Repository navigation
feat(api): type the vLLM tool-call and reasoning parsers and admit GLM on SGLang - #2168
Merged
Defilan merged 9 commits intoOct 23, 2026
Conversation
…e GLM ones on SGLang Fixes defilantech#2119 vllmConfig had no parser fields, so a vLLM service set them through extraArgs, where leaving out --enable-auto-tool-choice makes the parser inert and any request with tool_choice: auto fails: "auto" tool choice requires --enable-auto-tool-choice and --tool-call-parser to be set. toolCallParser now emits the parser together with --enable-auto-tool-choice, and reasoningParser emits --reasoning-parser alone, since vLLM has no paired flag for it. Both are free strings: vLLM registers parsers every release (43 at v0.25.1, 58 on main), so an enum would turn every new parser into an operator release. Each flag is skipped independently when spec.extraArgs already sets it. The SGLang enums now admit glm, glm45 and glm47 for tool calls and glm45 for reasoning. glm47 is absent from the reasoning enum on purpose: SGLang v0.5.15 has no glm47 reasoning detector, and --reasoning-parser rejects a value outside its choices at startup. Decisions: - Does toolCallParser emit --enable-auto-tool-choice? Yes, always with the parser. Source: issue body and triage; vLLM ParserManager.get_tool_parser returns None when enable_auto_tools is False. Pinned by TestVLLMBuildArgs and the envtest vllm spec. - Are the vLLM fields enums? No, free strings with documented examples. Source: triage bullet 1; vLLM registers 58 parsers on main against 43 at the pinned v0.25.1. Pinned by the round-trip test carrying arbitrary names. - A --tool-call-parser already in extraArgs: the typed parser is suppressed, --enable-auto-tool-choice is still emitted (independent guards). Source: triage bullet 3. Pinned by TestVLLMBuildArgs rows for the separate and inline forms, both asserting exactly once. - A --enable-auto-tool-choice already in extraArgs: not emitted twice. Pinned by its own row. - A --reasoning-parser already in extraArgs: the typed value is suppressed. Pinned by its own row. - Does the reasoning parser need a paired flag? No, vLLM has none. Pinned by the row asserting no --enable-auto-tool-choice. - Arg order: typed flags in struct-declaration order, extraArgs last, as base did. Pinned by TestVLLMBuildArgsDeterministic, which asserts the tool parser precedes the reasoning parser. - SGLang tool enum gains glm, glm45, glm47. Source: ToolCallParserEnum at tag v0.5.15.post1, the pinned image. Pinned by the sglang envtest spec. - SGLang reasoning enum gains glm45 only. Source: ReasoningParser.DetectorMap at v0.5.15.post1 has glm45 and no glm47; server_args.py validates choices. Pinned by the parity spec that still rejects glm47. - Existing SGLang enum values SGLang rejects (qwen3, functionary): kept. Source: triage requires additive; removing them breaks existing CRs. Unchanged, covered by the nil and empty config parity specs. - auto as an SGLang parser value: not added. Source: server_args.py:6152,6162 at v0.5.15.post1 admit "auto" for both flags, so it is valid upstream but unrequested; adding it is outside the additive scope the triage set. Recorded as a declined option, not a nonexistent one. - metal-agent runtime-arg parity: not applicable, no pkg/agent code reads VLLMConfig and the swift wrapper auto-detects the parser. Behavior changes only for: specs that set spec.vllmConfig.toolCallParser or spec.vllmConfig.reasoningParser; specs whose spec.sglangConfig.toolCallParser is glm, glm45 or glm47; specs whose spec.sglangConfig.reasoningParser is glm45. Signed-off-by: Christopher Maher <chris@mahercode.io>
The comments said 43 tool parsers at v0.25.1 and 58 on main. The pinned release registers 42 tool parsers and 41 reasoning parsers; both gates counted independently of each other and agreed. The comments now cite the pinned release rather than a moving branch, so the numbers cannot drift silently again. Settled: the gate's question about the "invalid reasoning parser" wording is answered by the oracle, not by a comment change. At v0.25.1 vllm/engine/arg_utils.py:2291-2293 copies --reasoning-parser into structured_outputs_config before api_server.py:536-551 validates it, so a name outside the registry does abort startup. The wording stands. Signed-off-by: Christopher Maher <chris@mahercode.io>
Review round 2. Round 1 replaced one uncited count with two wrong ones. Recounting the tag directly gives 43 tool parsers and 27 reasoning parsers at v0.25.1; the earlier counts came from a line-shape grep that missed entries whose name is not the start of the dict key line. A count in a user-facing comment has now been wrong in both directions, so the docs name the registry file a reader can check at their own image tag instead of stating a number. The operator-facing contract, that the value must be in the image's registry or the server refuses to start, is unchanged. Settled: the first commit's Decisions entry cited "58 parsers on main against 43 at the pinned v0.25.1". Both figures were uncited, and the free-string decision does not depend on either: it rests on the registry growing with every model family, which the docs now point at directly. The line stands as historical record and no longer appears in the docs. Settled: the new TestVLLMBuildArgs row pins the inline --enable-auto-tool-choice=true form, which hasMatchingExtraArg already matched and no row covered. Reverting the guard fails both the bare and the inline row. Settled: the gate's open question about whether the metal-agent can run runtime: vllm at all is out of scope for this branch. The ledger says no pkg/agent code reads VLLMConfig, and vllm-swift auto-detects its parser (executor_vllm_swift.go:213-221). If that changes, the AGENTS.md parity rule applies to the new field and to nothing in this change. Signed-off-by: Christopher Maher <chris@mahercode.io>
Review round 3. The GLM comment said SGLang rewrites a passed glm45 to glm, implying glm45 is not a registered value. It is, on its own key, and both keys select the same detector; the rewrite is an extra deprecation path on top of that. function_call_parser.py:67-69 at v0.5.15.post1 registers glm and glm45 against Glm4MoeDetector and glm47 against Glm47MoeDetector, and server_args.py:2960-2965 logs the warning and rewrites glm45. The comment now says both, so a reader knows either spelling works and why. No behavior change: the enum already admitted both values before this commit and still does. Settled: the "invalid tool call parser" and "invalid reasoning parser" quotations were checked against api_server.py:536-551 at v0.25.1, where validate_api_server_args raises exactly those KeyErrors. The nit that they could not be found stands on a grep that did not reach that block; the strings stay. Settled: the reviewer's premise that --enable-auto-tool-choice=true may not parse is wrong for v0.25.1. arg_utils.py:346-347 registers a bool field with argparse.BooleanOptionalAction, so both --flag and --flag=true are accepted. The test row's input class is real. Settled: the reviewer's request to add typed-field hints to the two lab pages is deferred, not declined. Those pages record measured configurations and sit outside the issue's scope; the multi-node guide already carries the typed example. Signed-off-by: Christopher Maher <chris@mahercode.io>
