Skip to content

v2.0.0

Latest
Latest

Choose a tag to compare

View all tags
@bnsoni bnsoni released this 12 Oct 16:07
v2.0.0
9ba80fa
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

[2.0.0] — 2026-10-12

Major release. Setup now targets the iblai-cli-ops 7.x config system, and takes separate AWS keys for pulling images and for S3.

Breaking

  • Requires iblai-cli-ops 7.0.0 or later. The playbooks use the declarative config model: ibl init, ibl config set, ibl secrets set|generate, then an explicit ibl render. Setup checks the installed CLI and stops if it's older, rather than half-configuring the server. Use an iblai-prod-images release whose pin is 7.x; this release was validated on 1.277.0 / 7.24.0.
  • Two AWS keys instead of one.
    • AWS_ACCESS_KEY_ID / AWS_SECRET_ACCESS_KEY now only pull images. They're set as the server's default AWS CLI profile.
    • The platform's own AWS key comes from the new S3_ACCESS_KEY_ID / S3_SECRET_ACCESS_KEY, or the new wizard prompt (a separate key, the same key, or skip). It covers S3 storage, SCORM uploads, and SNS alerts when a topic is configured.
    • If the S3 key is left unset, nothing is written: a fresh server renders without it, and a resetup keeps the key the server already has.

Added

  • NODE_ID, set with --node-id, in .env, or in the wizard. ibl render requires it; it defaults to the project name.
  • OpenRouter as the LLM key (OPENROUTER_API_KEY or the wizard), stored as the platform's gateway credential. Tenants stay on the deployment's keys.
  • S3 storage for DM static files and media (S3_STATIC_BUCKET / S3_MEDIA_BUCKET / S3_REGION).

Fixed

  • Fresh installs and re-runs on the 7.x runtime:
    • the DM bootstraps without ibl dm launch;
    • OAuth/OIDC credential rows are updated in place;
    • every mentor gets the settings row that chat reads;
    • the health-check mentors pass the DM readiness gate.
  • Resetup no longer rotates the keys that encrypt stored data.
  • SPA restarts follow the enabled SPAs instead of a fixed list, and the AI call service stays off until a call server is connected.
  • service-update installs from the configured org and repos, and the GitHub token is kept out of install URLs.

Upgrading

uv tool install --force git+https://github.com/iblai/infra-cli
iblai --version                 # iblai v2.0.0
  • Pick a 7.x release: set PROD_IMAGES_TAG, or answer the wizard prompt, with a prod-images release that pins iblai-cli-ops 7.x.
  • .env files with S3 buckets must also set S3_ACCESS_KEY_ID / S3_SECRET_ACCESS_KEY. Repeat the ECR key there if one key does both jobs. See .env.setup.example.
  • Servers still on the 5.x CLI need the config migration first; see docs/config-6x-migration.md.

Test count: 1109 passing.

Full changelog: v1.19.1...v2.0.0

Assets 2
Loading