Skip to content

Release/0.5 - #2701

Closed
tisnik wants to merge 80 commits into
mainfrom
release/0.5
Closed

tisnik wants to merge 80 commits into
mainfrom
release/0.5

Conversation

@tisnik

@tisnik tisnik commented Sep 15, 2026

Copy link
Copy Markdown
Contributor

Description

Type of change

  • Refactor
  • New feature
  • Bug fix
  • CVE fix
  • Optimization
  • Documentation Update
  • Configuration Update
  • Bump-up service version
  • Bump-up dependent library [pyproject.toml + uv.lock]
  • Bump-up dependent library [requirements.*.txt for Konflux]
  • Bump-up library or tool used for development (does not change the final image)
  • CI configuration change
  • Konflux configuration change
  • Unit tests improvement
  • Integration tests improvement
  • End to end tests improvement
  • Benchmarks improvement

Tools used to create PR

Identify any AI code assistants used in this PR (for transparency and review context)

  • Assisted-by: (e.g., Claude, CodeRabbit, Ollama, etc., N/A if not used)
  • Generated by: (e.g., tool name and version; N/A if not used)

Related Tickets & Documents

  • Related Issue #
  • Closes #

Checklist before requesting a review

  • I have performed a self-review of my code.
  • PR has passed all pre-merge test jobs.
  • If it is a core feature, I have added thorough tests.

Testing

  • Please provide detailed steps to perform tests related to this code change.
  • How were the fix/results from this change verified? Please provide relevant screenshots or results.

Summary by CodeRabbit

  • New Features

    • Added REST API support for creating, managing, and deleting vector stores and their files, including upload limits and authorization.
    • Added Konflux-based multi-architecture release pipelines and dependency verification.
    • Added automatic cleanup of unsupported proxy settings for improved connectivity.
  • Bug Fixes

    • Enrichment failures now fall back safely to the original configuration.
    • Release builds apply the latest tag only to the latest stable release.
  • Documentation

    • Updated release references to 0.5.1/0.5.3 and clarified pull request and backport requirements.

tisnik and others added 30 commits April 14, 2026 14:09
LCORE-1617 Centralize Llama Stack Vector Store
Signed-off-by: red-hat-konflux-kflux-prd-rh02 <konflux@no-reply.konflux-ci.dev>
Signed-off-by: Haoyu Sun <hasun@redhat.com>
Signed-off-by: Haoyu Sun <hasun@redhat.com>
LCORE-1780: Cherry Picked #1473 For 0.5.1
Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>
…ase/0.5

chore(deps): update konflux references
Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>
…ase/0.5

chore(deps): update konflux references
Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>
…ase/0.5

chore(deps): update konflux references
Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>
…ase/0.5

chore(deps): update konflux references
Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>
…ase/0.5

chore(deps): update konflux references
Signed-off-by: red-hat-konflux-kflux-prd-rh02 <konflux@no-reply.konflux-ci.dev>
…k-0-5

Red Hat Konflux kflux-prd-rh02 update lightspeed-stack-0-5
LCORE-1935: Fix the lightspeed-stack-0-5 Konflux component pipelines
LCORE-1435: Vulnerabilities found in Konflux pipeline
…ore-1435

Revert "LCORE-1435: Vulnerabilities found in Konflux pipeline"
…ate to quay.io/aipcc/base-images/cpu:3.3.2-1780599114
…uay-3.3

LCORE-1435: Vulnerabilities found in Konflux pipeline - base image update to cpu:3.3.2-1780599114
tisnik and others added 28 commits July 14, 2026 17:27
LCORE-3059: Lightspeed Stack 0.5.3 [release/0.5]
LCORE-3059: Lightspeed Stack 0.5.3 e2e test fixes [release/0.5]
[release/0.5] Add cherry_picker config and update valid prefixes
Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>
LCORE-3161
Pillow <12.3.0 has controlled native heap corruption in
ImageCms.ImageCmsTransform.apply when output image mode
mismatches the transform's declared output mode.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
LCORE-3161
Previous hashes were from RHOAI 3.5 index. Updated to match
the RHOAI 3.4 cpu-ubi9 index which the release/0.5 branch
uses per profiles.toml.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>
Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>
Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>
Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>
Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>
OpenShift cluster proxies inject IPv6 CIDR bypass entries into NO_PROXY,
which crash httpx during client initialization. Strip unsupported entries
at startup so lightspeed-chatbot-api can start on IPv6 single-stack clusters.

