ops/homelab
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Activity

chore(deps): update helm release node-feature-discovery to v0.19.0 #49

Manually merged
ops merged 1 commit from renovate/node-feature-discovery-0.x into main 2026-07-21 20:14:17 +00:00
Conversation 0 Commits 1 Files changed 1 +1 -1
renovate-bot commented 2026-07-08 14:11:09 +00:00
Member
Copy link

This PR contains the following updates:

Package Update Change
node-feature-discovery minor 0.17.4 → 0.19.0

Release Notes

kubernetes-sigs/node-feature-discovery (node-feature-discovery)

v0.19.0

Compare Source

Highlights
  • Immediate node re-labeling after a node rebuild (#​2545): nfd-master detects a recreated Node via the surviving NodeFeature's owner-reference / pod-UID annotation and re-labels immediately instead of waiting for the periodic reconcile.
  • Configurable NodeFeature owner references: -owner-refs / core.ownerRefs (pod, ds, node; default pod,ds) (#​2545).
  • core.noPublishFeatures to slim published NodeFeature objects (#​2530; whitespace-trim fix #​2535).
  • New x86-64 microarchitecture level labels cpu-cpuid.X86_64_V1..V4 (#​2490).
  • nfd-topology-updater: per-pod lookups served from a node-scoped Pod informer, eliminating high-volume per-pod GETs at scale (#​2509). Requires an RBAC update — see Action Required.
  • nfd-master reconciles only on NodeFeature/NodeFeatureRule/NodeFeatureGroup spec changes (#​2532); MatchInRegexp pattern compilation cached (#​2531).
Action Required / Behavior Changes
  1. nfd-topology-updater RBAC (#​2509): the ClusterRole needs list+watch on pods (was get only). Helm and kustomize manifests ship the update, but deployments that bump only the image will crash-loop with pods is forbidden ... cannot list resource "pods" until the new RBAC is applied.
  2. NodeFeatureRule templates (#​2507): env, expandenv and getHostByName were removed from the available template functions (security hardening). Templates using them now fail to parse (function "env" not defined); the rule is skipped and an error is logged.
  3. Helm worker updateStrategy default (#​2519): now rollingUpdate: {maxUnavailable: "10%"} (was Kubernetes default 1). Note for type: OnDelete users: the chart's default rollingUpdate block is deep-merged into your values; the API server accepts and ignores it (verified on v1.30). Optionally set worker.updateStrategy.rollingUpdate: null for a clean spec.
  4. resyncPeriod (nfd-master): drives both the informer resync and the (new in this release, #​2415) periodic full reconcile that re-applies labels and cleans up drift. Setting it to 0 disables this safety net entirely.
  5. Node-rebuild re-labeling dependency (#​2545): immediate re-label requires pod in -owner-refs (default) or the POD_UID env set on the worker; with ds-only/empty owner refs and no POD_UID, re-labeling falls back to the periodic reconcile interval. -owner-refs=node is unaffected.
Fixes
  • nfd-master: don't remove node labels when the NodeFeature cache is incomplete; add periodic reconciliation to clean up genuinely absent NodeFeatures (#​2415).
  • nfd-master: prevent stop() panic and informer leak on init failure (#​2534).
  • nfd-worker: trim whitespace in comma-separated command-line list values (#​2535).
  • Helm: render post-delete prune job resources at container level so they actually apply (#​2515).
Other
  • Container images cross-compile from $BUILDPLATFORM via tonistiigi/xx (#​2512).
  • Reduced cognitive complexity refactors in nfd-master controller and nfd-worker config (#​2536); nfd-master command-line unit tests (#​2469); codecov upload non-fatal in CI verify (#​2527); template/custom-api input-validation hardening (#​2507).

v0.18.3

Compare Source

What's Changed

This patch release adds support for ppc64le and s390x architectures by providing official NFD container images for them. It also fixes the "test" subcommand of kubectl-nfd plugin.

Full Changelog: https://github.com/kubernetes-sigs/node-feature-discovery/compare/v0.18.2...v0.18.3

v0.18.2

Compare Source

This patch release fixes the /metrics endpoint of nfd-topology-updater (#​2343).

v0.18.1

Compare Source

This patch release fixes the deployment of PodMonitor object when prometheus-operator metrics collection is enabled.

v0.18.0

Compare Source

Changelog

Image compatibility (EXPERIMENTAL)

The image compatibility related features introduced in v0.17 have been improved and enhanced. Major new feature is the nfd export command.

