kritika helm release

No introduction found. Create it?

Name	Repo	Stars	Version	Timestamp
kritika	onedr0p/home-ops	2907	0.0.102	17 hours ago
kritika	buroa/home-ops	391	0.0.102	6 days ago

Name

Repo

Stars

Version

Timestamp

kritika

onedr0p/home-ops

2907

0.0.102

17 hours ago

kritika

buroa/home-ops

391

0.0.102

6 days ago

Key	Types
config.webUrl (12) `https://kritika.${SECRET_DOMAIN}`	string
config.apps.github.accounts[] (9) `- tanguille`	string
config.apps.github.privateKey.env (9) `GITHUB_APP_PRIVATE_KEY`	string
config.apps.github.webhookSecret.env (9) `GITHUB_APP_WEBHOOK_SECRET`	string
config.apps.github.clientId.env (7) `KRITIKA_GITHUB_CLIENT_ID`	string
config.apps.github.clientId (2) `Iv23liEpcPGN5z8KRBta`	string
config.embedding.dims (9) `1024`	number
config.embedding.model (9) `openrouter/voyageai/voyage-code-4`	string
config.embedding.documentPrompt (5) `Represent the document for retrieval:`	string
config.embedding.queryPrompt (5) `Represent the query for retrieving supporting documents:`	string
config.embedding.similarFloor (5) `0.3`	number
config.embedding.maxBatchChars (2) `50000`	number
config.embedding.maxItemChars (1) `8000`	number
config.review.model (9) `openrouter/~openai/gpt-sol-latest`	string
config.review.fallback (3) `openrouter/~anthropic/claude-opus-latest`	string
config.review.agents[].categories[] (1) `- security`	string
config.review.agents[].effort (1) `high`	string
config.review.agents[].instructions (1) Review the change as an application security engineer, following the security-audit skill in guidance mode only: never start its full audit workflow, write audit artifacts or run target code. Report only findings with a concrete trust boundary, an affected principal or resource, and a reachable source path in this change. Treat anything you could not confirm from source as needing validation and say what would confirm it. For infrastructure and GitOps changes, weigh exposed routes and LoadBalancers, NetworkPolicy gaps, privileged or root containers, host mounts, RBAC widening, secret handling and unpinned images or actions.	string
config.review.agents[].name (1) `security`	string
config.review.agents[].skills.scope.security-audit.load (1) `true`	boolean
config.review.approve (1) `true`	boolean
config.review.diagram (1) `true`	boolean
config.review.fixes (1) `true`	boolean
config.auth.admin.password.env (7) `KRITIKA_AUTH_ADMIN_PASSWORD`	string
config.auth.oidc.clientSecret.env (3) `OIDC_CLIENT_SECRET`	string
config.auth.oidc.issuer (3) `https://sso.${S_HOMEPROD_DOMAIN}/application/o/kritika/`	string
config.auth.oidc.name (3) `cranitchsso`	string
config.auth.oidc.roleMappingExpr (3) `"service-admins" in roles ? "admin" : "member"`	string
config.auth.oidc.rolesClaim (3) `groups`	string
config.auth.oidc.clientId.env (2) `OIDC_CLIENT_ID`	string
config.auth.oidc.clientId (1) `kritika`	string
config.auth.oidc.scopes[] (2) `- openid - email - profile - groups`	string
config.confidence.model (7) `openrouter/~anthropic/claude-sonnet-latest`	string
config.confidence.fallback (3) `llm/omniroute`	string
config.confidence.risk (2) `high`	string
config.confidence.threshold (2) `4`	number
config.egress.allow[] (7) `- *`	string
config.egress.deny[] (5) `- "10.0.0.0/8" - "172.16.0.0/12" - "192.168.0.0/16" - *.internal`	string
config.providers.openrouter.apiKey.env (6) `KRITIKA_OPENROUTER_API_KEY`	string
config.providers.openrouter.type (6) `openrouter`	string
config.providers.openrouter.retries (1) `2`	number
config.providers.litellm.apiKey.env (2) `LITELLM_API_KEY`	string
config.providers.litellm.baseUrl (2) `http://litellm.ai.svc.cluster.local:4000/v1`	string
config.providers.litellm.type (2) `openai`	string
config.providers.litellm.retries (1) `2`	number
config.providers.anthropic.apiKey.env (1) `KRITIKA_ANTHROPIC_API_KEY`	string
config.providers.anthropic.pricing.~sonnet-latest.cacheRead (1) `0.1`	number
config.providers.anthropic.pricing.~sonnet-latest.cacheWrite (1) `2.5`	number
config.providers.anthropic.pricing.~sonnet-latest.input (1) `2`	number
config.providers.anthropic.pricing.~sonnet-latest.output (1) `10`	number
config.providers.anthropic.type (1) `anthropic`	string
config.providers.bifrost.apiKey.env (1) `KRITIKA_BIFROST_VK`	string
config.providers.bifrost.baseUrl (1) `http://bifrost.ai.svc.cluster.local:8080/v1`	string
config.providers.bifrost.headers.x-bf-eh-x-opencode-session (1) `{session}`	string
config.providers.bifrost.type (1) `openai`	string
config.providers.chatgpt.type (1) `chatgpt`	string
config.providers.cliproxyapi.apiKey.env (1) `CLIPROXYAPI_API_KEY`	string
config.providers.cliproxyapi.baseUrl (1) `http://cliproxyapi.ai.svc.cluster.local:8317/v1`	string
