube-system",deployment="traefik"}), 1) + > bool 0 ) ) )[1h:5m]) labels: + definition: serving-v2 scope: atlas rollup: hourly - record: atlas:availability:ratio_365d expr: | avg_over_time( - atlas:availability:ratio_1h{scope="atlas"}[365d] + atlas:availability:ratio_1h{scope="atlas",definition="serving-v2"}[365d] ) labels: + definition: serving-v2 scope: atlas rollup: yearly platform-quality.yaml: | From 8d16b790afae3e054fb6607b1ad3ef1793eee692 Mon Sep 17 00:00:00 2001 From: jenkins Date: Tue, 4 Aug 2026 18:16:13 -0300 Subject: [PATCH 925/991] monitoring: fall back to live serving state --- scripts/dashboards_render_atlas.py | 14 ++++++++------ scripts/tests/test_dashboards_render_atlas.py | 8 +++++++- services/monitoring/dashboards/atlas-overview.json | 4 ++-- .../monitoring/grafana-dashboard-overview.yaml | 4 ++-- 4 files changed, 19 insertions(+), 11 deletions(-) diff --git a/scripts/dashboards_render_atlas.py b/scripts/dashboards_render_atlas.py index eb46a4df..bddddf46 100644 --- a/scripts/dashboards_render_atlas.py +++ b/scripts/dashboards_render_atlas.py @@ -459,21 +459,23 @@ UPTIME_WINDOW = "365d" UPTIME_RECORDING_METRIC = ( f'atlas:availability:ratio_{UPTIME_WINDOW}{{scope="atlas",definition="serving-v2"}}' ) -UPTIME_RECORDING_EXPR = f"last_over_time({UPTIME_RECORDING_METRIC}[24h])" TRAEFIK_READY_EXPR = ( "(" 'sum(kube_deployment_status_replicas_available{namespace=~"traefik|kube-system",deployment="traefik"})' - " / clamp_min(" - 'sum(kube_deployment_spec_replicas{namespace=~"traefik|kube-system",deployment="traefik"}), 1)' - ")" + " > bool 0)" ) CONTROL_READY_FRACTION_EXPR = ( f"(sum(kube_node_status_condition{{condition=\"Ready\",status=\"true\",node=~\"{CONTROL_REGEX}\"}})" - f" / {CONTROL_TOTAL})" + " >= bool 2)" ) UPTIME_AVAIL_EXPR = ( f"min(({CONTROL_READY_FRACTION_EXPR}), ({TRAEFIK_READY_EXPR}))" ) +UPTIME_LIVE_FALLBACK_EXPR = f"avg_over_time(({UPTIME_AVAIL_EXPR})[1h:5m])" +UPTIME_RECORDING_EXPR = ( + f"(last_over_time({UPTIME_RECORDING_METRIC}[24h]) " + f"or on() {UPTIME_LIVE_FALLBACK_EXPR})" +) # Tie-breaker to deterministically pick one node per namespace when shares tie. NODE_TIEBREAKER = " + ".join( @@ -2141,7 +2143,7 @@ def build_overview(): "decimals": 4, "text_mode": "value", "instant": True, - "description": "Availability over observed samples, up to 365 days: at least two control-plane nodes Ready and at least one Traefik replica serving. Partial replica capacity remains available; monitoring gaps are excluded. Grafana keeps the last successful rollup for up to 24h.", + "description": "Availability over observed samples, up to 365 days: at least two control-plane nodes Ready and at least one Traefik replica serving. Partial replica capacity remains available; monitoring gaps are excluded. Grafana keeps the last successful rollup for up to 24h and falls back to the live binary serving state if no rollup is available.", }, { "id": 4, diff --git a/scripts/tests/test_dashboards_render_atlas.py b/scripts/tests/test_dashboards_render_atlas.py index a38c063c..88e88324 100644 --- a/scripts/tests/test_dashboards_render_atlas.py +++ b/scripts/tests/test_dashboards_render_atlas.py @@ -58,13 +58,19 @@ def test_overview_availability_panel_uses_recorded_365d_rollup(): panel = next(panel for panel in flatten_panels(dashboard["panels"]) if panel["id"] == 27) assert panel["title"] == "Atlas Serving Availability" - assert panel["targets"][0]["expr"] == ( + availability_expr = panel["targets"][0]["expr"] + assert ( 'last_over_time(atlas:availability:ratio_365d{scope="atlas",definition="serving-v2"}[24h])' + in availability_expr ) + assert ">= bool 2" in availability_expr + assert "> bool 0" in availability_expr + assert "[1h:5m]" in availability_expr assert panel["targets"][0]["instant"] is True assert "at least one Traefik replica serving" in panel["description"] assert "Partial replica capacity remains available" in panel["description"] assert "monitoring gaps are excluded" in panel["description"] + assert "falls back to the live binary serving state" in panel["description"] def test_overview_uses_readable_quality_power_and_gitops_panels(): diff --git a/services/monitoring/dashboards/atlas-overview.json b/services/monitoring/dashboards/atlas-overview.json index 03e580be..5c2d406f 100644 --- a/services/monitoring/dashboards/atlas-overview.json +++ b/services/monitoring/dashboards/atlas-overview.json @@ -229,7 +229,7 @@ }, "targets": [ { - "expr": "last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"serving-v2\"}[24h])", + "expr": "(last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"serving-v2\"}[24h]) or on() avg_over_time((min(((sum(kube_node_status_condition{condition=\"Ready\",status=\"true\",node=~\"titan-0a|titan-0b|titan-0c\"}) >= bool 2)), ((sum(kube_deployment_status_replicas_available{namespace=~\"traefik|kube-system\",deployment=\"traefik\"}) > bool 0))))[1h:5m]))", "refId": "A", "instant": true } @@ -286,7 +286,7 @@ }, "textMode": "value" }, - "description": "Availability over observed samples, up to 365 days: at least two control-plane nodes Ready and at least one Traefik replica serving. Partial replica capacity remains available; monitoring gaps are excluded. Grafana keeps the last successful rollup for up to 24h." + "description": "Availability over observed samples, up to 365 days: at least two control-plane nodes Ready and at least one Traefik replica serving. Partial replica capacity remains available; monitoring gaps are excluded. Grafana keeps the last successful rollup for up to 24h and falls back to the live binary serving state if no rollup is available." }, { "id": 4, diff --git a/services/monitoring/grafana-dashboard-overview.yaml b/services/monitoring/grafana-dashboard-overview.yaml index b9f869a3..827d412b 100644 --- a/services/monitoring/grafana-dashboard-overview.yaml +++ b/services/monitoring/grafana-dashboard-overview.yaml @@ -238,7 +238,7 @@ data: }, "targets": [ { - "expr": "last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"serving-v2\"}[24h])", + "expr": "(last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"serving-v2\"}[24h]) or on() avg_over_time((min(((sum(kube_node_status_condition{condition=\"Ready\",status=\"true\",node=~\"titan-0a|titan-0b|titan-0c\"}) >= bool 2)), ((sum(kube_deployment_status_replicas_available{namespace=~\"traefik|kube-system\",deployment=\"traefik\"}) > bool 0))))[1h:5m]))", "refId": "A", "instant": true } @@ -295,7 +295,7 @@ data: }, "textMode": "value" }, - "description": "Availability over observed samples, up to 365 days: at least two control-plane nodes Ready and at least one Traefik replica serving. Partial replica capacity remains available; monitoring gaps are excluded. Grafana keeps the last successful rollup for up to 24h." + "description": "Availability over observed samples, up to 365 days: at least two control-plane nodes Ready and at least one Traefik replica serving. Partial replica capacity remains available; monitoring gaps are excluded. Grafana keeps the last successful rollup for up to 24h and falls back to the live binary serving state if no rollup is available." }, { "id": 4, From 36bf4541290f446fa9d1247003a55ea44a4834e7 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 21:18:35 +0000 Subject: [PATCH 926/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 95afc379..e1c06e5b 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.2 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.5 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.2 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.5 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index b365ca5b..2117d4af 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.2 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.5 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From a590b9b7ea2d355449c0db4f3977f489c54dc140 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 21:19:43 +0000 Subject: [PATCH 927/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 66228e63..114bef97 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.9.2 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.9.5 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From ae1267ba28970169b1350394071c00afda4e69a0 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 21:26:46 +0000 Subject: [PATCH 928/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index e1c06e5b..e2283d13 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.2 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.5 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.2 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 4d902b3d..4755dcf1 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.2 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.5 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.2 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" From 2d6cc3069e8194c3fcd10f58bed8cd658d605737 Mon Sep 17 00:00:00 2001 From: jenkins Date: Tue, 4 Aug 2026 18:33:25 -0300 Subject: [PATCH 929/991] vaultwarden: upgrade server to 1.37.0 --- services/vaultwarden/deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/vaultwarden/deployment.yaml b/services/vaultwarden/deployment.yaml index bc5209ab..5d1c5446 100644 --- a/services/vaultwarden/deployment.yaml +++ b/services/vaultwarden/deployment.yaml @@ -61,7 +61,7 @@ spec: - titan-11 containers: - name: vaultwarden - image: vaultwarden/server:1.36.0@sha256:d626d04934cd1192ad8ced1adb975099fca78cec33ab467d2d3c923cde7f3b0c + image: vaultwarden/server:1.37.0@sha256:e6443e3d5ed8fcee2204b89ec778d7f24d0173bcc42d1ea34f990304f5f63f51 command: ["/bin/sh", "-c"] args: - >- From 026db898fca5f0d296b848d540b771148bbf0345 Mon Sep 17 00:00:00 2001 From: jenkins Date: Tue, 4 Aug 2026 18:39:36 -0300 Subject: [PATCH 930/991] monitoring: preserve serving availability history --- scripts/dashboards_render_atlas.py | 2 +- scripts/tests/test_dashboards_render_atlas.py | 2 +- scripts/tests/test_monitoring_query_capacity.py | 3 +++ services/monitoring/dashboards/atlas-overview.json | 2 +- services/monitoring/grafana-dashboard-overview.yaml | 2 +- services/monitoring/vmalert-atlas-availability.yaml | 9 ++++++--- 6 files changed, 13 insertions(+), 7 deletions(-) diff --git a/scripts/dashboards_render_atlas.py b/scripts/dashboards_render_atlas.py index bddddf46..9133a4d7 100644 --- a/scripts/dashboards_render_atlas.py +++ b/scripts/dashboards_render_atlas.py @@ -2143,7 +2143,7 @@ def build_overview(): "decimals": 4, "text_mode": "value", "instant": True, - "description": "Availability over observed samples, up to 365 days: at least two control-plane nodes Ready and at least one Traefik replica serving. Partial replica capacity remains available; monitoring gaps are excluded. Grafana keeps the last successful rollup for up to 24h and falls back to the live binary serving state if no rollup is available.", + "description": "Availability over observed samples, up to 365 days: at least two control-plane nodes Ready and at least one Traefik replica serving. Historical partial-capacity samples remain available when ingress kept serving; monitoring gaps are excluded. Grafana keeps the last successful rollup for up to 24h and falls back to the live binary serving state if no rollup is available.", }, { "id": 4, diff --git a/scripts/tests/test_dashboards_render_atlas.py b/scripts/tests/test_dashboards_render_atlas.py index 88e88324..61791040 100644 --- a/scripts/tests/test_dashboards_render_atlas.py +++ b/scripts/tests/test_dashboards_render_atlas.py @@ -68,7 +68,7 @@ def test_overview_availability_panel_uses_recorded_365d_rollup(): assert "[1h:5m]" in availability_expr assert panel["targets"][0]["instant"] is True assert "at least one Traefik replica serving" in panel["description"] - assert "Partial replica capacity remains available" in panel["description"] + assert "partial-capacity samples remain available" in panel["description"] assert "monitoring gaps are excluded" in panel["description"] assert "falls back to the live binary serving state" in panel["description"] diff --git a/scripts/tests/test_monitoring_query_capacity.py b/scripts/tests/test_monitoring_query_capacity.py index f5d5da36..71467991 100644 --- a/scripts/tests/test_monitoring_query_capacity.py +++ b/scripts/tests/test_monitoring_query_capacity.py @@ -58,6 +58,9 @@ def test_yearly_availability_reuses_the_hourly_rollup() -> None: assert "atlas:availability:ratio_1h" in yearly["expr"] assert 'definition="serving-v2"' in yearly["expr"] + assert 'definition=""' in yearly["expr"] + assert "share_gt_over_time" in yearly["expr"] + assert "[365d:15m]" in yearly["expr"] assert "kube_node_status_condition" not in yearly["expr"] assert "[365d:1h]" not in yearly["expr"] diff --git a/services/monitoring/dashboards/atlas-overview.json b/services/monitoring/dashboards/atlas-overview.json index 5c2d406f..b7d0509b 100644 --- a/services/monitoring/dashboards/atlas-overview.json +++ b/services/monitoring/dashboards/atlas-overview.json @@ -286,7 +286,7 @@ }, "textMode": "value" }, - "description": "Availability over observed samples, up to 365 days: at least two control-plane nodes Ready and at least one Traefik replica serving. Partial replica capacity remains available; monitoring gaps are excluded. Grafana keeps the last successful rollup for up to 24h and falls back to the live binary serving state if no rollup is available." + "description": "Availability over observed samples, up to 365 days: at least two control-plane nodes Ready and at least one Traefik replica serving. Historical partial-capacity samples remain available when ingress kept serving; monitoring gaps are excluded. Grafana keeps the last successful rollup for up to 24h and falls back to the live binary serving state if no rollup is available." }, { "id": 4, diff --git a/services/monitoring/grafana-dashboard-overview.yaml b/services/monitoring/grafana-dashboard-overview.yaml index 827d412b..cc786220 100644 --- a/services/monitoring/grafana-dashboard-overview.yaml +++ b/services/monitoring/grafana-dashboard-overview.yaml @@ -295,7 +295,7 @@ data: }, "textMode": "value" }, - "description": "Availability over observed samples, up to 365 days: at least two control-plane nodes Ready and at least one Traefik replica serving. Partial replica capacity remains available; monitoring gaps are excluded. Grafana keeps the last successful rollup for up to 24h and falls back to the live binary serving state if no rollup is available." + "description": "Availability over observed samples, up to 365 days: at least two control-plane nodes Ready and at least one Traefik replica serving. Historical partial-capacity samples remain available when ingress kept serving; monitoring gaps are excluded. Grafana keeps the last successful rollup for up to 24h and falls back to the live binary serving state if no rollup is available." }, { "id": 4, diff --git a/services/monitoring/vmalert-atlas-availability.yaml b/services/monitoring/vmalert-atlas-availability.yaml index 901ad1f6..1bfcc1e4 100644 --- a/services/monitoring/vmalert-atlas-availability.yaml +++ b/services/monitoring/vmalert-atlas-availability.yaml @@ -31,9 +31,12 @@ data: rollup: hourly - record: atlas:availability:ratio_365d expr: | - avg_over_time( - atlas:availability:ratio_1h{scope="atlas",definition="serving-v2"}[365d] - ) + share_gt_over_time(( + max by (scope, rollup) ( + atlas:availability:ratio_1h{scope="atlas",definition="serving-v2"} + or atlas:availability:ratio_1h{scope="atlas",definition=""} + ) + )[365d:15m], 0) labels: definition: serving-v2 scope: atlas From 979814298bc22111d7f4f6dd5e44d6aa35195aa4 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 22:31:43 +0000 Subject: [PATCH 931/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index e2283d13..259d3d62 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.5 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.6 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.5 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.6 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 2117d4af..ad909559 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.5 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.6 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From f91a203a21f1cbbaabb4dc3be2926584ea88860e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 22:32:51 +0000 Subject: [PATCH 932/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 114bef97..b1897030 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.9.5 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.9.6 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 563f10d94172ba439d9eecee3a785faeef619f8e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 22:39:54 +0000 Subject: [PATCH 933/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 259d3d62..9a158658 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.5 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.6 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.2 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 4755dcf1..51f00f0a 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.5 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.6 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.2 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" From 09ec3780698eb184e235813d64ba45d6d00a4543 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 22:48:51 +0000 Subject: [PATCH 934/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 9a158658..e74e7df3 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.6 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.2 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.6 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 51f00f0a..ab011666 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.6 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.2 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.6 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 300d34271d1a6dbd0bf14f0c3fbc8a68791d0f9b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 23:38:50 +0000 Subject: [PATCH 935/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index e74e7df3..7d427cb2 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.6 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.7 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.6 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.7 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index ad909559..90264c0d 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.6 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.7 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 305d4d912df149b8228c7124ffbee14f92e18b17 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 23:38:58 +0000 Subject: [PATCH 936/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index b1897030..e040eb50 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.9.6 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.9.7 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From bd05928e9659fafdb7b21ed77936db78645fec4f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 23:47:01 +0000 Subject: [PATCH 937/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 7d427cb2..ef32d28e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.6 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.7 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.6 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index ab011666..a2c99a2e 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.6 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.7 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.6 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" From 47142c61fbc7f03239e580bd071b6ab69d1bab5a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Tue, 4 Aug 2026 23:56:56 +0000 Subject: [PATCH 938/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index ef32d28e..26f979f0 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.7 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.6 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.7 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index a2c99a2e..cbec500f 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.7 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.6 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.7 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 6b1d6388db81f2f706cf7aea2cfd2d94a8ed9f56 Mon Sep 17 00:00:00 2001 From: jenkins Date: Tue, 4 Aug 2026 21:02:19 -0300 Subject: [PATCH 939/991] monitoring: measure gateway availability --- scripts/dashboards_render_atlas.py | 27 +++--- scripts/tests/test_dashboards_render_atlas.py | 18 ++-- .../tests/test_monitoring_query_capacity.py | 71 ++++++++++---- .../availability-backfill-v3-job.yaml | 92 +++++++++++++++++++ .../monitoring/dashboards/atlas-overview.json | 6 +- .../grafana-dashboard-overview.yaml | 6 +- services/monitoring/kustomization.yaml | 1 + .../vmalert-atlas-availability.yaml | 74 ++++++++++----- 8 files changed, 222 insertions(+), 73 deletions(-) create mode 100644 services/monitoring/availability-backfill-v3-job.yaml diff --git a/scripts/dashboards_render_atlas.py b/scripts/dashboards_render_atlas.py index 9133a4d7..67d7e78f 100644 --- a/scripts/dashboards_render_atlas.py +++ b/scripts/dashboards_render_atlas.py @@ -457,21 +457,20 @@ STUCK_TERMINATING_EXPR = ( UPTIME_WINDOW = "365d" # vmalert precomputes the expensive long-window rollup so Grafana only reads one compact series. UPTIME_RECORDING_METRIC = ( - f'atlas:availability:ratio_{UPTIME_WINDOW}{{scope="atlas",definition="serving-v2"}}' + f'atlas:availability:ratio_{UPTIME_WINDOW}{{scope="atlas",definition="gateway-v3"}}' ) -TRAEFIK_READY_EXPR = ( - "(" - 'sum(kube_deployment_status_replicas_available{namespace=~"traefik|kube-system",deployment="traefik"})' - " > bool 0)" +GATEWAY_REQUESTS_1H_EXPR = ( + 'sum(increase(traefik_entrypoint_requests_total{' + 'entrypoint="websecure",protocol="http",code=~"[1-5].."