Review round 4. The glm comment named no release, while the neighbouring SGLang comments pin theirs. It now names v0.5.15.post1, the tag both enums were checked against, so the claim can be verified without guessing which image the text describes. No behavior change. Settled: the negative form --no-enable-auto-tool-choice in extraArgs is not matched by hasMatchingExtraArg, so the typed parser still emits the affirmative flag and extraArgs wins on position. Every boolean guard in the repo shares that limitation and the issue does not ask for it; recorded as a follow-up candidate rather than widened here. Signed-off-by: Christopher Maher <chris@mahercode.io>
Review round 5. The two Spark lab pages and their samples still taught the only way to get a parser into vLLM: --reasoning-parser, --tool-call-parser and --enable-auto-tool-choice in extraArgs. A reader copying them never learns the typed fields exist, and the one who derives the spec from them keeps reproducing the half-configured form the issue reports. The recorded specs are left exactly as measured; changing a spec that produced published numbers would make the page describe a run that did not happen. Each gains a note naming vllmConfig.reasoningParser and vllmConfig.toolCallParser, and that the second passes the auto-tool-choice flag itself. The guide's parser paragraph now names a GLM pair, since that is the case the fields were added for. Settled: the gate suggested editing the lab YAML in place. Declined for the two lab pages and both samples: they record measured runs (dated in their headers), so the pointer carries the migration without falsifying them. Settled: the gate's note that "suppressed" in appendToolCallParser could read as "overridden by position" is left as is. The comment says the typed parser is skipped when extraArgs already sets the flag, which is what the code does; ordering is described separately where extraArgs is appended. Signed-off-by: Christopher Maher <chris@mahercode.io>
Review round 7. Supersedes the round 6 commit, which stated the reason for its change wrongly: it said glm47 and glm45 resolve to the same implementation. They do not. At the pinned v0.25.1 glm47 maps to glm47_moe_tool_parser and glm45 to glm47_moe_reasoning_parser, two distinct modules in two distinct registries; what the pair does not show is two unrelated parsers, since both live in the GLM-4.7 MoE module family. The guide now gives both configurations: deepseek_v4 with glm45, which crosses the registries, and glm47 with glm45, the GLM pairing the fields were added for. The SGLang reasoning field now says its enum lists the values LLMKube supports rather than every key in SGLang's detector map, which also registers deepseek-v3, deepseek-v4 and qwen3-thinking, so a reader does not take it as a mirror. Settled: the both-suppressed TestVLLMBuildArgs row is carried forward unchanged: extraArgs carrying --tool-call-parser and --enable-auto-tool-choice with the typed field set, asserting the field contributes neither flag. Reverting either guard fails the row. Settled: the two sample comments name toolCallParser first, matching the field that passes --enable-auto-tool-choice. Signed-off-by: Christopher Maher <chris@mahercode.io>
Review round 8. The reasoning field said an unsupported value goes through spec.extraArgs. Following that with the typed field still set emits --reasoning-parser twice, because sglangAppendReasoningParser has no extraArgs guard while the vLLM appenders do. The comment now says to clear the field, which is what SGLang actually requires. The guide no longer pins a vLLM tag to call the image current, so the sentence does not go stale on the next DefaultImage bump. The both-suppressed row asserts the whole argv now, not just the absence of one string: "the typed field adds nothing" means a byte-for-byte match. Reverting the tool-call-parser guard fails it with the duplicate visible in the argv. Settled: the missing extraArgs guard on the SGLang appenders is not added here. It is pre-existing for the field's older values, it is outside the ledger's changed conditions, and adding it would change behavior for every existing SGLang spec rather than for the GLM values this branch admits. Recorded as a follow-up candidate. Signed-off-by: Christopher Maher <chris@mahercode.io>
Codecov Report✅ All modified and coverable lines are covered by tests. 📢 Thoughts on this report? Let us know! |
Defilan
commented
Oct 23, 2026
Defilan
left a comment
Member
Author
There was a problem hiding this comment.
Reviewed against the pinned engine sources. Good to merge after one doc fix.
Checked against upstream
- vLLM
v0.25.1(the default image):ParserManager.get_tool_parserreturnsNoneunless auto tool choice is on (vllm/parser/parser_manager.py:35), so pairing--enable-auto-tool-choicewithtoolCallParseris the right default.deepseek_v4,glm45,glm47andhermesare in both the tool and reasoning registries. - SGLang
v0.5.15.post1(CUDA image):ToolCallParserEnumhasglm,glm45andglm47;_handle_deprecated_argsrewritesglm45toglmwith a warning (server_args.py:2960);ReasoningParser.DetectorMaphasglm45and noglm47, and--reasoning-parservalidateschoicesat startup, so stopping the reasoning enum atglm45is correct. - SGLang
v0.5.15(ROCm image): same GLM entries in both maps.
Checked in the code
- Both fields are optional and omitted when empty, so existing InferenceServices render identical args and nothing rolls on upgrade.
- Multi-node renders every rank through
BuildArgs, headless workers included. The lab specs already pass the same flags to every rank throughextraArgs, so behavior matches what was measured. - Unit tests and the three new envtest specs pass locally. Deleting the auto-tool-choice append fails
TestVLLMBuildArgs.make manifests generate chart-crdsleaves no drift.
One fix
docs/site/guides/multi-node-inference.md uses toolCallParser: deepseek_v4 with reasoningParser: glm45 to show that the two names are chosen independently. It is accepted, but it pairs a GLM reasoning parser with a DeepSeek model, and someone will copy it. Suggest:
The two names come from separate registries and often differ: DeepSeek V4 uses
deepseek_v4for both, GLM usestoolCallParser: glm47withreasoningParser: glm45.
Fine to leave for later
- The two open items in the description. The
--no-enable-auto-tool-choicegap matches every other boolean guard. The duplicated SGLang flag is harmless in practice: both values pass argparsechoices, the last one wins, andextraArgslands last. - Not from this PR, but worth a follow-up issue: the SGLang tool enum still admits
qwen3andfunctionary, which the pinned image does not register. Because--tool-call-parservalidateschoicesat startup, a spec using either one crash-loops today. Dropping them from the enum would break stored objects, so an admission warning is probably the fix.
