From 64ef8c621bf8770cac6bacde33476cd8d3f816ae Mon Sep 17 00:00:00 2001
From: shobham <shobham@nvidia.com>
Date: Wed, 30 Sep 2026 14:29:01 +0530
Subject: [PATCH 1/2] feat(self-managed): bump chart pins to the HA-enabled
 releases

Pin the charts released from #2052 so the stack's PodDisruptionBudget, zone spread and rollout strategy values take effect. The previously pinned charts ignored them.

Signed-off-by: shobham <shobham@nvidia.com>
---
 .../helmfile.d/01-dependencies.yaml.gotmpl    |  2 +-
 .../helmfile.d/02-core.yaml.gotmpl            | 26 +++++++++----------
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/deploy/stacks/self-managed/helmfile.d/01-dependencies.yaml.gotmpl b/deploy/stacks/self-managed/helmfile.d/01-dependencies.yaml.gotmpl
index c2a693d724..4265f0f5e6 100644
--- a/deploy/stacks/self-managed/helmfile.d/01-dependencies.yaml.gotmpl
+++ b/deploy/stacks/self-managed/helmfile.d/01-dependencies.yaml.gotmpl
@@ -167,7 +167,7 @@ releases:
 {{- end }}
 
   - name: cassandra
-    version: 0.21.3
+    version: 0.22.0
     condition: cassandra.enabled # From defaults.yaml or env overrides
     namespace: cassandra-system
     <<: *dependency # Inherits base values from the dependency template
diff --git a/deploy/stacks/self-managed/helmfile.d/02-core.yaml.gotmpl b/deploy/stacks/self-managed/helmfile.d/02-core.yaml.gotmpl
index 238c0ade99..716f5c5b3e 100644
--- a/deploy/stacks/self-managed/helmfile.d/02-core.yaml.gotmpl
+++ b/deploy/stacks/self-managed/helmfile.d/02-core.yaml.gotmpl
@@ -60,20 +60,20 @@ releases:
 
   # --- NVCF Services ---
   - name: api-keys
-    version: 1.8.0
+    version: 1.9.0
     namespace: api-keys
     inherit:
       - template: service
 
   - name: sis
-    version: 2.4.0
+    version: 2.5.0
     namespace: sis
     inherit:
       - template: service
     condition: icms.enabled
 
   - name: api
-    version: 1.27.1
+    version: 1.28.0
     namespace: nvcf
     inherit:
       - template: service
@@ -94,7 +94,7 @@ releases:
       - nvcf/reval
 
   - name: nvct-api
-    version: 1.6.0
+    version: 1.7.0
     namespace: nvcf
     inherit:
       - template: service
@@ -114,7 +114,7 @@ releases:
       - nvcf/api
 
   - name: invocation-service
-    version: 1.6.1
+    version: 1.7.0
     namespace: nvcf
     inherit:
       - template: service
@@ -122,7 +122,7 @@ releases:
       - nvcf/api
 
   - name: grpc-proxy
-    version: 1.7.4
+    version: 1.8.0
     namespace: nvcf
     inherit:
       - template: service
@@ -131,7 +131,7 @@ releases:
 
   - name: ratelimiter
     chart: nvcf/helm-nvcf-rate-limiter
-    version: 1.2.1
+    version: 1.3.0
     namespace: nvcf
     condition: rateLimiter.enabled
     values:
@@ -142,20 +142,20 @@ releases:
       - nvcf/api
 
   - name: ess-api
-    version: 1.8.2
+    version: 1.9.0
     namespace: ess
     inherit:
       - template: service
 
   - name: notary-service
-    version: 1.6.0
+    version: 1.7.0
     namespace: nvcf
     inherit:
       - template: service
 
   - name: admin-issuer-proxy
     chart: nvcf/helm-admin-token-issuer-proxy
-    version: 1.5.3
+    version: 1.6.0
     namespace: api-keys
     values:
       - ../global.yaml.gotmpl
@@ -187,7 +187,7 @@ releases:
 
   - name: reval
     chart: nvcf/helm-reval
-    version: 1.4.1
+    version: 1.5.0
     namespace: nvcf
     values:
       - ../global.yaml.gotmpl
@@ -196,7 +196,7 @@ releases:
 
   - name: nats-auth-callout-service
     chart: nvcf/helm-nvcf-nats-auth-callout-service
-    version: 1.2.1
+    version: 1.3.0
     namespace: nats-system
     values:
       - ../global.yaml.gotmpl
@@ -245,7 +245,7 @@ releases:
 
   - name: llm-api-gateway
     chart: nvcf/helm-nvcf-llm-api-gateway
-    version: 1.4.3
+    version: 1.5.0
     namespace: nvcf
     condition: addons.llm.enabled
     values:

From 68c16da88a8efad746842af56bfe9477f9d80846 Mon Sep 17 00:00:00 2001
From: shobham <shobham@nvidia.com>
Date: Wed, 30 Sep 2026 14:44:42 +0530
Subject: [PATCH 2/2] fix(icms): run icms 0.8.3 in the sis chart

0.8.3 includes #2175, which creates the NVCA NATS streams with the HA replica count.

Signed-off-by: shobham <shobham@nvidia.com>
---
 deploy/helm/icms/icms-api/Chart.yaml  | 2 +-
 deploy/helm/icms/icms-api/values.yaml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/deploy/helm/icms/icms-api/Chart.yaml b/deploy/helm/icms/icms-api/Chart.yaml
index 6d73101ec4..d39405cb1a 100644
--- a/deploy/helm/icms/icms-api/Chart.yaml
+++ b/deploy/helm/icms/icms-api/Chart.yaml
@@ -19,4 +19,4 @@ description: A Helm chart for Spot Instance Service (SIS) deployment
 
 type: application
 version: 0.0.0 # set by CI. found in git tags.
-appVersion: "0.7.2"
+appVersion: "0.8.3"
diff --git a/deploy/helm/icms/icms-api/values.yaml b/deploy/helm/icms/icms-api/values.yaml
index 707ad2b64b..d46e56beba 100644
--- a/deploy/helm/icms/icms-api/values.yaml
+++ b/deploy/helm/icms/icms-api/values.yaml
@@ -72,7 +72,7 @@ sis:
     pullPolicy: IfNotPresent
     # Pin the runtime image tag because the chart release pipeline rewrites
     # Chart.appVersion to the chart version.
-    tag: "0.7.2"
+    tag: "0.8.3"
     # Optional immutable manifest digest. When set, this takes precedence over
     # `tag` and `Chart.AppVersion`.
     digest: ""