Fixed
- (model-serving) Qwen3-8-flash-next-nvfp4 memory limit 118Gi — B12X keeps the weights as mlocked process memory the cgroup charges in #567 by @teemow
Full Changelog: https://github.com/giantswarm/agent-platform/compare/v4.38.2...v4.38.3
Changes and Releases
Updates on Giant Swarm workload cluster releases, apps, UI improvements and documentation changes.
Fixed
- (model-serving) The serving namespace is kept on uninstall whatever the cache switch says — modelServing.namespace.keep (default true), so a slice composed without the cache no longer deletes a cache claim an earlier slice left there (#565) in #566 by @teemow
Full Changelog: https://github.com/giantswarm/agent-platform/compare/v4.38.1...v4.38.2
Added
- Built-in static clients
mcpCapiandmcpPrometheus(oidc.staticClients.mcpCapi,oidc.staticClients.mcpPrometheus) with the shape and rules ofmcpKubernetes:clientID,redirectURI,trustedPeers, and exactly one ofclientSecretandclientSecretRef: {name, key}; both are trusted peers ofdex-k8s-authenticator. Values under these keys were accepted by the schema and ignored by the templates before: an installation that carries them gets the two clients with this version, and one that carries aclientIDwithout a secret fails the render naming the client. Installations without them render unchanged.
- Built-in static clients
Fixed
- (mcpserver) A remote server’s spec.timeout bounds every operation, tool calls included in #1282 by @teemow
Full Changelog: https://github.com/giantswarm/muster/compare/v5.27.1...v5.27.2
Added
- Static clients read their secret from a Kubernetes Secret:
secretRef: {name, key}in anextraStaticClientsentry,clientSecretRef: {name, key}in the pre-defined clients (gitopsui,muster,mcpKubernetes,dexK8SAuthenticator), in place of the inline secret. The chart setsDEX_CLIENT_SECRET_<ID>on the dex container from the referenced key and names it in the client’ssecretEnv, so a client is added by a new Secret and a plaintext list entry. Exactly one of the inline secret and the reference per client: both, or neither on a client that is not public, fails the render naming the client. Inline clients render unchanged.
Changed
- A pre-defined static client with a
clientIDbut no secret (gitopsui,muster,mcpKubernetes) fails the render naming the client instead of being left out of the configuration silently.
- Static clients read their secret from a Kubernetes Secret:
Changed
- (golden) Drop the holds GOLDEN_REF now carries — every one only narrowed the comparison, and three of them compared a shape no installation gets in #531 by @fiunchinho
Full Changelog: https://github.com/giantswarm/agent-platform/compare/v4.38.0...v4.38.1
Added
- (bot-prs) A classification is a way into the queue, and an empty column is dropped in #2463 by @QuentinBisson
Full Changelog: https://github.com/giantswarm/backstage/compare/v2.29.1...v2.30.0
Fixed
- Roll dex on a configuration change: the pod template carries a
checksum/configannotation with the hash of the rendered dex configuration, so every change to it produces a new ReplicaSet in the same helm upgrade that writes the secret. The Deployment is rendered by the parent chart from the subchart’s template to compute the checksum; its output is unchanged apart from the annotation. Before, the pod kept the configuration it had loaded at startup until something else restarted it.
- Roll dex on a configuration change: the pod template carries a
Fixed
- (bot-prs) The classification is written, and a person in two teams can sweep in #2462 by @QuentinBisson
Full Changelog: https://github.com/giantswarm/backstage/compare/v2.29.0...v2.29.1
Added
- (agent-platform) Show each session’s state in the sessions list in #2458 by @QuentinBisson
Full Changelog: https://github.com/giantswarm/backstage/compare/v2.28.1...v2.29.0