}[1h]))' ) -CONTROL_READY_FRACTION_EXPR = ( - f"(sum(kube_node_status_condition{{condition=\"Ready\",status=\"true\",node=~\"{CONTROL_REGEX}\"}})" - " >= bool 2)" +GATEWAY_FAILURES_1H_EXPR = ( + 'sum(increase(traefik_entrypoint_requests_total{' + 'entrypoint="websecure",protocol="http",code=~"502|503|504"}[1h]))' ) -UPTIME_AVAIL_EXPR = ( - f"min(({CONTROL_READY_FRACTION_EXPR}), ({TRAEFIK_READY_EXPR}))" +UPTIME_LIVE_FALLBACK_EXPR = ( + f"(1 - (({GATEWAY_FAILURES_1H_EXPR} or on() vector(0)) / " + f"clamp_min({GATEWAY_REQUESTS_1H_EXPR}, 1)))" ) -UPTIME_LIVE_FALLBACK_EXPR = f"avg_over_time(({UPTIME_AVAIL_EXPR})[1h:5m])" UPTIME_RECORDING_EXPR = ( f"(last_over_time({UPTIME_RECORDING_METRIC}[24h]) " f"or on() {UPTIME_LIVE_FALLBACK_EXPR})" @@ -1902,7 +1901,7 @@ OVERVIEW_PANEL_DESCRIPTIONS = { "Control Plane Ready": "Control-plane nodes currently Ready; full count is good, lower means Kubernetes core capacity is missing.", "Control Plane Workloads": "Non-core pods running on control-plane nodes; zero is good because control nodes should stay focused.", "Stuck Terminating": "Pods that Kubernetes cannot finish deleting; zero is good, growth means cleanup or storage may be stuck.", - "Atlas Serving Availability": "Observed availability with control-plane quorum and at least one Traefik replica serving; partial replica capacity remains available.", + "Atlas Availability (365d)": "Request-weighted Atlas ingress availability; only Traefik 502, 503, and 504 gateway failures count as downtime.", "Problem Pods": "Current-service pods Pending for more than 15 minutes or in an actionable failed phase. Completed Jobs and retained Veles migration workloads are kept on drill-down dashboards but excluded here.", "CrashLoop / ImagePull": "Current-service pods stuck in CrashLoopBackOff or ImagePullBackOff for more than 15 minutes. Retained Veles migration workloads remain visible on the Pods dashboard.", "Workers Ready": "Worker nodes currently Ready; full count is good, lower means less place to run services.", @@ -2135,7 +2134,7 @@ def build_overview(): }, { "id": 27, - "title": "Atlas Serving Availability", + "title": "Atlas Availability (365d)", "expr": UPTIME_PERCENT_EXPR, "kind": "stat", "thresholds": UPTIME_PERCENT_THRESHOLDS, @@ -2143,7 +2142,7 @@ def build_overview(): "decimals": 4, "text_mode": "value", "instant": True, - "description": "Availability over observed samples, up to 365 days: at least two control-plane nodes Ready and at least one Traefik replica serving. Historical partial-capacity samples remain available when ingress kept serving; monitoring gaps are excluded. Grafana keeps the last successful rollup for up to 24h and falls back to the live binary serving state if no rollup is available.", + "description": "Rolling request-weighted availability at the Atlas HTTPS ingress. Every HTTP response counts as served except Traefik 502, 503, and 504 gateway failures. Client 4xx and application 500/501 responses do not mark the cluster unavailable because Atlas remained reachable. Replica counts, Grafana health, and monitoring gaps are not treated as downtime. Grafana keeps the last successful rollup for up to 24 hours and falls back to the same gateway SLI over the last hour.", }, { "id": 4, diff --git a/scripts/tests/test_dashboards_render_atlas.py b/scripts/tests/test_dashboards_render_atlas.py index 61791040..f9bb4d02 100644 --- a/scripts/tests/test_dashboards_render_atlas.py +++ b/scripts/tests/test_dashboards_render_atlas.py @@ -57,20 +57,20 @@ def test_overview_availability_panel_uses_recorded_365d_rollup(): dashboard = mod.build_overview() panel = next(panel for panel in flatten_panels(dashboard["panels"]) if panel["id"] == 27) - assert panel["title"] == "Atlas Serving Availability" + assert panel["title"] == "Atlas Availability (365d)" availability_expr = panel["targets"][0]["expr"] assert ( - 'last_over_time(atlas:availability:ratio_365d{scope="atlas",definition="serving-v2"}[24h])' + 'last_over_time(atlas:availability:ratio_365d{scope="atlas",definition="gateway-v3"}[24h])' in availability_expr ) - assert ">= bool 2" in availability_expr - assert "> bool 0" in availability_expr - assert "[1h:5m]" in availability_expr + assert 'code=~"502|503|504"' in availability_expr + assert 'code=~"[1-5].."' in availability_expr + assert "kube_node_status_condition" not in availability_expr + assert "kube_deployment_status_replicas_available" not in availability_expr assert panel["targets"][0]["instant"] is True - assert "at least one Traefik replica serving" in panel["description"] - assert "partial-capacity samples remain available" in panel["description"] - assert "monitoring gaps are excluded" in panel["description"] - assert "falls back to the live binary serving state" in panel["description"] + assert "502, 503, and 504 gateway failures" in panel["description"] + assert "Replica counts, Grafana health" in panel["description"] + assert "falls back to the same gateway SLI" in panel["description"] def test_overview_uses_readable_quality_power_and_gitops_panels(): diff --git a/scripts/tests/test_monitoring_query_capacity.py b/scripts/tests/test_monitoring_query_capacity.py index 71467991..0b53a89f 100644 --- a/scripts/tests/test_monitoring_query_capacity.py +++ b/scripts/tests/test_monitoring_query_capacity.py @@ -49,38 +49,71 @@ def test_yearly_availability_reuses_the_hourly_rollup() -> None: manifest = _documents( REPO_ROOT / "services/monitoring/vmalert-atlas-availability.yaml" )[0] - rules = yaml.safe_load(manifest["data"]["atlas-availability.yaml"])["groups"][0] + groups = yaml.safe_load(manifest["data"]["atlas-availability.yaml"])["groups"] + rules = [rule for group in groups for rule in group["rules"]] yearly = next( rule - for rule in rules["rules"] + for rule in rules if rule["record"] == "atlas:availability:ratio_365d" ) - assert "atlas:availability:ratio_1h" in yearly["expr"] - assert 'definition="serving-v2"' in yearly["expr"] - assert 'definition=""' in yearly["expr"] - assert "share_gt_over_time" in yearly["expr"] - assert "[365d:15m]" in yearly["expr"] - assert "kube_node_status_condition" not in yearly["expr"] - assert "[365d:1h]" not in yearly["expr"] + assert "atlas:availability:gateway_requests_1h" in yearly["expr"] + assert "atlas:availability:gateway_failures_1h" in yearly["expr"] + assert 'definition="gateway-v3"' in yearly["expr"] + assert "sum_over_time" in yearly["expr"] + assert "[365d]" in yearly["expr"] + assert "traefik_entrypoint_requests_total" not in yearly["expr"] + assert yearly["labels"]["definition"] == "gateway-v3" -def test_availability_counts_serving_state_instead_of_replica_capacity() -> None: - """Treat quorum and any serving ingress replica as available binary states.""" +def test_availability_uses_gateway_failures_instead_of_replica_capacity() -> None: + """Measure request outcomes without treating redundant replica loss as downtime.""" manifest = _documents( REPO_ROOT / "services/monitoring/vmalert-atlas-availability.yaml" )[0] - rules = yaml.safe_load(manifest["data"]["atlas-availability.yaml"])["groups"][0] - hourly = next( + groups = yaml.safe_load(manifest["data"]["atlas-availability.yaml"])["groups"] + rules = [rule for group in groups for rule in group["rules"]] + requests = next( rule - for rule in rules["rules"] - if rule["record"] == "atlas:availability:ratio_1h" + for rule in rules + if rule["record"] == "atlas:availability:gateway_requests_1h" + ) + failures = next( + rule + for rule in rules + if rule["record"] == "atlas:availability:gateway_failures_1h" ) - assert ">= bool 2" in hourly["expr"] - assert "> bool 0" in hourly["expr"] - assert "/ 3" not in hourly["expr"] - assert hourly["labels"]["definition"] == "serving-v2" + assert 'code=~"[1-5].."' in requests["expr"] + assert 'code=~"502|503|504"' in failures["expr"] + assert "traefik_entrypoint_requests_total" in requests["expr"] + assert "traefik_entrypoint_requests_total" in failures["expr"] + assert "kube_node_status_condition" not in repr(rules) + assert "kube_deployment_status_replicas_available" not in repr(rules) + assert requests["labels"]["definition"] == "gateway-v3" + assert failures["labels"]["definition"] == "gateway-v3" + + +def test_availability_backfill_replays_the_same_gateway_sli() -> None: + """Backfill retained history with the exact rules used for future samples.""" + manifests = _documents( + REPO_ROOT / "services/monitoring/availability-backfill-v3-job.yaml" + ) + config = next(manifest for manifest in manifests if manifest["kind"] == "ConfigMap") + job = next(manifest for manifest in manifests if manifest["kind"] == "Job") + backfill = yaml.safe_load(config["data"]["atlas-gateway-history.yaml"]) + expressions = { + rule["record"]: rule["expr"] + for group in backfill["groups"] + for rule in group["rules"] + } + + assert 'code=~"[1-5].."' in expressions["atlas:availability:gateway_requests_1h"] + assert 'code=~"502|503|504"' in expressions["atlas:availability:gateway_failures_1h"] + args = job["spec"]["template"]["spec"]["containers"][0]["args"] + assert "-replay.timeFrom=2026-05-01T00:00:00Z" in args + assert "-replay.timeTo=2026-08-04T23:00:00Z" in args + assert "-replay.maxDatapointsPerQuery=48" in args def test_quality_rollups_do_not_run_every_minute() -> None: diff --git a/services/monitoring/availability-backfill-v3-job.yaml b/services/monitoring/availability-backfill-v3-job.yaml new file mode 100644 index 00000000..5f420ce7 --- /dev/null +++ b/services/monitoring/availability-backfill-v3-job.yaml @@ -0,0 +1,92 @@ +# services/monitoring/availability-backfill-v3-job.yaml +apiVersion: v1 +kind: ConfigMap +metadata: + name: atlas-availability-gateway-v3-backfill-rules + namespace: monitoring +data: + atlas-gateway-history.yaml: | + groups: + - name: atlas.availability.gateway.backfill + interval: 1h + rules: + - record: atlas:availability:gateway_requests_1h + expr: | + sum(increase( + traefik_entrypoint_requests_total{ + entrypoint="websecure", + protocol="http", + code=~"[1-5].." + }[1h] + )) + labels: + definition: gateway-v3 + scope: atlas + rollup: hourly + - record: atlas:availability:gateway_failures_1h + expr: | + sum(increase( + traefik_entrypoint_requests_total{ + entrypoint="websecure", + protocol="http", + code=~"502|503|504" + }[1h] + )) + labels: + definition: gateway-v3 + scope: atlas + rollup: hourly + +--- + +apiVersion: batch/v1 +kind: Job +metadata: + name: atlas-availability-gateway-v3-backfill + namespace: monitoring +spec: + backoffLimit: 2 + template: + metadata: + labels: + app: atlas-availability-gateway-v3-backfill + spec: + restartPolicy: Never + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: kubernetes.io/hostname + operator: NotIn + values: + - titan-22 + - titan-24 + containers: + - name: vmalert-replay + image: victoriametrics/vmalert:v1.113.0 + args: + - -datasource.url=http://victoria-metrics-single-server:8428 + - -remoteWrite.url=http://victoria-metrics-single-server:8428 + - -remoteWrite.flushInterval=1s + - -rule=/etc/vmalert/backfill/*.yaml + - -replay.timeFrom=2026-05-01T00:00:00Z + - -replay.timeTo=2026-08-04T23:00:00Z + - -replay.maxDatapointsPerQuery=48 + - -replay.rulesDelay=2s + - -replay.disableProgressBar + resources: + requests: + cpu: 100m + memory: 128Mi + limits: + cpu: "1" + memory: 512Mi + volumeMounts: + - name: rules + mountPath: /etc/vmalert/backfill + readOnly: true + volumes: + - name: rules + configMap: + name: atlas-availability-gateway-v3-backfill-rules diff --git a/services/monitoring/dashboards/atlas-overview.json b/services/monitoring/dashboards/atlas-overview.json index b7d0509b..ba181431 100644 --- a/services/monitoring/dashboards/atlas-overview.json +++ b/services/monitoring/dashboards/atlas-overview.json @@ -216,7 +216,7 @@ { "id": 27, "type": "stat", - "title": "Atlas Serving Availability", + "title": "Atlas Availability (365d)", "datasource": { "type": "prometheus", "uid": "atlas-vm" @@ -229,7 +229,7 @@ }, "targets": [ { - "expr": "(last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"serving-v2\"}[24h]) or on() avg_over_time((min(((sum(kube_node_status_condition{condition=\"Ready\",status=\"true\",node=~\"titan-0a|titan-0b|titan-0c\"}) >= bool 2)), ((sum(kube_deployment_status_replicas_available{namespace=~\"traefik|kube-system\",deployment=\"traefik\"}) > bool 0))))[1h:5m]))", + "expr": "(last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"gateway-v3\"}[24h]) or on() (1 - ((sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"502|503|504\"}[1h])) or on() vector(0)) / clamp_min(sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"[1-5]..\"}[1h])), 1))))", "refId": "A", "instant": true } @@ -286,7 +286,7 @@ }, "textMode": "value" }, - "description": "Availability over observed samples, up to 365 days: at least two control-plane nodes Ready and at least one Traefik replica serving. Historical partial-capacity samples remain available when ingress kept serving; monitoring gaps are excluded. Grafana keeps the last successful rollup for up to 24h and falls back to the live binary serving state if no rollup is available." + "description": "Rolling request-weighted availability at the Atlas HTTPS ingress. Every HTTP response counts as served except Traefik 502, 503, and 504 gateway failures. Client 4xx and application 500/501 responses do not mark the cluster unavailable because Atlas remained reachable. Replica counts, Grafana health, and monitoring gaps are not treated as downtime. Grafana keeps the last successful rollup for up to 24 hours and falls back to the same gateway SLI over the last hour." }, { "id": 4, diff --git a/services/monitoring/grafana-dashboard-overview.yaml b/services/monitoring/grafana-dashboard-overview.yaml index cc786220..a03a3fc9 100644 --- a/services/monitoring/grafana-dashboard-overview.yaml +++ b/services/monitoring/grafana-dashboard-overview.yaml @@ -225,7 +225,7 @@ data: { "id": 27, "type": "stat", - "title": "Atlas Serving Availability", + "title": "Atlas Availability (365d)", "datasource": { "type": "prometheus", "uid": "atlas-vm" @@ -238,7 +238,7 @@ data: }, "targets": [ { - "expr": "(last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"serving-v2\"}[24h]) or on() avg_over_time((min(((sum(kube_node_status_condition{condition=\"Ready\",status=\"true\",node=~\"titan-0a|titan-0b|titan-0c\"}) >= bool 2)), ((sum(kube_deployment_status_replicas_available{namespace=~\"traefik|kube-system\",deployment=\"traefik\"}) > bool 0))))[1h:5m]))", + "expr": "(last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"gateway-v3\"}[24h]) or on() (1 - ((sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"502|503|504\"}[1h])) or on() vector(0)) / clamp_min(sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"[1-5]..\"}[1h])), 1))))", "refId": "A", "instant": true } @@ -295,7 +295,7 @@ data: }, "textMode": "value" }, - "description": "Availability over observed samples, up to 365 days: at least two control-plane nodes Ready and at least one Traefik replica serving. Historical partial-capacity samples remain available when ingress kept serving; monitoring gaps are excluded. Grafana keeps the last successful rollup for up to 24h and falls back to the live binary serving state if no rollup is available." + "description": "Rolling request-weighted availability at the Atlas HTTPS ingress. Every HTTP response counts as served except Traefik 502, 503, and 504 gateway failures. Client 4xx and application 500/501 responses do not mark the cluster unavailable because Atlas remained reachable. Replica counts, Grafana health, and monitoring gaps are not treated as downtime. Grafana keeps the last successful rollup for up to 24 hours and falls back to the same gateway SLI over the last hour." }, { "id": 4, diff --git a/services/monitoring/kustomization.yaml b/services/monitoring/kustomization.yaml index 6bc0549a..de41b951 100644 --- a/services/monitoring/kustomization.yaml +++ b/services/monitoring/kustomization.yaml @@ -19,6 +19,7 @@ resources: - grafana-dashboard-mail.yaml - grafana-dashboard-testing.yaml - vmalert-atlas-availability.yaml + - availability-backfill-v3-job.yaml - dcgm-exporter.yaml - nvidia-process-exporter.yaml - jetson-tegrastats-exporter.yaml diff --git a/services/monitoring/vmalert-atlas-availability.yaml b/services/monitoring/vmalert-atlas-availability.yaml index 1bfcc1e4..333493fe 100644 --- a/services/monitoring/vmalert-atlas-availability.yaml +++ b/services/monitoring/vmalert-atlas-availability.yaml @@ -7,38 +7,62 @@ metadata: data: atlas-availability.yaml: | groups: - - name: atlas.availability + - name: atlas.availability.gateway + interval: 1h + eval_offset: 59m + rules: + - record: atlas:availability:gateway_requests_1h + expr: | + sum(increase( + traefik_entrypoint_requests_total{ + entrypoint="websecure", + protocol="http", + code=~"[1-5].." + }[1h] + )) + labels: + definition: gateway-v3 + scope: atlas + rollup: hourly + - record: atlas:availability:gateway_failures_1h + expr: | + sum(increase( + traefik_entrypoint_requests_total{ + entrypoint="websecure", + protocol="http", + code=~"502|503|504" + }[1h] + )) + labels: + definition: gateway-v3 + scope: atlas + rollup: hourly + - name: atlas.availability.rollup interval: 15m eval_offset: 14m rules: - - record: atlas:availability:ratio_1h - expr: | - avg_over_time(( - min( - ( - sum(kube_node_status_condition{condition="Ready",status="true",node=~"titan-0a|titan-0b|titan-0c"}) - >= bool 2 - ), - ( - sum(kube_deployment_status_replicas_available{namespace=~"traefik|kube-system",deployment="traefik"}) - > bool 0 - ) - ) - )[1h:5m]) - labels: - definition: serving-v2 - scope: atlas - rollup: hourly - record: atlas:availability:ratio_365d expr: | - share_gt_over_time(( - max by (scope, rollup) ( - atlas:availability:ratio_1h{scope="atlas",definition="serving-v2"} - or atlas:availability:ratio_1h{scope="atlas",definition=""} + 1 - ( + sum_over_time( + atlas:availability:gateway_failures_1h{ + scope="atlas", + definition="gateway-v3" + }[365d] ) - )[365d:15m], 0) + / + clamp_min( + sum_over_time( + atlas:availability:gateway_requests_1h{ + scope="atlas", + definition="gateway-v3" + }[365d] + ), + 1 + ) + ) labels: - definition: serving-v2 + definition: gateway-v3 scope: atlas rollup: yearly platform-quality.yaml: | From 83696d46d24ee318ce446d2fc2f988756fecb941 Mon Sep 17 00:00:00 2001 From: jenkins Date: Tue, 4 Aug 2026 21:12:31 -0300 Subject: [PATCH 940/991] monitoring: use request success for availability --- scripts/dashboards_render_atlas.py | 16 +++++----- scripts/tests/test_dashboards_render_atlas.py | 8 ++--- .../tests/test_monitoring_query_capacity.py | 32 +++++++++---------- ...yaml => availability-backfill-v4-job.yaml} | 24 +++++++------- .../monitoring/dashboards/atlas-overview.json | 4 +-- .../grafana-dashboard-overview.yaml | 4 +-- services/monitoring/kustomization.yaml | 2 +- .../vmalert-atlas-availability.yaml | 20 ++++++------ 8 files changed, 55 insertions(+), 55 deletions(-) rename services/monitoring/{availability-backfill-v3-job.yaml => availability-backfill-v4-job.yaml} (78%) diff --git a/scripts/dashboards_render_atlas.py b/scripts/dashboards_render_atlas.py index 67d7e78f..f36f4171 100644 --- a/scripts/dashboards_render_atlas.py +++ b/scripts/dashboards_render_atlas.py @@ -457,19 +457,19 @@ STUCK_TERMINATING_EXPR = ( UPTIME_WINDOW = "365d" # vmalert precomputes the expensive long-window rollup so Grafana only reads one compact series. UPTIME_RECORDING_METRIC = ( - f'atlas:availability:ratio_{UPTIME_WINDOW}{{scope="atlas",definition="gateway-v3"}}' + f'atlas:availability:ratio_{UPTIME_WINDOW}{{scope="atlas",definition="request-v4"}}' ) -GATEWAY_REQUESTS_1H_EXPR = ( +AVAILABILITY_REQUESTS_1H_EXPR = ( 'sum(increase(traefik_entrypoint_requests_total{' 'entrypoint="websecure",protocol="http",code=~"[1-5].."