Skip to content

MAF-21397: chore(deploy)!: remove the moai-inference-framework chart - #192

Merged
hhk7734 merged 2 commits into
mainfrom
MAF-21397-ecr-token-refresher
Oct 13, 2026
Merged

hhk7734 merged 2 commits into
mainfrom
MAF-21397-ecr-token-refresher

Conversation

@hhk7734

@hhk7734 hhk7734 commented Oct 13, 2026 •

Copy link
Copy Markdown
Member

Summary

MAF-21397. After #191 the moai-inference-framework chart only shipped the ECR token refresher and kubernetes-replicator. This PR removes the chart. Prerequisites now only states that Moreh provides AWS IAM credentials and that the images can be pulled with them. How a cluster turns those credentials into image pulls (a pull secret refresher, a Harbor proxy cache, and so on) is left to the operator.

Changes

  • Chart and CI: delete deploy/ and the chart's deploy/helm/AGENTS.md, the cd-mif-{dev,stage,prod} workflows, the release-chart action, the pr-checker workflow (it only ran helm-docs), the Makefile, and helm-docs from .tool-versions.
  • Prerequisites:
    • Replace the moai-inference-framework section with a short Container image access section: the private ECR repository, and the AWS IAM credentials Moreh provides to pull from it.
    • Move helm repo add moreh into the Odin section and add --create-namespace to odin-crd, since the chart no longer creates the mif namespace first.
  • Other docs:
    • Quickstart and Harbor guide: point at the new section.
    • Harbor guide: drop the "Disable ECR token refresher" step.
    • Latest release: drop the hand-maintained MIF Helm charts table. The framework-bundled-versions auto-generated block stays (see follow-up).
  • Agent rules and skills:
    • AGENTS.md, website/AGENTS.md: drop the Helm Charts references.
    • guide-odin: describe the standalone moreh/odin chart with top-level values.
    • guide-heimdall: update the install order.
    • Release skill: a tag no longer publishes a chart.

Breaking change

The chart is no longer published. Existing installs keep running, but nothing upgrades them. Before you helm uninstall the release, set up another way to pull with the AWS IAM credentials. Once the release is gone, its refresher no longer renews the moreh-registry secret, and the token expires within 12 hours.

Follow-up

MAF-21406 covers the docs that still assume the chart:

Test plan

  • cd website && npm run build: no broken links or anchors.
  • Checked the guide-odin values keys against the published odin v0.13.0 chart.

🤖 Generated with Claude Code

The chart only shipped the ECR token refresher and kubernetes-replicator
after the observability stack and NFD moved out. Clusters that pull from
ECR now apply a standalone refresher manifest instead. It writes the
moreh-registry pull secret to its own namespace and to every namespace
labeled mif=enabled, so the replicator is no longer needed.

Remove the chart, its publish and CD workflows, the helm-docs check, and
the Makefile. Document the standalone refresher in Prerequisites and drop
the chart from the docs, agent rules, and release skill. Observability
and NFD docs that still assume the chart are left for MAF-21406.

BREAKING CHANGE: the moai-inference-framework chart is no longer
published. Apply the ECR token refresher from Prerequisites, then
uninstall the release. Clusters that pull through Harbor only need the
uninstall.

Refs: MAF-21397

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014UXJtxnZmGp1KRx5ZtL9L7
@hhk7734
hhk7734 requested a review from a team as a code owner October 13, 2026 04:08
Copilot AI balanced review requested due to automatic review settings October 13, 2026 04:08

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The privileged refresher uses a mutable third-party image, and several changed documentation paths remain incorrect for Harbor and logging users.

3 open findings
What changed in this PR

Removes the retired umbrella Helm chart and replaces its registry authentication component with a standalone ECR token refresher.

Changes:

  • Deletes the chart, publishing workflows, and Helm tooling.
  • Adds standalone ECR secret refresh instructions and updates installation documentation.
  • Updates operator skills and release guidance for independently published charts.
File Description
website/​docs/​operations/​monitoring/​logs/​index.mdx Updates the removed prerequisite anchor.
website/​docs/​operations/​latest-release.mdx Removes the framework chart table.
website/​docs/​operations/​container-image-caching-with-harbor/​index.mdx Documents refresher removal for Harbor.
website/​docs/​getting-started/​quickstart.mdx Updates pull-secret propagation guidance.
website/​docs/​getting-started/​prerequisites.mdx Adds the standalone ECR refresher manifest.
website/​AGENTS.md Updates documentation examples and chart rules.
skills/​guide-odin/​SKILL.md Documents standalone Odin values.
skills/​guide-heimdall/​SKILL.md Updates installation ordering.
Makefile Removes chart maintenance targets.
deploy/​helm/​moai-inference-framework/​values.yaml Removes chart values.
deploy/​helm/​moai-inference-framework/​templates/​ecr-token-refresher/​serviceaccount.helm.yaml Removes refresher service accounts.
deploy/​helm/​moai-inference-framework/​templates/​ecr-token-refresher/​secret.helm.yaml Removes credential Secret templates.
deploy/​helm/​moai-inference-framework/​templates/​ecr-token-refresher/​rolebinding.helm.yaml Removes RoleBindings.
deploy/​helm/​moai-inference-framework/​templates/​ecr-token-refresher/​role.helm.yaml Removes Roles.
deploy/​helm/​moai-inference-framework/​templates/​ecr-token-refresher/​job.helm.yaml Removes the initialization Job.
deploy/​helm/​moai-inference-framework/​templates/​ecr-token-refresher/​cronjob.helm.yaml Removes the refresher CronJob.
deploy/​helm/​moai-inference-framework/​templates/​ecr-token-refresher/​_helpers.tpl Removes refresher helpers.
deploy/​helm/​moai-inference-framework/​templates/​_helpers.tpl Removes chart helpers.
deploy/​helm/​moai-inference-framework/​README.md.gotmpl Removes the README template.
deploy/​helm/​moai-inference-framework/​README.md Removes generated chart documentation.
deploy/​helm/​moai-inference-framework/​Chart.yaml Removes chart metadata.
deploy/​helm/​moai-inference-framework/​Chart.lock Removes locked dependencies.
deploy/​helm/​moai-inference-framework/​.helmignore Removes chart ignore rules.
deploy/​helm/​AGENTS.md Removes obsolete chart guidance.
AGENTS.md Removes references to chart guidance.
.tool-versions Removes helm-docs.
.github/​workflows/​release-chart/​action.yaml Removes the chart publishing action.
.github/​workflows/​pr-checker.yaml Removes chart documentation validation.
.github/​workflows/​cd-mif-stage.yaml Removes release-candidate chart publishing.
.github/​workflows/​cd-mif-prod.yaml Removes production chart publishing.
.github/​workflows/​cd-mif-dev.yaml Removes development chart publishing.
.agents/​skills/​release/​SKILL.md Updates release procedures after chart removal.

🧠 Review effort: Balanced


💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread website/docs/getting-started/prerequisites.mdx Outdated
Comment thread website/docs/getting-started/quickstart.mdx Outdated
Comment thread website/docs/operations/monitoring/logs/index.mdx
…l the images

Drop the ECR token refresher manifest and its steps from Prerequisites.
The section now only says that Moreh provides AWS IAM credentials and
that the images can be pulled with them. Point Quickstart and the Harbor
guide at the renamed section and drop the refresher removal step.

Refs: MAF-21397

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014UXJtxnZmGp1KRx5ZtL9L7

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The refresher grants cluster-wide Secret creation, and the quickstart incorrectly describes Harbor requirements.

4 open findings

🧠 Review effort: Balanced

Comment thread website/docs/getting-started/prerequisites.mdx Outdated
Copilot AI balanced review requested due to automatic review settings October 13, 2026 04:17

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The promised standalone ECR refresher instructions are absent, leaving direct-ECR installations unable to create the required pull secret.

3 open findings
2 resolved since last review

🧠 Review effort: Balanced

Comment thread website/docs/getting-started/prerequisites.mdx
@hhk7734
hhk7734 merged commit 0b51bc1 into main Oct 13, 2026
5 of 6 checks passed
@hhk7734
hhk7734 deleted the MAF-21397-ecr-token-refresher branch October 13, 2026 04:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants