chore: upgrade api7 and gateway to v3.9.17

[jarvis9443]

3.9.17 chart release. Targets release/3.9 because 3.9 is no longer the latest line — main is on 3.10.

Version bumps

chart	version	appVersion
api7ee3	3.9.2 → 3.9.3	3.9.16 → 3.9.17
gateway	3.9.7 → 3.9.8	3.9.16 → 3.9.17

Image tags: dashboard, dp_manager, file_server, developer_portal → v3.9.17; gateway → 3.9.17.

Chart patches follow this line's own counter, so they stay below the 3.10 line's numbers and --version '~3.9' keeps working.

Structural changes

Three, all ported from the 3.9.17 sources and matching what the 3.10 line already carries:

• database.max_lifetime: 1h for the dashboard, dp_manager and developer_portal configurations. The control plane now bounds pooled connection lifetime by default (api7/api7ee-3-control-plane#2850); the chart previously carried only a commented-out # max_lifetime: 60s, so a chart-deployed control plane reused pooled connections indefinitely and could keep talking to a primary demoted by a failover.
• dashboard_configuration.console gains hybrid_mode, sentry, and a commented custom_menu_group example. /api/fe-config is now served by the Go binary and driven by these keys (api7/api7ee-3-control-plane#2842), so they need to be settable from the chart. The existing console.addr is extended in place rather than re-declared.
• nginx.stream.realIpFrom exposes the gateway's new nginx_config.stream.real_ip_from (api7/api7-ee-3-gateway#1985), rendered into the configmap only when non-empty. Defaults to [], so a default render is unchanged.

Verification

• values.yaml parsed with a duplicate-key-rejecting loader — no duplicate keys, and console.addr survives alongside the three new keys.
• helm template with nginx.stream.realIpFrom unset renders no stream real_ip_from; with it set to two CIDRs it renders both, quoted, inside the stream: block.
• The rendered config.yaml passes apisix init in api7-ee-3-gateway:3.9.17, which validates it against the real config schema.
• READMEs regenerated with helm-docs.

Release notes: api7/docs#1950 (EN), api7/docs.apiseven.com#359 (CN).

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 50d8ced7-ad3e-41da-9d37-f6e3980e6c7a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/upgrade-3.9.17

---

_{Comment @coderabbitai help to get the list of available commands.}