Release v0.33.1 - #1166
Conversation
Signed-off-by: cozystack-bot <217169706+cozystack-bot@users.noreply.github.com>
WalkthroughThis update revises multiple container image tags and digests across various configuration and values files. Most changes increment version tags from 0.25.0 to 0.25.1 or from v0.33.0 to v0.33.1, with corresponding digest updates. No logic, configuration, or public interface changes are introduced. Changes
Possibly related PRs
Suggested reviewers
Poem
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. 🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
SupportNeed help? Create a ticket on our support page for assistance with any issues or questions. Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
There was a problem hiding this comment.
Actionable comments posted: 0
🧹 Nitpick comments (1)
packages/system/cozystack-controller/values.yaml (1)
5-5: Avoid scattering the release version
cozystackVersionduplicates the tag string hard-coded above. Consider pulling it from a single source (e.g.Chart.appVersionor a.global.versionvalue) to prevent future drift across files.
📜 Review details
Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro
📒 Files selected for processing (15)
packages/apps/kubernetes/images/cluster-autoscaler.tag(1 hunks)packages/apps/kubernetes/images/kubevirt-cloud-provider.tag(1 hunks)packages/apps/kubernetes/images/kubevirt-csi-driver.tag(1 hunks)packages/core/installer/values.yaml(1 hunks)packages/core/testing/values.yaml(1 hunks)packages/extra/bootbox/images/matchbox.tag(1 hunks)packages/system/bucket/images/s3manager.tag(1 hunks)packages/system/cozystack-api/values.yaml(1 hunks)packages/system/cozystack-controller/values.yaml(1 hunks)packages/system/dashboard/charts/kubeapps/templates/dashboard/configmap.yaml(1 hunks)packages/system/dashboard/values.yaml(2 hunks)packages/system/kamaji/values.yaml(1 hunks)packages/system/kubeovn-webhook/values.yaml(1 hunks)packages/system/kubeovn/values.yaml(1 hunks)packages/system/kubevirt-csi-node/values.yaml(1 hunks)
🧰 Additional context used
🧠 Learnings (7)
📓 Common learnings
Learnt from: NickVolynkin
PR: cozystack/cozystack#1117
File: packages/apps/mysql/Makefile:8-8
Timestamp: 2025-06-26T04:29:24.830Z
Learning: The cozystack project uses yq v4+ on their CI runner, so yq v4 syntax (-o json --indent 4) is compatible and version checks are not needed.
Learnt from: NickVolynkin
PR: cozystack/cozystack#1120
File: packages/apps/ferretdb/README.md:35-37
Timestamp: 2025-07-02T09:58:11.406Z
Learning: In the cozystack repository, the maintainer NickVolynkin prefers to keep realistic-looking example credentials in README documentation rather than using generic placeholders like <ACCESS_KEY>, even though they are just examples and not real secrets.
packages/apps/kubernetes/images/cluster-autoscaler.tag (1)
Learnt from: NickVolynkin
PR: cozystack/cozystack#1117
File: packages/apps/mysql/Makefile:8-8
Timestamp: 2025-06-26T04:29:24.830Z
Learning: The cozystack project uses yq v4+ on their CI runner, so yq v4 syntax (-o json --indent 4) is compatible and version checks are not needed.
packages/system/cozystack-api/values.yaml (2)
Learnt from: NickVolynkin
PR: cozystack/cozystack#1120
File: packages/apps/ferretdb/README.md:35-37
Timestamp: 2025-07-02T09:58:11.406Z
Learning: In the cozystack repository, the maintainer NickVolynkin prefers to keep realistic-looking example credentials in README documentation rather than using generic placeholders like <ACCESS_KEY>, even though they are just examples and not real secrets.
Learnt from: NickVolynkin
PR: cozystack/cozystack#1117
File: packages/apps/mysql/Makefile:8-8
Timestamp: 2025-06-26T04:29:24.830Z
Learning: The cozystack project uses yq v4+ on their CI runner, so yq v4 syntax (-o json --indent 4) is compatible and version checks are not needed.
packages/core/installer/values.yaml (2)
Learnt from: NickVolynkin
PR: cozystack/cozystack#1117
File: packages/apps/mysql/Makefile:8-8
Timestamp: 2025-06-26T04:29:24.830Z
Learning: The cozystack project uses yq v4+ on their CI runner, so yq v4 syntax (-o json --indent 4) is compatible and version checks are not needed.
Learnt from: NickVolynkin
PR: cozystack/cozystack#1120
File: packages/apps/ferretdb/README.md:35-37
Timestamp: 2025-07-02T09:58:11.406Z
Learning: In the cozystack repository, the maintainer NickVolynkin prefers to keep realistic-looking example credentials in README documentation rather than using generic placeholders like <ACCESS_KEY>, even though they are just examples and not real secrets.
packages/system/bucket/images/s3manager.tag (2)
Learnt from: NickVolynkin
PR: cozystack/cozystack#1120
File: packages/apps/ferretdb/README.md:35-37
Timestamp: 2025-07-02T09:58:11.406Z
Learning: In the cozystack repository, the maintainer NickVolynkin prefers to keep realistic-looking example credentials in README documentation rather than using generic placeholders like <ACCESS_KEY>, even though they are just examples and not real secrets.
