[shobham-nv]

TL;DR

Backports the worker-utils NATS reconnect fixes to the self-managed 1.1 stack by moving the api (cloud-functions) chart pin from 1.33.0 to 1.33.1, the chart patch that defaults worker-utils to 1.4.2.

Draft: cloud-functions 1.33.1 is not released yet. It comes from #3002, which is waiting on QA re-verification of worker-utils 1.4.2. If that release ends up with a different version, this pin will be updated to match.

Additional Details (optional for docs, build, test, refactor, ci, chore, style, and revert PRs)

• deploy/stacks/self-managed/helmfile.d/02-core.yaml.gotmpl: api 1.33.0 -> 1.33.1.
• The only change between those chart versions is api.remoteConfig.workerImageTags.utils "1.3.3" -> "1.4.2". The 1.1 stack does not override that value, so function workers launched by 1.1 start getting worker-utils 1.4.2.
• What 1.4.2 adds over 1.3.3:
  • fix(worker): re-pull JetStream work right after a NATS reconnect #2895: the worker sends a new JetStream pull right after a NATS reconnect, instead of waiting about 10 s for the heartbeat timeout. This is the fix for HTTP invocations hanging when a NATS member restarts.
  • fix(worker): keep retrying consumer setup while NATS is unreachable #2833 (library part): the per-region consumer lookup stops when its context ends. The worker-utils part of fix(worker): keep retrying consumer setup while NATS is unreachable #2833 is already in 1.3.3.
  • feat(invocation-service): serve worker callbacks over TLS #2829: worker callbacks over TLS, opt-in.
  • fix(security): rebuild worker and Cassandra images with patched Go #2880: rebuilt with patched Go.
• The compute-plane stack needs no change, since the control plane chooses the worker-utils image.
• Pinning a chart released after the 1.1 cut may depend on fix(release): render stack inventories that pin a chart released after the cut [self-managed 1.1] #2988.

For the Reviewer

• Merging cuts the next 1.1 patch.
• Merge only after fix(cloud-functions): default worker-utils to 1.4.2 for the NATS reconnect fixes #3002 has merged and cloud-functions 1.33.1 is published.

For QA (optional for docs, build, test, refactor, ci, chore, style, and revert PRs)

• After 1.33.1 is published: render the stack and check that the nvcf-api remote config has utils-container-image set to nvcf-worker-utils-oss:1.4.2.
• Re-run the NATS member restart case on the 1.1 patch.

Issues

Relates to #2832.

Checklist

• I am familiar with the Contributing Guidelines.
• I have signed off my commits for Developer Certificate of Origin (DCO) compliance.
• New or existing tests cover these changes.
• The documentation is up to date with these changes.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

[shobham-nv]

Folded into #3013, so both fixes ship in one 1.1 patch.