}[1h]))' ) -GATEWAY_FAILURES_1H_EXPR = ( +AVAILABILITY_FAILURES_1H_EXPR = ( 'sum(increase(traefik_entrypoint_requests_total{' - 'entrypoint="websecure",protocol="http",code=~"502|503|504"}[1h]))' + 'entrypoint="websecure",protocol="http",code=~"5.."}[1h]))' ) UPTIME_LIVE_FALLBACK_EXPR = ( - f"(1 - (({GATEWAY_FAILURES_1H_EXPR} or on() vector(0)) / " - f"clamp_min({GATEWAY_REQUESTS_1H_EXPR}, 1)))" + f"(1 - (({AVAILABILITY_FAILURES_1H_EXPR} or on() vector(0)) / " + f"clamp_min({AVAILABILITY_REQUESTS_1H_EXPR}, 1)))" ) UPTIME_RECORDING_EXPR = ( f"(last_over_time({UPTIME_RECORDING_METRIC}[24h]) " @@ -1901,7 +1901,7 @@ OVERVIEW_PANEL_DESCRIPTIONS = { "Control Plane Ready": "Control-plane nodes currently Ready; full count is good, lower means Kubernetes core capacity is missing.", "Control Plane Workloads": "Non-core pods running on control-plane nodes; zero is good because control nodes should stay focused.", "Stuck Terminating": "Pods that Kubernetes cannot finish deleting; zero is good, growth means cleanup or storage may be stuck.", - "Atlas Availability (365d)": "Request-weighted Atlas ingress availability; only Traefik 502, 503, and 504 gateway failures count as downtime.", + "Atlas Availability (365d)": "Request-weighted Atlas ingress availability; every server-side 5xx response counts as a failed request.", "Problem Pods": "Current-service pods Pending for more than 15 minutes or in an actionable failed phase. Completed Jobs and retained Veles migration workloads are kept on drill-down dashboards but excluded here.", "CrashLoop / ImagePull": "Current-service pods stuck in CrashLoopBackOff or ImagePullBackOff for more than 15 minutes. Retained Veles migration workloads remain visible on the Pods dashboard.", "Workers Ready": "Worker nodes currently Ready; full count is good, lower means less place to run services.", @@ -2142,7 +2142,7 @@ def build_overview(): "decimals": 4, "text_mode": "value", "instant": True, - "description": "Rolling request-weighted availability at the Atlas HTTPS ingress. Every HTTP response counts as served except Traefik 502, 503, and 504 gateway failures. Client 4xx and application 500/501 responses do not mark the cluster unavailable because Atlas remained reachable. Replica counts, Grafana health, and monitoring gaps are not treated as downtime. Grafana keeps the last successful rollup for up to 24 hours and falls back to the same gateway SLI over the last hour.", + "description": "Rolling request-weighted availability at the Atlas HTTPS ingress: responses below 500 divided by all HTTP responses. Every server-side 5xx is a real failed request; client 4xx responses count as served. Replica counts, Grafana health, and monitoring gaps are not inputs, so they cannot lower availability unless user traffic actually receives a 5xx. Grafana keeps the last successful rollup for up to 24 hours and falls back to the same request SLI over the last hour.", }, { "id": 4, diff --git a/scripts/tests/test_dashboards_render_atlas.py b/scripts/tests/test_dashboards_render_atlas.py index f9bb4d02..08938be4 100644 --- a/scripts/tests/test_dashboards_render_atlas.py +++ b/scripts/tests/test_dashboards_render_atlas.py @@ -60,17 +60,17 @@ def test_overview_availability_panel_uses_recorded_365d_rollup(): assert panel["title"] == "Atlas Availability (365d)" availability_expr = panel["targets"][0]["expr"] assert ( - 'last_over_time(atlas:availability:ratio_365d{scope="atlas",definition="gateway-v3"}[24h])' + 'last_over_time(atlas:availability:ratio_365d{scope="atlas",definition="request-v4"}[24h])' in availability_expr ) - assert 'code=~"502|503|504"' in availability_expr + assert 'code=~"5.."' in availability_expr assert 'code=~"[1-5].."' in availability_expr assert "kube_node_status_condition" not in availability_expr assert "kube_deployment_status_replicas_available" not in availability_expr assert panel["targets"][0]["instant"] is True - assert "502, 503, and 504 gateway failures" in panel["description"] + assert "Every server-side 5xx" in panel["description"] assert "Replica counts, Grafana health" in panel["description"] - assert "falls back to the same gateway SLI" in panel["description"] + assert "falls back to the same request SLI" in panel["description"] def test_overview_uses_readable_quality_power_and_gitops_panels(): diff --git a/scripts/tests/test_monitoring_query_capacity.py b/scripts/tests/test_monitoring_query_capacity.py index 0b53a89f..a40a7b07 100644 --- a/scripts/tests/test_monitoring_query_capacity.py +++ b/scripts/tests/test_monitoring_query_capacity.py @@ -57,17 +57,17 @@ def test_yearly_availability_reuses_the_hourly_rollup() -> None: if rule["record"] == "atlas:availability:ratio_365d" ) - assert "atlas:availability:gateway_requests_1h" in yearly["expr"] - assert "atlas:availability:gateway_failures_1h" in yearly["expr"] - assert 'definition="gateway-v3"' in yearly["expr"] + assert "atlas:availability:requests_1h" in yearly["expr"] + assert "atlas:availability:failures_1h" in yearly["expr"] + assert 'definition="request-v4"' in yearly["expr"] assert "sum_over_time" in yearly["expr"] assert "[365d]" in yearly["expr"] assert "traefik_entrypoint_requests_total" not in yearly["expr"] - assert yearly["labels"]["definition"] == "gateway-v3" + assert yearly["labels"]["definition"] == "request-v4" -def test_availability_uses_gateway_failures_instead_of_replica_capacity() -> None: - """Measure request outcomes without treating redundant replica loss as downtime.""" +def test_availability_uses_request_failures_instead_of_replica_capacity() -> None: + """Measure HTTP outcomes without treating redundant replica loss as downtime.""" manifest = _documents( REPO_ROOT / "services/monitoring/vmalert-atlas-availability.yaml" )[0] @@ -76,40 +76,40 @@ def test_availability_uses_gateway_failures_instead_of_replica_capacity() -> Non requests = next( rule for rule in rules - if rule["record"] == "atlas:availability:gateway_requests_1h" + if rule["record"] == "atlas:availability:requests_1h" ) failures = next( rule for rule in rules - if rule["record"] == "atlas:availability:gateway_failures_1h" + if rule["record"] == "atlas:availability:failures_1h" ) assert 'code=~"[1-5].."' in requests["expr"] - assert 'code=~"502|503|504"' in failures["expr"] + assert 'code=~"5.."' in failures["expr"] assert "traefik_entrypoint_requests_total" in requests["expr"] assert "traefik_entrypoint_requests_total" in failures["expr"] assert "kube_node_status_condition" not in repr(rules) assert "kube_deployment_status_replicas_available" not in repr(rules) - assert requests["labels"]["definition"] == "gateway-v3" - assert failures["labels"]["definition"] == "gateway-v3" + assert requests["labels"]["definition"] == "request-v4" + assert failures["labels"]["definition"] == "request-v4" -def test_availability_backfill_replays_the_same_gateway_sli() -> None: +def test_availability_backfill_replays_the_same_request_sli() -> None: """Backfill retained history with the exact rules used for future samples.""" manifests = _documents( - REPO_ROOT / "services/monitoring/availability-backfill-v3-job.yaml" + REPO_ROOT / "services/monitoring/availability-backfill-v4-job.yaml" ) config = next(manifest for manifest in manifests if manifest["kind"] == "ConfigMap") job = next(manifest for manifest in manifests if manifest["kind"] == "Job") - backfill = yaml.safe_load(config["data"]["atlas-gateway-history.yaml"]) + backfill = yaml.safe_load(config["data"]["atlas-request-history.yaml"]) expressions = { rule["record"]: rule["expr"] for group in backfill["groups"] for rule in group["rules"] } - assert 'code=~"[1-5].."' in expressions["atlas:availability:gateway_requests_1h"] - assert 'code=~"502|503|504"' in expressions["atlas:availability:gateway_failures_1h"] + assert 'code=~"[1-5].."' in expressions["atlas:availability:requests_1h"] + assert 'code=~"5.."' in expressions["atlas:availability:failures_1h"] args = job["spec"]["template"]["spec"]["containers"][0]["args"] assert "-replay.timeFrom=2026-05-01T00:00:00Z" in args assert "-replay.timeTo=2026-08-04T23:00:00Z" in args diff --git a/services/monitoring/availability-backfill-v3-job.yaml b/services/monitoring/availability-backfill-v4-job.yaml similarity index 78% rename from services/monitoring/availability-backfill-v3-job.yaml rename to services/monitoring/availability-backfill-v4-job.yaml index 5f420ce7..3aedd0c1 100644 --- a/services/monitoring/availability-backfill-v3-job.yaml +++ b/services/monitoring/availability-backfill-v4-job.yaml @@ -1,16 +1,16 @@ -# services/monitoring/availability-backfill-v3-job.yaml +# services/monitoring/availability-backfill-v4-job.yaml apiVersion: v1 kind: ConfigMap metadata: - name: atlas-availability-gateway-v3-backfill-rules + name: atlas-availability-request-v4-backfill-rules namespace: monitoring data: - atlas-gateway-history.yaml: | + atlas-request-history.yaml: | groups: - - name: atlas.availability.gateway.backfill + - name: atlas.availability.request.backfill interval: 1h rules: - - record: atlas:availability:gateway_requests_1h + - record: atlas:availability:requests_1h expr: | sum(increase( traefik_entrypoint_requests_total{ @@ -20,20 +20,20 @@ data: }[1h] )) labels: - definition: gateway-v3 + definition: request-v4 scope: atlas rollup: hourly - - record: atlas:availability:gateway_failures_1h + - record: atlas:availability:failures_1h expr: | sum(increase( traefik_entrypoint_requests_total{ entrypoint="websecure", protocol="http", - code=~"502|503|504" + code=~"5.." }[1h] )) labels: - definition: gateway-v3 + definition: request-v4 scope: atlas rollup: hourly @@ -42,14 +42,14 @@ data: apiVersion: batch/v1 kind: Job metadata: - name: atlas-availability-gateway-v3-backfill + name: atlas-availability-request-v4-backfill namespace: monitoring spec: backoffLimit: 2 template: metadata: labels: - app: atlas-availability-gateway-v3-backfill + app: atlas-availability-request-v4-backfill spec: restartPolicy: Never affinity: @@ -89,4 +89,4 @@ spec: volumes: - name: rules configMap: - name: atlas-availability-gateway-v3-backfill-rules + name: atlas-availability-request-v4-backfill-rules diff --git a/services/monitoring/dashboards/atlas-overview.json b/services/monitoring/dashboards/atlas-overview.json index ba181431..f0529573 100644 --- a/services/monitoring/dashboards/atlas-overview.json +++ b/services/monitoring/dashboards/atlas-overview.json @@ -229,7 +229,7 @@ }, "targets": [ { - "expr": "(last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"gateway-v3\"}[24h]) or on() (1 - ((sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"502|503|504\"}[1h])) or on() vector(0)) / clamp_min(sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"[1-5]..\"}[1h])), 1))))", + "expr": "(last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"request-v4\"}[24h]) or on() (1 - ((sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"5..\"}[1h])) or on() vector(0)) / clamp_min(sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"[1-5]..\"}[1h])), 1))))", "refId": "A", "instant": true } @@ -286,7 +286,7 @@ }, "textMode": "value" }, - "description": "Rolling request-weighted availability at the Atlas HTTPS ingress. Every HTTP response counts as served except Traefik 502, 503, and 504 gateway failures. Client 4xx and application 500/501 responses do not mark the cluster unavailable because Atlas remained reachable. Replica counts, Grafana health, and monitoring gaps are not treated as downtime. Grafana keeps the last successful rollup for up to 24 hours and falls back to the same gateway SLI over the last hour." + "description": "Rolling request-weighted availability at the Atlas HTTPS ingress: responses below 500 divided by all HTTP responses. Every server-side 5xx is a real failed request; client 4xx responses count as served. Replica counts, Grafana health, and monitoring gaps are not inputs, so they cannot lower availability unless user traffic actually receives a 5xx. Grafana keeps the last successful rollup for up to 24 hours and falls back to the same request SLI over the last hour." }, { "id": 4, diff --git a/services/monitoring/grafana-dashboard-overview.yaml b/services/monitoring/grafana-dashboard-overview.yaml index a03a3fc9..b742e2e9 100644 --- a/services/monitoring/grafana-dashboard-overview.yaml +++ b/services/monitoring/grafana-dashboard-overview.yaml @@ -238,7 +238,7 @@ data: }, "targets": [ { - "expr": "(last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"gateway-v3\"}[24h]) or on() (1 - ((sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"502|503|504\"}[1h])) or on() vector(0)) / clamp_min(sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"[1-5]..\"}[1h])), 1))))", + "expr": "(last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"request-v4\"}[24h]) or on() (1 - ((sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"5..\"}[1h])) or on() vector(0)) / clamp_min(sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"[1-5]..\"}[1h])), 1))))", "refId": "A", "instant": true } @@ -295,7 +295,7 @@ data: }, "textMode": "value" }, - "description": "Rolling request-weighted availability at the Atlas HTTPS ingress. Every HTTP response counts as served except Traefik 502, 503, and 504 gateway failures. Client 4xx and application 500/501 responses do not mark the cluster unavailable because Atlas remained reachable. Replica counts, Grafana health, and monitoring gaps are not treated as downtime. Grafana keeps the last successful rollup for up to 24 hours and falls back to the same gateway SLI over the last hour." + "description": "Rolling request-weighted availability at the Atlas HTTPS ingress: responses below 500 divided by all HTTP responses. Every server-side 5xx is a real failed request; client 4xx responses count as served. Replica counts, Grafana health, and monitoring gaps are not inputs, so they cannot lower availability unless user traffic actually receives a 5xx. Grafana keeps the last successful rollup for up to 24 hours and falls back to the same request SLI over the last hour." }, { "id": 4, diff --git a/services/monitoring/kustomization.yaml b/services/monitoring/kustomization.yaml index de41b951..d54b86f5 100644 --- a/services/monitoring/kustomization.yaml +++ b/services/monitoring/kustomization.yaml @@ -19,7 +19,7 @@ resources: - grafana-dashboard-mail.yaml - grafana-dashboard-testing.yaml - vmalert-atlas-availability.yaml - - availability-backfill-v3-job.yaml + - availability-backfill-v4-job.yaml - dcgm-exporter.yaml - nvidia-process-exporter.yaml - jetson-tegrastats-exporter.yaml diff --git a/services/monitoring/vmalert-atlas-availability.yaml b/services/monitoring/vmalert-atlas-availability.yaml index 333493fe..68ec402a 100644 --- a/services/monitoring/vmalert-atlas-availability.yaml +++ b/services/monitoring/vmalert-atlas-availability.yaml @@ -11,7 +11,7 @@ data: interval: 1h eval_offset: 59m rules: - - record: atlas:availability:gateway_requests_1h + - record: atlas:availability:requests_1h expr: | sum(increase( traefik_entrypoint_requests_total{ @@ -21,20 +21,20 @@ data: }[1h] )) labels: - definition: gateway-v3 + definition: request-v4 scope: atlas rollup: hourly - - record: atlas:availability:gateway_failures_1h + - record: atlas:availability:failures_1h expr: | sum(increase( traefik_entrypoint_requests_total{ entrypoint="websecure", protocol="http", - code=~"502|503|504" + code=~"5.." }[1h] )) labels: - definition: gateway-v3 + definition: request-v4 scope: atlas rollup: hourly - name: atlas.availability.rollup @@ -45,24 +45,24 @@ data: expr: | 1 - ( sum_over_time( - atlas:availability:gateway_failures_1h{ + atlas:availability:failures_1h{ scope="atlas", - definition="gateway-v3" + definition="request-v4" }[365d] ) / clamp_min( sum_over_time( - atlas:availability:gateway_requests_1h{ + atlas:availability:requests_1h{ scope="atlas", - definition="gateway-v3" + definition="request-v4" }[365d] ), 1 ) ) labels: - definition: gateway-v3 + definition: request-v4 scope: atlas rollup: yearly platform-quality.yaml: | From 5f692ecd3d83d277b9adc229dffe3bd75bf5db71 Mon Sep 17 00:00:00 2001 From: jenkins Date: Tue, 4 Aug 2026 21:14:06 -0300 Subject: [PATCH 941/991] monitoring: add compact availability fallback --- scripts/dashboards_render_atlas.py | 9 ++++++++- scripts/tests/test_dashboards_render_atlas.py | 5 ++++- services/monitoring/dashboards/atlas-overview.json | 4 ++-- services/monitoring/grafana-dashboard-overview.yaml | 4 ++-- 4 files changed, 16 insertions(+), 6 deletions(-) diff --git a/scripts/dashboards_render_atlas.py b/scripts/dashboards_render_atlas.py index f36f4171..13310f7e 100644 --- a/scripts/dashboards_render_atlas.py +++ b/scripts/dashboards_render_atlas.py @@ -471,8 +471,15 @@ UPTIME_LIVE_FALLBACK_EXPR = ( f"(1 - (({AVAILABILITY_FAILURES_1H_EXPR} or on() vector(0)) / " f"clamp_min({AVAILABILITY_REQUESTS_1H_EXPR}, 1)))" ) +UPTIME_COMPACT_FALLBACK_EXPR = ( + "(1 - (sum_over_time(atlas:availability:failures_1h{" + 'scope="atlas",definition="request-v4"}[365d]) / ' + "clamp_min(sum_over_time(atlas:availability:requests_1h{" + 'scope="atlas",definition="request-v4"}[365d]), 1)))' +) UPTIME_RECORDING_EXPR = ( f"(last_over_time({UPTIME_RECORDING_METRIC}[24h]) " + f"or on() {UPTIME_COMPACT_FALLBACK_EXPR} " f"or on() {UPTIME_LIVE_FALLBACK_EXPR})" ) @@ -2142,7 +2149,7 @@ def build_overview(): "decimals": 4, "text_mode": "value", "instant": True, - "description": "Rolling request-weighted availability at the Atlas HTTPS ingress: responses below 500 divided by all HTTP responses. Every server-side 5xx is a real failed request; client 4xx responses count as served. Replica counts, Grafana health, and monitoring gaps are not inputs, so they cannot lower availability unless user traffic actually receives a 5xx. Grafana keeps the last successful rollup for up to 24 hours and falls back to the same request SLI over the last hour.", + "description": "Rolling request-weighted availability at the Atlas HTTPS ingress: responses below 500 divided by all HTTP responses. Every server-side 5xx is a real failed request; client 4xx responses count as served. Replica counts, Grafana health, and monitoring gaps are not inputs, so they cannot lower availability unless user traffic actually receives a 5xx. Grafana keeps the last successful annual sample for up to 24 hours, can rebuild it from compact hourly rollups, and only falls back to the same one-hour request SLI before history exists.", }, { "id": 4, diff --git a/scripts/tests/test_dashboards_render_atlas.py b/scripts/tests/test_dashboards_render_atlas.py index 08938be4..a51e98d6 100644 --- a/scripts/tests/test_dashboards_render_atlas.py +++ b/scripts/tests/test_dashboards_render_atlas.py @@ -65,12 +65,15 @@ def test_overview_availability_panel_uses_recorded_365d_rollup(): ) assert 'code=~"5.."' in availability_expr assert 'code=~"[1-5].."' in availability_expr + assert "atlas:availability:failures_1h" in availability_expr + assert "atlas:availability:requests_1h" in availability_expr + assert "sum_over_time" in availability_expr assert "kube_node_status_condition" not in availability_expr assert "kube_deployment_status_replicas_available" not in availability_expr assert panel["targets"][0]["instant"] is True assert "Every server-side 5xx" in panel["description"] assert "Replica counts, Grafana health" in panel["description"] - assert "falls back to the same request SLI" in panel["description"] + assert "can rebuild it from compact hourly rollups" in panel["description"] def test_overview_uses_readable_quality_power_and_gitops_panels(): diff --git a/services/monitoring/dashboards/atlas-overview.json b/services/monitoring/dashboards/atlas-overview.json index f0529573..a205253e 100644 --- a/services/monitoring/dashboards/atlas-overview.json +++ b/services/monitoring/dashboards/atlas-overview.json @@ -229,7 +229,7 @@ }, "targets": [ { - "expr": "(last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"request-v4\"}[24h]) or on() (1 - ((sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"5..