config.providers.cliproxyapi.type (1) `openai`	string
config.providers.llm.apiKey.env (1) `LLM_API_KEY`	string
config.providers.llm.baseUrl (1) `http://agentgateway.ai.svc.cluster.local:4000/v1`	string
config.providers.llm.type (1) `openai`	string
config.providers.local.apiKey.env (1) `LOCAL_LLM_KEY`	string
config.providers.local.baseUrl (1) `http://vllm.ai-system.svc.cluster.local:8000/v1`	string
config.providers.local.pricing.qwen 3.8 - local.input (1) `0`	number
config.providers.local.pricing.qwen 3.8 - local.output (1) `0`	number
config.providers.local.type (1) `openai`	string
config.providers.zai.apiKey.env (1) `ZAI_API_KEY`	string
config.providers.zai.baseUrl (1) `https://api.z.ai/api/coding/paas/v4`	string
config.providers.zai.pricing.glm-5.3-flash.input (1) `0`	number
config.providers.zai.pricing.glm-5.3-flash.output (1) `0`	number
config.providers.zai.type (1) `openai`	string
config.trigger.exclude[].expr (6) `pr.fork`	string
config.trigger.exclude[].name (6) `forks`	string
config.agent.timeout (3) `90m`	string
config.agent.tokens (2) `16000000`	number
config.agent.parts (1) `16`	number
config.agent.prompt (1) `200000`	number
config.ignore[] (2) `- */.out`	string
config.authAdminPassword.valueFrom.secretKeyRef.key (1) `ADMIN_PASSWORD`	string
config.authAdminPassword.valueFrom.secretKeyRef.name (1) `kritika-secret`	string
config.authOidcClientId (1) `kritika`	string
config.authOidcClientSecret.valueFrom.secretKeyRef.key (1) `client-secret`	string
config.authOidcClientSecret.valueFrom.secretKeyRef.name (1) `kanidm-kritika-oidc`	string
config.authOidcIssuer (1) `https://idm.${SECRET_DOMAIN}/oauth2/openid/kritika`	string
config.authOidcName (1) `Kanidm`	string
config.authOidcRoleMappingExpr (1) `"admin" in roles ? "admin" : ("member" in roles ? "member" : "")`	string
config.authOidcRolesClaim (1) `kritika_role`	string
config.context[].description (1) `Repo layout, conventions and commit rules`	string
config.context[].path (1) `CLAUDE.md`	string
config.forgejo.forgejo.accounts[] (1) `- gabrielcosi`	string
config.forgejo.forgejo.audience.env (1) `KRITIKA_FORGEJO_AUDIENCE`	string
config.forgejo.forgejo.bots[] (1) `- bot-owl`	string
config.forgejo.forgejo.host (1) `git.xcd.dev`	string
config.forgejo.forgejo.privateKey.env (1) `KRITIKA_FORGEJO_PRIVATE_KEY`	string
config.forgejo.forgejo.runnerAudience.env (1) `KRITIKA_FORGEJO_RUNNER_AUDIENCE`	string
config.forgejo.forgejo.webhookSecret.env (1) `KRITIKA_FORGEJO_WEBHOOK_SECRET`	string
config.indexGrace (1) `1h`	string
config.reviewWorkers (1) `1`	number
config.rules[].id (1) `renovate vllm-nightly`	string
config.rules[].rule (1) This is a Renovate dependency update. Read what changed from the release notes in the PR body, or from upstream's release notes or compare view with gh (one call per release, never the releases list). Then use rg to see how this repository uses the package, including the comments in those files, and report each breaking change, deprecation, rename or changed default that affects it, and any version it must stay in lockstep with. Start with a verdict, safe to merge or not, and name the sources you read. vLLM nightly bump for the gfx1201 Qwen3.8 stack (W4A16 AWQ, KV offload, hybrid GDN): config kubernetes/apps/ai/llmkube/models/qwen38-27b-vllm.yaml, import hook kubernetes/apps/ai/llmkube/models/resources/zz_lds_gate_impl.py. The body has digests only, so take the vllm-project/vllm main commits from 6 h before the previous vllm-openai-rocm PR was opened (gh pr list --state all --search 'vllm-openai-rocm in:title') to this PR's creation, and name that window. Query one path per call with gh api 'repos/vllm-project/vllm/commits?since=..&until=..&path=P', never the whole list: vllm/v1/attention, vllm/model_executor/kernels/linear/mixed_precision, vllm/v1/kv_offload, vllm/distributed/kv_transfer/kv_connector/v1/offloading, vllm/model_executor/layers/mamba, vllm/v1/core, vllm/v1/worker, vllm/platforms/rocm.py, vllm/config, docker/Dockerfile.rocm, docker/Dockerfile.rocm_base. Read the patch of each hit with gh api repos/vllm-project/vllm/commits/SHA; skip XPU, CUDA-only, DeepSeek, GLM and Kimi changes. Check each hit against every symbol the hook patches and every flag in the config: a moved symbol fails the boot, a new default can undo a flag. The hook also calls upstream functions and Triton kernels itself (kernel[grid](...), orig(...)): for each, diff the full parameter list at the previous and new commit and check the hook's call still binds. An added, removed or reordered parameter is a P1 finding, even if the hook's feature check passes. Any change to a file the hook patches is at least a P1 needs-clone-test finding. Also flag KV pool sizing or page size changes, Qwen3.5 or Qwen3-Next config imports, a ROCm base or torch bump, and anything that makes a hook patch redundant. Start with a verdict: nothing relevant, needs a clone test, or needs a hook change. Then list each relevant commit as sha, title, why it matters here, and what to measure (boot KV cache size, agreement, NLL and needle checks, prodshape). Never call it safe to roll untested.	string
