Skip to content

feat(helm): integrate optional Vermeer with Hubble - #3422

Draft
imbajin wants to merge 35 commits into
apache:masterfrom
hugegraph:feat/helm-vermeer
Draft

imbajin wants to merge 35 commits into
apache:masterfrom
hugegraph:feat/helm-vermeer

Conversation

@imbajin

@imbajin imbajin commented Oct 28, 2026 •

Copy link
Copy Markdown
Member

Before → After

Before: optional Vermeer deployment and Hubble connectivity require separate topology, endpoint, credential and storage setup.
After: add opt-in standalone/cluster Vermeer wiring, automatic Hubble credentials and role-specific storage/network policies. Keep Vermeer and SeaTunnel disabled by default, share the Server/Store metadata namespace, and document recovery and upgrade boundaries.

Validation boundary

The author reports Helm/Python regressions, schema validation and local runtime checks. Final browser, cluster and lifecycle evidence is still being collected; this remains a draft. Current chart values pin the matching runtime image tag and digest. Registry publication and final browser, cluster and lifecycle acceptance are separate evidence boundaries.
Source: 🔗 hugegraph/hugegraph #346
Paired documentation: 🔗 hugegraph/hugegraph-doc #55
Runtime dependency: 🔗 apache/hugegraph-computer #367

Visual overview

Opt-in Vermeer topology and Hubble credential wiring

Opt-in Vermeer topology and Hubble credential wiring. Both engines remain disabled by default. Current values pin a runtime image tag and digest; this diagram does not independently verify registry publication or coordinated acceptance. Process health is distinct from graph-space availability.

orion added 28 commits October 28, 2026 04:32
Document standalone and cluster compute topologies and automatic Hubble access.
Fold optional engines in the README and refresh credentials, storage and image requirements.
Keep Hubble as the default compute entry and document optional port-forwarded administration.
Use generated short human passwords and move raw service tokens and image publishing into advanced guidance.
Preserve metadata adoption, native token migration and compute cleanup instructions.
orion and others added 6 commits October 28, 2026 05:44
Record the verified official multi-platform image, immutable index digest, source commit and publishing run.
Keep ordinary enablement automatic and document digest precedence for custom tags.
Preserve the four-image default mirror inventory and add optional-image guidance separately.
- Restore 16-character generated Vermeer and SeaTunnel administrator credentials in every mode.
- Preserve existing Secret reuse and the role-scoped Vermeer rollout fix.
- Avoid weakening the default easy-mode authentication boundary without rate limiting.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant