From dcefd3924ebf2b14ac59abb8fb2a20ebd692c475 Mon Sep 17 00:00:00 2001 From: Marvin SANT Date: Wed, 5 Aug 2026 23:29:26 +0200 Subject: [PATCH] chore(channel): app 1.9.7 + chart 0.9.0 (workbench) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Pins values.yaml (app, sandbox-api, sandbox-runner, workbench-runner) et pre-pull offline alignes sur 1.9.7 ; CHART_VERSION deja a 0.9.0. update.sh : le pin workbench-runner suit desormais le train de release comme les images sandbox (il restait fige a l'apply). SIGNATURE REQUISE avant merge : channel.json est modifie, updater_sha256 est donc perime (update.sh a change aussi) — lancer tools/sign-channel.sh et commiter channel.json + channel.json.sig ensemble. Co-Authored-By: Claude --- channel.json | 6 +++--- lib/suite.sh | 4 ++-- update.sh | 1 + values.yaml | 13 ++++++------- 4 files changed, 12 insertions(+), 12 deletions(-) diff --git a/channel.json b/channel.json index 70563a6..dcf5770 100644 --- a/channel.json +++ b/channel.json @@ -1,8 +1,8 @@ { "channel": "stable", - "chart_version": "0.8.0", - "app_version": "1.8.22", + "chart_version": "0.9.0", + "app_version": "1.9.7", "vllm_image": "vllm/vllm-openai:cu130-nightly", "updater_sha256": "f844c7210141193689e605209ea37569cb8e1f37e5e50a1df9a3de180ab69847", - "notes": "app 1.8.22: roll the stable channel to the latest published Suite 366 release (app + sandbox-api + sandbox-runner image pins bumped 1.8.10 -> 1.8.22; chart unchanged at 0.8.0). app_version drives the app/sandbox image pins in values.yaml (the appliance pins them for offline safety, update.sh rewrites the pins on apply). Bump chart_version / app_version / vllm_image here to roll out to the fleet; appliances poll this file daily and notify (no auto-apply). updater_sha256 is filled in by tools/sign-channel.sh — never by hand; it is what lets an appliance trust the update.sh it fetches." + "notes": "app 1.9.7 + chart 0.9.0: introduit le Workbench (sandbox personnelle par utilisateur : terminal avec opencode pre-synchronise, detection des ports pour tester ses apps, bureau Firefox streame). Deploie un namespace dedie avec un pod + un PVC + une NetworkPolicy par workbench, pilotes par sandbox-api ; l'acces est reserve aux membres ayant le module workbench active. Image workbench-runner ajoutee au pre-pull offline. Pins app + sandbox + workbench bumpes 1.8.22 -> 1.9.7. app_version drives the app/sandbox image pins in values.yaml (the appliance pins them for offline safety, update.sh rewrites the pins on apply). Bump chart_version / app_version / vllm_image here to roll out to the fleet; appliances poll this file daily and notify (no auto-apply). updater_sha256 is filled in by tools/sign-channel.sh — never by hand; it is what lets an appliance trust the update.sh it fetches." } diff --git a/lib/suite.sh b/lib/suite.sh index 976d6da..9db4b19 100644 --- a/lib/suite.sh +++ b/lib/suite.sh @@ -97,8 +97,8 @@ prepull_images() { -o jsonpath='{range .items[*]}{range .spec.template.spec.containers[*]}{.image}{"\n"}{end}{range .spec.template.spec.initContainers[*]}{.image}{"\n"}{end}{end}' \ 2>/dev/null | sort -u)" extra="busybox:1.37 -ghcr.io/scriptor-group/suite-366-sandbox-runner:1.8.22 -ghcr.io/scriptor-group/suite-366-workbench-runner:latest" +ghcr.io/scriptor-group/suite-366-sandbox-runner:1.9.7 +ghcr.io/scriptor-group/suite-366-workbench-runner:1.9.7" for i in $imgs $extra; do [[ -z "$i" ]] && continue if k3s crictl pull "$i" >/dev/null 2>&1; then info " ✓ $i"; else warn " ✗ $i (pull failed — offline restart may miss it)"; fi diff --git a/update.sh b/update.sh index 0efd725..03adfe3 100755 --- a/update.sh +++ b/update.sh @@ -730,6 +730,7 @@ do_apply() { sed -i "s|^ tag: \".*\"| tag: \"$want_app\"|" "$vals" sed -i "s|\(suite-366-sandbox-api:\)[^\"[:space:]]*|\1$want_app|" "$vals" sed -i "s|\(suite-366-sandbox-runner:\)[^\"[:space:]]*|\1$want_app|" "$vals" + sed -i "s|\(suite-366-workbench-runner:\)[^\"[:space:]]*|\1$want_app|" "$vals" fi if [[ "$chart_diff" == 1 || "$app_diff" == 1 ]]; then diff --git a/values.yaml b/values.yaml index 12607d1..0e7b799 100644 --- a/values.yaml +++ b/values.yaml @@ -26,11 +26,11 @@ appName: drive-app global: imagePullPolicy: IfNotPresent -# App + sandbox share the release train; 1.8.22 is the current published version. +# App + sandbox share the release train; 1.9.7 is the current published version. # image.repository stays at the chart default (ghcr.io/scriptor-group/suite-366); # the GHCR packages are public so no imagePullSecrets are needed. image: - tag: "1.8.22" + tag: "1.9.7" replicas: 1 podAntiAffinity: @@ -240,9 +240,9 @@ sandbox: # Pinned to the current release (chart defaults are :latest). pullPolicy # IfNotPresent overrides the chart's Always so runner/api restart offline. api: - image: ghcr.io/scriptor-group/suite-366-sandbox-api:1.8.22 + image: ghcr.io/scriptor-group/suite-366-sandbox-api:1.9.7 pullPolicy: IfNotPresent - runnerImage: ghcr.io/scriptor-group/suite-366-sandbox-runner:1.8.22 + runnerImage: ghcr.io/scriptor-group/suite-366-sandbox-runner:1.9.7 # Tune sessions/limits if the GB10 unified memory budget is tight — defaults # aim at 20 pods × 512 MB. @@ -255,9 +255,8 @@ sandbox: # NOTE budget GB10 : chaque workbench actif = jusqu'à 4 Gi / 2 cpu. workbench: enabled: true - # latest jusqu'au premier release train qui publie l'image ; épingler - # ensuite comme les images sandbox ci-dessus. - runnerImage: ghcr.io/scriptor-group/suite-366-workbench-runner:latest + # Épinglé sur le train de release, comme les images sandbox ci-dessus. + runnerImage: ghcr.io/scriptor-group/suite-366-workbench-runner:1.9.7 # IfNotPresent : redémarrage offline (l'image est pré-pullée par install.sh) pullPolicy: IfNotPresent storageClass: local-path