[sbaum1994]

TL;DR

Select BYOO and ordinary NVCF collector 0.160.0-nv-0.2.8 in the compute-plane 1.0 maintenance stack. The existing stack still selected ordinary 0.157.0-nv-0.2.1 and inherited BYOO 0.160.0-nv-0.2.5 from the operator chart, leaving the reviewed security fixes out of this delivery.

Additional Details

Backport the BYOO stack image routing from #2680 and #2751, and the collector inventory discovery from #2869. Both functions and tasks receive the BYOO override. The operator and self-managed backend receive the ordinary collector pin. The repository follows global.image, with per-image override support, so the public release configuration resolves both images under nvcr.io/nvidia/nvcf.

The pinned operator chart remains 1.28.0; NVCA and its operator remain 3.10.3. The helm-managed backend is empty for this self-managed stack. The ordinary collector remains disabled by default and optional in the inventory. Inventory discovery tolerates a partial image pair only when explicitly disabled, preserves required BYOO entries, and tests the publisher collection path. Main retains its newer wrapper 0.4 collector train.

For the Reviewer

Draft and dependent on #2869. Runtime routing antecedents #2680 and #2751 and producer security backport #2865 have merged. No NICLLS, Samba, source collector, registry, release tag, or umbrella version changes are included. The existing chart-validation CI command fetches release history and tags and also runs the collector regression; no new job is added.

Merge this after the main inventory fix, then publish a new compute-plane 1.0 patch with its inventory. The next version after the existing deploy/stacks/nvcf-compute-plane/v1.0.1 tag is 1.0.2, subject to other releases landing first. The umbrella delivery must consume that independently published stack. Update public catalog version facts only after the new inventory exists; the ordinary collector image needs an identity distinct from the existing chart with the same name during that sync.

Dependencies: the two NVIDIA collector images move to 0.160.0-nv-0.2.8; no new third-party packages or license changes. NOTICE is unchanged. Runtime topology and diagrams are unchanged.

For QA

Passed on this branch:

• Compute-plane test-collector-images, test-observability-profile, and test-nvca-default-ownership.
• Rendered the immutable deploy/helm/nvca-operator/v1.28.0 chart with local stack values and compared the complete operator output to refreshed golden fixtures. Only the ordinary pin and BYOO function/task overrides changed.
• Existing nvca-entrypoints.sh, compare-golden.sh, and ShellCheck.
• go test -C tools/docs-version-sync ./... and go vet -C tools/docs-version-sync ./....
• Ran inventory extraction on the actual public-registry render and confirmed both collector references at the selected version; the ordinary collector stays optional.
• Documentation sync and Fern checks; git diff --check.

The review follow-up reran the full Go suite, Go vet, and the exact CI command make -C deploy/stacks/nvcf-compute-plane test-nvca-default-ownership test-collector-images on this branch. New regression coverage checks disabled partial images, required BYOO precedence in either traversal order, and publisher collection.

At 2c079a0b2, the final-head Go tools job and Helm charts job passed.

These are rendering and inventory checks, not live deployment qualification. Live BYOO task/function telemetry export, ordinary collector configuration validation against the published image, and customer digest readback remain outstanding. Publication verification succeeded upstream, but the local image credentials currently return access denied. Keep this PR draft until the main dependency and required qualification are complete. No clusters or releases were changed.

Issues

Relates to #2823

Relates to #2432

Checklist

• I am familiar with the contributing guidelines.
• I have signed off my commits for DCO compliance.
• New and existing rendering and inventory tests cover the changes.
• Documentation version facts remain tied to independently published stack inventories.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

🗂️ Base branches to auto review: 1

• main

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: NVIDIA/nvcf
• Branch: sbaum1994/patch104-collector-consumers-v1
• File: .coderabbit.yaml
• Commit: 2c079a0
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Enterprise
• Run ID: 638c9ce2-8251-4aa8-a5f3-ccf7ba40a7e4

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

[balajinvda]

This PR is included in version 1.0.2.

The release is available on GitHub release.