config.rules[].when[].expr (1) `pr.headRef.startsWith("renovate/") pr.headRef == "renovate/vllm-vllm-openai-rocm-nightly"`	string
config.runnerRuntimeClass (1) `gvisor`	string
config.skills.scope.add-app-to-cluster.paths[] (1) `- kubernetes/apps/**`	string
config.skills.scope.backup-restore.paths[] (1) `- */backup - */restore - */kopia`	string
config.skills.scope.debug-cluster.paths[] (1) `- kubernetes/ - talos/`	string
config.skills.scope.k8s-at-home-research.paths[] (1) `- kubernetes/ - talos/`	string
config.skills.scope.prometheus-cluster-health.paths[] (1) `- /prometheusrule.yaml - /servicemonitor.yaml - */grafana`	string
database.app.existingSecret (12) `kritika-postgres-app`	string
database.app.role (2) `kritik_app`	string
database.app.key (1) `app-uri`	string
database.owner.existingSecret (12) `kritika-postgres-credentials`	string
database.owner.key (1) `owner-uri`	string
database.runner.existingSecret (12) `kritika-postgres-runner`	string
database.runner.role (2) `kritik_runner`	string
database.runner.key (1) `runner-uri`	string
monitoring.serviceMonitor.enabled (12) `true`	boolean
monitoring.dashboards.enabled (9) `true`	boolean
monitoring.dashboards.grafanaOperator.enabled (8) `true`	boolean
monitoring.dashboards.grafanaOperator.matchLabels.dashboards (6) `grafana`	string
monitoring.dashboards.grafanaOperator.matchLabels."grafana.internal/instance" (2) `grafana`	string
monitoring.dashboards.grafanaOperator.allowCrossNamespaceImport (1) `true`	boolean
monitoring.dashboards.grafanaOperator.folder (1) `ai`	string
monitoring.prometheusRule.enabled (9) `true`	boolean
networkPolicy.enabled (12) `true`	boolean
networkPolicy.egressPorts[] (10) `- "443" - "4000"`	number
networkPolicy.type (8) `cilium`	string
networkPolicy.postgres.podSelector."cnpg.io/cluster" (5) `postgres16`	string
networkPolicy.postgres.podSelector."cnpg.io/podRole" (1) `instance`	string
networkPolicy.postgres.namespace (4) `database`	string
networkPolicy.dns.namespace (1) `kube-system`	string
networkPolicy.dns.podSelector.k8s-app (1) `kube-dns`	string
networkPolicy.postgresPort (1) `5432`	number
httpRoute.enabled (11) `true`	boolean
httpRoute.hostnames[] (11) `- kritika.${SECRET_DOMAIN}`	string
httpRoute.parentRefs[].name (11) `envoy-external`	string
httpRoute.parentRefs[].namespace (11) `network`	string
httpRoute.parentRefs[].sectionName (3) `https`	string
httpRoute.annotations."gatus.home-operations.com/endpoint" (5) `conditions: ["[STATUS] == 200"] path: /api/v1/meta`	string
envFrom[].secretRef.name (10) `kritika-secret`	string
deploymentAnnotations."reloader.stakater.com/auto" (7) `true`	string
deploymentAnnotations."secret.reloader.stakater.com/auto" (2) `true`	string
replicas (7) `2`	number
runner.podTemplate.spec.resources.limits.memory (7) `2Gi`	string
runner.podTemplate.spec.resources.requests.cpu (7) `10m`	string
runner.podTemplate.spec.resources.requests.memory (7) `512Mi`	string
runner.podTemplate.spec.runtimeClassName (6) `gvisor`	string
runner.resources.limits.memory (3) `2Gi`	string
runner.resources.requests.cpu (3) `10m`	string
runner.resources.requests.memory (3) `512Mi`	string
runner.runtimeClass (2) `gvisor`	string
runner.deadline (1) `30m`	string
runner.tools[].image (1) `ghcr.io/home-operations/flate:0.6.5@sha256:e0e2d2de97539b3141977e8bb3bbb50ea5c5afe89477950e5fa972c9862478da`	string
runner.tools[].name (1) `flate`	string
resources.requests.cpu (6) `10m`	string
resources.requests.memory (6) `64Mi`	string
resources.limits.memory (4) `512Mi`	string
gatewayCache.enabled (3) `true`	boolean
gatewayCache.storage.bucket (1) `kritika-cache`	string
gatewayCache.storage.endpoint (1) `http://rook-ceph-rgw-ceph-objectstore.rook-ceph.svc`	string
gatewayCache.storage.existingSecret (1) `kritika-cache`	string
gatewayCache.storage.region (1) `us-east-1`	string
gatewayCache.storage.type (1) `s3`	string
configFile.agent.commands[] (2) `- gh - curl - fd - jq - rg - yq`	string
configFile.agent.steps (1) `100`	number
configFile.agent.tokens (1) `6000000`	number
configFile.apps.github.accounts[] (2) `- h-wb`	string
configFile.apps.github.privateKey.env (2) `GITHUB_APP_PRIVATE_KEY`	string
configFile.apps.github.webhookSecret.env (2) `GITHUB_APP_WEBHOOK_SECRET`	string
configFile.apps.github.clientId.env (1) `KRITIKA_GITHUB_CLIENT_ID`	string