Review round 9. The guide showed toolCallParser: deepseek_v4 with reasoningParser: glm45 to make the point that the two names come from separate registries. Both are registered at the pinned image, so the spec renders, but it pairs a GLM reasoning parser with a DeepSeek model and a reader will copy it. The example now names two real pairings instead: DeepSeek V4 uses deepseek_v4 for both fields, and GLM uses glm47 with glm45, which is the case the fields were added for. Verified at v0.25.1: deepseek_v4 maps to deepseekv4_engine_tool_parser in the tool registry and deepseek_v4_engine_reasoning_parser in the reasoning registry, two different modules, so the example still shows the names varying independently while every value matches its model. Settled: the reviewer's two deferrals stay deferred. The negative --no-enable-auto-tool-choice form matches no boolean guard in the repo, and the duplicated SGLang flag is inert because both values pass choices and extraArgs lands last. The SGLang tool enum still admitting qwen3 and functionary is pre-existing; the reviewer suggested a follow-up issue for an admission warning, which is not filed from here. Signed-off-by: Christopher Maher <chris@mahercode.io>
Merged
hbjydev
pushed a commit
to hbjydev/phoebe
that referenced
this pull request
Oct 26, 2026
… 0.10.11) (#981) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [ghcr.io/defilantech/charts/llmkube](https://github.com/defilantech/LLMKube) | HelmChart | patch | `0.10.7` → `0.10.11` | --- ### Release Notes <details> <summary>defilantech/LLMKube (ghcr.io/defilantech/charts/llmkube)</summary> ### [`v0.10.11`](https://github.com/defilantech/LLMKube/blob/HEAD/CHANGELOG.md#01011-2026-10-25) [Compare Source](defilantech/LLMKube@v0.10.10...v0.10.11) ##### Features - **api:** accept fp8, float16 and bfloat16 in vllmConfig.kvCacheDtype ([#​2227](defilantech/LLMKube#2227)) ([31eb943](defilantech/LLMKube@31eb943)) - **api:** add spec.imagePullPolicy to InferenceService ([#​2208](defilantech/LLMKube#2208)) ([ec54d28](defilantech/LLMKube@ec54d28)) - **controller:** move the SGLang defaults to v0.5.22 and report removed attention backends ([#​2221](defilantech/LLMKube#2221)) ([33f9bb1](defilantech/LLMKube@33f9bb1)) - **controller:** move the vLLM default to v0.32.0 and check every flag against it ([#​2223](defilantech/LLMKube#2223)) ([0144a4c](defilantech/LLMKube@0144a4c)) - **controller:** run every llama.cpp default from one pinned build, b11854 ([#​2220](defilantech/LLMKube#2220)) ([052840e](defilantech/LLMKube@052840e)) - **router:** weigh LoadAware placement by estimated prefill tokens in flight ([#​2193](defilantech/LLMKube#2193)) ([a33735c](defilantech/LLMKube@a33735c)) ##### Bug Fixes - **controller:** render vllmConfig.speculative as --speculative-config ([#​2210](defilantech/LLMKube#2210)) ([191dcbd](defilantech/LLMKube@191dcbd)) - **controller:** report sglangConfig tool-call parsers SGLang does not register ([#​2228](defilantech/LLMKube#2228)) ([90fed2e](defilantech/LLMKube@90fed2e)) ### [`v0.10.10`](https://github.com/defilantech/LLMKube/blob/HEAD/CHANGELOG.md#01010-2026-10-24) [Compare Source](defilantech/LLMKube@v0.10.9...v0.10.10) ##### Features - **controller:** add --model-cache-prep to skip the root cache prep ([#​2206](defilantech/LLMKube#2206)) ([8bcb973](defilantech/LLMKube@8bcb973)) - **router:** compile dataPlane: AgentGateway to AgentgatewayModel ([#​2162](defilantech/LLMKube#2162)) ([26b1ef4](defilantech/LLMKube@26b1ef4)) ##### Bug Fixes - **controller:** report a prefetch as downloading while its downloader runs ([#​2207](defilantech/LLMKube#2207)) ([7699514](defilantech/LLMKube@7699514)) - **router:** let every waiter of a failed ModelPool swap see its outcome ([#​2203](defilantech/LLMKube#2203)) ([b95db62](defilantech/LLMKube@b95db62)) ### [`v0.10.9`](https://github.com/defilantech/LLMKube/blob/HEAD/CHANGELOG.md#0109-2026-10-23) [Compare Source](defilantech/LLMKube@v0.10.8...v0.10.9) ##### Features - **api:** affinity and topology spread for the router proxy, rolling without surge under hard placement ([#​2200](defilantech/LLMKube#2200)) ([3a61700](defilantech/LLMKube@3a61700)) - **router:** proxy the Anthropic Messages API like chat completions ([#​2201](defilantech/LLMKube#2201)) ([86223aa](defilantech/LLMKube@86223aa)) ##### Bug Fixes - **router:** retry stale keep-alive connections and quarantine a pod only after two failures ([#​2197](defilantech/LLMKube#2197)) ([b279053](defilantech/LLMKube@b279053)) ### [`v0.10.8`](https://github.com/defilantech/LLMKube/blob/HEAD/CHANGELOG.md#0108-2026-10-23) [Compare Source](defilantech/LLMKube@v0.10.7...v0.10.8) ##### Features - **api:** type the vLLM tool-call and reasoning parsers and admit GLM on SGLang ([#​2168](defilantech/LLMKube#2168)) ([fd64c72](defilantech/LLMKube@fd64c72)) - **controller:** add InferenceService spec.hubOffline for serving pods ([#​2188](defilantech/LLMKube#2188)) ([a911cb2](defilantech/LLMKube@a911cb2)) - **controller:** keep 3 old ReplicaSets for LLMKube-managed Deployments by default ([#​2182](defilantech/LLMKube#2182)) ([5e1722f](defilantech/LLMKube@5e1722f)) - **router:** honour endpoint nodePort and externalTrafficPolicy, add proxy runtimeClassName ([#​2183](defilantech/LLMKube#2183)) ([a8f9e57](defilantech/LLMKube@a8f9e57)) - **router:** on pools under 3 pods, move a session only when its pod is KV-full ([#​2192](defilantech/LLMKube#2192)) ([f9b934c](defilantech/LLMKube@f9b934c)) - **router:** remember LoadAware sessions and move them only under real pressure ([#​2180](defilantech/LLMKube#2180)) ([1e8ce5a](defilantech/LLMKube@1e8ce5a)) ##### Bug Fixes - **router:** answer a ModelPool swap past swapBudget with 503 and Retry-After ([#​2181](defilantech/LLMKube#2181)) ([7c0d84e](defilantech/LLMKube@7c0d84e)) - **router:** release request bodies once sent and raise the proxy's default memory limit ([#​2196](defilantech/LLMKube#2196)) ([140fd6b](defilantech/LLMKube@140fd6b)) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzguNSIsInVwZGF0ZWRJblZlciI6IjQ0LjE3OC41IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19--> Reviewed-on: https://git.hayden.moe/hayden/phoebe/pulls/981
eleboucher
pushed a commit
to eleboucher/homelab
that referenced
this pull request
Oct 31, 2026
