Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions charts/dakera/CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,11 @@ The chart version equals the Dakera server version it deploys. v0.11 lives on th

## 0.12.3 (Dakera server v0.12.3)

Deploys server **0.12.3** (`ghcr.io/dakera-ai/dakera:0.12.3`). No chart changes beyond
the server version; the dashboard image is unchanged.

## 0.12.3 (Dakera server v0.12.3)

Deploys server **0.12.3** (`ghcr.io/dakera-ai/dakera:0.12.3`) and Dashboard **0.5.2**
(`ghcr.io/dakera-ai/dakera-dashboard:0.5.2`). Released after both images are published.

Expand Down
12 changes: 1 addition & 11 deletions charts/dakera/Chart.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -26,17 +26,7 @@ annotations:
artifacthub.io/official: "true"
artifacthub.io/changes: |
- kind: changed
description: Dakera server 0.12.3 (chart 0.12.3; the image tag follows appVersion) and Dashboard 0.5.1 -> 0.5.2 (runs as uid/gid 10001, no curl, read-only root with a /tmp emptyDir; new optional dashboard.trustedProxies, DAKERA_TRUSTED_PROXIES)
- kind: security
description: Server image distroless (uid/gid 1000, no curl or shell tools; probes stay httpGet). POST /ops/shutdown needs a global super_admin key; four admin routes refuse unknown JSON fields (422). The GPU image is CUDA 13 and needs NVIDIA driver R580+
- kind: security
description: Read-only root filesystem by default, RuntimeDefault seccomp and no service-account token on every pod; MinIO reachable only from the release's Dakera pods (minio.networkPolicy, on by default); dakera.existingSecret
- kind: added
description: Optional server 0.12.3 settings rendered only when set - httpHeaderReadTimeoutSecs (also closes idle keep-alive connections - keep proxy idle timeouts shorter), maxConnections, shutdownDrainSecs (checked against dakera.terminationGracePeriodSeconds), allowedHosts (required with authentication off and a dotted Host name, else 421), and the recall settings neighborhoodMode, recallRankDepth, recallCollapseDerived, recallExcludeSummaries, recallSessionCap, neighborhoodEventTime, sentenceDecomp, supersedesEventTime
- kind: added
description: Document import settings (dakera.config.documents.* - DAKERA_DOCUMENTS, DAKERA_DOCUMENT_*); extraction uses up to 2 x 1024 MB on top of the server inside the memory limit. ingress.annotations defaults to proxy-body-size 500m (ingress-nginx's 1m refused uploads)
- kind: changed
description: Server probes get timeoutSeconds 5; a published chart version is never re-pushed to the OCI registry
description: Dakera server 0.12.3 (chart 0.12.3; the image tag follows appVersion)
artifacthub.io/signKey: |
fingerprint: keyless
url: https://github.com/Dakera-AI/dakera-helm/blob/main/cosign.pub
Loading