See the documentation for more details

Helm

The Helm chart is now served from the registry.k8s.io OCI registry at registry.k8s.io/nfd/charts/node-feature-discovery. One liner installation with

helm install -n node-feature-discovery nfd oci://registry.k8s.io/nfd/charts/node-feature-discovery --version 0.18.0 --create-namespace

[!IMPORTANT]
The legacy Helm repository at https://kubernetes-sigs.github.io/node-feature-discovery/charts is still available, but will be deprecated and stop getting updated in a future release. Users are encouraged to migrate to the OCI registry.

The release contains numerous small improvements and fixes to the Helm chart and its documentation, including:

  • Configurable DNS policy (#​2025)
  • Configurable PodDisruptionBudget (#​2148)
  • Configurable UpdateStrategy for nfd-worker (#​2157)
  • Global global.imagePullSecrets parameter (#​2191)
  • Fix for running with OwnerReferencesPermissionEnforcement validating webhook enabled (#​2006)
  • Post-delete hook: option to disable (#​2076) and configurable image pull secret (#​2082)
Deprecations

The deprecated autoDefaultNs configuration parameter of nfd-master was removed.

Toleration for the deprecated node-role.kubernetes.io/master:NoSchedule taint and affinity to the deprecated node-role.kubernetes.io/master label have been removed from the default nfd-master deployment manifests. If you still need these, they need to be explicitly added to the deployment (master.tolerations and master.affinity in the Helm chart).

[!IMPORTANT]
In v0.18.0 the DisableAutoPrefix feature is still alpha and disabled by default. NFD adds feature.node.kubernetes.io/ prefix to all unprefixed label, annotation and extended resource names. When DisableAutoPrefix is enabled (will be default in a future release), NFD will not add the default prefix automatilly (and add unprefixed names, verbatim). Users are stronglycencouraged to start using fully qualified names (with the prefix) for allccustom labels, annotations and extended resources.

Miscellaneous
Scalability

The release contains improvements and fixes to NFD scalability in larger clusters.

NodeFeatureRules
Label templating

The label templates in NodeFeatureRules now support sprig functions, greatly enhancing their flexibility.

New comparison operators

New comparison operators Ge, Le and GeLe were added (#​2085).

Type field in MatchExpressions

New Type field was added to MatchExpressions, allowing to specify the type of the value being compared (#​2096). Currently supported types are empty value (the default) and version. Use of version type enables version-aware comparisons.

CPU features

Support for new CPUID flags were added, including AMXCOMPLEX, AMXTRANSPOSE and AMXTF32.

Memory features

NFD now detects availability of hugepages and reports them as memory-hugepages.enabled and hugepages-<page-size>features (#​2056).

Network features

Detection of the MTU of network devices was added (#​2044).

Metrics and health endpoints

The gRPC health endpoint was replaced by an HTTP healthz endpoint in all NFD daemons. In addition, both the metrics and healthz endpoints are now served on the same port (configurable with --port, default 8080).