…0.10.15) (#2331) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [ghcr.io/defilantech/charts/llmkube](https://github.com/defilantech/LLMKube) | HelmChart | patch | `0.10.2` → `0.10.15` | --- >⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/567) for more information. --- ### Release Notes <details> <summary>defilantech/LLMKube (ghcr.io/defilantech/charts/llmkube)</summary> ### [`v0.10.15`](https://github.com/defilantech/LLMKube/blob/HEAD/CHANGELOG.md#01015-2026-10-31) [Compare Source](defilantech/LLMKube@v0.10.14...v0.10.15) ##### Features - **agent:** add --engine-env-passthrough to pass named variables to Metal engines ([6d4fba0](defilantech/LLMKube@6d4fba0)) - **agent:** give Metal engines an allowlisted environment (fixes [#​2314](defilantech/LLMKube#2314)) ([6d4fba0](defilantech/LLMKube@6d4fba0)) - **foreman:** select the forge provider by name, remote host, or default ([#​2292](defilantech/LLMKube#2292)) ([239411a](defilantech/LLMKube@239411a)) - **foreman:** stream in-turn generation progress ([#​2313](defilantech/LLMKube#2313)) ([3d57743](defilantech/LLMKube@3d57743)) - **metal-agent:** read only marked Secrets through sourceSecretRef (fixes [#​1956](defilantech/LLMKube#1956)) ([eaecad3](defilantech/LLMKube@eaecad3)) - **metal:** limit the metal-agent's Service and EndpointSlice writes by admission policy ([#​2319](defilantech/LLMKube#2319)) ([a8ea5bf](defilantech/LLMKube@a8ea5bf)) - **release:** publish a Homebrew cask for the metal-agent ([#​2234](defilantech/LLMKube#2234)) ([1b29497](defilantech/LLMKube@1b29497)) - **router:** mirror requests to the other backends of a shadow rule (fixes [#​2327](defilantech/LLMKube#2327)) ([40266ab](defilantech/LLMKube@40266ab)) ##### Bug Fixes - **agent:** pin the exact powermetrics argument vector in sudoers ([d28c55f](defilantech/LLMKube@d28c55f)) - **controller:** treat a ModelPool resident removed from spec.members as gone ([#​2310](defilantech/LLMKube#2310)) ([87464ad](defilantech/LLMKube@87464ad)) - **foreman:** bound the Metal engine port read from the agent's EndpointSlice ([#​2321](defilantech/LLMKube#2321)) ([75837e3](defilantech/LLMKube@75837e3)) - **metal-agent:** re-check a refused InferenceService on a backoff (fixes [#​2329](defilantech/LLMKube#2329)) ([6f65b30](defilantech/LLMKube@6f65b30)) - **metal-agent:** re-issue an ingress certificate the Mac's clock no longer accepts ([7e7fbaa](defilantech/LLMKube@7e7fbaa)) - **metal-agent:** read sourceSecretRef from the Model's namespace ([eaecad3](defilantech/LLMKube@eaecad3)) - **metal-agent:** retry a start that hit a transient source Secret read error ([5e13d5c](defilantech/LLMKube@5e13d5c)) - **metal-agent:** retry a transient remote size probe failure without refusing (fixes [#​2326](defilantech/LLMKube#2326)) ([5e13d5c](defilantech/LLMKube@5e13d5c)) - **metal:** bind MetalNode Reachable to the Mac with a UID-named certificate (refs [#​2265](defilantech/LLMKube#2265)) ([7e7fbaa](defilantech/LLMKube@7e7fbaa)) - **metal:** expire a MetalNode Reachable result no check has renewed (refs [#​2265](defilantech/LLMKube#2265)) ([7e7fbaa](defilantech/LLMKube@7e7fbaa)) - **metal:** read MetalNode verifier finish times on the controller's clock (refs [#​2265](defilantech/LLMKube#2265)) ([7e7fbaa](defilantech/LLMKube@7e7fbaa)) - **metal:** trust only the reported certificate in the MetalNode dial-back ([7e7fbaa](defilantech/LLMKube@7e7fbaa)) - preserve Foreman audit and transcript records per attempt ([#​2311](defilantech/LLMKube#2311)) ([3e838f9](defilantech/LLMKube@3e838f9)) - **router:** dispatch only to backends with a rule's required capabilities (fixes [#​2328](defilantech/LLMKube#2328)) ([e533192](defilantech/LLMKube@e533192)) - **router:** honor the weighted rule strategy on the Proxy data plane (fixes [#​2325](defilantech/LLMKube#2325)) ([7b34a43](defilantech/LLMKube@7b34a43)) ##### Documentation - **macos:** explain why Login Items lists the agent as Defilan Technologies LLC ([#​2307](defilantech/LLMKube#2307)) ([5b5e17e](defilantech/LLMKube@5b5e17e)) - move Foreman stream guide before references ([#​2322](defilantech/LLMKube#2322)) ([d856cb1](defilantech/LLMKube@d856cb1)) - **upgrade:** a MetalNode is Reachable only when the Mac's metal-agent reports an ingress certificate naming its MetalNode. After upgrading the controller, every Mac shows Reachable=False with reason AgentUpgradeRequired, and its hostIP is cleared, until its metal-agent is upgraded too; upgrade the agents promptly. Nothing routes to hostIP yet, so serving is unaffected. The dial-back verifier image's curl must be 7.57 or later with a TLS library that accepts a self-signed certificate as its own trust anchor; the default curlimages/curl image does. ([7e7fbaa](defilantech/LLMKube@7e7fbaa)) - **upgrade:** Metal engines now inherit only PATH, HOME, USER, LOGNAME, TMPDIR, LANG, TZ, LC\_\*, HF_HOME and HF_HUB_CACHE from the agent's environment, plus the variables the agent sets for each runtime. If an engine relies on another variable from the agent's launchd environment (for example a GGML or MLX tuning variable, or proxy settings for llama-server's own `-hf` download), list it in `--engine-env-passthrough`. Engines adopted from a previous agent process keep their old environment until they restart; run `llmkube-metal-agent stop-engines` after the bootout to apply it at once. ([6d4fba0](defilantech/LLMKube@6d4fba0)) - **upgrade:** on the Proxy data plane, a ModelRouter rule with match.requiredCapabilities now sends requests only to the backends that advertise all of them, under every strategy. A primary-fallback rule no longer sends to, or falls back to, a backend that lacks them; when every capable backend fails, the request fails instead of landing on an incapable one. ([e533192](defilantech/LLMKube@e533192)) - **upgrade:** on the Proxy data plane, ModelRouter rules with strategy: shadow now send a copy of each request to the rule's other backends, including external ones, which bill those requests. A shadow rule with one backend now fails validation, and one that mirrors to a ModelPool member fails the compile and keeps the previous config. ([40266ab](defilantech/LLMKube@40266ab)) - **upgrade:** on the Proxy data plane, ModelRouter rules with strategy: weighted now split requests by backend weight instead of sending all of them to the first backend. weight: 0 drains a backend, matching the Gateway data plane. A weighted rule whose backends cannot take traffic now fails validation, and a weighted rule across two members of one ModelPool fails the compile and keeps the previous config. ([7b34a43](defilantech/LLMKube@7b34a43)) - **upgrade:** the Metal agent now reads a Model's spec.sourceSecretRef only when the Secret is labeled inference.llmkube.dev/model-source-credentials=true; otherwise the InferenceService is refused with SourceSecretNotAllowed. Before upgrading the agent, label each credentials Secret your Metal Models use: `kubectl label secret <name> -n <namespace> inference.llmkube.dev/model-source-credentials=true`. For one release, `--allow-unlabeled-source-secrets` keeps the old behavior with a warning; it is deprecated. A Hugging Face source whose Secret cannot be read is now refused instead of downloading anonymously. ([eaecad3](defilantech/LLMKube@eaecad3)) - **upgrade:** the powermetrics sudoers rule now names the exact command line the agent runs, with the sampling interval rendered in. Upgrading the agent does not change an installed /etc/sudoers.d/llmkube-powermetrics: on hosts that installed it, re-run `make install-powermetrics-sudo` (with `APPLE_POWER_INTERVAL_MS=<ms>` if the agent uses a non-default `--apple-power-interval`), then check with `sudo -ln | grep powermetrics` that the rule ends in `-i` followed by a number. ([d28c55f](defilantech/LLMKube@d28c55f)) ### [`v0.10.14`](https://github.com/defilantech/LLMKube/blob/HEAD/CHANGELOG.md#01014-2026-10-29) [Compare Source](defilantech/LLMKube@v0.10.13...v0.10.14) ##### Features - **cli:** send the endpoint API key from llmkube benchmark ([#​2297](defilantech/LLMKube#2297)) ([df2e008](defilantech/LLMKube@df2e008)) - **router:** add spec.proxy.drainTimeout for the router-proxy shutdown ([#​2304](defilantech/LLMKube#2304)) ([113e009](defilantech/LLMKube@113e009)) - **router:** opt-in client address and caller header on the audit log ([#​2288](defilantech/LLMKube#2288)) ([4d1faac](defilantech/LLMKube@4d1faac)) ##### Bug Fixes - **controller:** keep a ModelPool resident the router re-activates during a reclaim ([#​2290](defilantech/LLMKube#2290)) ([857daf2](defilantech/LLMKube@857daf2)) - **controller:** remove a key dropped from podLabels or podAnnotations from the pods ([#​2289](defilantech/LLMKube#2289)) ([ca5df08](defilantech/LLMKube@ca5df08)) - **foreman:** route the remaining GitHub-only paths through the forge seams ([#​2291](defilantech/LLMKube#2291)) ([a333270](defilantech/LLMKube@a333270)) - **metrics:** each binary serves only the metrics it records ([#​2296](defilantech/LLMKube#2296)) ([de8ca21](defilantech/LLMKube@de8ca21)) ##### Documentation - **modelpool:** leave member replicas out of GitOps manifests ([#​2300](defilantech/LLMKube#2300)) ([bcbc357](defilantech/LLMKube@bcbc357)) ### [`v0.10.13`](https://github.com/defilantech/LLMKube/blob/HEAD/CHANGELOG.md#01013-2026-10-28) [Compare Source](defilantech/LLMKube@v0.10.12...v0.10.13) ##### Features - **agent:** add the llmkube-metal-agent stop-engines command ([2cd2ec9](defilantech/LLMKube@2cd2ec9)) - **agent:** keep Metal engines serving across metal-agent restarts and adopt them on startup (refs [#​2079](defilantech/LLMKube#2079)) ([2cd2ec9](defilantech/LLMKube@2cd2ec9)) - **release:** sign and notarize the macOS release binaries ([#​2233](defilantech/LLMKube#2233)) ([f5ff962](defilantech/LLMKube@f5ff962)) - **router:** podLabels and podAnnotations for router-proxy pods ([#​2285](defilantech/LLMKube#2285)) ([a736e18](defilantech/LLMKube@a736e18)) - **router:** publish per-backend modalities and context length on /v1/models ([#​2249](defilantech/LLMKube#2249)) ([2887f54](defilantech/LLMKube@2887f54)) ##### Bug Fixes - apply CRDs server-side in make install and make deploy ([#​2275](defilantech/LLMKube#2275)) ([edaa4f7](defilantech/LLMKube@edaa4f7)) - **chart:** leave --init-container-user off when its value is unset ([#​2286](defilantech/LLMKube#2286)) ([ac541db](defilantech/LLMKube@ac541db)) - **cli:** pin only single-writer claims and make the cache pod image configurable ([#​2178](defilantech/LLMKube#2178)) ([2fe250b](defilantech/LLMKube@2fe250b)) - **controller:** annotate router-proxy pods for scraping under --emit-scrape-annotations ([#​2268](defilantech/LLMKube#2268)) ([07fb7f4](defilantech/LLMKube@07fb7f4)) - **controller:** chown the cache root to the init container's uid when fsGroup is off ([#​2273](defilantech/LLMKube#2273)) ([c9d86ad](defilantech/LLMKube@c9d86ad)) - **controller:** create no HPA for multiNode services ([#​2272](defilantech/LLMKube#2272)) ([c8d6f76](defilantech/LLMKube@c8d6f76)) - **controller:** delete FUSE stager Jobs in the foreground without the feature-gated field ([#​2269](defilantech/LLMKube#2269)) ([e439f60](defilantech/LLMKube@e439f60)) - **controller:** make FUSE model-cache staging safe across stagers and serving pods ([#​2276](defilantech/LLMKube#2276)) ([6c7c1fe](defilantech/LLMKube@6c7c1fe)) - **controller:** point the router-proxy Service at the port the proxy listens on ([#​2280](defilantech/LLMKube#2280)) ([1c69118](defilantech/LLMKube@1c69118)) - **controller:** run the stall-probe tests on a fake clock ([#​2267](defilantech/LLMKube#2267)) ([661856a](defilantech/LLMKube@661856a)) - **router:** tell client cancellations, upstream errors and timeouts apart ([#​2284](defilantech/LLMKube#2284)) ([3a2ea74](defilantech/LLMKube@3a2ea74)) - use vLLM's real TurboQuant KV cache types in the sample and docs ([#​2270](defilantech/LLMKube#2270)) ([3b4ffb6](defilantech/LLMKube@3b4ffb6)) ##### Documentation - **upgrade:** metal-agent engines now keep running when the agent stops and the next agent adopts them. To roll back to an older agent, run `launchctl bootout gui/$(id -u)/com.llmkube.metal-agent` and then `llmkube-metal-agent stop-engines` with the current binary before installing the older one, or every model is loaded twice. `make uninstall-metal-agent` stops the engines for you. Adopted engines keep the flags they started with; run stop-engines after the bootout to apply new defaults. ([2cd2ec9](defilantech/LLMKube@2cd2ec9)) ### [`v0.10.12`](https://github.com/defilantech/LLMKube/blob/HEAD/CHANGELOG.md#01012-2026-10-27) [Compare Source](defilantech/LLMKube@v0.10.11...v0.10.12) ##### Features - **api:** add MetalNode, verified by a controller dial-back, with the agent reporting through its Lease ([#​2235](defilantech/LLMKube#2235)) ([fccc1bc](defilantech/LLMKube@fccc1bc)) - **cli:** add llmkube metal join and leave, with agent token renewal ([#​2246](defilantech/LLMKube#2246)) ([b1f6602](defilantech/LLMKube@b1f6602)) - **cli:** add llmkube metal token create and metal remove ([#​2236](defilantech/LLMKube#2236)) ([f54414a](defilantech/LLMKube@f54414a)) ##### Bug Fixes - **controller:** keep a ModelPool activation while its member is held at zero ([#​2241](defilantech/LLMKube#2241)) ([8fc4143](defilantech/LLMKube@8fc4143)) - **controller:** map sglangConfig.enablePrefixCaching onto --disable-radix-cache ([#​2259](defilantech/LLMKube#2259)) ([d499aa4](defilantech/LLMKube@d499aa4)) - **controller:** stage under the cache lock when the init image's stat has no -f ([#​2260](defilantech/LLMKube#2260)) ([52241de](defilantech/LLMKube@52241de)) - **router:** list each backend on /v1/models under the id BackendNameMatch routes ([#​2257](defilantech/LLMKube#2257)) ([4627cfc](defilantech/LLMKube@4627cfc)) - **router:** report moves off a quarantined pod as reason="quarantined" instead of reason="not_ready" ([faa7a5f](defilantech/LLMKube@faa7a5f)) - **router:** rewrite vLLM and SGLang backends to the name they serve ([#​2258](defilantech/LLMKube#2258)) ([3d39111](defilantech/LLMKube@3d39111)) - validate multi-file cache staging on shared volumes ([#​2185](defilantech/LLMKube#2185)) ([e6eab85](defilantech/LLMKube@e6eab85)) ### [`v0.10.11`](https://github.com/defilantech/LLMKube/blob/HEAD/CHANGELOG.md#01011-2026-10-25) [Compare Source](defilantech/LLMKube@v0.10.10...v0.10.11) ##### Features - **api:** accept fp8, float16 and bfloat16 in vllmConfig.kvCacheDtype ([#​2227](defilantech/LLMKube#2227)) ([31eb943](defilantech/LLMKube@31eb943)) - **api:** add spec.imagePullPolicy to InferenceService ([#​2208](defilantech/LLMKube#2208)) ([ec54d28](defilantech/LLMKube@ec54d28)) - **controller:** move the SGLang defaults to v0.5.22 and report removed attention backends ([#​2221](defilantech/LLMKube#2221)) ([33f9bb1](defilantech/LLMKube@33f9bb1)) - **controller:** move the vLLM default to v0.32.0 and check every flag against it ([#​2223](defilantech/LLMKube#2223)) ([0144a4c](defilantech/LLMKube@0144a4c)) - **controller:** run every llama.cpp default from one pinned build, b11854 ([#​2220](defilantech/LLMKube#2220)) ([052840e](defilantech/LLMKube@052840e)) - **router:** weigh LoadAware placement by estimated prefill tokens in flight ([#​2193](defilantech/LLMKube#2193)) ([a33735c](defilantech/LLMKube@a33735c)) ##### Bug Fixes - **controller:** render vllmConfig.speculative as --speculative-config ([#​2210](defilantech/LLMKube#2210)) ([191dcbd](defilantech/LLMKube@191dcbd)) - **controller:** report sglangConfig tool-call parsers SGLang does not register ([#​2228](defilantech/LLMKube#2228)) ([90fed2e](defilantech/LLMKube@90fed2e)) ### [`v0.10.10`](https://github.com/defilantech/LLMKube/blob/HEAD/CHANGELOG.md#01010-2026-10-24) [Compare Source](defilantech/LLMKube@v0.10.9...v0.10.10) ##### Features - **controller:** add --model-cache-prep to skip the root cache prep ([#​2206](defilantech/LLMKube#2206)) ([8bcb973](defilantech/LLMKube@8bcb973)) - **router:** compile dataPlane: AgentGateway to AgentgatewayModel ([#​2162](defilantech/LLMKube#2162)) ([26b1ef4](defilantech/LLMKube@26b1ef4)) ##### Bug Fixes - **controller:** report a prefetch as downloading while its downloader runs ([#​2207](defilantech/LLMKube#2207)) ([7699514](defilantech/LLMKube@7699514)) - **router:** let every waiter of a failed ModelPool swap see its outcome ([#​2203](defilantech/LLMKube#2203)) ([b95db62](defilantech/LLMKube@b95db62)) ### [`v0.10.9`](https://github.com/defilantech/LLMKube/blob/HEAD/CHANGELOG.md#0109-2026-10-23) [Compare Source](defilantech/LLMKube@v0.10.8...v0.10.9) ##### Features - **api:** affinity and topology spread for the router proxy, rolling without surge under hard placement ([#​2200](defilantech/LLMKube#2200)) ([3a61700](defilantech/LLMKube@3a61700)) - **router:** proxy the Anthropic Messages API like chat completions ([#​2201](defilantech/LLMKube#2201)) ([86223aa](defilantech/LLMKube@86223aa)) ##### Bug Fixes - **router:** retry stale keep-alive connections and quarantine a pod only after two failures ([#​2197](defilantech/LLMKube#2197)) ([b279053](defilantech/LLMKube@b279053)) ### [`v0.10.8`](https://github.com/defilantech/LLMKube/blob/HEAD/CHANGELOG.md#0108-2026-10-23) [Compare Source](defilantech/LLMKube@v0.10.7...v0.10.8) ##### Features - **api:** type the vLLM tool-call and reasoning parsers and admit GLM on SGLang ([#​2168](defilantech/LLMKube#2168)) ([fd64c72](defilantech/LLMKube@fd64c72)) - **controller:** add InferenceService spec.hubOffline for serving pods ([#​2188](defilantech/LLMKube#2188)) ([a911cb2](defilantech/LLMKube@a911cb2)) - **controller:** keep 3 old ReplicaSets for LLMKube-managed Deployments by default ([#​2182](defilantech/LLMKube#2182)) ([5e1722f](defilantech/LLMKube@5e1722f)) - **router:** honour endpoint nodePort and externalTrafficPolicy, add proxy runtimeClassName ([#​2183](defilantech/LLMKube#2183)) ([a8f9e57](defilantech/LLMKube@a8f9e57)) - **router:** on pools under 3 pods, move a session only when its pod is KV-full ([#​2192](defilantech/LLMKube#2192)) ([f9b934c](defilantech/LLMKube@f9b934c)) - **router:** remember LoadAware sessions and move them only under real pressure ([#​2180](defilantech/LLMKube#2180)) ([1e8ce5a](defilantech/LLMKube@1e8ce5a)) ##### Bug Fixes - **router:** answer a ModelPool swap past swapBudget with 503 and Retry-After ([#​2181](defilantech/LLMKube#2181)) ([7c0d84e](defilantech/LLMKube@7c0d84e)) - **router:** release request bodies once sent and raise the proxy's default memory limit ([#​2196](defilantech/LLMKube#2196)) ([140fd6b](defilantech/LLMKube@140fd6b)) ### [`v0.10.7`](https://github.com/defilantech/LLMKube/blob/HEAD/CHANGELOG.md#0107-2026-10-23) [Compare Source](defilantech/LLMKube@v0.10.6...v0.10.7) ##### Features - **chart:** install the metal-agent RBAC from the Helm chart ([#​2165](defilantech/LLMKube#2165)) ([521e502](defilantech/LLMKube@521e502)) - **controller:** roll a multi-replica GPU service one pod at a time ([#​2164](defilantech/LLMKube#2164)) ([c4073cf](defilantech/LLMKube@c4073cf)) - **router:** load-aware, session-sticky placement for endpoint backends ([#​2166](defilantech/LLMKube#2166)) ([74cfb0e](defilantech/LLMKube@74cfb0e)) - **router:** the router proxy tracks endpoint backends' pods itself ([#​2159](defilantech/LLMKube#2159)) ([57070e1](defilantech/LLMKube@57070e1)) ### [`v0.10.6`](https://github.com/defilantech/LLMKube/blob/HEAD/CHANGELOG.md#0106-2026-10-22) [Compare Source](defilantech/LLMKube@v0.10.5...v0.10.6) ##### Features - **controller:** prefetch per cache claim, gated by the InferenceService ([#​2138](defilantech/LLMKube#2138)) ([d76f398](defilantech/LLMKube@d76f398)) - **router:** per-backend Endpoint Picker for dataPlane: AgentGateway ([#​2157](defilantech/LLMKube#2157)) ([c1bbe28](defilantech/LLMKube@c1bbe28)) ##### Bug Fixes - **cli:** read the model cache from its own pod in cache list ([#​2154](defilantech/LLMKube#2154)) ([996abe9](defilantech/LLMKube@996abe9)) - **controller:** refuse to repoint a same-name Service ([#​2149](defilantech/LLMKube#2149)) ([7965a1b](defilantech/LLMKube@7965a1b)) - **hf-listing:** read a tree size only when it is a whole number of bytes ([#​2153](defilantech/LLMKube#2153)) ([6e6723d](defilantech/LLMKube@6e6723d)) - **model:** report the staged total instead of status.size "0" ([#​2150](defilantech/LLMKube#2150)) ([f6710e7](defilantech/LLMKube@f6710e7)) ### [`v0.10.5`](https://github.com/defilantech/LLMKube/blob/HEAD/CHANGELOG.md#0105-2026-10-21) [Compare Source](defilantech/LLMKube@v0.10.4...v0.10.5) ##### Features - add make gate and make test-affected, a cached parallel round gate ([#​2106](defilantech/LLMKube#2106)) ([e971675](defilantech/LLMKube@e971675)) - **agent:** admit Metal models against memory already committed to running engines (closes [#​2080](defilantech/LLMKube#2080)) ([d2d2d43](defilantech/LLMKube@d2d2d43)) - **agent:** record each engine the metal-agent starts in the state directory (refs [#​2079](defilantech/LLMKube#2079)) ([0224d51](defilantech/LLMKube@0224d51)) - **controller:** add spec.startupTimeout for a bigger startup probe budget ([#​2129](defilantech/LLMKube#2129)) ([df0e9cd](defilantech/LLMKube@df0e9cd)) - **controller:** set fsGroupChangePolicy OnRootMismatch with the default fsGroup (closes [#​2058](defilantech/LLMKube#2058)) ([2bd4538](defilantech/LLMKube@2bd4538)) ##### Bug Fixes - **agent:** escalate to SIGKILL when stopping an engine the agent did not spawn ([0224d51](defilantech/LLMKube@0224d51)) - **agent:** keep the pressure block when an eviction teardown completed ([#​2107](defilantech/LLMKube#2107)) ([fd9ab77](defilantech/LLMKube@fd9ab77)) - **agent:** replace a hung oMLX daemon instead of starting a second one ([#​2105](defilantech/LLMKube#2105)) ([a16c348](defilantech/LLMKube@a16c348)) - **agent:** restart services evicted under memory pressure once memory recovers ([#​2093](defilantech/LLMKube#2093)) ([3db0ecc](defilantech/LLMKube@3db0ecc)) - answer 400 for request bodies that are not valid JSON ([#​2075](defilantech/LLMKube#2075)) ([d9826ff](defilantech/LLMKube@d9826ff)) - **chart:** fail fast on shared cache without default storageclass and support existingClaim ([#​2016](defilantech/LLMKube#2016)) ([#​2114](defilantech/LLMKube#2114)) ([c4f7f3d](defilantech/LLMKube@c4f7f3d)) - **chart:** gate llama.cpp InferenceAdmissionStalled on decode progress ([#​2065](defilantech/LLMKube#2065)) ([5b2f45d](defilantech/LLMKube@5b2f45d)) - **cli:** make cache clear and delete --purge-cache remove entries ([#​2134](defilantech/LLMKube#2134)) ([2b668e2](defilantech/LLMKube@2b668e2)) - **controller:** keep downloader credentials off curl's command line ([#​2098](defilantech/LLMKube#2098)) ([2207c2e](defilantech/LLMKube@2207c2e)) - **controller:** mount a memory-backed /dev/shm for multi-process vLLM, SGLang and TGI (closes [#​2099](defilantech/LLMKube#2099)) ([a68c98f](defilantech/LLMKube@a68c98f)) - **controller:** refuse to overwrite or recreate a same-name Deployment ([#​2096](defilantech/LLMKube#2096)) ([b90c8aa](defilantech/LLMKube@b90c8aa)) - **model:** canonicalize HF repo IDs so a trailing slash stages ([#​2128](defilantech/LLMKube#2128)) ([9289ac6](defilantech/LLMKube@9289ac6)) - **modelpool:** stop swap thrash on reversals, idle-probe blindness, and abandoned loads ([#​2130](defilantech/LLMKube#2130)) ([#​2135](defilantech/LLMKube#2135)) ([e7dee43](defilantech/LLMKube@e7dee43)) - **model:** serialize downloaders that share a cache directory ([#​2115](defilantech/LLMKube#2115)) ([13eca01](defilantech/LLMKube@13eca01)) - **sglang:** keep endpoint API keys out of process arguments ([#​2122](defilantech/LLMKube#2122)) ([7fdae50](defilantech/LLMKube@7fdae50)) - size metal-agent KV cache estimate from GQA attention shape ([#​2102](defilantech/LLMKube#2102)) ([a119234](defilantech/LLMKube@a119234)) ##### Documentation - cover per-request balancing in the ModelRouter page ([#​2095](defilantech/LLMKube#2095)) ([9ec4766](defilantech/LLMKube@9ec4766)) - **model-cache:** correct the CephFS fsGroupPolicy claim and the PSA advice ([2bd4538](defilantech/LLMKube@2bd4538)) - state differentiation, audience, and project status up front ([#​2100](defilantech/LLMKube#2100)) ([ee27e20](defilantech/LLMKube@ee27e20)) - **upgrade:** every InferenceService that uses the default pod security context rolls once on upgrade, because the generated pod template gains `fsGroupChangePolicy: OnRootMismatch` (a full model reload for large models) ([2bd4538](defilantech/LLMKube@2bd4538)) - **upgrade:** single-node vLLM, SGLang and TGI services with more than one GPU (or a tensor, pipeline or data-parallel size above 1) that do not mount /dev/shm themselves roll once on upgrade, because the generated pod template gains a memory-backed /dev/shm volume ([a68c98f](defilantech/LLMKube@a68c98f)) - **upgrade:** the metal-agent now admits a model only if it fits in the Mac's budget minus the memory committed to models already running, so a Mac whose models add up to more than its budget refuses the extra ones; a Model memoryBudget or memoryFraction above the Mac's budget is clamped to it unless the agent runs with --allow-model-memory-budget-override ([d2d2d43](defilantech/LLMKube@d2d2d43)) - **upgrade:** the metal-agent now writes a record per engine under --state-dir/engines (both relay and legacy mode) and fails an engine start when it cannot write it; make sure the state directory (default \~/Library/Application Support/llmkube/metal-agent) is writable by the agent's user ([0224d51](defilantech/LLMKube@0224d51)) ### [`v0.10.4`](https://github.com/defilantech/LLMKube/blob/HEAD/CHANGELOG.md#0104-2026-10-16) [Compare Source](defilantech/LLMKube@v0.10.3...v0.10.4) ##### Features - **agent:** cap the bytes a single Model download may write ([#​2088](defilantech/LLMKube#2088)) ([3852411](defilantech/LLMKube@3852411)) - **api:** endpoint API key and externalTrafficPolicy for InferenceService ([#​2043](defilantech/LLMKube#2043)) ([27a9214](defilantech/LLMKube@27a9214)) - **controller:** detect a stalled watch path with a lease canary, bounded reconciles and stall alerts ([#​2072](defilantech/LLMKube#2072)) ([d00e0cf](defilantech/LLMKube@d00e0cf)) - **controller:** detect keyed pool siblings and vLLM env-var keys in ModelRouter ([#​2068](defilantech/LLMKube#2068)) ([78889f0](defilantech/LLMKube@78889f0)) - **controller:** detect ModelRouter backends keyed through --api-key on the command line ([#​2063](defilantech/LLMKube#2063)) ([3674acc](defilantech/LLMKube@3674acc)) - **controller:** stage HF mirror repos with spec.files and expand globs from the repo listing ([#​2071](defilantech/LLMKube#2071)) ([9e5d7d3](defilantech/LLMKube@9e5d7d3)) ##### Bug Fixes - **agent:** health restarts stop the unhealthy engine first, wait for repeated failures, and back off ([#​2090](defilantech/LLMKube#2090)) ([407e02e](defilantech/LLMKube@407e02e)) - **agent:** keep a Metal service running when its Model lookup fails transiently ([#​2089](defilantech/LLMKube#2089)) ([e22eeab](defilantech/LLMKube@e22eeab)) - **controller:** merge DRA pod scheduling fields and reject multiNode with resourceClaims ([#​2062](defilantech/LLMKube#2062)) ([9319745](defilantech/LLMKube@9319745)) - no device-plugin GPU limit when a Model uses DRA resourceClaims ([#​2060](defilantech/LLMKube#2060)) ([8c3e434](defilantech/LLMKube@8c3e434)) ##### Documentation - APISIX in front of LLMKube ([#​2053](defilantech/LLMKube#2053)) ([16286c6](defilantech/LLMKube@16286c6)) - **metal:** fix install commands and update the quickstart for relay mode ([#​2087](defilantech/LLMKube#2087)) ([8bc7c6f](defilantech/LLMKube@8bc7c6f)) - use an extension-less link in the GPU fault guide ([#​2056](defilantech/LLMKube#2056)) ([780e710](defilantech/LLMKube@780e710)) ### [`v0.10.3`](https://github.com/defilantech/LLMKube/blob/HEAD/CHANGELOG.md#0103-2026-10-13) [Compare Source](defilantech/LLMKube@v0.10.2...v0.10.3) ##### Features - **api:** accept SGLang's Blackwell attention backends; flag flash_attn ([#​2033](defilantech/LLMKube#2033)) ([2385fd4](defilantech/LLMKube@2385fd4)) - **chart:** alert on GPU faults the device plugin ignores ([#​2031](defilantech/LLMKube#2031)) ([e4697ef](defilantech/LLMKube@e4697ef)) - **controller:** add opt-in vLLM engine-stall liveness probe ([#​2022](defilantech/LLMKube#2022)) ([429434a](defilantech/LLMKube@429434a)) - **controller:** apply the Model's HF_ENDPOINT mirror to runtime downloads ([#​2039](defilantech/LLMKube#2039)) ([cbececa](defilantech/LLMKube@cbececa)) - **controller:** stall-aware liveness for SGLang pods; share the detector ([#​2029](defilantech/LLMKube#2029)) ([212b014](defilantech/LLMKube@212b014)) - **router:** serve POST /v1/completions on the router-proxy ([#​2019](defilantech/LLMKube#2019)) ([1724a02](defilantech/LLMKube@1724a02)) ##### Bug Fixes - **controller:** bind SGLang dual-stack so it can become Ready on IPv4 clusters ([#​2028](defilantech/LLMKube#2028)) ([7d87c7e](defilantech/LLMKube@7d87c7e)) - **controller:** bound multiNode recreates and keep the failure evidence ([#​1996](defilantech/LLMKube#1996)) ([3331610](defilantech/LLMKube@3331610)) - **controller:** refuse to overwrite or delete a same-name HPA ([#​2010](defilantech/LLMKube#2010)) ([09affe5](defilantech/LLMKube@09affe5)) - **controller:** report a missing CA ConfigMap instead of wedging pods ([#​1995](defilantech/LLMKube#1995)) ([c624e02](defilantech/LLMKube@c624e02)) - **controller:** report AutoscalingReady=True when the HPA is managed ([#​2012](defilantech/LLMKube#2012)) ([b877ee5](defilantech/LLMKube@b877ee5)) - **controller:** split reconcileMultiNodeGroup under the gocyclo limit ([#​2000](defilantech/LLMKube#2000)) ([023a5c4](defilantech/LLMKube@023a5c4)) - **controller:** stop