Skip to content

v0.1.1 — multi-arch images

Choose a tag to compare

@carolsimone carolsimone released this 29 Jul 18:05
· 146 commits to main since this release
f0a7a1e

Multi-architecture images, a validated chart values contract, and a security scanning baseline.

If you are on Apple Silicon, this is the first release that works. 0.1.0 published linux/amd64 only, so an install on arm64 left every Continuo pod in ImagePullBackOff.

Install

helm install continuo oci://ghcr.io/carolsimone/charts/continuo \
  --version 0.1.1 -n continuo --create-namespace

Upgrading from 0.1.0 needs no values changes.

Multi-architecture images

Every service image now publishes for linux/amd64 and linux/arm64, including the dbt base image. Go builder stages cross-compile via BUILDPLATFORM/TARGETARCH rather than emulating, so build times stay reasonable on x86 runners.

Two guards keep it honest: CI fails the build if a published image is not multi-arch, and each arm64 image is smoke-run under QEMU to catch a wrong GOARCH slipping through.

Chart

  • values.schema.json validates your values on helm lint, install, and upgrade — typos and wrong-shaped overrides now fail before template rendering rather than at runtime.
  • NOTES.txt prints real post-install access instructions, including the Dex port-forward and /etc/hosts steps the quickstart login actually needs.
  • A changelog (deploy/continuo/CHANGELOG.md) with a CI gate requiring it to be updated whenever the chart's user-facing surface changes.

Two schema bugs from 0.1.0 are fixed: services[].image overrides and resource keys beyond cpu/memory (such as ephemeral-storage or nvidia.com/gpu) were being rejected despite being supported.

Security

  • govulncheck and gitleaks now block a merge; Trivy dependency and config scans run advisory.
  • Dependabot covers Go, npm, uv, GitHub Actions, and Docker.
  • google.golang.org/grpc bumped to v1.82.1 for GO-2026-6061.

Fixes

  • orchestrator no longer prunes dedup rows still referenced by the outbox.
  • executor-controller garbage-collects failed one-shot Job pods after 24 hours.

Status

Beta. dbt remains the only supported runtime.

Full changelog: v0.1.0...v0.1.1