Co-authored-by: Cursor <cursoragent@cursor.com>
Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
…xy-ipv6

[release/0.5] AAP-85491: sanitize NO_PROXY IPv6 CIDR entries for httpx compatibility
LCORE-3526: update accelerate to 1.15.0
@tisnik tisnik closed this Sep 15, 2026
@coderabbitai

coderabbitai Bot commented Sep 15, 2026

Copy link
Copy Markdown
Contributor

Review Change StackReview Change Stack

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 2394cddf-c832-4397-a171-1de097e20762

📥 Commits

Reviewing files that changed from the base of the PR and between 5459405 and 0cc1dac.

⛔ Files ignored due to path filters (1)
  • uv.lock is excluded by !**/*.lock
📒 Files selected for processing (77)
  • .cherry_picker.toml
  • .github/pr-title-checker-config.json
  • .github/workflows/build_and_push_release.yaml
  • .github/workflows/e2e_tests.yaml
  • .github/workflows/e2e_tests_lightspeed_evaluation.yaml
  • .github/workflows/e2e_tests_providers.yaml
  • .github/workflows/e2e_tests_rhaiis.yaml
  • .github/workflows/radon.yaml
  • .konflux/build-args-konflux.conf
  • .konflux/profiles.toml
  • .konflux/pypi_wheel_only.txt
  • .konflux/redhat.repo
  • .konflux/requirements-build.txt
  • .konflux/requirements.hashes.source.txt
  • .konflux/requirements.hashes.wheel.pypi.txt
  • .konflux/requirements.hashes.wheel.txt
  • .konflux/requirements.hermetic.txt
  • .konflux/requirements.overrides.txt
  • .konflux/rpms.in.yaml
  • .konflux/rpms.lock.yaml
  • .tekton/integration-tests/pipeline/lightspeed-stack-integration-test.yaml
  • .tekton/lightspeed-stack-0-5-pull-request.yaml
  • .tekton/lightspeed-stack-0-5-push.yaml
  • .tekton/lightspeed-stack-pull-request.yaml
  • .tekton/lightspeed-stack-push.yaml
  • AGENTS.md
  • CONTRIBUTING.md
  • Containerfile
  • Makefile
  • README.md
  • build-args-konflux.conf
  • docs/contributing_guide.md
  • docs/demos/lcore/contributing_guidelines.md
  • docs/openapi.json
  • docs/splunk.md
  • pyproject.toml
  • requirements-build.txt
  • requirements.hashes.source.txt
  • requirements.hashes.wheel.txt
  • requirements.hermetic.txt
  • requirements.overrides.txt
  • scripts/generate-rpm-lock.sh
  • scripts/konflux_requirements.sh
  • scripts/konflux_resolve.py
  • scripts/latest-tag.py
  • scripts/llama-stack-entrypoint.sh
  • src/app/endpoints/vector_stores.py
  • src/app/routers.py
  • src/constants.py
  • src/lightspeed_stack.py
  • src/models/config.py
  • src/models/requests.py
  • src/models/responses.py
  • src/observability/README.md
  • src/utils/proxy_env.py
  • src/version.py
  • tests/e2e-prow/rhoai/configs/lightspeed-stack-auth-noop-token.yaml
  • tests/e2e-prow/rhoai/configs/lightspeed-stack-rbac.yaml
  • tests/e2e-prow/rhoai/configs/lightspeed-stack.yaml
  • tests/e2e-prow/rhoai/manifests/lightspeed/lightspeed-stack.yaml
  • tests/e2e-prow/rhoai/manifests/lightspeed/llama-stack-openai.yaml
  • tests/e2e-prow/rhoai/pipeline-konflux.sh
  • tests/e2e-prow/rhoai/pipeline-services-konflux.sh
  • tests/e2e-prow/rhoai/scripts/e2e-ops.sh
  • tests/e2e/features/environment.py
  • tests/e2e/features/info.feature
  • tests/e2e/features/proxy.feature
  • tests/e2e/features/tls.feature
  • tests/e2e/utils/prow_utils.py
  • tests/integration/endpoints/test_rlsapi_v1_integration.py
  • tests/unit/app/endpoints/conftest.py
  • tests/unit/app/endpoints/test_vector_stores.py
  • tests/unit/app/test_routers.py
  • tests/unit/models/requests/test_vector_store_requests.py
  • tests/unit/models/responses/test_error_responses.py
  • tests/unit/observability/formats/test_rlsapi.py
  • tests/unit/utils/test_proxy_env.py