the prefetch status loop while the CA ConfigMap is missing ([#​2037](defilantech/LLMKube#2037)) ([b0b3cc6](defilantech/LLMKube@b0b3cc6)) - **foreman-agent:** make the repo package's git env hermetic and forward GIT_CONFIG\_\* ([#​2014](defilantech/LLMKube#2014)) ([62837d9](defilantech/LLMKube@62837d9)) - **router:** compile AgentGateway mode against Gateway API Inference Extension v1 ([#​1990](defilantech/LLMKube#1990)) ([ce817ba](defilantech/LLMKube@ce817ba)) - **router:** refuse to adopt same-name router-proxy objects ([#​2008](defilantech/LLMKube#2008)) ([e8f190a](defilantech/LLMKube@e8f190a)) - **router:** remove router-proxy objects for routers not in Proxy mode ([#​2006](defilantech/LLMKube#2006)) ([c04f824](defilantech/LLMKube@c04f824)) - **router:** stop truncating streams at the header timeout; quarantine stalled streams ([#​2026](defilantech/LLMKube#2026)) ([c4335c9](defilantech/LLMKube@c4335c9)) - **router:** time only upstream silence in the stream idle guard ([#​2035](defilantech/LLMKube#2035)) ([933426c](defilantech/LLMKube@933426c)) ##### Documentation - **air-gapped:** cover vLLM and SGLang safetensors checkpoints ([#​1993](defilantech/LLMKube#1993)) ([4d3fa70](defilantech/LLMKube@4d3fa70)) - replace deprecated Strix Halo GTT sizing with TTM parameters ([#​2003](defilantech/LLMKube#2003)) ([09d8d73](defilantech/LLMKube@09d8d73)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNTEuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE4MS45IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: https://git.erwanleboucher.dev/eleboucher/homelab/pulls/2331
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
spec.vllmConfiggainstoolCallParserandreasoningParser, the typedequivalents of the fields
spec.sglangConfigalready had. SettingtoolCallParseremits--tool-call-parsertogether with--enable-auto-tool-choice, which vLLM requires for a parser to do anything;reasoningParseremits--reasoning-parseralone, since vLLM has no pairedflag for it. Both are free strings, and a flag already present in
spec.extraArgswins, per flag.The SGLang enums admit
glm,glm45andglm47for tool calls andglm45for reasoning.
Why
Fixes #2119
Without the fields, a vLLM service sets the parsers through
extraArgs, whereleaving out
--enable-auto-tool-choicemakes the parser inert and any requestwith
tool_choice: autofails:That is the common case for chat models serving agent clients, not an edge.
The SGLang enums rejected the GLM values, so GLM-5.3-Flash's documented
--reasoning-parser glm45 --tool-call-parser glm47could not be expressed.How
ee0198ef6feat(api): type the vLLM tool-call and reasoning parsers and admit the GLM ones on SGLangapi/v1alpha1/inferenceservice_types.go,inferenceservice_types_test.go, both CRD copies,internal/controller/runtime_vllm.go,runtime_vllm_args.go,runtime_vllm_test.go,runtime_test.go,runtime_parsers_envtest_test.go,docs/site/guides/multi-node-inference.mdc88d13999docs(api): correct the vLLM parser counts in the field docsinferenceservice_types.go, both CRD copies0fb1e0885fix(api): cite the vLLM parser registry instead of counting itinferenceservice_types.go, both CRD copies,runtime_vllm_test.go757892448docs(api): state the SGLang glm parser mapping preciselyinferenceservice_types.go, both CRD copieseaee88446docs(api): pin the SGLang release in the glm parser commentinferenceservice_types.go, both CRD copies07b70fecbdocs: point the measured vLLM parser configs at the typed fieldsdocs/site/guides/multi-node-inference.md,docs/site/labs/deepseek-v4-flash-two-sparks.md,docs/site/labs/deepseek-v41-flash-exl3-three-sparks-ring.md, both multinode samples62d082a01docs: keep both parser pairings and bound the SGLang enum's claiminferenceservice_types.go, both CRD copies,multi-node-inference.md, both samples,runtime_vllm_test.go51ceba642fix(api): stop the SGLang enum comment promising vLLM's suppressioninferenceservice_types.go, both CRD copies,multi-node-inference.md,runtime_vllm_test.goDesign decisions, from the first commit's ledger:
ParserManager.get_tool_parserreturnsNonewhen auto tool choice is off, so a typed parser without--enable-auto-tool-choicewould reproduce the reported failure.extraArgsguards are independent, per flag. A user-supplied--tool-call-parsersuppresses only the typed parser, and auto tool choice isstill emitted, because their parser is equally inert without it.
model family, so an enum would gate each new parser behind an operator
release. The field docs name the registry file to check rather than a count,
after two attempts at a number were both wrong.
glm45.ReasoningParser.DetectorMapatv0.5.15.post1hasglm45and noglm47, and--reasoning-parservalidateschoicesat startup, so admittingglm47would abort the server. The issueasked for
glm47in both enums; this is the part of it the pinned runtimecannot support, and an envtest spec pins the rejection.
glm,glm45andglm47, matchingToolCallParserEnumat the pinned image. Existing values stay, includingqwen3andfunctionary, which the pinned image no longer registers butwhich existing objects use.
extraArgsspecs and gain anote pointing at the typed fields, so the published numbers still describe
the run that produced them.
Behaviour changes only for specs that set
spec.vllmConfig.toolCallParserorspec.vllmConfig.reasoningParser, whosespec.sglangConfig.toolCallParserisglm,glm45orglm47, or whosespec.sglangConfig.reasoningParserisglm45.Verification: two envtest reproductions fail on base and pass here (the typed
fields prune at admission on a vLLM service; the GLM values are rejected on an
SGLang service), a differential probe over 11 input classes the ledger calls
unchanged is byte-identical between base and branch, and every new assertion
was falsified by reverting the production line it covers. Not a runtime-arg
parity case: no
pkg/agentcode readsVLLMConfig, and the vllm-swift wrapperauto-detects the parser.
Open items recorded in the commit ledger and not fixed here:
hasMatchingExtraArgdoes not match the negative form--no-enable-auto-tool-choice, so a spec that sets the typed parser and optsout that way gets last-wins from
extraArgs. Same limitation as every otherboolean guard in the repo.
extraArgsguard, so keeping the typedfield set while also passing the flag in
extraArgsemits it twice. Thefield comment now says to clear the field instead.
qwen3andfunctionary, which the pinned image does not register, so a spec usingeither one crash-loops today because
--tool-call-parservalidateschoicesat startup. Dropping them would break stored objects, so an admission
warning is the likely fix. Follow-up issue not yet filed.
AI assistance
Assisted-by: DeepSeek-V4.1-Flash (deepseek-ai/DeepSeek-V4.1-Flash, vllm runtime, self-hosted with LLMKube on 3x NVIDIA GB10; roles: planning, code, tests and commit messages, executing review: base-vs-head probes and mutation checks)
Assisted-by: qwen38-flash-next (unsloth/Qwen3.8-Flash-Next-GGUF UD-Q3_K_XL, generic (llmkube-gufo-rocm-gfx1151) runtime, self-hosted with LLMKube on AMD Strix Halo (Ryzen AI Max, Radeon iGPU); roles: read-only review)
Verified by the author: read the diff
Checklist
make testpasses locallymake lintpasses locallygit commit -s) per DCO