configFile.apps.github.clientId (1) `Iv23liZw13NGq9jhSodg`	string
configFile.egress.allow[] (2) `- .githubusercontent.com - .github.io - artifacthub.io - ghcr.io - hub.docker.com - quay.io`	string
configFile.egress.deny[] (1) `- "10.0.0.0/8" - "172.16.0.0/12" - "192.168.0.0/16" - *.internal`	string
configFile.embedding.dims (2) `768`	number
configFile.embedding.maxBatch (2) `8`	number
configFile.embedding.maxItemChars (2) `5000`	number
configFile.embedding.model (2) `litellm/embed`	string
configFile.embedding.similarFloor (2) `0.7`	number
configFile.embedding.maxBatchChars (1) `16000`	number
configFile.providers.litellm.apiKey.env (2) `LITELLM_API_KEY`	string
configFile.providers.litellm.baseUrl (2) `http://litellm.llm.svc.cluster.local:4000/v1`	string
configFile.providers.litellm.retries (2) `2`	number
configFile.providers.litellm.type (2) `openai`	string
configFile.providers.bge.apiKey.env (1) `KRITIKA_BGE_API_KEY`	string
configFile.providers.bge.baseUrl (1) `http://bge-embedding-m3.ai.svc.cluster.local:8080/v1`	string
configFile.providers.bge.type (1) `openai`	string
configFile.review.model (2) `litellm/chatgpt/gpt-6-luna-max`	string
configFile.review.fallback (1) `litellm/opencode-go/kimi-k3`	string
configFile.trigger.exclude[].expr (2) `pr.lines > 2000`	string
configFile.trigger.exclude[].name (2) `too-large`	string
configFile.trigger.settle (1) `60s`	string
configFile.confidence.fallback (1) `litellm/minimax/MiniMax-M3`	string
configFile.confidence.model (1) `litellm/opencode-go/deepseek-v4.1-flash`	string
configFile.limits.concurrency (1) `2`	number
configFile.limits.reviewsPerDay (1) `40`	number
configFile.repositories.h-wb/home-ops.review.approve (1) `true`	boolean
configFile.repositories.h-wb/home-ops.rules[].id (1) `renovate-gate`	string
configFile.repositories.h-wb/home-ops.rules[].rule (1) This is a Renovate dependency update and your review decides whether it auto-merges. Do not judge it from the diff alone. Fetch the upstream release notes or changelog for every version between the old and the new one (use gh; follow a wrapper image or chart to the component it packages). Then read how this repository uses the package: its HelmRelease values, OCIRepository, overrides, CRDs, and any local code that hooks into it (for LiteLLM, kubernetes/apps/main/llm/litellm/app/patches). Report as blocking a breaking change, removal or required migration that affects something this repository configures, and a failed Konflate check. Report as important a deprecation of something used here, a changed default that alters behaviour here, or a change to internals a local patch depends on. If you could not find or read the release notes, report that as important rather than approving unverified. Begin the headline with "Safe to merge:" or "Not safe to merge:", and name the sources you read.	string
configFile.repositories.h-wb/home-ops.rules[].when[].expr (1) `pr.headRef.startsWith("renovate/")`	string
env.ADMIN_PASSWORD.valueFrom.secretKeyRef.key (2) `admin-password`	string
env.ADMIN_PASSWORD.valueFrom.secretKeyRef.name (2) `kritika-secret`	string
env.GITHUB_APP_PRIVATE_KEY.valueFrom.secretKeyRef.key (2) `github-private-key`	string
env.GITHUB_APP_PRIVATE_KEY.valueFrom.secretKeyRef.name (2) `kritika-secret`	string
env.GITHUB_APP_WEBHOOK_SECRET.valueFrom.secretKeyRef.key (2) `github-webhook-secret`	string
env.GITHUB_APP_WEBHOOK_SECRET.valueFrom.secretKeyRef.name (2) `kritika-secret`	string
env.OIDC_CLIENT_SECRET.valueFrom.secretKeyRef.key (2) `client-secret`	string
env.OIDC_CLIENT_SECRET.valueFrom.secretKeyRef.name (2) `kritika-oidc`	string
env.CLIPROXYAPI_API_KEY.valueFrom.secretKeyRef.key (1) `CLIPROXYAPI_API_KEY`	string
env.CLIPROXYAPI_API_KEY.valueFrom.secretKeyRef.name (1) `kritika-secret`	string
env.GITHUB_APP_CLIENT_ID.valueFrom.secretKeyRef.key (1) `GITHUB_APP_CLIENT_ID`	string
env.GITHUB_APP_CLIENT_ID.valueFrom.secretKeyRef.name (1) `kritika-secret`	string
env.LITELLM_API_KEY.valueFrom.secretKeyRef.key (1) `OPENAI_API_KEY`	string
env.LITELLM_API_KEY.valueFrom.secretKeyRef.name (1) `kritika-litellm-key`	string
env.LLM_API_KEY.valueFrom.secretKeyRef.key (1) `LLM_API_KEY`	string
env.LLM_API_KEY.valueFrom.secretKeyRef.name (1) `cluster-secrets`	string
env.OIDC_CLIENT_ID.valueFrom.secretKeyRef.key (1) `client-id`	string
env.OIDC_CLIENT_ID.valueFrom.secretKeyRef.name (1) `kritika-oidc`	string
env.OPENROUTER_API_KEY.valueFrom.secretKeyRef.key (1) `OPENROUTER_API_KEY`	string
env.OPENROUTER_API_KEY.valueFrom.secretKeyRef.name (1) `kritika-secret`	string
fullnameOverride (1) `kritika`	string
image.tag (1) `0.0.90`	string
podLabels."networking.home.arpa/egress-sso" (1) `true`	string
podLabels."networking.home.arpa/postgres-default-client" (1) `true`	string

