PaletteAI 1.1.8 Release Notes

Summary

PaletteAI 1.1.8 is a patch release on 1.1.7 that ships a coordinated hotfix.7 image train for brush, canvas, hue, and mural-crds. It backports a focused set of observability, GPU, and access-control fixes from the 1.1 release line.

The umbrella chart now sets overwrite: false on the legacy prometheus-agent and prometheus-agent-minimal add-on configurations so existing agent configuration on managed clusters is preserved on upgrade.

GPU accounting is more accurate. Hue now aligns with Palette-reported gpu-memory semantics, interpreting the reported value as per-GPU memory. Hub variable resolution is corrected so that context extensions are resolved reliably.

Access control and tenant federation are hardened. Brush is granted get, list, and watch on namespaces, and tenant federation deduplication is fixed.

Upgrade Notes

1. You must upgrade the mural-crds chart to 0.7.8-hotfix.7 before upgrading the mural chart to 1.1.8. For detailed instructions on how to upgrade PaletteAI, refer to the PaletteAI upgrade guide.

Component Versions

The following core component versions are pinned for this PaletteAI release.

Component	Version
brush	0.5.18-hotfix.7
canvas	0.6.9-hotfix.7
hue	0.12.12-hotfix.7
mural-crds	0.7.8-hotfix.7

Mural Helm values

The following diff lists changes to mural/charts/mural/values.yaml between PaletteAI 1.1.7 and 1.1.8.

values.yaml

diff --git a/mural/charts/mural/values.yaml b/mural/charts/mural/values.yaml
index f36de48e9..e201f047d 100644
--- a/mural/charts/mural/values.yaml
+++ b/mural/charts/mural/values.yaml
@@ -69,7 +69,7 @@ global:
   # - use a custom FleetConfig controller image with the `gke-gcloud-auth-plugin` installed
   kubernetesProvider: "Generic"
   certManagerVersion: "v1.19.1"
-  muralVersion: "1.1.7"
+  muralVersion: "1.1.8"
   dns:
     domain: "replace.with.your.domain"
     rootIngress:
@@ -110,7 +110,7 @@ global:
     username: ""
     password: ""
     basicAuthSecretName: ""
-  muralCrdsVersion: "0.7.8-hotfix.6"
+  muralCrdsVersion: "0.7.8-hotfix.7"

 ## @section certificates
 ## @param certificates.clusterIssuer.spec.selfSigned The spec for the ClusterIssuer used by cert-manager to issue the Mural root CA certificate.
@@ -453,7 +453,7 @@ fleetConfig:
       # - Node Exporter: https://github.com/prometheus/node_exporter
       - name: "prometheus-agent-minimal"
         version: "v0.0.1"
-        overwrite: true
+        overwrite: false
         manifests: ""
       - name: "prometheus-agent-minimal"
         version: "v0.0.2"
@@ -671,7 +671,7 @@ fleetConfig:
                     emptyDir: {}
       - name: "prometheus-agent"
         version: "v0.0.1"
-        overwrite: true
+        overwrite: false
         manifests: ""
       - name: "prometheus-agent"
         version: "v0.0.2"
@@ -1515,7 +1515,7 @@ brush:
   ## @param brush.image.pullPolicy The pull policy to use for the image
   image:
     repository: public.ecr.aws/mural/brush
-    tag: v0.5.18-hotfix.6
+    tag: v0.5.18-hotfix.7
     pullPolicy: IfNotPresent
   ## @param brush.imagePullSecrets The pull secrets to use for the image
   imagePullSecrets: []
@@ -1804,7 +1804,7 @@ canvas:
   ## @param canvas.image.pullPolicy canvas image pull policy
   image:
     repository: public.ecr.aws/mural/canvas
-    tag: v0.6.9-hotfix.6
+    tag: v0.6.9-hotfix.7
     pullPolicy: IfNotPresent
   ## @param canvas.imagePullSecrets Image pull secrets
   imagePullSecrets: []
@@ -3321,7 +3321,7 @@ hue:
   ## @param hue.image.pullPolicy Image pull policy
   image:
     repository: public.ecr.aws/mural/hue
-    tag: v0.12.12-hotfix.6
+    tag: v0.12.12-hotfix.7
     pullPolicy: IfNotPresent
   ## @param hue.resources.requests.cpu hue controller deployment's cpu request
   ## @param hue.resources.requests.memory hue controller deployment's memory request
@@ -3481,7 +3481,7 @@ hue:
     enabled: true
     image:
       repository: public.ecr.aws/mural/hue-definitions
-      tag: v0.12.12-hotfix.6
+      tag: v0.12.12-hotfix.7
       pullPolicy: IfNotPresent
       pullSecrets: []
     job:

Full Component Release Notes

The following table lists all changes made to core components in this PaletteAI release.

Component	Tag	Notes
brush	brush/v0.5.18-hotfix.7	Bug Fixes brush: grant brush get, list, and watch on namespaces brush: fix tenant federation deduplication; add second-spoke tenant-scope test coverage
canvas	canvas/v0.6.9-hotfix.7	Image rebuilt as part of the hotfix.7 train; no Canvas-specific changes.
hue	hue/v0.12.12-hotfix.7	Includes paletteai CLI binaries. Bug Fixes hue: align with Palette-reported gpu-memory semantics (value is per-GPU memory) hue: mock context extensions during hub variable resolution
mural-crds	mural-crds/v0.7.8-hotfix.7	Bug Fixes mural: set overwrite: false on the legacy prometheus-agent and prometheus-agent-minimal add-on configs