\"}[1h])) or on() vector(0)) / clamp_min(sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"[1-5]..\"}[1h])), 1))))", + "expr": "(last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"request-v4\"}[24h]) or on() (1 - (sum_over_time(atlas:availability:failures_1h{scope=\"atlas\",definition=\"request-v4\"}[365d]) / clamp_min(sum_over_time(atlas:availability:requests_1h{scope=\"atlas\",definition=\"request-v4\"}[365d]), 1))) or on() (1 - ((sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"5..\"}[1h])) or on() vector(0)) / clamp_min(sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"[1-5]..\"}[1h])), 1))))", "refId": "A", "instant": true } @@ -286,7 +286,7 @@ }, "textMode": "value" }, - "description": "Rolling request-weighted availability at the Atlas HTTPS ingress: responses below 500 divided by all HTTP responses. Every server-side 5xx is a real failed request; client 4xx responses count as served. Replica counts, Grafana health, and monitoring gaps are not inputs, so they cannot lower availability unless user traffic actually receives a 5xx. Grafana keeps the last successful rollup for up to 24 hours and falls back to the same request SLI over the last hour." + "description": "Rolling request-weighted availability at the Atlas HTTPS ingress: responses below 500 divided by all HTTP responses. Every server-side 5xx is a real failed request; client 4xx responses count as served. Replica counts, Grafana health, and monitoring gaps are not inputs, so they cannot lower availability unless user traffic actually receives a 5xx. Grafana keeps the last successful annual sample for up to 24 hours, can rebuild it from compact hourly rollups, and only falls back to the same one-hour request SLI before history exists." }, { "id": 4, diff --git a/services/monitoring/grafana-dashboard-overview.yaml b/services/monitoring/grafana-dashboard-overview.yaml index b742e2e9..fe18513a 100644 --- a/services/monitoring/grafana-dashboard-overview.yaml +++ b/services/monitoring/grafana-dashboard-overview.yaml @@ -238,7 +238,7 @@ data: }, "targets": [ { - "expr": "(last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"request-v4\"}[24h]) or on() (1 - ((sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"5..\"}[1h])) or on() vector(0)) / clamp_min(sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"[1-5]..\"}[1h])), 1))))", + "expr": "(last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"request-v4\"}[24h]) or on() (1 - (sum_over_time(atlas:availability:failures_1h{scope=\"atlas\",definition=\"request-v4\"}[365d]) / clamp_min(sum_over_time(atlas:availability:requests_1h{scope=\"atlas\",definition=\"request-v4\"}[365d]), 1))) or on() (1 - ((sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"5..\"}[1h])) or on() vector(0)) / clamp_min(sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"[1-5]..\"}[1h])), 1))))", "refId": "A", "instant": true } @@ -295,7 +295,7 @@ data: }, "textMode": "value" }, - "description": "Rolling request-weighted availability at the Atlas HTTPS ingress: responses below 500 divided by all HTTP responses. Every server-side 5xx is a real failed request; client 4xx responses count as served. Replica counts, Grafana health, and monitoring gaps are not inputs, so they cannot lower availability unless user traffic actually receives a 5xx. Grafana keeps the last successful rollup for up to 24 hours and falls back to the same request SLI over the last hour." + "description": "Rolling request-weighted availability at the Atlas HTTPS ingress: responses below 500 divided by all HTTP responses. Every server-side 5xx is a real failed request; client 4xx responses count as served. Replica counts, Grafana health, and monitoring gaps are not inputs, so they cannot lower availability unless user traffic actually receives a 5xx. Grafana keeps the last successful annual sample for up to 24 hours, can rebuild it from compact hourly rollups, and only falls back to the same one-hour request SLI before history exists." }, { "id": 4, From af10f7aadc3fa794680d8208ba36e40f82a5866a Mon Sep 17 00:00:00 2001 From: jenkins Date: Tue, 4 Aug 2026 21:24:47 -0300 Subject: [PATCH 942/991] monitoring: add daily availability rollups --- scripts/dashboards_render_atlas.py | 4 +- scripts/tests/test_dashboards_render_atlas.py | 4 +- .../tests/test_monitoring_query_capacity.py | 39 +++++++- .../availability-daily-backfill-v4-job.yaml | 92 +++++++++++++++++++ .../monitoring/dashboards/atlas-overview.json | 2 +- .../grafana-dashboard-overview.yaml | 2 +- services/monitoring/kustomization.yaml | 1 + .../vmalert-atlas-availability.yaml | 34 ++++++- 8 files changed, 168 insertions(+), 10 deletions(-) create mode 100644 services/monitoring/availability-daily-backfill-v4-job.yaml diff --git a/scripts/dashboards_render_atlas.py b/scripts/dashboards_render_atlas.py index 13310f7e..5df8eb1b 100644 --- a/scripts/dashboards_render_atlas.py +++ b/scripts/dashboards_render_atlas.py @@ -472,9 +472,9 @@ UPTIME_LIVE_FALLBACK_EXPR = ( f"clamp_min({AVAILABILITY_REQUESTS_1H_EXPR}, 1)))" ) UPTIME_COMPACT_FALLBACK_EXPR = ( - "(1 - (sum_over_time(atlas:availability:failures_1h{" + "(1 - (sum_over_time(atlas:availability:failures_1d{" 'scope="atlas",definition="request-v4"}[365d]) / ' - "clamp_min(sum_over_time(atlas:availability:requests_1h{" + "clamp_min(sum_over_time(atlas:availability:requests_1d{" 'scope="atlas",definition="request-v4"}[365d]), 1)))' ) UPTIME_RECORDING_EXPR = ( diff --git a/scripts/tests/test_dashboards_render_atlas.py b/scripts/tests/test_dashboards_render_atlas.py index a51e98d6..6ef5ab7f 100644 --- a/scripts/tests/test_dashboards_render_atlas.py +++ b/scripts/tests/test_dashboards_render_atlas.py @@ -65,8 +65,8 @@ def test_overview_availability_panel_uses_recorded_365d_rollup(): ) assert 'code=~"5.."' in availability_expr assert 'code=~"[1-5].."' in availability_expr - assert "atlas:availability:failures_1h" in availability_expr - assert "atlas:availability:requests_1h" in availability_expr + assert "atlas:availability:failures_1d" in availability_expr + assert "atlas:availability:requests_1d" in availability_expr assert "sum_over_time" in availability_expr assert "kube_node_status_condition" not in availability_expr assert "kube_deployment_status_replicas_available" not in availability_expr diff --git a/scripts/tests/test_monitoring_query_capacity.py b/scripts/tests/test_monitoring_query_capacity.py index a40a7b07..0f7c7c65 100644 --- a/scripts/tests/test_monitoring_query_capacity.py +++ b/scripts/tests/test_monitoring_query_capacity.py @@ -57,8 +57,8 @@ def test_yearly_availability_reuses_the_hourly_rollup() -> None: if rule["record"] == "atlas:availability:ratio_365d" ) - assert "atlas:availability:requests_1h" in yearly["expr"] - assert "atlas:availability:failures_1h" in yearly["expr"] + assert "atlas:availability:requests_1d" in yearly["expr"] + assert "atlas:availability:failures_1d" in yearly["expr"] assert 'definition="request-v4"' in yearly["expr"] assert "sum_over_time" in yearly["expr"] assert "[365d]" in yearly["expr"] @@ -66,6 +66,23 @@ def test_yearly_availability_reuses_the_hourly_rollup() -> None: assert yearly["labels"]["definition"] == "request-v4" +def test_daily_availability_rollups_use_the_same_request_sli() -> None: + """Keep annual availability cheap without changing its request definition.""" + manifest = _documents( + REPO_ROOT / "services/monitoring/vmalert-atlas-availability.yaml" + )[0] + groups = yaml.safe_load(manifest["data"]["atlas-availability.yaml"])["groups"] + daily_group = next( + group for group in groups if group["name"] == "atlas.availability.rollup" + ) + daily = {rule["record"]: rule for rule in daily_group["rules"]} + + assert daily_group["interval"] == "1d" + assert 'code=~"[1-5].."' in daily["atlas:availability:requests_1d"]["expr"] + assert 'code=~"5.."' in daily["atlas:availability:failures_1d"]["expr"] + assert all(rule["labels"]["definition"] == "request-v4" for rule in daily.values()) + + def test_availability_uses_request_failures_instead_of_replica_capacity() -> None: """Measure HTTP outcomes without treating redundant replica loss as downtime.""" manifest = _documents( @@ -116,6 +133,24 @@ def test_availability_backfill_replays_the_same_request_sli() -> None: assert "-replay.maxDatapointsPerQuery=48" in args +def test_daily_availability_backfill_stays_below_query_timeout() -> None: + """Replay daily buckets in small chunks so raw history never starves Grafana.""" + manifests = _documents( + REPO_ROOT / "services/monitoring/availability-daily-backfill-v4-job.yaml" + ) + config = next(manifest for manifest in manifests if manifest["kind"] == "ConfigMap") + job = next(manifest for manifest in manifests if manifest["kind"] == "Job") + backfill = yaml.safe_load(config["data"]["atlas-request-daily-history.yaml"]) + group = backfill["groups"][0] + expressions = {rule["record"]: rule["expr"] for rule in group["rules"]} + + assert group["interval"] == "1d" + assert 'code=~"[1-5].."' in expressions["atlas:availability:requests_1d"] + assert 'code=~"5.."' in expressions["atlas:availability:failures_1d"] + args = job["spec"]["template"]["spec"]["containers"][0]["args"] + assert "-replay.maxDatapointsPerQuery=4" in args + + def test_quality_rollups_do_not_run_every_minute() -> None: """Keep high-cardinality quality rollups below the backend saturation cadence.""" manifest = _documents( diff --git a/services/monitoring/availability-daily-backfill-v4-job.yaml b/services/monitoring/availability-daily-backfill-v4-job.yaml new file mode 100644 index 00000000..dbd04bd7 --- /dev/null +++ b/services/monitoring/availability-daily-backfill-v4-job.yaml @@ -0,0 +1,92 @@ +# services/monitoring/availability-daily-backfill-v4-job.yaml +apiVersion: v1 +kind: ConfigMap +metadata: + name: atlas-availability-request-v4-daily-backfill-rules + namespace: monitoring +data: + atlas-request-daily-history.yaml: | + groups: + - name: atlas.availability.request.daily.backfill + interval: 1d + rules: + - record: atlas:availability:requests_1d + expr: | + sum(increase( + traefik_entrypoint_requests_total{ + entrypoint="websecure", + protocol="http", + code=~"[1-5].." + }[1d] + )) + labels: + definition: request-v4 + scope: atlas + rollup: daily + - record: atlas:availability:failures_1d + expr: | + sum(increase( + traefik_entrypoint_requests_total{ + entrypoint="websecure", + protocol="http", + code=~"5.." + }[1d] + )) + labels: + definition: request-v4 + scope: atlas + rollup: daily + +--- + +apiVersion: batch/v1 +kind: Job +metadata: + name: atlas-availability-request-v4-daily-backfill + namespace: monitoring +spec: + backoffLimit: 2 + template: + metadata: + labels: + app: atlas-availability-request-v4-daily-backfill + spec: + restartPolicy: Never + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: kubernetes.io/hostname + operator: NotIn + values: + - titan-22 + - titan-24 + containers: + - name: vmalert-replay + image: victoriametrics/vmalert:v1.113.0 + args: + - -datasource.url=http://victoria-metrics-single-server:8428 + - -remoteWrite.url=http://victoria-metrics-single-server:8428 + - -remoteWrite.flushInterval=1s + - -rule=/etc/vmalert/backfill/*.yaml + - -replay.timeFrom=2026-05-01T00:00:00Z + - -replay.timeTo=2026-08-04T00:00:00Z + - -replay.maxDatapointsPerQuery=4 + - -replay.rulesDelay=2s + - -replay.disableProgressBar + resources: + requests: + cpu: 100m + memory: 128Mi + limits: + cpu: "1" + memory: 512Mi + volumeMounts: + - name: rules + mountPath: /etc/vmalert/backfill + readOnly: true + volumes: + - name: rules + configMap: + name: atlas-availability-request-v4-daily-backfill-rules diff --git a/services/monitoring/dashboards/atlas-overview.json b/services/monitoring/dashboards/atlas-overview.json index a205253e..991d2441 100644 --- a/services/monitoring/dashboards/atlas-overview.json +++ b/services/monitoring/dashboards/atlas-overview.json @@ -229,7 +229,7 @@ }, "targets": [ { - "expr": "(last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"request-v4\"}[24h]) or on() (1 - (sum_over_time(atlas:availability:failures_1h{scope=\"atlas\",definition=\"request-v4\"}[365d]) / clamp_min(sum_over_time(atlas:availability:requests_1h{scope=\"atlas\",definition=\"request-v4\"}[365d]), 1))) or on() (1 - ((sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"5..\"}[1h])) or on() vector(0)) / clamp_min(sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"[1-5]..\"}[1h])), 1))))", + "expr": "(last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"request-v4\"}[24h]) or on() (1 - (sum_over_time(atlas:availability:failures_1d{scope=\"atlas\",definition=\"request-v4\"}[365d]) / clamp_min(sum_over_time(atlas:availability:requests_1d{scope=\"atlas\",definition=\"request-v4\"}[365d]), 1))) or on() (1 - ((sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"5..\"}[1h])) or on() vector(0)) / clamp_min(sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"[1-5]..\"}[1h])), 1))))", "refId": "A", "instant": true } diff --git a/services/monitoring/grafana-dashboard-overview.yaml b/services/monitoring/grafana-dashboard-overview.yaml index fe18513a..be1238c1 100644 --- a/services/monitoring/grafana-dashboard-overview.yaml +++ b/services/monitoring/grafana-dashboard-overview.yaml @@ -238,7 +238,7 @@ data: }, "targets": [ { - "expr": "(last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"request-v4\"}[24h]) or on() (1 - (sum_over_time(atlas:availability:failures_1h{scope=\"atlas\",definition=\"request-v4\"}[365d]) / clamp_min(sum_over_time(atlas:availability:requests_1h{scope=\"atlas\",definition=\"request-v4\"}[365d]), 1))) or on() (1 - ((sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"5..\"}[1h])) or on() vector(0)) / clamp_min(sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"[1-5]..\"}[1h])), 1))))", + "expr": "(last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"request-v4\"}[24h]) or on() (1 - (sum_over_time(atlas:availability:failures_1d{scope=\"atlas\",definition=\"request-v4\"}[365d]) / clamp_min(sum_over_time(atlas:availability:requests_1d{scope=\"atlas\",definition=\"request-v4\"}[365d]), 1))) or on() (1 - ((sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"5..\"}[1h])) or on() vector(0)) / clamp_min(sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"[1-5]..\"}[1h])), 1))))", "refId": "A", "instant": true } diff --git a/services/monitoring/kustomization.yaml b/services/monitoring/kustomization.yaml index d54b86f5..b96b64ba 100644 --- a/services/monitoring/kustomization.yaml +++ b/services/monitoring/kustomization.yaml @@ -20,6 +20,7 @@ resources: - grafana-dashboard-testing.yaml - vmalert-atlas-availability.yaml - availability-backfill-v4-job.yaml + - availability-daily-backfill-v4-job.yaml - dcgm-exporter.yaml - nvidia-process-exporter.yaml - jetson-tegrastats-exporter.yaml diff --git a/services/monitoring/vmalert-atlas-availability.yaml b/services/monitoring/vmalert-atlas-availability.yaml index 68ec402a..f30946db 100644 --- a/services/monitoring/vmalert-atlas-availability.yaml +++ b/services/monitoring/vmalert-atlas-availability.yaml @@ -38,6 +38,36 @@ data: scope: atlas rollup: hourly - name: atlas.availability.rollup + interval: 1d + eval_offset: 23h59m + rules: + - record: atlas:availability:requests_1d + expr: | + sum(increase( + traefik_entrypoint_requests_total{ + entrypoint="websecure", + protocol="http", + code=~"[1-5].." + }[1d] + )) + labels: + definition: request-v4 + scope: atlas + rollup: daily + - record: atlas:availability:failures_1d + expr: | + sum(increase( + traefik_entrypoint_requests_total{ + entrypoint="websecure", + protocol="http", + code=~"5.." + }[1d] + )) + labels: + definition: request-v4 + scope: atlas + rollup: daily + - name: atlas.availability.annual interval: 15m eval_offset: 14m rules: @@ -45,7 +75,7 @@ data: expr: | 1 - ( sum_over_time( - atlas:availability:failures_1h{ + atlas:availability:failures_1d{ scope="atlas", definition="request-v4" }[365d] @@ -53,7 +83,7 @@ data: / clamp_min( sum_over_time( - atlas:availability:requests_1h{ + atlas:availability:requests_1d{ scope="atlas", definition="request-v4" }[365d] From ba4b871a623894c1345c5648d90d46233f928d83 Mon Sep 17 00:00:00 2001 From: jenkins Date: Tue, 4 Aug 2026 21:40:24 -0300 Subject: [PATCH 943/991] monitoring: publish availability outside query pool --- scripts/dashboards_render_atlas.py | 9 +- scripts/tests/test_availability_rollup.py | 52 +++++++++ scripts/tests/test_dashboards_render_atlas.py | 8 +- .../tests/test_monitoring_query_capacity.py | 28 ++--- .../availability-rollup-cronjob.yaml | 103 +++++++++++++++++ .../monitoring/dashboards/atlas-overview.json | 4 +- .../grafana-dashboard-overview.yaml | 4 +- services/monitoring/kustomization.yaml | 7 ++ .../monitoring/scripts/availability_rollup.py | 107 ++++++++++++++++++ .../vmalert-atlas-availability.yaml | 28 ----- 10 files changed, 293 insertions(+), 57 deletions(-) create mode 100644 scripts/tests/test_availability_rollup.py create mode 100644 services/monitoring/availability-rollup-cronjob.yaml create mode 100644 services/monitoring/scripts/availability_rollup.py diff --git a/scripts/dashboards_render_atlas.py b/scripts/dashboards_render_atlas.py index 5df8eb1b..0ac01db9 100644 --- a/scripts/dashboards_render_atlas.py +++ b/scripts/dashboards_render_atlas.py @@ -471,15 +471,8 @@ UPTIME_LIVE_FALLBACK_EXPR = ( f"(1 - (({AVAILABILITY_FAILURES_1H_EXPR} or on() vector(0)) / " f"clamp_min({AVAILABILITY_REQUESTS_1H_EXPR}, 1)))" ) -UPTIME_COMPACT_FALLBACK_EXPR = ( - "(1 - (sum_over_time(atlas:availability:failures_1d{" - 'scope="atlas",definition="request-v4"}[365d]) / ' - "clamp_min(sum_over_time(atlas:availability:requests_1d{" - 'scope="atlas",definition="request-v4"}[365d]), 1)))' -) UPTIME_RECORDING_EXPR = ( f"(last_over_time({UPTIME_RECORDING_METRIC}[24h]) " - f"or on() {UPTIME_COMPACT_FALLBACK_EXPR} " f"or on() {UPTIME_LIVE_FALLBACK_EXPR})" ) @@ -2149,7 +2142,7 @@ def build_overview(): "decimals": 4, "text_mode": "value", "instant": True, - "description": "Rolling request-weighted availability at the Atlas HTTPS ingress: responses below 500 divided by all HTTP responses. Every server-side 5xx is a real failed request; client 4xx responses count as served. Replica counts, Grafana health, and monitoring gaps are not inputs, so they cannot lower availability unless user traffic actually receives a 5xx. Grafana