Key

Types

config.webUrl (12)

https://kritika.${SECRET_DOMAIN}

string

config.apps.github.accounts[] (9)

- tanguille

string

config.apps.github.privateKey.env (9)

GITHUB_APP_PRIVATE_KEY

string

config.apps.github.webhookSecret.env (9)

GITHUB_APP_WEBHOOK_SECRET

string

config.apps.github.clientId.env (7)

KRITIKA_GITHUB_CLIENT_ID

string

config.apps.github.clientId (2)

Iv23liEpcPGN5z8KRBta

string

config.embedding.dims (9)

number

config.embedding.model (9)

openrouter/voyageai/voyage-code-4

string

config.embedding.documentPrompt (5)

Represent the document for retrieval:

string

config.embedding.queryPrompt (5)

Represent the query for retrieving supporting documents:

string

config.embedding.similarFloor (5)

0.3

number

config.embedding.maxBatchChars (2)

number

config.embedding.maxItemChars (1)

number

config.review.model (9)

openrouter/~openai/gpt-sol-latest

string

config.review.fallback (3)

openrouter/~anthropic/claude-opus-latest

string

config.review.agents[].categories[] (1)

- security

string

config.review.agents[].effort (1)

high

string

config.review.agents[].instructions (1)

Review the change as an application security engineer, following the security-audit skill in guidance mode only: never start its full audit workflow, write audit artifacts or run target code.
Report only findings with a concrete trust boundary, an affected principal or resource, and a reachable source path in this change. Treat anything you could not confirm from source as needing validation and say what would confirm it.
For infrastructure and GitOps changes, weigh exposed routes and LoadBalancers, NetworkPolicy gaps, privileged or root containers, host mounts, RBAC widening, secret handling and unpinned images or actions.

string

config.review.agents[].name (1)

security

string

config.review.agents[].skills.scope.security-audit.load (1)

true

boolean

config.review.approve (1)

true

boolean

config.review.diagram (1)

true

boolean

config.review.fixes (1)

true

boolean

config.auth.admin.password.env (7)

KRITIKA_AUTH_ADMIN_PASSWORD

string

config.auth.oidc.clientSecret.env (3)

OIDC_CLIENT_SECRET

string

config.auth.oidc.issuer (3)

https://sso.${S_HOMEPROD_DOMAIN}/application/o/kritika/

string

config.auth.oidc.name (3)

cranitchsso

string

config.auth.oidc.roleMappingExpr (3)

"service-admins" in roles ? "admin" : "member"

string

config.auth.oidc.rolesClaim (3)

groups

string

config.auth.oidc.clientId.env (2)

OIDC_CLIENT_ID

string

config.auth.oidc.clientId (1)

kritika

string

config.auth.oidc.scopes[] (2)

- openid
- email
- profile
- groups

string

config.confidence.model (7)

openrouter/~anthropic/claude-sonnet-latest

string

config.confidence.fallback (3)

llm/omniroute

string

config.confidence.risk (2)

high

string

config.confidence.threshold (2)

number

config.egress.allow[] (7)

- *

string

config.egress.deny[] (5)

- "10.0.0.0/8"
- "172.16.0.0/12"
- "192.168.0.0/16"
- *.internal

string

config.providers.openrouter.apiKey.env (6)

