Version: v1.4.x

PaletteAI 1.4.3 Release Notes

Summary

PaletteAI 1.4.3 is a stable patch release on the 1.4 line that adds node pool detail to the compute pool AI VM table, lets the installer mark core component pods for image replacement, and refreshes dependencies.

Compute pools - The AI VM table in a compute pool now includes Node Pool and GPU Variant columns, and each VM's CPU, memory, GPU, and GPU memory usage is shown as a share of its own node pool's allocatable capacity instead of the whole pool.
Installation and upgrades - The installer labels the Canvas, Hue, and FluxCD manager pods for image replacement, and the Canvas and FluxCD manager charts accept podLabels and podAnnotations. The Prometheus agent add-ons move to the configmap-reload v1.4.0 image. Uninstalling PaletteAI now also removes OCM add-on templates and cluster management add-ons.
Security and dependencies - The Hue definitions installer image is rebuilt on a hardened Alpine base, and dependency refreshes include go-jose 4.1.9, kin-openapi 0.149, brotli 1.2.7, klauspost/compress 1.20.2, and current AWS SDK, go-openapi, sigstore/rekor, and golang.org/x/crypto libraries, clearing a reported vulnerability that had been excepted from the vulnerability gate.

For the complete list of changes in each component, refer to Full Component Release Notes.

Upgrade Notes

You must upgrade the mural-crds chart to 0.7.26-hotfix.3 before upgrading the mural chart to 1.4.3.
For detailed instructions on how to upgrade PaletteAI, refer to the PaletteAI upgrade guide.

Component Versions

The following component versions are pinned for this PaletteAI release:

Component	Version
brush	0.5.34-hotfix.3
canvas	0.6.30-hotfix.3
curator	0.0.11-hotfix.3
frisket	0.1.10-hotfix.3
hue	0.12.38-hotfix.3
mural-crds	0.7.26-hotfix.3

Mural Helm values

The following diff lists changes to mural/charts/mural/values.yaml between PaletteAI 1.4.2 and 1.4.3. Besides the component image pins, it bumps the Prometheus agent add-on chart versions and adds podLabels and podAnnotations for Canvas and FluxCD manager.

values.yaml changes between 1.4.2 and 1.4.3

values.yaml
diff --git a/mural/charts/mural/values.yaml b/mural/charts/mural/values.yaml
index 53b93d7b0b..fa5d560614 100644
--- a/mural/charts/mural/values.yaml
+++ b/mural/charts/mural/values.yaml
@@ -72,7 +72,7 @@ global:
   # - use a custom FleetConfig controller image with the `gke-gcloud-auth-plugin` installed
   kubernetesProvider: "Generic"
   certManagerVersion: "v1.21.0"
-  muralVersion: "1.4.2" # x-release-please-version
+  muralVersion: "1.4.3" # x-release-please-version
   dns:
     domain: "replace.with.your.domain"
     rootIngress:
@@ -120,7 +120,7 @@ global:
     username: ""
     password: ""
     basicAuthSecretName: ""
-  muralCrdsVersion: "0.7.26-hotfix.2"
+  muralCrdsVersion: "0.7.26-hotfix.3"

 ## @section certificates
 ## @param certificates.clusterIssuer.spec.selfSigned The spec for the ClusterIssuer used by cert-manager to issue the Mural root CA certificate.
@@ -465,11 +465,11 @@ fleetConfig:
       # - Prometheus Agent Mode: https://prometheus-operator.dev/docs/platform/prometheus-agent/
       # - Node Exporter: https://github.com/prometheus/node_exporter
       - name: "prometheus-agent-minimal"
-        version: "v0.0.1"
+        version: "v0.0.2"
         overwrite: false
         manifests: ""
       - name: "prometheus-agent-minimal"
-        version: "v0.0.2"
+        version: "v0.0.3"
         overwrite: true
         manifests: |
           apiVersion: v1
@@ -622,7 +622,7 @@ fleetConfig:
                 serviceAccountName: mural-prometheus-agent-minimal
                 containers:
                   - name: config-reloader
-                    image: public.ecr.aws/mural/third-party/configmap-reload:v1.3.0
+                    image: public.ecr.aws/mural/third-party/configmap-reload:v1.4.0
                     args:
                       - --volume-dir=/config-templates
                       - --expanded-volume-dir=/etc/prometheus
@@ -683,11 +683,11 @@ fleetConfig:
                   - name: prometheus-storage
                     emptyDir: {}
       - name: "prometheus-agent"
-        version: "v0.0.1"
+        version: "v0.0.2"
         overwrite: false
         manifests: ""
       - name: "prometheus-agent"
-        version: "v0.0.2"
+        version: "v0.0.3"
         overwrite: true
         manifests: |
           apiVersion: v1
@@ -825,7 +825,7 @@ fleetConfig:
                 serviceAccountName: mural-prometheus-agent
                 containers:
                   - name: config-reloader
-                    image: public.ecr.aws/mural/third-party/configmap-reload:v1.3.0
+                    image: public.ecr.aws/mural/third-party/configmap-reload:v1.4.0
                     args:
                       - --volume-dir=/config-templates
                       - --expanded-volume-dir=/etc/prometheus
@@ -1564,7 +1564,7 @@ brush:
   ## @param brush.image.pullPolicy The pull policy to use for the image
   image:
     repository: public.ecr.aws/mural/brush
-    tag: v0.5.34-hotfix.2
+    tag: v0.5.34-hotfix.3
     pullPolicy: IfNotPresent
   ## @param brush.imagePullSecrets The pull secrets to use for the image
   imagePullSecrets: []
@@ -1859,10 +1859,14 @@ canvas:
   ## @param canvas.image.pullPolicy canvas image pull policy
   image:
     repository: public.ecr.aws/mural/canvas
-    tag: v0.6.30-hotfix.2
+    tag: v0.6.30-hotfix.3
     pullPolicy: IfNotPresent
   ## @param canvas.imagePullSecrets Image pull secrets
   imagePullSecrets: []
+  ## @param canvas.podLabels Labels to add to the canvas pods
+  podLabels: {}
+  ## @param canvas.podAnnotations Annotations to add to the canvas pods
+  podAnnotations: {}
   ## @param canvas.certificate.mountPath The mount path for the certificate
   ## @param canvas.certManager.revisionHistoryLimit The revision history limit for the cert-manager
   certificate:
@@ -2103,7 +2107,7 @@ curator:
   ## @param curator.image.pullPolicy Image pull policy for curator.
   image:
     repository: public.ecr.aws/mural/curator
-    tag: v0.0.11-hotfix.2
+    tag: v0.0.11-hotfix.3
     pullPolicy: IfNotPresent
   ## @param curator.imagePullSecrets Image pull secrets for curator.
   imagePullSecrets: []
@@ -3326,6 +3330,10 @@ fluxcd-manager:
   nameOverride: ""
   ## @param fluxcd-manager.fullnameOverride The full name override to use for the deployment
   fullnameOverride: ""
+  ## @param fluxcd-manager.podLabels Labels to add to the fluxcd-manager pod
+  podLabels: {}
+  ## @param fluxcd-manager.podAnnotations Annotations to add to the fluxcd-manager pod
+  podAnnotations: {}
   ## @section FluxCD Addon Controller parameters

   ## @param fluxcd-manager.image The repository to use for the FluxCD addon controller image
@@ -3423,7 +3431,7 @@ frisket:
   ## @param frisket.image.pullPolicy Image pull policy for frisket.
   image:
     repository: public.ecr.aws/mural/frisket
-    tag: v0.1.10-hotfix.2
+    tag: v0.1.10-hotfix.3
     pullPolicy: IfNotPresent
   ## @param frisket.imagePullSecrets Secret names used to authenticate the private image registry (leave empty for public ECR).
   imagePullSecrets: []
@@ -3597,7 +3605,7 @@ hue:
   ## @param hue.image.pullPolicy Image pull policy
   image:
     repository: public.ecr.aws/mural/hue
-    tag: v0.12.38-hotfix.2
+    tag: v0.12.38-hotfix.3
     pullPolicy: IfNotPresent
   ## @param hue.resources.requests.cpu hue controller deployment's cpu request
   ## @param hue.resources.requests.memory hue controller deployment's memory request
@@ -3776,7 +3784,7 @@ hue:
     enabled: true
     image:
       repository: public.ecr.aws/mural/hue-definitions
-      tag: v0.12.38-hotfix.2
+      tag: v0.12.38-hotfix.3
       pullPolicy: IfNotPresent
       pullSecrets: []
     job:

Full Component Release Notes

The table below lists each component release in this PaletteAI cut, with the changes customers can see.

Per-component changes in 1.4.3

Component	Tag	Notes
brush	`brush/v0.5.34-hotfix.3`	Other Dependency refresh, including `go-openapi`, `klauspost/compress` 1.20.2, `sigstore/rekor` 1.5.5, and `golang.org/x/crypto`.
canvas	`canvas/v0.6.30-hotfix.3`	Features Add Node Pool and GPU Variant columns to the compute pool AI VM table, and measure each VM's resource share against its own node pool's allocatable capacity. Other Add `podLabels` and `podAnnotations` chart values for the Canvas pods.
curator	`curator/v0.0.11-hotfix.3`	Other Dependency refresh, including `go-openapi`, `klauspost/compress` 1.20.2, and `golang.org/x/crypto`.
frisket	`frisket/v0.1.10-hotfix.3`	Other Dependency refresh, including `go-openapi`, `klauspost/compress` 1.20.2, and `golang.org/x/crypto`.
hue	`hue/v0.12.38-hotfix.3`	Other Update `go-jose` to 4.1.9 and bump `kin-openapi` to 0.149, `brotli` to 1.2.7, and `klauspost/compress` to 1.20.2. Merge configured pod labels with the chart selector labels for the controller, dev, and webhook pods, so installer-supplied labels such as the image replacement marker reach every pod. Rebuild the definitions installer image on a hardened Alpine base image. Stop the cluster creation CLI from injecting the default image replacement rules; the installer now sets the image replacement label on core component pods.
mural-crds	`mural-crds/v0.7.26-hotfix.3`	Other Version bump only; the CRD schemas are unchanged from 0.7.26-hotfix.2.

Summary​

Upgrade Notes​

Component Versions​

Mural Helm values​

Full Component Release Notes​

Other

Features

Other

Other

Other

Other

Other

Summary

Upgrade Notes

Component Versions

Mural Helm values

Full Component Release Notes