keeps the last successful annual sample for up to 24 hours, can rebuild it from compact hourly rollups, and only falls back to the same one-hour request SLI before history exists.", + "description": "Rolling request-weighted availability at the Atlas HTTPS ingress: responses below 500 divided by all HTTP responses. Every server-side 5xx is a real failed request; client 4xx responses count as served. Replica counts, Grafana health, and monitoring gaps are not inputs, so they cannot lower availability unless user traffic actually receives a 5xx. A daily rollup job publishes one annual sample from deduplicated daily totals; Grafana keeps it for up to 24 hours and only falls back to the same one-hour request SLI before history exists.", }, { "id": 4, diff --git a/scripts/tests/test_availability_rollup.py b/scripts/tests/test_availability_rollup.py new file mode 100644 index 00000000..917196ce --- /dev/null +++ b/scripts/tests/test_availability_rollup.py @@ -0,0 +1,52 @@ +"""Unit tests for the Atlas availability publisher.""" + +import importlib.util +import json +from pathlib import Path + +import pytest + + +def load_module(): + """Load the service-owned rollup module without packaging it.""" + path = ( + Path(__file__).resolve().parents[2] + / "services/monitoring/scripts/availability_rollup.py" + ) + spec = importlib.util.spec_from_file_location("availability_rollup", path) + module = importlib.util.module_from_spec(spec) + assert spec.loader is not None + spec.loader.exec_module(module) + return module + + +def test_parse_export_deduplicates_replay_boundaries() -> None: + """Keep only the final value when replay chunks share a timestamp.""" + mod = load_module() + lines = [ + (json.dumps({"timestamps": [1000, 2000], "values": [2, 3]}) + "\n").encode(), + (json.dumps({"timestamps": [2000, 3000], "values": [3, 5]}) + "\n").encode(), + ] + + assert mod.parse_export(lines) == {1000: 2.0, 2000: 3.0, 3000: 5.0} + + +def test_calculate_availability_uses_all_server_failures() -> None: + """Calculate one bounded successful-request ratio.""" + mod = load_module() + + assert mod.calculate_availability(1000, 2) == pytest.approx(0.998) + with pytest.raises(ValueError): + mod.calculate_availability(0, 0) + with pytest.raises(ValueError): + mod.calculate_availability(100, -1) + + +def test_render_metric_publishes_only_the_request_v4_series() -> None: + """Render the single series selected by the Grafana panel.""" + mod = load_module() + + assert mod.render_metric(0.9995, 1234) == ( + 'atlas:availability:ratio_365d{definition="request-v4",scope="atlas",' + 'rollup="yearly"} 0.999500000000 1234\n' + ) diff --git a/scripts/tests/test_dashboards_render_atlas.py b/scripts/tests/test_dashboards_render_atlas.py index 6ef5ab7f..c45ed819 100644 --- a/scripts/tests/test_dashboards_render_atlas.py +++ b/scripts/tests/test_dashboards_render_atlas.py @@ -65,15 +65,15 @@ def test_overview_availability_panel_uses_recorded_365d_rollup(): ) assert 'code=~"5.."' in availability_expr assert 'code=~"[1-5].."' in availability_expr - assert "atlas:availability:failures_1d" in availability_expr - assert "atlas:availability:requests_1d" in availability_expr - assert "sum_over_time" in availability_expr + assert "atlas:availability:failures_1d" not in availability_expr + assert "atlas:availability:requests_1d" not in availability_expr + assert "sum_over_time" not in availability_expr assert "kube_node_status_condition" not in availability_expr assert "kube_deployment_status_replicas_available" not in availability_expr assert panel["targets"][0]["instant"] is True assert "Every server-side 5xx" in panel["description"] assert "Replica counts, Grafana health" in panel["description"] - assert "can rebuild it from compact hourly rollups" in panel["description"] + assert "daily rollup job publishes one annual sample" in panel["description"] def test_overview_uses_readable_quality_power_and_gitops_panels(): diff --git a/scripts/tests/test_monitoring_query_capacity.py b/scripts/tests/test_monitoring_query_capacity.py index 0f7c7c65..3f812684 100644 --- a/scripts/tests/test_monitoring_query_capacity.py +++ b/scripts/tests/test_monitoring_query_capacity.py @@ -44,26 +44,28 @@ def test_victoria_metrics_has_dashboard_burst_headroom() -> None: assert {"titan-14", "titan-18"} <= set(hostname_rule["values"]) -def test_yearly_availability_reuses_the_hourly_rollup() -> None: - """Prevent the yearly rule from rescanning raw cluster metrics for 365 days.""" +def test_yearly_availability_is_published_outside_the_query_pool() -> None: + """Keep all long-range availability work out of Grafana and MetricsQL.""" manifest = _documents( REPO_ROOT / "services/monitoring/vmalert-atlas-availability.yaml" )[0] groups = yaml.safe_load(manifest["data"]["atlas-availability.yaml"])["groups"] rules = [rule for group in groups for rule in group["rules"]] - yearly = next( - rule - for rule in rules - if rule["record"] == "atlas:availability:ratio_365d" + manifests = _documents( + REPO_ROOT / "services/monitoring/availability-rollup-cronjob.yaml" ) + cronjob = next(manifest for manifest in manifests if manifest["kind"] == "CronJob") + source = ( + REPO_ROOT / "services/monitoring/scripts/availability_rollup.py" + ).read_text() - assert "atlas:availability:requests_1d" in yearly["expr"] - assert "atlas:availability:failures_1d" in yearly["expr"] - assert 'definition="request-v4"' in yearly["expr"] - assert "sum_over_time" in yearly["expr"] - assert "[365d]" in yearly["expr"] - assert "traefik_entrypoint_requests_total" not in yearly["expr"] - assert yearly["labels"]["definition"] == "request-v4" + assert all(rule["record"] != "atlas:availability:ratio_365d" for rule in rules) + assert "atlas:availability:requests_1d" in source + assert "atlas:availability:failures_1d" in source + assert "/api/v1/export" in source + assert "/api/v1/import/prometheus" in source + assert cronjob["spec"]["schedule"] == "10 0 * * *" + assert cronjob["spec"]["concurrencyPolicy"] == "Forbid" def test_daily_availability_rollups_use_the_same_request_sli() -> None: diff --git a/services/monitoring/availability-rollup-cronjob.yaml b/services/monitoring/availability-rollup-cronjob.yaml new file mode 100644 index 00000000..c42ed33a --- /dev/null +++ b/services/monitoring/availability-rollup-cronjob.yaml @@ -0,0 +1,103 @@ +# services/monitoring/availability-rollup-cronjob.yaml +apiVersion: batch/v1 +kind: Job +metadata: + name: atlas-availability-request-v4-rollup-initial + namespace: monitoring +spec: + activeDeadlineSeconds: 900 + backoffLimit: 2 + template: + metadata: + labels: + app: atlas-availability-request-v4-rollup + spec: + restartPolicy: Never + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: kubernetes.io/hostname + operator: NotIn + values: + - titan-22 + - titan-24 + containers: + - name: rollup + image: python:3.12-alpine + command: ["python", "/scripts/availability_rollup.py"] + env: + - name: VM_URL + value: http://victoria-metrics-single-server:8428 + resources: + requests: + cpu: 50m + memory: 64Mi + limits: + cpu: 500m + memory: 256Mi + volumeMounts: + - name: script + mountPath: /scripts + readOnly: true + volumes: + - name: script + configMap: + name: atlas-availability-rollup-script + +--- + +apiVersion: batch/v1 +kind: CronJob +metadata: + name: atlas-availability-request-v4-rollup + namespace: monitoring +spec: + schedule: "10 0 * * *" + timeZone: Etc/UTC + concurrencyPolicy: Forbid + successfulJobsHistoryLimit: 1 + failedJobsHistoryLimit: 3 + jobTemplate: + spec: + activeDeadlineSeconds: 900 + backoffLimit: 2 + template: + metadata: + labels: + app: atlas-availability-request-v4-rollup + spec: + restartPolicy: Never + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: kubernetes.io/hostname + operator: NotIn + values: + - titan-22 + - titan-24 + containers: + - name: rollup + image: python:3.12-alpine + command: ["python", "/scripts/availability_rollup.py"] + env: + - name: VM_URL + value: http://victoria-metrics-single-server:8428 + resources: + requests: + cpu: 50m + memory: 64Mi + limits: + cpu: 500m + memory: 256Mi + volumeMounts: + - name: script + mountPath: /scripts + readOnly: true + volumes: + - name: script + configMap: + name: atlas-availability-rollup-script diff --git a/services/monitoring/dashboards/atlas-overview.json b/services/monitoring/dashboards/atlas-overview.json index 991d2441..65a1c9a8 100644 --- a/services/monitoring/dashboards/atlas-overview.json +++ b/services/monitoring/dashboards/atlas-overview.json @@ -229,7 +229,7 @@ }, "targets": [ { - "expr": "(last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"request-v4\"}[24h]) or on() (1 - (sum_over_time(atlas:availability:failures_1d{scope=\"atlas\",definition=\"request-v4\"}[365d]) / clamp_min(sum_over_time(atlas:availability:requests_1d{scope=\"atlas\",definition=\"request-v4\"}[365d]), 1))) or on() (1 - ((sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"5..\"}[1h])) or on() vector(0)) / clamp_min(sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"[1-5]..\"}[1h])), 1))))", + "expr": "(last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"request-v4\"}[24h]) or on() (1 - ((sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"5..\"}[1h])) or on() vector(0)) / clamp_min(sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"[1-5]..\"}[1h])), 1))))", "refId": "A", "instant": true } @@ -286,7 +286,7 @@ }, "textMode": "value" }, - "description": "Rolling request-weighted availability at the Atlas HTTPS ingress: responses below 500 divided by all HTTP responses. Every server-side 5xx is a real failed request; client 4xx responses count as served. Replica counts, Grafana health, and monitoring gaps are not inputs, so they cannot lower availability unless user traffic actually receives a 5xx. Grafana keeps the last successful annual sample for up to 24 hours, can rebuild it from compact hourly rollups, and only falls back to the same one-hour request SLI before history exists." + "description": "Rolling request-weighted availability at the Atlas HTTPS ingress: responses below 500 divided by all HTTP responses. Every server-side 5xx is a real failed request; client 4xx responses count as served. Replica counts, Grafana health, and monitoring gaps are not inputs, so they cannot lower availability unless user traffic actually receives a 5xx. A daily rollup job publishes one annual sample from deduplicated daily totals; Grafana keeps it for up to 24 hours and only falls back to the same one-hour request SLI before history exists." }, { "id": 4, diff --git a/services/monitoring/grafana-dashboard-overview.yaml b/services/monitoring/grafana-dashboard-overview.yaml index be1238c1..6416b11f 100644 --- a/services/monitoring/grafana-dashboard-overview.yaml +++ b/services/monitoring/grafana-dashboard-overview.yaml @@ -238,7 +238,7 @@ data: }, "targets": [ { - "expr": "(last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"request-v4\"}[24h]) or on() (1 - (sum_over_time(atlas:availability:failures_1d{scope=\"atlas\",definition=\"request-v4\"}[365d]) / clamp_min(sum_over_time(atlas:availability:requests_1d{scope=\"atlas\",definition=\"request-v4\"}[365d]), 1))) or on() (1 - ((sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"5..\"}[1h])) or on() vector(0)) / clamp_min(sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"[1-5]..\"}[1h])), 1))))", + "expr": "(last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"request-v4\"}[24h]) or on() (1 - ((sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"5..\"}[1h])) or on() vector(0)) / clamp_min(sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"[1-5]..\"}[1h])), 1))))", "refId": "A", "instant": true } @@ -295,7 +295,7 @@ data: }, "textMode": "value" }, - "description": "Rolling request-weighted availability at the Atlas HTTPS ingress: responses below 500 divided by all HTTP responses. Every server-side 5xx is a real failed request; client 4xx responses count as served. Replica counts, Grafana health, and monitoring gaps are not inputs, so they cannot lower availability unless user traffic actually receives a 5xx. Grafana keeps the last successful annual sample for up to 24 hours, can rebuild it from compact hourly rollups, and only falls back to the same one-hour request SLI before history exists." + "description": "Rolling request-weighted availability at the Atlas HTTPS ingress: responses below 500 divided by all HTTP responses. Every server-side 5xx is a real failed request; client 4xx responses count as served. Replica counts, Grafana health, and monitoring gaps are not inputs, so they cannot lower availability unless user traffic actually receives a 5xx. A daily rollup job publishes one annual sample from deduplicated daily totals; Grafana keeps it for up to 24 hours and only falls back to the same one-hour request SLI before history exists." }, { "id": 4, diff --git a/services/monitoring/kustomization.yaml b/services/monitoring/kustomization.yaml index b96b64ba..3c54503d 100644 --- a/services/monitoring/kustomization.yaml +++ b/services/monitoring/kustomization.yaml @@ -21,6 +21,7 @@ resources: - vmalert-atlas-availability.yaml - availability-backfill-v4-job.yaml - availability-daily-backfill-v4-job.yaml + - availability-rollup-cronjob.yaml - dcgm-exporter.yaml - nvidia-process-exporter.yaml - jetson-tegrastats-exporter.yaml @@ -68,3 +69,9 @@ configMapGenerator: - platform_quality_suite_probe.sh=scripts/platform_quality_suite_probe.sh options: disableNameSuffixHash: true + - name: atlas-availability-rollup-script + namespace: monitoring + files: + - availability_rollup.py=scripts/availability_rollup.py + options: + disableNameSuffixHash: true diff --git a/services/monitoring/scripts/availability_rollup.py b/services/monitoring/scripts/availability_rollup.py new file mode 100644 index 00000000..c8a73892 --- /dev/null +++ b/services/monitoring/scripts/availability_rollup.py @@ -0,0 +1,107 @@ +#!/usr/bin/env python3 +"""Publish Atlas request availability from deduplicated daily rollups.""" + +from __future__ import annotations + +import json +import os +import time +from datetime import datetime, timedelta, timezone +from typing import Iterable +from urllib.parse import urlencode +from urllib.request import Request, urlopen + + +VM_URL = os.environ.get( + "VM_URL", "http://victoria-metrics-single-server:8428" +).rstrip("/") +SCOPE = "atlas" +DEFINITION = "request-v4" +REQUESTS_METRIC = "atlas:availability:requests_1d" +FAILURES_METRIC = "atlas:availability:failures_1d" +OUTPUT_METRIC = "atlas:availability:ratio_365d" +WINDOW_DAYS = 365 + + +def parse_export(lines: Iterable[bytes]) -> dict[int, float]: + """Return the last exported value for each timestamp.""" + points: dict[int, float] = {} + for raw_line in lines: + if not raw_line.strip(): + continue + series = json.loads(raw_line) + for timestamp, value in zip(series["timestamps"], series["values"], strict=True): + points[int(timestamp)] = float(value) + return points + + +def fetch_rollup(metric: str, start: datetime, end: datetime) -> dict[int, float]: + """Stream one compact rollup series from VictoriaMetrics.""" + matcher = ( + f'{{__name__="{metric}",scope="{SCOPE}",definition="{DEFINITION}"}}' + ) + query = urlencode( + { + "match[]": matcher, + "start": start.isoformat().replace("+00:00", "Z"), + "end": end.isoformat().replace("+00:00", "Z"), + } + ) + with urlopen(f"{VM_URL}/api/v1/export?{query}", timeout=600) as response: + return parse_export(response) + + +def calculate_availability(requests: float, failures: float) -> float: + """Calculate the bounded successful-request ratio.""" + if requests <= 0: + raise ValueError("availability requires at least one observed request") + if failures < 0: + raise ValueError("failed request count cannot be negative") + return max(0.0, min(1.0, 1.0 - (failures / requests))) + + +def render_metric(value: float, timestamp_ms: int) -> str: + """Render one VictoriaMetrics Prometheus-import sample.""" + return ( + f'{OUTPUT_METRIC}{{definition="{DEFINITION}",scope="{SCOPE}",' + f'rollup="yearly"}} {value:.12f} {timestamp_ms}\n' + ) + + +def publish(value: float, timestamp_ms: int) -> None: + """Write the calculated annual ratio to VictoriaMetrics.""" + request = Request( + f"{VM_URL}/api/v1/import/prometheus", + data=render_metric(value, timestamp_ms).encode(), + headers={"Content-Type": "text/plain"}, + method="POST", + ) + with urlopen(request, timeout=30) as response: + if response.status not in {200, 204}: + raise RuntimeError(f"VictoriaMetrics import returned HTTP {response.status}") + + +def main() -> None: + """Rebuild and publish the rolling request-availability sample.""" + end = datetime.now(timezone.utc) + start = end - timedelta(days=WINDOW_DAYS) + requests = sum(fetch_rollup(REQUESTS_METRIC, start, end).values()) + failures = sum(fetch_rollup(FAILURES_METRIC, start, end).values()) + availability = calculate_availability(requests, failures) + timestamp_ms = time.time_ns() // 1_000_000 + publish(availability, timestamp_ms) + print( + json.dumps( + { + "requests": requests, + "failures": failures, + "availability_percent": availability * 100, + "timestamp_ms": timestamp_ms, + }, + sort_keys=True, + ) + ) + + +if __name__ == "__main__": + main() diff --git a/services/monitoring/vmalert-atlas-availability.yaml b/services/monitoring/vmalert-atlas-availability.yaml index f30946db..c2e1f78e 100644 --- a/services/monitoring/vmalert-atlas-availability.yaml +++ b/services/monitoring/vmalert-atlas-availability.yaml @@ -67,34 +67,6 @@ data: definition: request-v4 scope: atlas rollup: daily - - name: atlas.availability.annual - interval: 15m - eval_offset: 14m - rules: - - record: atlas:availability:ratio_365d - expr: | - 1 - ( - sum_over_time( - atlas:availability:failures_1d{ - scope="atlas", - definition="request-v4" - }[365d] - ) - / - clamp_min( - sum_over_time( - atlas:availability:requests_1d{ - scope="atlas", - definition="request-v4" - }[365d] - ), - 1 - ) - ) - labels: - definition: request-v4 - scope: atlas - rollup: yearly platform-quality.yaml: | groups: - name: platform.quality From a2564f86116bfed3b5f5ffa8e34d09b655f51a40 Mon Sep 17 00:00:00 2001 From: jenkins Date: Tue, 4 Aug 2026 21:47:30 -0300 Subject: [PATCH 944/991] monitoring: retain daily availability through retries --- scripts/dashboards_render_atlas.py | 4 ++-- scripts/tests/test_dashboards_render_atlas.py | 3 ++- services/monitoring/dashboards/atlas-overview.json | 4 ++-- services/monitoring/grafana-dashboard-overview.yaml | 4 ++-- 4 files changed, 8 insertions(+), 7 deletions(-) diff --git a/scripts/dashboards_render_atlas.py b/scripts/dashboards_render_atlas.py index 0ac01db9..4be4f6b0 100644 --- a/scripts/dashboards_render_atlas.py +++ b/scripts/dashboards_render_atlas.py @@ -472,7 +472,7 @@ UPTIME_LIVE_FALLBACK_EXPR = ( f"clamp_min({AVAILABILITY_REQUESTS_1H_EXPR}, 1)))" ) UPTIME_RECORDING_EXPR = ( - f"(last_over_time({UPTIME_RECORDING_METRIC}[24h]) " + f"(last_over_time({UPTIME_RECORDING_METRIC}[48h]) " f"or on() {UPTIME_LIVE_FALLBACK_EXPR})" ) @@ -2142,7 +2142,7 @@ def build_overview(): "decimals": 4, "text_mode": "value", "instant": True, - "description": "Rolling request-weighted availability at the Atlas HTTPS ingress: responses below 500 divided by all HTTP responses. Every server-side 5xx is a real failed request; client 4xx responses count as served. Replica counts, Grafana health, and monitoring gaps are not inputs, so they cannot lower availability unless user traffic actually receives a 5xx. A daily rollup job publishes one annual sample from deduplicated daily totals; Grafana keeps it for up to 24 hours and only falls back to the same one-hour request SLI before history exists.", + "description": "Rolling request-weighted availability at the Atlas HTTPS ingress: responses below 500 divided by all HTTP responses. Every server-side 5xx is a real failed request; client 4xx responses count as served. Replica counts, Grafana health, and monitoring gaps are not inputs, so they cannot lower availability unless user traffic actually receives a 5xx. A daily rollup job publishes one annual sample from deduplicated daily totals; Grafana keeps it for up to 48 hours so one delayed retry cannot cause a fallback, and only uses the same one-hour request SLI before history exists.", }, { "id": 4, diff --git a/scripts/tests/test_dashboards_render_atlas.py b/scripts/tests/test_dashboards_render_atlas.py index c45ed819..4fdb1071 100644 --- a/scripts/tests/test_dashboards_render_atlas.py +++ b/scripts/tests/test_dashboards_render_atlas.py @@ -60,7 +60,7 @@ def test_overview_availability_panel_uses_recorded_365d_rollup(): assert panel["title"] == "Atlas Availability (365d)" availability_expr = panel["targets"][0]["expr"] assert ( - 'last_over_time(atlas:availability:ratio_365d{scope="atlas",definition="request-v4"}[24h])' + 'last_over_time(atlas:availability:ratio_365d{scope="atlas",definition="request-v4"}[48h])' in availability_expr ) assert 'code=~"5.."' in availability_expr @@ -74,6 +74,7 @@ def test_overview_availability_panel_uses_recorded_365d_rollup(): assert "Every server-side 5xx" in panel["description"] assert "Replica counts, Grafana health" in panel["description"] assert "daily rollup job publishes one annual sample" in panel["description"] + assert "keeps it for up to 48 hours" in panel["description"] def test_overview_uses_readable_quality_power_and_gitops_panels(): diff --git a/services/monitoring/dashboards/atlas-overview.json b/services/monitoring/dashboards/atlas-overview.json index 65a1c9a8..37ea4017 100644 --- a/services/monitoring/dashboards/atlas-overview.json +++ b/services/monitoring/dashboards/atlas-overview.json @@ -229,7 +229,7 @@ }, "targets": [ { - "expr": "(last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"request-v4\"}[24h]) or on() (1 - ((sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"5..