Full Changelog

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [node-feature-discovery](https://github.com/kubernetes-sigs/node-feature-discovery) | minor | `0.17.4` → `0.19.0` | --- ### Release Notes <details> <summary>kubernetes-sigs/node-feature-discovery (node-feature-discovery)</summary> ### [`v0.19.0`](https://github.com/kubernetes-sigs/node-feature-discovery/releases/tag/v0.19.0) [Compare Source](https://github.com/kubernetes-sigs/node-feature-discovery/compare/v0.18.3...v0.19.0) ##### Highlights - Immediate node re-labeling after a node rebuild ([#&#8203;2545](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2545)): nfd-master detects a recreated Node via the surviving NodeFeature's owner-reference / pod-UID annotation and re-labels immediately instead of waiting for the periodic reconcile. - Configurable NodeFeature owner references: `-owner-refs` / `core.ownerRefs` (`pod`, `ds`, `node`; default `pod,ds`) ([#&#8203;2545](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2545)). - `core.noPublishFeatures` to slim published NodeFeature objects ([#&#8203;2530](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2530); whitespace-trim fix [#&#8203;2535](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2535)). - New x86-64 microarchitecture level labels `cpu-cpuid.X86_64_V1..V4` ([#&#8203;2490](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2490)). - nfd-topology-updater: per-pod lookups served from a node-scoped Pod informer, eliminating high-volume per-pod GETs at scale ([#&#8203;2509](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2509)). Requires an RBAC update — see Action Required. - nfd-master reconciles only on NodeFeature/NodeFeatureRule/NodeFeatureGroup spec changes ([#&#8203;2532](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2532)); MatchInRegexp pattern compilation cached ([#&#8203;2531](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2531)). ##### Action Required / Behavior Changes 1. **nfd-topology-updater RBAC ([#&#8203;2509](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2509)):** the ClusterRole needs `list`+`watch` on `pods` (was `get` only). Helm and kustomize manifests ship the update, but deployments that bump only the image will crash-loop with `pods is forbidden ... cannot list resource "pods"` until the new RBAC is applied. 2. **NodeFeatureRule templates ([#&#8203;2507](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2507)):** `env`, `expandenv` and `getHostByName` were removed from the available template functions (security hardening). Templates using them now fail to parse (`function "env" not defined`); the rule is skipped and an error is logged. 3. **Helm worker `updateStrategy` default ([#&#8203;2519](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2519)):** now `rollingUpdate: {maxUnavailable: "10%"}` (was Kubernetes default `1`). Note for `type: OnDelete` users: the chart's default `rollingUpdate` block is deep-merged into your values; the API server accepts and ignores it (verified on v1.30). Optionally set `worker.updateStrategy.rollingUpdate: null` for a clean spec. 4. **`resyncPeriod` (nfd-master):** drives both the informer resync and the (new in this release, [#&#8203;2415](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2415)) periodic full reconcile that re-applies labels and cleans up drift. Setting it to `0` disables this safety net entirely. 5. **Node-rebuild re-labeling dependency ([#&#8203;2545](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2545)):** immediate re-label requires `pod` in `-owner-refs` (default) or the `POD_UID` env set on the worker; with `ds`-only/empty owner refs and no `POD_UID`, re-labeling falls back to the periodic reconcile interval. `-owner-refs=node` is unaffected. ##### Fixes - nfd-master: don't remove node labels when the NodeFeature cache is incomplete; add periodic reconciliation to clean up genuinely absent NodeFeatures ([#&#8203;2415](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2415)). - nfd-master: prevent stop() panic and informer leak on init failure ([#&#8203;2534](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2534)). - nfd-worker: trim whitespace in comma-separated command-line list values ([#&#8203;2535](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2535)). - Helm: render post-delete prune job resources at container level so they actually apply ([#&#8203;2515](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2515)). ##### Other - Container images cross-compile from `$BUILDPLATFORM` via tonistiigi/xx ([#&#8203;2512](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2512)). - Reduced cognitive complexity refactors in nfd-master controller and nfd-worker config ([#&#8203;2536](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2536)); nfd-master command-line unit tests ([#&#8203;2469](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2469)); codecov upload non-fatal in CI verify ([#&#8203;2527](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2527)); template/custom-api input-validation hardening ([#&#8203;2507](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2507)). ### [`v0.18.3`](https://github.com/kubernetes-sigs/node-feature-discovery/releases/tag/v0.18.3) [Compare Source](https://github.com/kubernetes-sigs/node-feature-discovery/compare/v0.18.2...v0.18.3) #### What's Changed This patch release adds support for ppc64le and s390x architectures by providing official NFD container images for them. It also fixes the "test" subcommand of kubectl-nfd plugin. **Full Changelog**: <https://github.com/kubernetes-sigs/node-feature-discovery/compare/v0.18.2...v0.18.3> ### [`v0.18.2`](https://github.com/kubernetes-sigs/node-feature-discovery/releases/tag/v0.18.2) [Compare Source](https://github.com/kubernetes-sigs/node-feature-discovery/compare/v0.18.1...v0.18.2) This patch release fixes the /metrics endpoint of nfd-topology-updater ([#&#8203;2343](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2343)). ### [`v0.18.1`](https://github.com/kubernetes-sigs/node-feature-discovery/releases/tag/v0.18.1) [Compare