Walkthrough

Changes

The change adds vector-store and file REST APIs with validation, authorization, upload limits, retries, and tests. It also updates Konflux dependency resolution, container builds, release pipelines, CI workflows, E2E infrastructure, version metadata, and contribution guidance.

Vector store API

Layer / File(s) Summary
Contracts and permissions
src/models/requests.py, src/models/responses.py, src/models/config.py, src/constants.py
Adds vector-store request and response models, authorization actions, error examples, and a 100 MiB upload limit.
Endpoints and routing
src/app/endpoints/vector_stores.py, src/app/routers.py
Adds authenticated CRUD endpoints for vector stores, files, and vector-store files under /v1.
Validation and runtime handling
tests/unit/app/endpoints/test_vector_stores.py, src/utils/proxy_env.py, src/lightspeed_stack.py, scripts/llama-stack-entrypoint.sh
Adds endpoint and proxy tests. Startup sanitizes unsupported proxy entries. Enrichment now logs failures and falls back to the original configuration.

Konflux build system

Layer / File(s) Summary
Dependency resolution and inputs
.konflux/*, scripts/konflux_resolve.py, Makefile
Adds RHOAI 3.4 dependency inputs and a resolver that writes hashed requirements and updates Tekton package lists.
Container build
Containerfile, build-args-konflux.conf
Uses Konflux requirement files, installs dependencies with uv, checks dependencies, and updates base-image handling.
Pipeline execution
.tekton/*.yaml, .tekton/integration-tests/*
Adds release 0.5 pull-request and push pipelines, updates task bundles, adds scans, and retargets integration tests.

CI, release, and E2E updates

Layer / File(s) Summary
Release automation
.github/workflows/*, scripts/latest-tag.py, .cherry_picker.toml
Updates checkout actions, conditionally applies the latest tag, verifies the built image output, and configures Cherry Picker.
E2E infrastructure
tests/e2e-prow/*, tests/e2e/*
Adds RAG configuration, non-root containers, explicit image requirements, health-aware port forwarding, diagnostics, and Prow scenario filtering.
Versions and documentation
pyproject.toml, src/version.py, README.md, docs/*, CONTRIBUTING.md, AGENTS.md
Updates dependency and release versions and documents title prefixes and backports.

Estimated code review effort: 5 (Critical) | ~90 minutes

Change: Feature

Sequence Diagram(s)

sequenceDiagram
  participant Client
  participant VectorStoreRouter
  participant AuthAndAuthorization
  participant AsyncLlamaStackClientHolder
  Client->>VectorStoreRouter: Send vector-store or file request
  VectorStoreRouter->>AuthAndAuthorization: Validate authentication and action
  VectorStoreRouter->>AsyncLlamaStackClientHolder: Call vector-store or file API
  AsyncLlamaStackClientHolder-->>VectorStoreRouter: Return resource or backend error
  VectorStoreRouter-->>Client: Return response or mapped HTTP error
Loading

Suggested reviewers: asimurka

✨ Finishing Touches 💡 1
🛠️ Fix failing CI checks 💡
  • Create stacked PR
  • Commit on current branch
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch release/0.5
✨ Simplify code
  • Create PR with simplified code
  • Commit simplified code in branch release/0.5

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants