You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
* Update release files
Release-Triggered-By: reyortiz3
* Upgrade golang.org/x/net to v0.55.0
Address govulncheck findings GO-2026-5025 through GO-2026-5030
(CVE-2026-42506, CVE-2026-39821, CVE-2026-42502, CVE-2026-25680,
CVE-2026-25681, CVE-2026-27136) in golang.org/x/net/html and
golang.org/x/net/idna. All are fixed in v0.55.0.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---------
Co-authored-by: toolhive-release-app[bot] <280093410+toolhive-release-app[bot]@users.noreply.github.com>
Co-authored-by: Reynier Ortiz Vega <reynier@stacklok.com>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
A Helm chart for deploying the ToolHive Operator into Kubernetes.
@@ -46,7 +46,7 @@ The command removes all the Kubernetes components associated with the chart and
46
46
|-----|------|---------|-------------|
47
47
| fullnameOverride | string |`"toolhive-operator"`| Provide a fully-qualified name override for resources |
48
48
| nameOverride | string |`""`| Override the name of the chart |
49
-
| operator | object | `{"affinity":{},"autoscaling":{"enabled":false,"maxReplicas":100,"minReplicas":1,"targetCPUUtilizationPercentage":80},"containerSecurityContext":{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":1000,"seccompProfile":{"type":"RuntimeDefault"}},"defaultImagePullSecrets":[],"env":[],"features":{"experimental":false},"gc":{"gogc":75,"gomemlimit":"110MiB"},"image":"ghcr.io/stacklok/toolhive/operator:v0.28.2","imagePullPolicy":"IfNotPresent","imagePullSecrets":[],"leaderElectionRole":{"binding":{"name":"toolhive-operator-leader-election-rolebinding"},"name":"toolhive-operator-leader-election-role","rules":[{"apiGroups":[""],"resources":["configmaps"],"verbs":["get","list","watch","create","update","patch","delete"]},{"apiGroups":["coordination.k8s.io"],"resources":["leases"],"verbs":["get","list","watch","create","update","patch","delete"]},{"apiGroups":["events.k8s.io"],"resources":["events"],"verbs":["create","patch"]}]},"livenessProbe":{"httpGet":{"path":"/healthz","port":"health"},"initialDelaySeconds":15,"periodSeconds":20},"nodeSelector":{},"podAnnotations":{},"podLabels":{},"podSecurityContext":{"runAsNonRoot":true},"ports":[{"containerPort":8080,"name":"metrics","protocol":"TCP"},{"containerPort":8081,"name":"health","protocol":"TCP"}],"proxyHost":"0.0.0.0","rbac":{"allowedNamespaces":[],"scope":"cluster"},"readinessProbe":{"httpGet":{"path":"/readyz","port":"health"},"initialDelaySeconds":5,"periodSeconds":10},"replicaCount":1,"resources":{"limits":{"cpu":"500m","memory":"128Mi"},"requests":{"cpu":"10m","memory":"64Mi"}},"serviceAccount":{"annotations":{},"automountServiceAccountToken":true,"create":true,"labels":{},"name":"toolhive-operator"},"tolerations":[],"toolhiveRunnerImage":"ghcr.io/stacklok/toolhive/proxyrunner:v0.28.2","vmcpImage":"ghcr.io/stacklok/toolhive/vmcp:v0.28.2","volumeMounts":[],"volumes":[]}` | All values for the operator deployment and associated resources |
49
+
| operator | object | `{"affinity":{},"autoscaling":{"enabled":false,"maxReplicas":100,"minReplicas":1,"targetCPUUtilizationPercentage":80},"containerSecurityContext":{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":1000,"seccompProfile":{"type":"RuntimeDefault"}},"defaultImagePullSecrets":[],"env":[],"features":{"experimental":false},"gc":{"gogc":75,"gomemlimit":"110MiB"},"image":"ghcr.io/stacklok/toolhive/operator:v0.28.3","imagePullPolicy":"IfNotPresent","imagePullSecrets":[],"leaderElectionRole":{"binding":{"name":"toolhive-operator-leader-election-rolebinding"},"name":"toolhive-operator-leader-election-role","rules":[{"apiGroups":[""],"resources":["configmaps"],"verbs":["get","list","watch","create","update","patch","delete"]},{"apiGroups":["coordination.k8s.io"],"resources":["leases"],"verbs":["get","list","watch","create","update","patch","delete"]},{"apiGroups":["events.k8s.io"],"resources":["events"],"verbs":["create","patch"]}]},"livenessProbe":{"httpGet":{"path":"/healthz","port":"health"},"initialDelaySeconds":15,"periodSeconds":20},"nodeSelector":{},"podAnnotations":{},"podLabels":{},"podSecurityContext":{"runAsNonRoot":true},"ports":[{"containerPort":8080,"name":"metrics","protocol":"TCP"},{"containerPort":8081,"name":"health","protocol":"TCP"}],"proxyHost":"0.0.0.0","rbac":{"allowedNamespaces":[],"scope":"cluster"},"readinessProbe":{"httpGet":{"path":"/readyz","port":"health"},"initialDelaySeconds":5,"periodSeconds":10},"replicaCount":1,"resources":{"limits":{"cpu":"500m","memory":"128Mi"},"requests":{"cpu":"10m","memory":"64Mi"}},"serviceAccount":{"annotations":{},"automountServiceAccountToken":true,"create":true,"labels":{},"name":"toolhive-operator"},"tolerations":[],"toolhiveRunnerImage":"ghcr.io/stacklok/toolhive/proxyrunner:v0.28.3","vmcpImage":"ghcr.io/stacklok/toolhive/vmcp:v0.28.3","volumeMounts":[],"volumes":[]}` | All values for the operator deployment and associated resources |
50
50
| operator.affinity | object |`{}`| Affinity settings for the operator pod |
51
51
| operator.autoscaling | object |`{"enabled":false,"maxReplicas":100,"minReplicas":1,"targetCPUUtilizationPercentage":80}`| Configuration for horizontal pod autoscaling |
52
52
| operator.autoscaling.enabled | bool |`false`| Enable autoscaling for the operator |
@@ -60,7 +60,7 @@ The command removes all the Kubernetes components associated with the chart and
60
60
| operator.gc | object |`{"gogc":75,"gomemlimit":"110MiB"}`| Go memory limits and garbage collection percentage for the operator container |
61
61
| operator.gc.gogc | int |`75`| Go garbage collection percentage for the operator container |
62
62
| operator.gc.gomemlimit | string |`"110MiB"`| Go memory limits for the operator container |
63
-
| operator.image | string |`"ghcr.io/stacklok/toolhive/operator:v0.28.2"`| Container image for the operator |
63
+
| operator.image | string |`"ghcr.io/stacklok/toolhive/operator:v0.28.3"`| Container image for the operator |
64
64
| operator.imagePullPolicy | string |`"IfNotPresent"`| Image pull policy for the operator container |
65
65
| operator.imagePullSecrets | list |`[]`| List of image pull secrets to use |
66
66
| operator.leaderElectionRole | object |`{"binding":{"name":"toolhive-operator-leader-election-rolebinding"},"name":"toolhive-operator-leader-election-role","rules":[{"apiGroups":[""],"resources":["configmaps"],"verbs":["get","list","watch","create","update","patch","delete"]},{"apiGroups":["coordination.k8s.io"],"resources":["leases"],"verbs":["get","list","watch","create","update","patch","delete"]},{"apiGroups":["events.k8s.io"],"resources":["events"],"verbs":["create","patch"]}]}`| Leader election role configuration |
@@ -87,8 +87,8 @@ The command removes all the Kubernetes components associated with the chart and
87
87
| operator.serviceAccount.labels | object |`{}`| Labels to add to the service account |
88
88
| operator.serviceAccount.name | string |`"toolhive-operator"`| The name of the service account to use. If not set and create is true, a name is generated. |
89
89
| operator.tolerations | list |`[]`| Tolerations for the operator pod |
90
-
| operator.toolhiveRunnerImage | string |`"ghcr.io/stacklok/toolhive/proxyrunner:v0.28.2"`| Image to use for Toolhive runners |
91
-
| operator.vmcpImage | string |`"ghcr.io/stacklok/toolhive/vmcp:v0.28.2"`| Image to use for Virtual MCP Server (vMCP) deployments |
90
+
| operator.toolhiveRunnerImage | string |`"ghcr.io/stacklok/toolhive/proxyrunner:v0.28.3"`| Image to use for Toolhive runners |
91
+
| operator.vmcpImage | string |`"ghcr.io/stacklok/toolhive/vmcp:v0.28.3"`| Image to use for Virtual MCP Server (vMCP) deployments |
92
92
| operator.volumeMounts | list |`[]`| Additional volume mounts on the operator container |
93
93
| operator.volumes | list |`[]`| Additional volumes to mount on the operator pod |
94
94
| registryAPI | object |`{"image":"ghcr.io/stacklok/thv-registry-api:v1.3.0"}`| All values for the registry API deployment and associated resources |
0 commit comments