Source](https://github.com/kubernetes-sigs/node-feature-discovery/compare/v0.18.0...v0.18.1) This patch release fixes the deployment of PodMonitor object when prometheus-operator metrics collection is enabled. ### [`v0.18.0`](https://github.com/kubernetes-sigs/node-feature-discovery/releases/tag/v0.18.0) [Compare Source](https://github.com/kubernetes-sigs/node-feature-discovery/compare/v0.17.4...v0.18.0) #### Changelog ##### Image compatibility (EXPERIMENTAL) The image compatibility related features introduced in [v0.17](https://github.com/kubernetes-sigs/node-feature-discovery/releases/v0.17.0) have been improved and enhanced. Major new feature is the `nfd export` command. See the [documentation](https://kubernetes-sigs.github.io/node-feature-discovery/v0.18/usage/image-compatibility.html) for more details ##### Helm The Helm chart is now served from the registry.k8s.io OCI registry at registry.k8s.io/nfd/charts/node-feature-discovery. One liner installation with ```bash helm install -n node-feature-discovery nfd oci://registry.k8s.io/nfd/charts/node-feature-discovery --version 0.18.0 --create-namespace ``` > \[!IMPORTANT] > The legacy Helm repository at <https://kubernetes-sigs.github.io/node-feature-discovery/charts> is still available, but will be deprecated and stop getting updated in a future release. Users are encouraged to migrate to the OCI registry. The release contains numerous small improvements and fixes to the Helm chart and its documentation, including: - Configurable DNS policy ([#&#8203;2025](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2025)) - Configurable PodDisruptionBudget ([#&#8203;2148](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2148)) - Configurable UpdateStrategy for nfd-worker ([#&#8203;2157](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2157)) - Global `global.imagePullSecrets` parameter ([#&#8203;2191](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2191)) - Fix for running with OwnerReferencesPermissionEnforcement validating webhook enabled ([#&#8203;2006](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2006)) - Post-delete hook: option to disable ([#&#8203;2076](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2076)) and configurable image pull secret ([#&#8203;2082](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2082)) ##### Deprecations The deprecated `autoDefaultNs` configuration parameter of nfd-master was removed. Toleration for the deprecated `node-role.kubernetes.io/master:NoSchedule` taint and affinity to the deprecated `node-role.kubernetes.io/master` label have been removed from the default nfd-master deployment manifests. If you still need these, they need to be explicitly added to the deployment (`master.tolerations` and `master.affinity` in the Helm chart). > \[!IMPORTANT] > In v0.18.0 the DisableAutoPrefix feature is still alpha and disabled by default. NFD adds `feature.node.kubernetes.io/` prefix to all unprefixed label, annotation and extended resource names. When DisableAutoPrefix is enabled (will be default in a future release), NFD will not add the default prefix automatilly (and add unprefixed names, verbatim). Users are stronglycencouraged to start using fully qualified names (with the prefix) for allccustom labels, annotations and extended resources. ##### Miscellaneous ##### Scalability The release contains improvements and fixes to NFD scalability in larger clusters. ##### NodeFeatureRules ##### Label templating The label templates in NodeFeatureRules now support [sprig](https://masterminds.github.io/sprig/) functions, greatly enhancing their flexibility. ##### New comparison operators New comparison operators `Ge`, `Le` and `GeLe` were added ([#&#8203;2085](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2085)). ##### Type field in MatchExpressions New `Type` field was added to `MatchExpressions`, allowing to specify the type of the value being compared ([#&#8203;2096](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2096)). Currently supported types are empty value (the default) and `version`. Use of `version` type enables version-aware comparisons. ##### CPU features Support for new CPUID flags were added, including AMXCOMPLEX, AMXTRANSPOSE and AMXTF32. ##### Memory features NFD now detects availability of hugepages and reports them as `memory-hugepages.enabled` and `hugepages-<page-size>`features ([#&#8203;2056](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2056)). ##### Network features Detection of the MTU of network devices was added ([#&#8203;2044](https://github.com/kubernetes-sigs/node-feature-discovery/issues/2044)). ##### Metrics and health endpoints The gRPC health endpoint was replaced by an HTTP healthz endpoint in all NFD daemons. In addition, both the metrics and healthz endpoints are now served on the same port (configurable with `--port`, default 8080). [**Full Changelog**](https://github.com/kubernetes-sigs/node-feature-discovery/compare/v0.18.0-devel...v0.18.0) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNTMuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI1My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
renovate-bot force-pushed renovate/node-feature-discovery-0.x from c30ba6bbc6 to 8877943702 2026-07-10 15:08:48 +00:00 Compare
renovate-bot changed title from Update Helm release node-feature-discovery to v0.18.3 to Update Helm release node-feature-discovery to v0.19.0 2026-07-10 15:08:51 +00:00
renovate-bot changed title from Update Helm release node-feature-discovery to v0.19.0 to chore(deps): update helm release node-feature-discovery to v0.19.0 2026-07-17 23:14:34 +00:00
renovate-bot changed title from chore(deps): update helm release node-feature-discovery to v0.19.0 to Update Helm release node-feature-discovery to v0.19.0 2026-07-21 01:10:54 +00:00
renovate-bot changed title from Update Helm release node-feature-discovery to v0.19.0 to chore(deps): update helm release node-feature-discovery to v0.19.0 2026-07-21 02:10:58 +00:00
ops manually merged commit 3ec737653a into main 2026-07-21 20:14:17 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
ops/homelab!49
No description provided.