Learnt from: NickVolynkin
PR: cozystack/cozystack#1117
File: packages/apps/mysql/Makefile:8-8
Timestamp: 2025-06-26T04:29:24.830Z
Learning: The cozystack project uses yq v4+ on their CI runner, so yq v4 syntax (-o json --indent 4) is compatible and version checks are not needed.
packages/core/testing/values.yaml (1)
Learnt from: NickVolynkin
PR: cozystack/cozystack#1117
File: packages/apps/mysql/Makefile:8-8
Timestamp: 2025-06-26T04:29:24.830Z
Learning: The cozystack project uses yq v4+ on their CI runner, so yq v4 syntax (-o json --indent 4) is compatible and version checks are not needed.
packages/system/cozystack-controller/values.yaml (2)
Learnt from: NickVolynkin
PR: cozystack/cozystack#1117
File: packages/apps/mysql/Makefile:8-8
Timestamp: 2025-06-26T04:29:24.830Z
Learning: The cozystack project uses yq v4+ on their CI runner, so yq v4 syntax (-o json --indent 4) is compatible and version checks are not needed.
Learnt from: NickVolynkin
PR: cozystack/cozystack#1120
File: packages/apps/ferretdb/README.md:35-37
Timestamp: 2025-07-02T09:58:11.406Z
Learning: In the cozystack repository, the maintainer NickVolynkin prefers to keep realistic-looking example credentials in README documentation rather than using generic placeholders like <ACCESS_KEY>, even though they are just examples and not real secrets.
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (1)
- GitHub Check: Prepare environment
🔇 Additional comments (16)
packages/apps/kubernetes/images/cluster-autoscaler.tag (1)
1-1: Digest-Tag mismatch risk – please verify image immutabilityOnly the semver tag moved to
0.25.1; the digest stayed the same.
If the upstream project actually shipped a new image, retaining the old digest nullifies the bump. Please confirm that:
sha256:3a8170…is indeed the digest the upstream now publishes for0.25.1, or- the bump is intentional purely for bookkeeping.
packages/apps/kubernetes/images/kubevirt-cloud-provider.tag (1)
1-1: Same digest, new tag — double-check upstream manifestIdentical concern as with
cluster-autoscaler: tag advanced to0.25.1, digest unchanged.
Ensure the digest really corresponds to the new tag to avoid silent drift.packages/core/installer/values.yaml (1)
2-2: Installer image bump looks goodVersion and digest both updated – consistent with the v0.33.1 release.
packages/system/kamaji/values.yaml (1)
6-6: Kamaji image update acknowledgedTag and digest correctly advance to v0.33.1; no other config touched.
packages/core/testing/values.yaml (1)
2-2: E2E sandbox image bump accepted
v0.33.1tag plus new digest – change is straightforward.packages/system/kubeovn-webhook/values.yaml (1)
3-3: Confirm published digest forv0.33.1The tag bump looks correct, but please verify that the referenced SHA
5958515…b9dais the digest of the officially publishedv0.33.1image inghcr.io/cozystack/cozystack/kubeovn-webhookto prevent pull errors.packages/extra/bootbox/images/matchbox.tag (1)
1-1: Double-check digest for newv0.33.1tagEnsure that SHA
ca3638c…1532is the digest attached to thematchbox:v0.33.1tag in GHCR; otherwise the tag+digest pair will silently pin the old image.packages/apps/kubernetes/images/kubevirt-csi-driver.tag (1)
1-1: Digest unchanged while tag bumped to0.25.1The digest is still
445c2727…bc036(previously used for0.25.0). If upstream did not re-tag the image, this effectively keeps the old binary.
Confirm that the digest truly corresponds to0.25.1; otherwise update it to the correct value.packages/system/kubevirt-csi-node/values.yaml (1)
3-3: Same concern as driver image
kubevirt-csi-nodenow references0.25.1but with the legacy digest. Please verify consistency with the actual0.25.1image to avoid version drift between chart metadata and binary content.packages/system/kubeovn/values.yaml (1)
67-67: LGTM – digest refresh onlyDigest updated for
kubeovn:v1.13.13; tag unchanged. Looks correct and follows standard supply-chain-pinned pattern.packages/system/cozystack-controller/values.yaml (1)
2-2: Digest ↔ tag sanity-checkImage tag bumped to v0.33.1 with a new digest. Please double-check that the digest actually corresponds to the pushed
v0.33.1image to avoid accidental rollbacks or supply-chain surprises.packages/system/bucket/images/s3manager.tag (1)
1-1: Digest updated – please verify build provenanceOnly the digest changed while the tag stayed at
v0.5.0. Make sure this digest is the intended rebuild (security patch?) and not an un-signed overwrite of the old tag.packages/system/dashboard/charts/kubeapps/templates/dashboard/configmap.yaml (1)
79-79: Version bump looks good
appVersionnow matches the rest of the release (v0.33.1). No other logic touched.packages/system/cozystack-api/values.yaml (1)
2-2: Confirm API image digestSame note as controller: ensure the digest belongs to
v0.33.1before cutting the release.packages/system/dashboard/values.yaml (2)
22-24: Dashboard image tag/digest pairTag and digest updated consistently—good. Please still validate the digest to catch any CI push issues.
40-41: kubeapps-apis image bumpLooks correct and in sync with the dashboard version. Same validation comment applies.
This PR prepares the release
v0.33.1.Summary by CodeRabbit