fix(netbird): restore Renovate discovery and upgrade to 0.81.5 #177

Merged

morten-olsen merged 1 commit from fix/netbird-renovate-0.81.5 into main

2026-10-26 22:06:17 +01:00

morten-olsen commented

2026-10-26 22:05:08 +01:00

Owner

Change

Rename all six image map entries to end in Image so the standard Renovate Helm-values manager discovers them.
Pin management, signal and relay to 0.81.5 and dashboard to v2.95.0 using verified multi-platform Docker Hub digests.
Keep Coturn, BusyBox, routing, OIDC and storage configuration unchanged.
Document the SQLite rollback checkpoint.

Verification

scripts/ci/validate-charts.sh apps/charts/netbird passed.
Before/after rendered manifests differ only in the four NetBird image pins.
Upstream Renovate 41 matcher detects all six image entries.
Online SQLite backup of store.db and events.db passed integrity checks, retained at /var/lib/netbird/pre-upgrade-0.81.5-20261026 on the management PVC.
Isolated 0.81.5 management migrated the backup and started with the existing OIDC configuration; API returned expected unauthenticated 401. All account, peer, user, group, policy, route, network, resource, router and setup-key identities preserved, including 11 peers.
Signal and relay started. Dashboard served HTTP 200 and rendered its application; authenticated dashboard login not exercised.
Temporary containers, database copies and credentials removed.

## Change - Rename all six image map entries to end in Image so the standard Renovate Helm-values manager discovers them. - Pin management, signal and relay to 0.81.5 and dashboard to v2.95.0 using verified multi-platform Docker Hub digests. - Keep Coturn, BusyBox, routing, OIDC and storage configuration unchanged. - Document the SQLite rollback checkpoint. ## Verification - scripts/ci/validate-charts.sh apps/charts/netbird passed. - Before/after rendered manifests differ only in the four NetBird image pins. - Upstream Renovate 41 matcher detects all six image entries. - Online SQLite backup of store.db and events.db passed integrity checks, retained at /var/lib/netbird/pre-upgrade-0.81.5-20261026 on the management PVC. - Isolated 0.81.5 management migrated the backup and started with the existing OIDC configuration; API returned expected unauthenticated 401. All account, peer, user, group, policy, route, network, resource, router and setup-key identities preserved, including 11 peers. - Signal and relay started. Dashboard served HTTP 200 and rendered its application; authenticated dashboard login not exercised. - Temporary containers, database copies and credentials removed.

morten-olsen added 1 commit

2026-10-26 22:05:08 +01:00

fix(netbird): restore Renovate discovery and upgrade control plane

ci/woodpecker/pr/charts Pipeline was successful

Details

7ba3a61dfb

morten-olsen merged commit 0dc5dd1e45 into main

2026-10-26 22:06:17 +01:00

morten-olsen deleted branch fix/netbird-renovate-0.81.5

2026-10-26 22:06:17 +01:00

morten-olsen commented

2026-10-26 22:08:13 +01:00

Author

Owner

Deployed via ArgoCD at 0dc5dd1e45. All five NetBird deployments have one updated ready replica; ArgoCD is Synced/Healthy. Management, signal and relay run the pinned 0.81.5 images; dashboard runs pinned v2.95.0. The workstation NetBird client reconnected to both management and signal without changing its configuration; peer totals and connected counts match the pre-rollout baseline. Live management API returns expected unauthenticated 401; dashboard returns 200 and the real browser completes the OIDC redirect to the Authentik login form. Full authenticated browser login was not exercised. Online SQLite rollback checkpoint remains on the management PVC; all temporary smoke resources and sensitive local copies were removed.

Deployed via ArgoCD at 0dc5dd1e455ab8519681746296b95e1ba850e635. All five NetBird deployments have one updated ready replica; ArgoCD is Synced/Healthy. Management, signal and relay run the pinned 0.81.5 images; dashboard runs pinned v2.95.0. The workstation NetBird client reconnected to both management and signal without changing its configuration; peer totals and connected counts match the pre-rollout baseline. Live management API returns expected unauthenticated 401; dashboard returns 200 and the real browser completes the OIDC redirect to the Authentik login form. Full authenticated browser login was not exercised. Online SQLite rollback checkpoint remains on the management PVC; all temporary smoke resources and sensitive local copies were removed.