KRITIKA_OPENROUTER_API_KEY

string

config.providers.openrouter.type (6)

openrouter

string

config.providers.openrouter.retries (1)

number

config.providers.litellm.apiKey.env (2)

LITELLM_API_KEY

string

config.providers.litellm.baseUrl (2)

http://litellm.ai.svc.cluster.local:4000/v1

string

config.providers.litellm.type (2)

openai

string

config.providers.litellm.retries (1)

number

config.providers.anthropic.apiKey.env (1)

KRITIKA_ANTHROPIC_API_KEY

string

config.providers.anthropic.pricing.~sonnet-latest.cacheRead (1)

0.1

number

config.providers.anthropic.pricing.~sonnet-latest.cacheWrite (1)

2.5

number

config.providers.anthropic.pricing.~sonnet-latest.input (1)

number

config.providers.anthropic.pricing.~sonnet-latest.output (1)

number

config.providers.anthropic.type (1)

anthropic

string

config.providers.bifrost.apiKey.env (1)

KRITIKA_BIFROST_VK

string

config.providers.bifrost.baseUrl (1)

http://bifrost.ai.svc.cluster.local:8080/v1

string

config.providers.bifrost.headers.x-bf-eh-x-opencode-session (1)

{session}

string

config.providers.bifrost.type (1)

openai

string

config.providers.chatgpt.type (1)

chatgpt

string

config.providers.cliproxyapi.apiKey.env (1)

CLIPROXYAPI_API_KEY

string

config.providers.cliproxyapi.baseUrl (1)

http://cliproxyapi.ai.svc.cluster.local:8317/v1

string

config.providers.cliproxyapi.type (1)

openai

string

config.providers.llm.apiKey.env (1)

LLM_API_KEY

string

config.providers.llm.baseUrl (1)

http://agentgateway.ai.svc.cluster.local:4000/v1

string

config.providers.llm.type (1)

openai

string

config.providers.local.apiKey.env (1)

LOCAL_LLM_KEY

string

config.providers.local.baseUrl (1)

http://vllm.ai-system.svc.cluster.local:8000/v1

string

config.providers.local.pricing.qwen 3.8 - local.input (1)

number

config.providers.local.pricing.qwen 3.8 - local.output (1)

number

config.providers.local.type (1)

openai

string

config.providers.zai.apiKey.env (1)

ZAI_API_KEY

string

config.providers.zai.baseUrl (1)

https://api.z.ai/api/coding/paas/v4

string

config.providers.zai.pricing.glm-5.3-flash.input (1)

number

config.providers.zai.pricing.glm-5.3-flash.output (1)

number

config.providers.zai.type (1)

openai

string

config.trigger.exclude[].expr (6)

pr.fork

string

config.trigger.exclude[].name (6)

forks

string

config.agent.timeout (3)

90m

string

config.agent.tokens (2)

16000000

number

config.agent.parts (1)

number

config.agent.prompt (1)

number

config.ignore[] (2)

- **/*.out

string

config.authAdminPassword.valueFrom.secretKeyRef.key (1)

ADMIN_PASSWORD

string

config.authAdminPassword.valueFrom.secretKeyRef.name (1)

kritika-secret

string

config.authOidcClientId (1)

kritika

string

config.authOidcClientSecret.valueFrom.secretKeyRef.key (1)

client-secret

string

config.authOidcClientSecret.valueFrom.secretKeyRef.name (1)

kanidm-kritika-oidc

string

config.authOidcIssuer (1)

https://idm.${SECRET_DOMAIN}/oauth2/openid/kritika

string

config.authOidcName (1)

Kanidm

string

config.authOidcRoleMappingExpr (1)

"admin" in roles ? "admin" : ("member" in roles ? "member" : "")

string

config.authOidcRolesClaim (1)

kritika_role

string

config.context[].description (1)

Repo layout, conventions and commit rules

string

config.context[].path (1)

CLAUDE.md

string

config.forgejo.forgejo.accounts[] (1)

- gabrielcosi

string

config.forgejo.forgejo.audience.env (1)

KRITIKA_FORGEJO_AUDIENCE

string

config.forgejo.forgejo.bots[] (1)

- bot-owl

string

config.forgejo.forgejo.host (1)

git.xcd.dev

string

config.forgejo.forgejo.privateKey.env (1)

KRITIKA_FORGEJO_PRIVATE_KEY

string

config.forgejo.forgejo.runnerAudience.env (1)

KRITIKA_FORGEJO_RUNNER_AUDIENCE

string

config.forgejo.forgejo.webhookSecret.env (1)

KRITIKA_FORGEJO_WEBHOOK_SECRET

string

config.indexGrace (1)

1h

string

config.reviewWorkers (1)

number

config.rules[].id (1)

renovate
vllm-nightly

string

config.rules[].rule (1)

