Repository navigation
v0.5.1
Lightspeed v0.5.1 adds native Azure Blob storage and enables verified PostgreSQL TLS in the Rust Runtime, supporting deployments on Azure Kubernetes Service with username/password database authentication.
PostgreSQL
- Runtime, migration, and API-key commands include SQLx TLS support with native CA roots. Use
sslmode=verify-fullto verify the database certificate and hostname. - Platform keeps its existing PostgreSQL TLS behaviour. No new database authentication mode or LLM-specific certificate configuration is introduced.
Blob storage
- Select native Azure Blob with
LIGHTSPEED_OBJECT_STORE_BACKEND=azure, configure the account and existing container, and supply exactly one account access key or SAS token through the deployment's secret mechanism. - Existing S3 configurations retain their defaults and public Rust exports. S3 and Azure configuration/builders live in separate modules.
- Incomplete or mixed backend settings fail at startup, and credential debug output is redacted. Both backends use their normal HTTPS certificate trust.
- CAS identities, universe isolation, inline storage, database schemas, and protocol revisions are unchanged. Changing backend/container does not migrate existing objects; retain access to old objects or plan a separate storage migration.
Upgrade and validation
Use matching Runtime and Platform images from this release. The fresh-install requirements for installations predating v0.5.0 still apply; this patch does not provide a conversion from those databases or Temporal histories. See the v0.5.0 release notes and deployment configuration.
Local validation covered the affected Rust unit suites, PostgreSQL TLS certificate/hostname rejection, Azure CAS against Azurite using account-key and SAS authentication, and Runtime/Platform migration paths. Full workspace Clippy, formatting, and documentation checks passed. Actual AKS and managed Azure service connectivity remains deployment acceptance work.