\"}[1h])) or on() vector(0)) / clamp_min(sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"[1-5]..\"}[1h])), 1))))", + "expr": "(last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"request-v4\"}[48h]) or on() (1 - ((sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"5..\"}[1h])) or on() vector(0)) / clamp_min(sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"[1-5]..\"}[1h])), 1))))", "refId": "A", "instant": true } @@ -286,7 +286,7 @@ }, "textMode": "value" }, - "description": "Rolling request-weighted availability at the Atlas HTTPS ingress: responses below 500 divided by all HTTP responses. Every server-side 5xx is a real failed request; client 4xx responses count as served. Replica counts, Grafana health, and monitoring gaps are not inputs, so they cannot lower availability unless user traffic actually receives a 5xx. A daily rollup job publishes one annual sample from deduplicated daily totals; Grafana keeps it for up to 24 hours and only falls back to the same one-hour request SLI before history exists." + "description": "Rolling request-weighted availability at the Atlas HTTPS ingress: responses below 500 divided by all HTTP responses. Every server-side 5xx is a real failed request; client 4xx responses count as served. Replica counts, Grafana health, and monitoring gaps are not inputs, so they cannot lower availability unless user traffic actually receives a 5xx. A daily rollup job publishes one annual sample from deduplicated daily totals; Grafana keeps it for up to 48 hours so one delayed retry cannot cause a fallback, and only uses the same one-hour request SLI before history exists." }, { "id": 4, diff --git a/services/monitoring/grafana-dashboard-overview.yaml b/services/monitoring/grafana-dashboard-overview.yaml index 6416b11f..00ae1435 100644 --- a/services/monitoring/grafana-dashboard-overview.yaml +++ b/services/monitoring/grafana-dashboard-overview.yaml @@ -238,7 +238,7 @@ data: }, "targets": [ { - "expr": "(last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"request-v4\"}[24h]) or on() (1 - ((sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"5..\"}[1h])) or on() vector(0)) / clamp_min(sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"[1-5]..\"}[1h])), 1))))", + "expr": "(last_over_time(atlas:availability:ratio_365d{scope=\"atlas\",definition=\"request-v4\"}[48h]) or on() (1 - ((sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"5..\"}[1h])) or on() vector(0)) / clamp_min(sum(increase(traefik_entrypoint_requests_total{entrypoint=\"websecure\",protocol=\"http\",code=~\"[1-5]..\"}[1h])), 1))))", "refId": "A", "instant": true } @@ -295,7 +295,7 @@ data: }, "textMode": "value" }, - "description": "Rolling request-weighted availability at the Atlas HTTPS ingress: responses below 500 divided by all HTTP responses. Every server-side 5xx is a real failed request; client 4xx responses count as served. Replica counts, Grafana health, and monitoring gaps are not inputs, so they cannot lower availability unless user traffic actually receives a 5xx. A daily rollup job publishes one annual sample from deduplicated daily totals; Grafana keeps it for up to 24 hours and only falls back to the same one-hour request SLI before history exists." + "description": "Rolling request-weighted availability at the Atlas HTTPS ingress: responses below 500 divided by all HTTP responses. Every server-side 5xx is a real failed request; client 4xx responses count as served. Replica counts, Grafana health, and monitoring gaps are not inputs, so they cannot lower availability unless user traffic actually receives a 5xx. A daily rollup job publishes one annual sample from deduplicated daily totals; Grafana keeps it for up to 48 hours so one delayed retry cannot cause a fallback, and only uses the same one-hour request SLI before history exists." }, { "id": 4, From 5719d124a6c99a16a8778ced85accb98b0cf38cc Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 01:37:42 +0000 Subject: [PATCH 945/991] chore(maintenance): automated image update --- services/maintenance/metis-configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index 5ac781d3..c1ed8cdc 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -15,7 +15,7 @@ data: METIS_MAX_DEVICE_BYTES: "1000000000000" METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" - METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-269-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} + METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-270-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-269-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis From 331c0be6787378557de2087a3e2107e8c4fd1c39 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 01:38:41 +0000 Subject: [PATCH 946/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-amd64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-amd64-daemonset.yaml b/services/maintenance/metis-sentinel-amd64-daemonset.yaml index acccd89c..a2c22c37 100644 --- a/services/maintenance/metis-sentinel-amd64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-amd64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: amd64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-269-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-270-amd64 # {"$imagepolicy": "maintenance:metis-sentinel-amd64"} imagePullPolicy: Always envFrom: - configMapRef: From e6a7697ff843a05699f0e909d451cb51549aedcc Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 01:40:41 +0000 Subject: [PATCH 947/991] chore(maintenance): automated image update --- services/maintenance/metis-sentinel-arm64-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/metis-sentinel-arm64-daemonset.yaml b/services/maintenance/metis-sentinel-arm64-daemonset.yaml index 99317368..2bf153f4 100644 --- a/services/maintenance/metis-sentinel-arm64-daemonset.yaml +++ b/services/maintenance/metis-sentinel-arm64-daemonset.yaml @@ -32,7 +32,7 @@ spec: kubernetes.io/arch: arm64 containers: - name: metis-sentinel - image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-269-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} + image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-270-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"} imagePullPolicy: Always envFrom: - configMapRef: From 10fcab74b1198656eabff5264e2ea314d4fb0f1b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 01:40:46 +0000 Subject: [PATCH 948/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- services/maintenance/metis-configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 0dd4b17c..21f0045a 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -54,7 +54,7 @@ images: - name: registry.bstein.dev/bstein/ariadne newTag: 0.1.0-387 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis - newTag: 0.1.0-269-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} + newTag: 0.1.0-270-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria newTag: 0.1.0-120 # {"$imagepolicy": "maintenance:soteria:tag"} configMapGenerator: diff --git a/services/maintenance/metis-configmap.yaml b/services/maintenance/metis-configmap.yaml index c1ed8cdc..b1a1f4d1 100644 --- a/services/maintenance/metis-configmap.yaml +++ b/services/maintenance/metis-configmap.yaml @@ -16,7 +16,7 @@ data: METIS_NAMESPACE: maintenance METIS_REMOTE_POD_TIMEOUT_SEC: "14400" METIS_RUNNER_IMAGE_AMD64: registry.bstein.dev/bstein/metis:0.1.0-270-amd64 # {"$imagepolicy": "maintenance:metis-amd64"} - METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-269-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} + METIS_RUNNER_IMAGE_ARM64: registry.bstein.dev/bstein/metis:0.1.0-270-arm64 # {"$imagepolicy": "maintenance:metis-arm64"} METIS_HARBOR_REGISTRY: registry.bstein.dev METIS_HARBOR_PROJECT: metis METIS_HARBOR_API_BASE: https://registry.bstein.dev/api/v2.0 From 24308f48701ec06060fd0959746871d6981a7eb3 Mon Sep 17 00:00:00 2001 From: jenkins Date: Tue, 4 Aug 2026 22:49:48 -0300 Subject: [PATCH 949/991] monitoring: remove legacy availability series --- scripts/tests/test_availability_cleanup.py | 28 ++++++ .../availability-legacy-cleanup-job.yaml | 47 ++++++++++ services/monitoring/kustomization.yaml | 7 ++ .../scripts/availability_cleanup.py | 93 +++++++++++++++++++ 4 files changed, 175 insertions(+) create mode 100644 scripts/tests/test_availability_cleanup.py create mode 100644 services/monitoring/availability-legacy-cleanup-job.yaml create mode 100644 services/monitoring/scripts/availability_cleanup.py diff --git a/scripts/tests/test_availability_cleanup.py b/scripts/tests/test_availability_cleanup.py new file mode 100644 index 00000000..c907b60f --- /dev/null +++ b/scripts/tests/test_availability_cleanup.py @@ -0,0 +1,28 @@ +"""Safety tests for the legacy Atlas availability cleanup.""" + +import importlib.util +from pathlib import Path + + +def load_module(): + """Load the service-owned cleanup module without packaging it.""" + path = ( + Path(__file__).resolve().parents[2] + / "services/monitoring/scripts/availability_cleanup.py" + ) + spec = importlib.util.spec_from_file_location("availability_cleanup", path) + module = importlib.util.module_from_spec(spec) + assert spec.loader is not None + spec.loader.exec_module(module) + return module + + +def test_cleanup_selector_cannot_match_request_v4() -> None: + """Constrain deletion to obsolete annual Atlas definitions.""" + mod = load_module() + + assert '__name__="atlas:availability:ratio_365d"' in mod.LEGACY_SELECTOR + assert 'scope="atlas"' in mod.LEGACY_SELECTOR + assert 'definition!="request-v4"' in mod.LEGACY_SELECTOR + assert 'definition="request-v4"' in mod.PROTECTED_SELECTOR + assert "ratio_1h" not in mod.LEGACY_SELECTOR diff --git a/services/monitoring/availability-legacy-cleanup-job.yaml b/services/monitoring/availability-legacy-cleanup-job.yaml new file mode 100644 index 00000000..70f30e07 --- /dev/null +++ b/services/monitoring/availability-legacy-cleanup-job.yaml @@ -0,0 +1,47 @@ +# services/monitoring/availability-legacy-cleanup-job.yaml +apiVersion: batch/v1 +kind: Job +metadata: + name: atlas-availability-legacy-series-cleanup-v1 + namespace: monitoring +spec: + activeDeadlineSeconds: 300 + backoffLimit: 2 + template: + metadata: + labels: + app: atlas-availability-legacy-series-cleanup + spec: + restartPolicy: Never + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: kubernetes.io/hostname + operator: NotIn + values: + - titan-22 + - titan-24 + containers: + - name: cleanup + image: python:3.12-alpine + command: ["python", "/scripts/availability_cleanup.py"] + env: + - name: VM_URL + value: http://victoria-metrics-single-server:8428 + resources: + requests: + cpu: 25m + memory: 32Mi + limits: + cpu: 250m + memory: 128Mi + volumeMounts: + - name: script + mountPath: /scripts + readOnly: true + volumes: + - name: script + configMap: + name: atlas-availability-cleanup-script diff --git a/services/monitoring/kustomization.yaml b/services/monitoring/kustomization.yaml index 3c54503d..a9ce091e 100644 --- a/services/monitoring/kustomization.yaml +++ b/services/monitoring/kustomization.yaml @@ -22,6 +22,7 @@ resources: - availability-backfill-v4-job.yaml - availability-daily-backfill-v4-job.yaml - availability-rollup-cronjob.yaml + - availability-legacy-cleanup-job.yaml - dcgm-exporter.yaml - nvidia-process-exporter.yaml - jetson-tegrastats-exporter.yaml @@ -75,3 +76,9 @@ configMapGenerator: - availability_rollup.py=scripts/availability_rollup.py options: disableNameSuffixHash: true + - name: atlas-availability-cleanup-script + namespace: monitoring + files: + - availability_cleanup.py=scripts/availability_cleanup.py + options: + disableNameSuffixHash: true diff --git a/services/monitoring/scripts/availability_cleanup.py b/services/monitoring/scripts/availability_cleanup.py new file mode 100644 index 00000000..16cd9149 --- /dev/null +++ b/services/monitoring/scripts/availability_cleanup.py @@ -0,0 +1,93 @@ +#!/usr/bin/env python3 +"""Remove obsolete Atlas annual-availability series after the request-v4 migration.""" + +from __future__ import annotations + +import json +import os +import time +from datetime import datetime, timedelta, timezone +from urllib.parse import urlencode +from urllib.request import Request, urlopen + + +VM_URL = os.environ.get( + "VM_URL", "http://victoria-metrics-single-server:8428" +).rstrip("/") +LEGACY_SELECTOR = ( + '{__name__="atlas:availability:ratio_365d",scope="atlas",' + 'definition!="request-v4"}' +) +PROTECTED_SELECTOR = ( + '{__name__="atlas:availability:ratio_365d",scope="atlas",' + 'definition="request-v4"}' +) + + +def list_series(selector: str) -> list[dict[str, str]]: + """List recently visible series matching an exact safety selector.""" + end = datetime.now(timezone.utc) + start = end - timedelta(hours=48) + query = urlencode( + { + "match[]": selector, + "start": start.isoformat().replace("+00:00", "Z"), + "end": end.isoformat().replace("+00:00", "Z"), + } + ) + with urlopen(f"{VM_URL}/api/v1/series?{query}", timeout=60) as response: + payload = json.load(response) + if payload.get("status") != "success": + raise RuntimeError(f"VictoriaMetrics series lookup failed: {payload}") + return payload["data"] + + +def delete_legacy_series() -> None: + """Delete only annual Atlas series outside the protected request-v4 label set.""" + query = urlencode({"match[]": LEGACY_SELECTOR}) + request = Request( + f"{VM_URL}/api/v1/admin/tsdb/delete_series?{query}", + data=b"", + method="POST", + ) + with urlopen(request, timeout=60) as response: + if response.status not in {200, 204}: + raise RuntimeError(f"VictoriaMetrics deletion returned HTTP {response.status}") + + +def main() -> None: + """Guard the new series, delete retired definitions, and verify convergence.""" + protected_before = list_series(PROTECTED_SELECTOR) + if len(protected_before) != 1: + raise RuntimeError( + f"expected exactly one protected request-v4 series, found {len(protected_before)}" + ) + legacy_before = list_series(LEGACY_SELECTOR) + if legacy_before: + delete_legacy_series() + + legacy_after = legacy_before + for _ in range(10): + legacy_after = list_series(LEGACY_SELECTOR) + if not legacy_after: + break + time.sleep(1) + if legacy_after: + raise RuntimeError(f"legacy availability series remain: {legacy_after}") + if len(list_series(PROTECTED_SELECTOR)) != 1: + raise RuntimeError("protected request-v4 series was not preserved") + + print( + json.dumps( + { + "deleted_legacy_series": len(legacy_before), + "protected_series": len(protected_before), + "selector": LEGACY_SELECTOR, + }, + sort_keys=True, + ) + ) + + +if __name__ == "__main__": + main() From 37ca6ea9785a227e2007faeb5d390e7c587b6831 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 02:25:12 +0000 Subject: [PATCH 950/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 26f979f0..7fa02781 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.7 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.8 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.7 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.8 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 90264c0d..3ee41ba0 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.7 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.8 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 1ac72a5c5572e68a6171ad81523d16c8e5ca5ed0 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 02:25:22 +0000 Subject: [PATCH 951/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index e040eb50..188733c8 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.9.7 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.9.8 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From ffd1cc935339d48f3804fb2cd1cd2547b6d633de Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 02:33:21 +0000 Subject: [PATCH 952/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 7fa02781..25b2169a 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.7 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.8 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.7 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index cbec500f..e46349ab 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.7 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.8 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.7 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" From 8a69aa6c9ee688cc8b471949d1f2bbd296886e34 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 02:43:17 +0000 Subject: [PATCH 953/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 25b2169a..23106859 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.8 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.7 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.8 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index e46349ab..9f3d018d 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.8 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.7 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.8 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 136f8ab4d25eb2edd82dca1a52822466ed0d9508 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 03:19:19 +0000 Subject: [PATCH 954/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 23106859..9b28e10f 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.8 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.10 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.8 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.10 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 3ee41ba0..7c88d2a1 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.8 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.10 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 3a530067647da172fa719a49f5ec77188f67018e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 03:19:29 +0000 Subject: [PATCH 955/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 188733c8..11cf0248 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.9.8 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.9.10 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 18151720694912e7a4a83ccf85fa563b43050e47 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 04:07:31 +0000 Subject: [PATCH 956/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 9b28e10f..4ff793e0 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.8 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.10 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.8 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 9f3d018d..7f01c0c9 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.8 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.10 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.8 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" From 3493bc056f620e6d7b0370be8977e98411125046 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 04:18:26 +0000 Subject: [PATCH 957/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 4ff793e0..1aeb6903 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.10 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.8 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.10 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 7f01c0c9..d73650a2 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.10 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.8 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.10 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 8846b41f3c1153ba93d07b170145a39bd356c08a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 05:15:46 +0000 Subject: [PATCH 958/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index 21f0045a..a3f6ccd3 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-387 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-388 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-270-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From 67fcd1099b5f3ab812cd69ed07abcaa479dfdb0c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 05:26:02 +0000 Subject: [PATCH 959/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 11cf0248..b834b2ec 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.9.10 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.9.11 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From a5dd3907738318300bb866e73acd2ac3d56d779e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 05:26:13 +0000 Subject: [PATCH 960/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 1aeb6903..7a53af4e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.10 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.11 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.10 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.11 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 7c88d2a1..c3cdf024 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.10 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.11 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From d788e8e63b36be955a192a7d30e22e7d9580f36d Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 05:36:04 +0000 Subject: [PATCH 961/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 7a53af4e..e394b42c 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.10 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.11 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.10 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index d73650a2..a9acb5e3 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.10 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.11 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.10 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" From 8c8c8732df7dfb52985cf906f2fa867f65884121 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 05:47:05 +0000 Subject: [PATCH 962/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index e394b42c..9c6bf89d 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.11 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.10 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.11 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index a9acb5e3..3aab0f4d 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.11 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.10 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.11 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From c7ce10fbbf7476a49af9c58fd134192424b94270 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 07:24:25 +0000 Subject: [PATCH 963/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 9c6bf89d..1ae7418a 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.11 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.12 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.11 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.12 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index c3cdf024..a6eb3b2a 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.11 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.12 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From e4e155c6f306218bbf71aff16db53c16423ed8b1 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 07:25:20 +0000 Subject: [PATCH 964/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index b834b2ec..a48011ef 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.9.11 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.9.12 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 53cfef0f6f998f21dfdb64bdfc1150e1eb7ef62c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 07:33:25 +0000 Subject: [PATCH 965/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 1ae7418a..49cfa82e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.11 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.12 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.11 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 3aab0f4d..67ffbad9 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.11 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.12 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.11 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" From 4697ece7ab1b464a7df4e312974cfd214496d612 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 07:45:39 +0000 Subject: [PATCH 966/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 49cfa82e..eecd2750 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.12 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.11 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.12 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 67ffbad9..658deb76 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.12 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.11 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.12 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 7b952af3abc24cc1127b6036ad242a617dfce309 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 10:00:49 +0000 Subject: [PATCH 967/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index a48011ef..1d2922fd 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.9.12 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.9.14 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 466ca05b340eae871c99cdab222857c598daad3b Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 10:01:26 +0000 Subject: [PATCH 968/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index eecd2750..acecbb6e 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.12 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.14 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.12 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.14 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index a6eb3b2a..8b540e51 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.12 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.14 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 2647af306b5d0b415e100d3dc1273069786a8405 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 10:09:49 +0000 Subject: [PATCH 969/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index acecbb6e..03a0f392 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.12 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.14 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.12 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 658deb76..21e26fc0 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.12 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.14 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.12 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" From 29dd63b92ead884c41a7ac575e620c254da9a25f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 10:22:51 +0000 Subject: [PATCH 970/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 03a0f392..5a0a70fb 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.14 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.12 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.14 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 21e26fc0..b08db42b 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.14 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.12 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.14 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 03b70eff3a4da48ba56411aa842edce49121a9ed Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 11:02:54 +0000 Subject: [PATCH 971/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 1d2922fd..641d3027 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.9.14 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.9.15 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 40cdfd9558982790c622c59c9a7390278f89ff3c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 11:03:08 +0000 Subject: [PATCH 972/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 5a0a70fb..534c1751 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.14 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.15 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.14 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.15 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 8b540e51..345aefb8 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.14 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.15 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From 99767c20eb3d442bff8be304cc036b803908874a Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 11:06:59 +0000 Subject: [PATCH 973/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 534c1751..488516c3 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.14 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.15 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.14 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index b08db42b..36592918 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.14 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.15 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.14 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" From 2835424ef09b84bf7161636fb5c10f0a780d2f12 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 11:10:58 +0000 Subject: [PATCH 974/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 488516c3..89b7c283 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.15 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.14 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.15 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 36592918..ced30260 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.15 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.14 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.15 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 4ffda423bb178953586f9eb2b5a95443dba83f85 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 13:46:22 +0000 Subject: [PATCH 975/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 89b7c283..a76cb5a4 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.15 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.16 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.15 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.16 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 345aefb8..44dbe51f 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.15 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.16 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From d7fdf2b49abab74a6391a103b508ec09626e7abe Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 13:47:21 +0000 Subject: [PATCH 976/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 641d3027..3ca545b4 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.9.15 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.9.16 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From d6c57f2435f08dfb8f8a13c2e880bb28c2cb4e34 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 13:51:22 +0000 Subject: [PATCH 977/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index a76cb5a4..e9eda551 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.15 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.16 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.15 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index ced30260..6249d05f 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.15 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.16 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.15 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" From 3b2cb7edda80c606a8485b47fe3cc94f193b431f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 13:54:23 +0000 Subject: [PATCH 978/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index e9eda551..6c789442 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.16 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.15 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.16 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 6249d05f..1fb6c75c 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.16 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.15 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.16 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From 48253cdaf073594c436cfec68c28fca9edbd657b Mon Sep 17 00:00:00 2001 From: jenkins Date: Wed, 5 Aug 2026 12:02:51 -0300 Subject: [PATCH 979/991] monitoring(network): organize Traefik traffic lanes --- scripts/dashboards_render_atlas.py | 18 ++-- scripts/tests/test_dashboards_render_atlas.py | 17 +++ .../monitoring/dashboards/atlas-network.json | 102 ++++++++++++++---- .../monitoring/grafana-dashboard-network.yaml | 102 ++++++++++++++---- 4 files changed, 189 insertions(+), 50 deletions(-) diff --git a/scripts/dashboards_render_atlas.py b/scripts/dashboards_render_atlas.py index 4be4f6b0..e6384f59 100644 --- a/scripts/dashboards_render_atlas.py +++ b/scripts/dashboards_render_atlas.py @@ -3786,28 +3786,34 @@ def build_network_dashboard(): transformations=[{"id": "labelsToFields", "options": {}}], ) ) + traffic_thresholds = { + "mode": "absolute", + "steps": [{"color": "blue", "value": None}], + } panels.append( - timeseries_panel( + bargauge_panel( 11, "Traefik Routers (req/s)", f"topk(10, {TRAEFIK_ROUTER_EXPR})", {"h": 9, "w": 12, "x": 0, "y": 25}, unit="req/s", legend="{{router}}", - legend_display="table", - legend_placement="right", + instant=True, + thresholds=traffic_thresholds, + description="Current five-minute request rate, with one vertically aligned lane per router.", ) ) panels.append( - timeseries_panel( + bargauge_panel( 12, "Traefik Entrypoints (req/s)", 'sum by (entrypoint) (rate(traefik_entrypoint_requests_total[5m]))', {"h": 9, "w": 12, "x": 12, "y": 25}, unit="req/s", legend="{{entrypoint}}", - legend_display="table", - legend_placement="right", + instant=True, + thresholds=traffic_thresholds, + description="Current five-minute request rate, with one vertically aligned lane per entrypoint.", ) ) return { diff --git a/scripts/tests/test_dashboards_render_atlas.py b/scripts/tests/test_dashboards_render_atlas.py index 4fdb1071..ce3f4b0b 100644 --- a/scripts/tests/test_dashboards_render_atlas.py +++ b/scripts/tests/test_dashboards_render_atlas.py @@ -52,6 +52,23 @@ def test_node_filter_and_expr_helpers(): assert "node_memory_MemAvailable_bytes" in mem_expr +def test_network_routes_render_as_vertical_lanes(): + mod = load_module() + dashboard = mod.build_network_dashboard() + panels_by_title = {panel["title"]: panel for panel in dashboard["panels"]} + + for title, label in ( + ("Traefik Routers (req/s)", "{{router}}"), + ("Traefik Entrypoints (req/s)", "{{entrypoint}}"), + ): + panel = panels_by_title[title] + assert panel["type"] == "bargauge" + assert panel["options"]["orientation"] == "horizontal" + assert panel["targets"][0]["instant"] is True + assert panel["targets"][0]["legendFormat"] == label + assert "one vertically aligned lane" in panel["description"] + + def test_overview_availability_panel_uses_recorded_365d_rollup(): mod = load_module() dashboard = mod.build_overview() diff --git a/services/monitoring/dashboards/atlas-network.json b/services/monitoring/dashboards/atlas-network.json index 90ccaa6c..c66920c1 100644 --- a/services/monitoring/dashboards/atlas-network.json +++ b/services/monitoring/dashboards/atlas-network.json @@ -579,7 +579,7 @@ }, { "id": 11, - "type": "timeseries", + "type": "bargauge", "title": "Traefik Routers (req/s)", "datasource": { "type": "prometheus", @@ -593,30 +593,59 @@ }, "targets": [ { - "expr": "topk(10, sum by (router) (rate(traefik_router_requests_total[5m])))", + "expr": "sort_desc(topk(10, sum by (router) (rate(traefik_router_requests_total[5m]))))", "refId": "A", - "legendFormat": "{{router}}" + "legendFormat": "{{router}}", + "instant": true } ], "fieldConfig": { "defaults": { - "unit": "req/s" + "color": { + "mode": "thresholds" + }, + "unit": "req/s", + "min": 0, + "max": null, + "thresholds": { + "mode": "absolute", + "steps": [ + { + "color": "dark-blue", + "value": null + } + ] + } }, "overrides": [] }, "options": { - "legend": { - "displayMode": "table", - "placement": "right" - }, - "tooltip": { - "mode": "multi" + "displayMode": "basic", + "orientation": "horizontal", + "reduceOptions": { + "calcs": [ + "lastNotNull" + ], + "fields": "", + "values": false } - } + }, + "description": "Current five-minute request rate, with one vertically aligned lane per router.", + "transformations": [ + { + "id": "sortBy", + "options": { + "fields": [ + "Value" + ], + "order": "desc" + } + } + ] }, { "id": 12, - "type": "timeseries", + "type": "bargauge", "title": "Traefik Entrypoints (req/s)", "datasource": { "type": "prometheus", @@ -630,26 +659,55 @@ }, "targets": [ { - "expr": "sum by (entrypoint) (rate(traefik_entrypoint_requests_total[5m]))", + "expr": "sort_desc(sum by (entrypoint) (rate(traefik_entrypoint_requests_total[5m])))", "refId": "A", - "legendFormat": "{{entrypoint}}" + "legendFormat": "{{entrypoint}}", + "instant": true } ], "fieldConfig": { "defaults": { - "unit": "req/s" + "color": { + "mode": "thresholds" + }, + "unit": "req/s", + "min": 0, + "max": null, + "thresholds": { + "mode": "absolute", + "steps": [ + { + "color": "dark-blue", + "value": null + } + ] + } }, "overrides": [] }, "options": { - "legend": { - "displayMode": "table", - "placement": "right" - }, - "tooltip": { - "mode": "multi" + "displayMode": "basic", + "orientation": "horizontal", + "reduceOptions": { + "calcs": [ + "lastNotNull" + ], + "fields": "", + "values": false } - } + }, + "description": "Current five-minute request rate, with one vertically aligned lane per entrypoint.", + "transformations": [ + { + "id": "sortBy", + "options": { + "fields": [ + "Value" + ], + "order": "desc" + } + } + ] } ], "time": { diff --git a/services/monitoring/grafana-dashboard-network.yaml b/services/monitoring/grafana-dashboard-network.yaml index c3faad4b..d9e72324 100644 --- a/services/monitoring/grafana-dashboard-network.yaml +++ b/services/monitoring/grafana-dashboard-network.yaml @@ -588,7 +588,7 @@ data: }, { "id": 11, - "type": "timeseries", + "type": "bargauge", "title": "Traefik Routers (req/s)", "datasource": { "type": "prometheus", @@ -602,30 +602,59 @@ data: }, "targets": [ { - "expr": "topk(10, sum by (router) (rate(traefik_router_requests_total[5m])))", + "expr": "sort_desc(topk(10, sum by (router) (rate(traefik_router_requests_total[5m]))))", "refId": "A", - "legendFormat": "{{router}}" + "legendFormat": "{{router}}", + "instant": true } ], "fieldConfig": { "defaults": { - "unit": "req/s" + "color": { + "mode": "thresholds" + }, + "unit": "req/s", + "min": 0, + "max": null, + "thresholds": { + "mode": "absolute", + "steps": [ + { + "color": "dark-blue", + "value": null + } + ] + } }, "overrides": [] }, "options": { - "legend": { - "displayMode": "table", - "placement": "right" - }, - "tooltip": { - "mode": "multi" + "displayMode": "basic", + "orientation": "horizontal", + "reduceOptions": { + "calcs": [ + "lastNotNull" + ], + "fields": "", + "values": false } - } + }, + "description": "Current five-minute request rate, with one vertically aligned lane per router.", + "transformations": [ + { + "id": "sortBy", + "options": { + "fields": [ + "Value" + ], + "order": "desc" + } + } + ] }, { "id": 12, - "type": "timeseries", + "type": "bargauge", "title": "Traefik Entrypoints (req/s)", "datasource": { "type": "prometheus", @@ -639,26 +668,55 @@ data: }, "targets": [ { - "expr": "sum by (entrypoint) (rate(traefik_entrypoint_requests_total[5m]))", + "expr": "sort_desc(sum by (entrypoint) (rate(traefik_entrypoint_requests_total[5m])))", "refId": "A", - "legendFormat": "{{entrypoint}}" + "legendFormat": "{{entrypoint}}", + "instant": true } ], "fieldConfig": { "defaults": { - "unit": "req/s" + "color": { + "mode": "thresholds" + }, + "unit": "req/s", + "min": 0, + "max": null, + "thresholds": { + "mode": "absolute", + "steps": [ + { + "color": "dark-blue", + "value": null + } + ] + } }, "overrides": [] }, "options": { - "legend": { - "displayMode": "table", - "placement": "right" - }, - "tooltip": { - "mode": "multi" + "displayMode": "basic", + "orientation": "horizontal", + "reduceOptions": { + "calcs": [ + "lastNotNull" + ], + "fields": "", + "values": false } - } + }, + "description": "Current five-minute request rate, with one vertically aligned lane per entrypoint.", + "transformations": [ + { + "id": "sortBy", + "options": { + "fields": [ + "Value" + ], + "order": "desc" + } + } + ] } ], "time": { From 798e3fee8476298413d5a187ec31bfabd61b7eac Mon Sep 17 00:00:00 2001 From: jenkins Date: Wed, 5 Aug 2026 12:06:23 -0300 Subject: [PATCH 980/991] Revert "monitoring(network): organize Traefik traffic lanes" This reverts commit eeec8b72dc885950dd116d6dc2ad6574c1cbe6b1. --- scripts/dashboards_render_atlas.py | 18 ++-- scripts/tests/test_dashboards_render_atlas.py | 17 --- .../monitoring/dashboards/atlas-network.json | 102 ++++-------------- .../monitoring/grafana-dashboard-network.yaml | 102 ++++-------------- 4 files changed, 50 insertions(+), 189 deletions(-) diff --git a/scripts/dashboards_render_atlas.py b/scripts/dashboards_render_atlas.py index e6384f59..4be4f6b0 100644 --- a/scripts/dashboards_render_atlas.py +++ b/scripts/dashboards_render_atlas.py @@ -3786,34 +3786,28 @@ def build_network_dashboard(): transformations=[{"id": "labelsToFields", "options": {}}], ) ) - traffic_thresholds = { - "mode": "absolute", - "steps": [{"color": "blue", "value": None}], - } panels.append( - bargauge_panel( + timeseries_panel( 11, "Traefik Routers (req/s)", f"topk(10, {TRAEFIK_ROUTER_EXPR})", {"h": 9, "w": 12, "x": 0, "y": 25}, unit="req/s", legend="{{router}}", - instant=True, - thresholds=traffic_thresholds, - description="Current five-minute request rate, with one vertically aligned lane per router.", + legend_display="table", + legend_placement="right", ) ) panels.append( - bargauge_panel( + timeseries_panel( 12, "Traefik Entrypoints (req/s)", 'sum by (entrypoint) (rate(traefik_entrypoint_requests_total[5m]))', {"h": 9, "w": 12, "x": 12, "y": 25}, unit="req/s", legend="{{entrypoint}}", - instant=True, - thresholds=traffic_thresholds, - description="Current five-minute request rate, with one vertically aligned lane per entrypoint.", + legend_display="table", + legend_placement="right", ) ) return { diff --git a/scripts/tests/test_dashboards_render_atlas.py b/scripts/tests/test_dashboards_render_atlas.py index ce3f4b0b..4fdb1071 100644 --- a/scripts/tests/test_dashboards_render_atlas.py +++ b/scripts/tests/test_dashboards_render_atlas.py @@ -52,23 +52,6 @@ def test_node_filter_and_expr_helpers(): assert "node_memory_MemAvailable_bytes" in mem_expr -def test_network_routes_render_as_vertical_lanes(): - mod = load_module() - dashboard = mod.build_network_dashboard() - panels_by_title = {panel["title"]: panel for panel in dashboard["panels"]} - - for title, label in ( - ("Traefik Routers (req/s)", "{{router}}"), - ("Traefik Entrypoints (req/s)", "{{entrypoint}}"), - ): - panel = panels_by_title[title] - assert panel["type"] == "bargauge" - assert panel["options"]["orientation"] == "horizontal" - assert panel["targets"][0]["instant"] is True - assert panel["targets"][0]["legendFormat"] == label - assert "one vertically aligned lane" in panel["description"] - - def test_overview_availability_panel_uses_recorded_365d_rollup(): mod = load_module() dashboard = mod.build_overview() diff --git a/services/monitoring/dashboards/atlas-network.json b/services/monitoring/dashboards/atlas-network.json index c66920c1..90ccaa6c 100644 --- a/services/monitoring/dashboards/atlas-network.json +++ b/services/monitoring/dashboards/atlas-network.json @@ -579,7 +579,7 @@ }, { "id": 11, - "type": "bargauge", + "type": "timeseries", "title": "Traefik Routers (req/s)", "datasource": { "type": "prometheus", @@ -593,59 +593,30 @@ }, "targets": [ { - "expr": "sort_desc(topk(10, sum by (router) (rate(traefik_router_requests_total[5m]))))", + "expr": "topk(10, sum by (router) (rate(traefik_router_requests_total[5m])))", "refId": "A", - "legendFormat": "{{router}}", - "instant": true + "legendFormat": "{{router}}" } ], "fieldConfig": { "defaults": { - "color": { - "mode": "thresholds" - }, - "unit": "req/s", - "min": 0, - "max": null, - "thresholds": { - "mode": "absolute", - "steps": [ - { - "color": "dark-blue", - "value": null - } - ] - } + "unit": "req/s" }, "overrides": [] }, "options": { - "displayMode": "basic", - "orientation": "horizontal", - "reduceOptions": { - "calcs": [ - "lastNotNull" - ], - "fields": "", - "values": false + "legend": { + "displayMode": "table", + "placement": "right" + }, + "tooltip": { + "mode": "multi" } - }, - "description": "Current five-minute request rate, with one vertically aligned lane per router.", - "transformations": [ - { - "id": "sortBy", - "options": { - "fields": [ - "Value" - ], - "order": "desc" - } - } - ] + } }, { "id": 12, - "type": "bargauge", + "type": "timeseries", "title": "Traefik Entrypoints (req/s)", "datasource": { "type": "prometheus", @@ -659,55 +630,26 @@ }, "targets": [ { - "expr": "sort_desc(sum by (entrypoint) (rate(traefik_entrypoint_requests_total[5m])))", + "expr": "sum by (entrypoint) (rate(traefik_entrypoint_requests_total[5m]))", "refId": "A", - "legendFormat": "{{entrypoint}}", - "instant": true + "legendFormat": "{{entrypoint}}" } ], "fieldConfig": { "defaults": { - "color": { - "mode": "thresholds" - }, - "unit": "req/s", - "min": 0, - "max": null, - "thresholds": { - "mode": "absolute", - "steps": [ - { - "color": "dark-blue", - "value": null - } - ] - } + "unit": "req/s" }, "overrides": [] }, "options": { - "displayMode": "basic", - "orientation": "horizontal", - "reduceOptions": { - "calcs": [ - "lastNotNull" - ], - "fields": "", - "values": false + "legend": { + "displayMode": "table", + "placement": "right" + }, + "tooltip": { + "mode": "multi" } - }, - "description": "Current five-minute request rate, with one vertically aligned lane per entrypoint.", - "transformations": [ - { - "id": "sortBy", - "options": { - "fields": [ - "Value" - ], - "order": "desc" - } - } - ] + } } ], "time": { diff --git a/services/monitoring/grafana-dashboard-network.yaml b/services/monitoring/grafana-dashboard-network.yaml index d9e72324..c3faad4b 100644 --- a/services/monitoring/grafana-dashboard-network.yaml +++ b/services/monitoring/grafana-dashboard-network.yaml @@ -588,7 +588,7 @@ data: }, { "id": 11, - "type": "bargauge", + "type": "timeseries", "title": "Traefik Routers (req/s)", "datasource": { "type": "prometheus", @@ -602,59 +602,30 @@ data: }, "targets": [ { - "expr": "sort_desc(topk(10, sum by (router) (rate(traefik_router_requests_total[5m]))))", + "expr": "topk(10, sum by (router) (rate(traefik_router_requests_total[5m])))", "refId": "A", - "legendFormat": "{{router}}", - "instant": true + "legendFormat": "{{router}}" } ], "fieldConfig": { "defaults": { - "color": { - "mode": "thresholds" - }, - "unit": "req/s", - "min": 0, - "max": null, - "thresholds": { - "mode": "absolute", - "steps": [ - { - "color": "dark-blue", - "value": null - } - ] - } + "unit": "req/s" }, "overrides": [] }, "options": { - "displayMode": "basic", - "orientation": "horizontal", - "reduceOptions": { - "calcs": [ - "lastNotNull" - ], - "fields": "", - "values": false + "legend": { + "displayMode": "table", + "placement": "right" + }, + "tooltip": { + "mode": "multi" } - }, - "description": "Current five-minute request rate, with one vertically aligned lane per router.", - "transformations": [ - { - "id": "sortBy", - "options": { - "fields": [ - "Value" - ], - "order": "desc" - } - } - ] + } }, { "id": 12, - "type": "bargauge", + "type": "timeseries", "title": "Traefik Entrypoints (req/s)", "datasource": { "type": "prometheus", @@ -668,55 +639,26 @@ data: }, "targets": [ { - "expr": "sort_desc(sum by (entrypoint) (rate(traefik_entrypoint_requests_total[5m])))", + "expr": "sum by (entrypoint) (rate(traefik_entrypoint_requests_total[5m]))", "refId": "A", - "legendFormat": "{{entrypoint}}", - "instant": true + "legendFormat": "{{entrypoint}}" } ], "fieldConfig": { "defaults": { - "color": { - "mode": "thresholds" - }, - "unit": "req/s", - "min": 0, - "max": null, - "thresholds": { - "mode": "absolute", - "steps": [ - { - "color": "dark-blue", - "value": null - } - ] - } + "unit": "req/s" }, "overrides": [] }, "options": { - "displayMode": "basic", - "orientation": "horizontal", - "reduceOptions": { - "calcs": [ - "lastNotNull" - ], - "fields": "", - "values": false + "legend": { + "displayMode": "table", + "placement": "right" + }, + "tooltip": { + "mode": "multi" } - }, - "description": "Current five-minute request rate, with one vertically aligned lane per entrypoint.", - "transformations": [ - { - "id": "sortBy", - "options": { - "fields": [ - "Value" - ], - "order": "desc" - } - } - ] + } } ], "time": { From d2ccd1a837e67aad01eae5a67bb8cd1c5824057e Mon Sep 17 00:00:00 2001 From: jenkins Date: Wed, 5 Aug 2026 12:12:49 -0300 Subject: [PATCH 981/991] security(portal): disable public access requests --- services/bstein-dev-home/backend-deployment.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/services/bstein-dev-home/backend-deployment.yaml b/services/bstein-dev-home/backend-deployment.yaml index b39244ee..6af49684 100644 --- a/services/bstein-dev-home/backend-deployment.yaml +++ b/services/bstein-dev-home/backend-deployment.yaml @@ -141,6 +141,8 @@ spec: value: "10" - name: PORTAL_RUN_MIGRATIONS value: "false" + - name: ACCESS_REQUEST_ENABLED + value: "false" - name: ACCESS_REQUEST_SUBMIT_RATE_LIMIT value: "30" - name: ACCESS_REQUEST_SUBMIT_RATE_WINDOW_SEC From 3d6931813e98fc173347a0b3dd0af9d73947e8fa Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 15:24:41 +0000 Subject: [PATCH 982/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 6c789442..94ce916d 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.16 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.17 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.16 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.17 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 44dbe51f..3a35b0ed 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.16 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.17 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From d17fc2b27b75d951dce571ff13f7fdfc7930ec1f Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 15:25:40 +0000 Subject: [PATCH 983/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 3ca545b4..6dd4d0b0 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.9.16 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.9.17 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 61770a1f0034fad200052fc2cca7b66d7fe78214 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 15:29:39 +0000 Subject: [PATCH 984/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 94ce916d..7a415b67 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.16 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.17 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.16 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 1fb6c75c..128ad386 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.16 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.17 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.16 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" From 309fda0defbda901bc35692880bee5a56c635052 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 15:33:40 +0000 Subject: [PATCH 985/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 7a415b67..9d5597e0 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.17 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.16 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.17 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 128ad386..a06d4fcb 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.17 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.16 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.17 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420" From dd3f877d0e63d33857eab8fa6dfc9aa2cad2824e Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 17:15:26 +0000 Subject: [PATCH 986/991] chore(maintenance): automated image update --- services/maintenance/kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml index a3f6ccd3..ef81cf63 100644 --- a/services/maintenance/kustomization.yaml +++ b/services/maintenance/kustomization.yaml @@ -52,7 +52,7 @@ resources: - metis-ingress.yaml images: - name: registry.bstein.dev/bstein/ariadne - newTag: 0.1.0-388 # {"$imagepolicy": "maintenance:ariadne:tag"} + newTag: 0.1.0-389 # {"$imagepolicy": "maintenance:ariadne:tag"} - name: registry.bstein.dev/bstein/metis newTag: 0.1.0-270-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"} - name: registry.bstein.dev/bstein/soteria From 9c35ae167ae8520f0cb4b49e7da7b6eb49f6c884 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 17:59:36 +0000 Subject: [PATCH 987/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 4 ++-- services/cassandra/retention-cronjob.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 9d5597e0..a59c6085 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -66,7 +66,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.17 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.19 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -88,7 +88,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.17 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.19 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/cassandra/retention-cronjob.yaml b/services/cassandra/retention-cronjob.yaml index 3a35b0ed..53fe3ccb 100644 --- a/services/cassandra/retention-cronjob.yaml +++ b/services/cassandra/retention-cronjob.yaml @@ -38,7 +38,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/cassandra/cassandra-backend:0.9.17 # {"$imagepolicy": "cassandra:cassandra-backend"} + image: registry.bstein.dev/cassandra/cassandra-backend:0.9.19 # {"$imagepolicy": "cassandra:cassandra-backend"} imagePullPolicy: IfNotPresent command: ["cassandra-hygiene"] args: ["--prune-artifacts"] From fa41b9145a81cbb18bfe91d78de3c66b983573d2 Mon Sep 17 00:00:00 2001 From: jenkins Date: Wed, 5 Aug 2026 14:59:54 -0300 Subject: [PATCH 988/991] security(portal): disable outbound SMTP --- services/bstein-dev-home/backend-deployment.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/services/bstein-dev-home/backend-deployment.yaml b/services/bstein-dev-home/backend-deployment.yaml index 6af49684..2a39b781 100644 --- a/services/bstein-dev-home/backend-deployment.yaml +++ b/services/bstein-dev-home/backend-deployment.yaml @@ -68,6 +68,7 @@ spec: args: - >- . /vault/secrets/portal-env.sh + && export SMTP_HOST="" && exec gunicorn -b 0.0.0.0:8080 --workers 2 --timeout 1200 app:app env: - name: AI_CHAT_API From 628ddc22a2ef0ea19ee6f84bb6939c7cfb725ff7 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 18:00:33 +0000 Subject: [PATCH 989/991] chore(cassandra): automated image update --- services/cassandra/frontend-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/cassandra/frontend-deployment.yaml b/services/cassandra/frontend-deployment.yaml index 6dd4d0b0..1b7f7bd8 100644 --- a/services/cassandra/frontend-deployment.yaml +++ b/services/cassandra/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/cassandra/cassandra-frontend:0.9.17 # {"$imagepolicy": "cassandra:cassandra-frontend"} + image: registry.bstein.dev/cassandra/cassandra-frontend:0.9.19 # {"$imagepolicy": "cassandra:cassandra-frontend"} imagePullPolicy: Always ports: - name: http From 0d5948267f65d83f6276c6f58392be0ce82f6862 Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 18:04:39 +0000 Subject: [PATCH 990/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index a59c6085..133e0bbe 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -104,7 +104,7 @@ spec: protocol: TCP env: - name: CASSANDRA_SIM_IMAGE - value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.17 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.19 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.17 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index a06d4fcb..869a8415 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -19,7 +19,7 @@ data: CASSANDRA_OIDC_ADMIN_GROUPS: admin CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 - CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.17 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} + CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.19 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.17 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" From d37a8095edfcc5cf93025022ac35d43b2567be6c Mon Sep 17 00:00:00 2001 From: flux-bot Date: Wed, 5 Aug 2026 18:08:35 +0000 Subject: [PATCH 991/991] chore(cassandra): automated image update --- services/cassandra/backend-deployment.yaml | 2 +- services/cassandra/configmap.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/cassandra/backend-deployment.yaml b/services/cassandra/backend-deployment.yaml index 133e0bbe..69308aa2 100644 --- a/services/cassandra/backend-deployment.yaml +++ b/services/cassandra/backend-deployment.yaml @@ -106,7 +106,7 @@ spec: - name: CASSANDRA_SIM_IMAGE value: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.19 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - name: CASSANDRA_GENERATOR_WORKER_IMAGE - value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.17 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + value: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.19 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} envFrom: - configMapRef: name: cassandra-config diff --git a/services/cassandra/configmap.yaml b/services/cassandra/configmap.yaml index 869a8415..ce514817 100644 --- a/services/cassandra/configmap.yaml +++ b/services/cassandra/configmap.yaml @@ -20,7 +20,7 @@ data: CASSANDRA_NAMESPACE: cassandra CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6;a21a286c-6c82-4180-9243-7c916442ecf0=d357688e-e3e4-4f18-9491-a4ed5622deb6 CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.9.19 # {"$imagepolicy": "cassandra:cassandra-sim-worker"} - CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.17 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} + CASSANDRA_GENERATOR_WORKER_IMAGE: registry.bstein.dev/cassandra/cassandra-generator-worker:0.9.19 # {"$imagepolicy": "cassandra:cassandra-generator-worker"} CASSANDRA_SIM_WORKER_VERSION: "0.8.150" CASSANDRA_GENERATOR_WORKER_VERSION: "0.8.150" CASSANDRA_STRATEGY_SPEC_HINT_INTERPRETATION_TIMEOUT: "420"