This is a Renovate dependency update. Read what changed from the release notes in the PR body, or from upstream's release notes or compare view with gh (one call per release, never the releases list). Then use rg to see how this repository uses the package, including the comments in those files, and report each breaking change, deprecation, rename or changed default that affects it, and any version it must stay in lockstep with. Start with a verdict, safe to merge or not, and name the sources you read.
vLLM nightly bump for the gfx1201 Qwen3.8 stack (W4A16 AWQ, KV offload, hybrid GDN): config kubernetes/apps/ai/llmkube/models/qwen38-27b-vllm.yaml, import hook kubernetes/apps/ai/llmkube/models/resources/zz_lds_gate_impl.py. The body has digests only, so take the vllm-project/vllm main commits from 6 h before the previous vllm-openai-rocm PR was opened (gh pr list --state all --search 'vllm-openai-rocm in:title') to this PR's creation, and name that window. Query one path per call with gh api 'repos/vllm-project/vllm/commits?since=..&until=..&path=P', never the whole list: vllm/v1/attention, vllm/model_executor/kernels/linear/mixed_precision, vllm/v1/kv_offload, vllm/distributed/kv_transfer/kv_connector/v1/offloading, vllm/model_executor/layers/mamba, vllm/v1/core, vllm/v1/worker, vllm/platforms/rocm.py, vllm/config, docker/Dockerfile.rocm, docker/Dockerfile.rocm_base. Read the patch of each hit with gh api repos/vllm-project/vllm/commits/SHA; skip XPU, CUDA-only, DeepSeek, GLM and Kimi changes. Check each hit against every symbol the hook patches and every flag in the config: a moved symbol fails the boot, a new default can undo a flag. The hook also calls upstream functions and Triton kernels itself (kernel[grid](...), orig(...)): for each, diff the full parameter list at the previous and new commit and check the hook's call still binds. An added, removed or reordered parameter is a P1 finding, even if the hook's feature check passes. Any change to a file the hook patches is at least a P1 needs-clone-test finding. Also flag KV pool sizing or page size changes, Qwen3.5 or Qwen3-Next config imports, a ROCm base or torch bump, and anything that makes a hook patch redundant. Start with a verdict: nothing relevant, needs a clone test, or needs a hook change. Then list each relevant commit as sha, title, why it matters here, and what to measure (boot KV cache size, agreement, NLL and needle checks, prodshape). Never call it safe to roll untested.

string

config.rules[].when[].expr (1)

pr.headRef.startsWith("renovate/")
pr.headRef == "renovate/vllm-vllm-openai-rocm-nightly"

string

config.runnerRuntimeClass (1)

gvisor

string

config.skills.scope.add-app-to-cluster.paths[] (1)

- kubernetes/apps/**

string

config.skills.scope.backup-restore.paths[] (1)

- **/backup*
- **/restore*
- **/kopia*

string

config.skills.scope.debug-cluster.paths[] (1)

- kubernetes/**
- talos/**

string

config.skills.scope.k8s-at-home-research.paths[] (1)

- kubernetes/**
- talos/**

string

config.skills.scope.prometheus-cluster-health.paths[] (1)

- **/prometheusrule.yaml
- **/servicemonitor.yaml
- **/grafana*

string

database.app.existingSecret (12)

kritika-postgres-app

string

database.app.role (2)

kritik_app

string

database.app.key (1)

app-uri

string

database.owner.existingSecret (12)

kritika-postgres-credentials

string

database.owner.key (1)

owner-uri

string

database.runner.existingSecret (12)

kritika-postgres-runner

string

database.runner.role (2)

kritik_runner

string

database.runner.key (1)

runner-uri

string

monitoring.serviceMonitor.enabled (12)

true

boolean

monitoring.dashboards.enabled (9)

true

boolean

monitoring.dashboards.grafanaOperator.enabled (8)

true

boolean

monitoring.dashboards.grafanaOperator.matchLabels.dashboards (6)

grafana

string

monitoring.dashboards.grafanaOperator.matchLabels."grafana.internal/instance" (2)

grafana

string

monitoring.dashboards.grafanaOperator.allowCrossNamespaceImport (1)

true

boolean

monitoring.dashboards.grafanaOperator.folder (1)

ai

string

monitoring.prometheusRule.enabled (9)

true

boolean

networkPolicy.enabled (12)

true

boolean

networkPolicy.egressPorts[] (10)

- "443"
- "4000"

number

networkPolicy.type (8)

cilium

string

networkPolicy.postgres.podSelector."cnpg.io/cluster" (5)

postgres16

string

networkPolicy.postgres.podSelector."cnpg.io/podRole" (1)

instance

string

networkPolicy.postgres.namespace (4)

database

string

networkPolicy.dns.namespace (1)

kube-system

string

networkPolicy.dns.podSelector.k8s-app (1)

kube-dns

string

networkPolicy.postgresPort (1)

number

httpRoute.enabled (11)

true

boolean

httpRoute.hostnames[] (11)

- kritika.${SECRET_DOMAIN}

string

httpRoute.parentRefs[].name (11)

envoy-external

string

httpRoute.parentRefs[].namespace (11)

network

string

httpRoute.parentRefs[].sectionName (3)

https

string

httpRoute.annotations."gatus.home-operations.com/endpoint" (5)

conditions: ["[STATUS] == 200"]
path: /api/v1/meta

string

envFrom[].secretRef.name (10)

kritika-secret

string

deploymentAnnotations."reloader.stakater.com/auto" (7)

true

string

deploymentAnnotations."secret.reloader.stakater.com/auto" (2)

true

string

replicas (7)

number

runner.podTemplate.spec.resources.limits.memory (7)

2Gi

string

runner.podTemplate.spec.resources.requests.cpu (7)

10m

string

runner.podTemplate.spec.resources.requests.memory (7)

512Mi

string

runner.podTemplate.spec.runtimeClassName (6)

gvisor

string

runner.resources.limits.memory (3)

2Gi

string

runner.resources.requests.cpu (3)

10m

string

runner.resources.requests.memory (3)

512Mi

string

runner.runtimeClass (2)

gvisor

string

runner.deadline (1)

30m

string

runner.tools[].image (1)

ghcr.io/home-operations/flate:0.6.5@sha256:e0e2d2de97539b3141977e8bb3bbb50ea5c5afe89477950e5fa972c9862478da

string

runner.tools[].name (1)

flate

string

resources.requests.cpu (6)

10m

string

resources.requests.memory (6)

64Mi

string

resources.limits.memory (4)

512Mi

string

gatewayCache.enabled (3)

true

boolean

gatewayCache.storage.bucket (1)

kritika-cache

string

gatewayCache.storage.endpoint (1)

http://rook-ceph-rgw-ceph-objectstore.rook-ceph.svc

string

gatewayCache.storage.existingSecret (1)

kritika-cache

string

gatewayCache.storage.region (1)

us-east-1

string

gatewayCache.storage.type (1)

s3

string

configFile.agent.commands[] (2)

- gh
- curl
- fd
- jq
- rg
- yq

string

configFile.agent.steps (1)

number

configFile.agent.tokens (1)

number

configFile.apps.github.accounts[] (2)

- h-wb

string

configFile.apps.github.privateKey.env (2)

GITHUB_APP_PRIVATE_KEY

string

configFile.apps.github.webhookSecret.env (2)

GITHUB_APP_WEBHOOK_SECRET

string

configFile.apps.github.clientId.env (1)

KRITIKA_GITHUB_CLIENT_ID

string

configFile.apps.github.clientId (1)

Iv23liZw13NGq9jhSodg

string

configFile.egress.allow[] (2)

- *.githubusercontent.com
- *.github.io
- artifacthub.io
- ghcr.io
- hub.docker.com
- quay.io

string

configFile.egress.deny[] (1)

- "10.0.0.0/8"
- "172.16.0.0/12"
- "192.168.0.0/16"
- *.internal

string

configFile.embedding.dims (2)

number

configFile.embedding.maxBatch (2)

number

configFile.embedding.maxItemChars (2)

number

configFile.embedding.model (2)

litellm/embed

string

configFile.embedding.similarFloor (2)

0.7

number

configFile.embedding.maxBatchChars (1)

number

configFile.providers.litellm.apiKey.env (2)

LITELLM_API_KEY

string

configFile.providers.litellm.baseUrl (2)

http://litellm.llm.svc.cluster.local:4000/v1

string

configFile.providers.litellm.retries (2)

number

configFile.providers.litellm.type (2)

openai

string

configFile.providers.bge.apiKey.env (1)

KRITIKA_BGE_API_KEY

string

configFile.providers.bge.baseUrl (1)

http://bge-embedding-m3.ai.svc.cluster.local:8080/v1

string

configFile.providers.bge.type (1)

openai

string

configFile.review.model (2)

litellm/chatgpt/gpt-6-luna-max

string

configFile.review.fallback (1)

litellm/opencode-go/kimi-k3

string

configFile.trigger.exclude[].expr (2)

pr.lines > 2000

string

configFile.trigger.exclude[].name (2)

too-large

string

configFile.trigger.settle (1)

60s

string

configFile.confidence.fallback (1)

litellm/minimax/MiniMax-M3

string

configFile.confidence.model (1)

litellm/opencode-go/deepseek-v4.1-flash

string

configFile.limits.concurrency (1)

number

configFile.limits.reviewsPerDay (1)

number

configFile.repositories.h-wb/home-ops.review.approve (1)

true

boolean

configFile.repositories.h-wb/home-ops.rules[].id (1)

renovate-gate

string

configFile.repositories.h-wb/home-ops.rules[].rule (1)

This is a Renovate dependency update and your review decides whether it auto-merges. Do not judge it from the diff alone. Fetch the upstream release notes or changelog for every version between the old and the new one (use gh; follow a wrapper image or chart to the component it packages). Then read how this repository uses the package: its HelmRelease values, OCIRepository, overrides, CRDs, and any local code that hooks into it (for LiteLLM, kubernetes/apps/main/llm/litellm/app/patches). Report as blocking a breaking change, removal or required migration that affects something this repository configures, and a failed Konflate check. Report as important a deprecation of something used here, a changed default that alters behaviour here, or a change to internals a local patch depends on. If you could not find or read the release notes, report that as important rather than approving unverified. Begin the headline with "Safe to merge:" or "Not safe to merge:", and name the sources you read.

string

configFile.repositories.h-wb/home-ops.rules[].when[].expr (1)