NVIDIA/aicr v0.13.0

v0.13.0

Repository: NVIDIA/aicr

Tag: v0.13.0

Published: 2026-05-16T00:18:35Z

Prerelease: no

Release notes: This release focuses on scaling out our recipe matrix, evidence-based recipe validation, additional deployer targets, and hardened component supply chain.

Highlights

Recipe Evidence — New capability to capture evidence during cluster validation allows users and contributors alike to verify that the recipe actually deployed and delivered the expected performance characteristics without access to the validating cluster. aicr validate now emits a Recipe Evidence v1 bundle, and a new aicr evidence verify command validates that evidence from either a local directory or a signed OCI image. This new capability closes the loop between recipe authorship, deployment, and audit.

New Deployers — The bundler command now supports Helmfile and Flux alongside the existing Argo CD and raw-Helm targets. AICR also adds a URL-portable argocd-helm bundle option so users can apply a single manifest without local chart access. Helm vendoring is also supported for air-gapped environments (option for image mirroring is still coming — see NVIDIA/aicr#743).

Overlays & Components

• Added deployment validation to EKS GB200
• Added Slinky platform support with Slurm operator
• Added Talos Linux support via new os-talos mixin and bundler preManifestFiles
• Updated AKS H100 Dynamo to match working cluster state
• Migrated GB200 kernel-module-params to preManifestFiles
• Fixed AKS H100 RDMA network operator dependency and metrics

Other Improvements

• New doc site is now live at docs.nvidia.com/aicr with per-release versioning
• diff command to help detect configuration drift between recipes and live state
• Unified file-based config across snapshot, recipe, bundle, and validate to enable easier reproducibility
• Reliable cluster identity based on snapshot measurements to enable easier over-time correlation
• storage-class support on bundle command for registry-driven storage-class injection

Supply Chain — New CycloneDX 1.6 BOM generator publishes a per-recipe container image inventory as an in-repo artifact, with strict validation that rejects bare scalar image references missing a tag, digest, or registry host. A growing number of component chart versions now also explicitly digest-pin image references.

*Thanks to* @ayuskauskas, @dims, @dtzar, @faganihajizada, @haarchri, @Jont828, @lockwobr, @njhensley, @pdmack, @sanjeevrg89, @xdu31, @yuanchen8911, and @mchmarny.

Changelog

New Features

• *(tools)* Add install-rc helper for latest RC binary by @mchmarny
• *(cli)* Add --config support to snapshot command by @mchmarny
• *(recipes)* Update AKS H100 Dynamo recipe to match working cluster state by @Jont828
• *(bom)* Add CycloneDX 1.6 image BOM generator by @mchmarny
• *(ci)* Add self-hosted renovate alongside dependabot by @njhensley
• *(recipes)* Pin nfd and k8s-ephemeral-storage-metrics chart versions by @mchmarny
• *(bom)* Publish container image inventory as a doc artifact by @mchmarny
• *(bundler)* Add --storage-class flag for registry-driven injection by @dtzar
• *(recipes)* Pin chart versions for NVIDIA-owned components (#748 Phase B) by @mchmarny
• *(recipes)* Digest-pin explicit image references by @mchmarny
• *(cli)* Unified --config flag for recipe and bundle by @mchmarny
• *(tools)* Add s3c supply-chain presence checker by @mchmarny
• *(bundler)* URL-portable argocd-helm bundle (#664, #665) by @lockwobr
• *(docs)* Add versioned docs dropdown with CI content pinning by @pdmack
• *(tools)* Add local Talos cluster + snapshot chainsaw test by @ayuskauskas
• *(fingerprint)* Cluster identity projection from snapshot measurements by @njhensley
• Add support for helm vendoring by @lockwobr
• *(oci)* Expose URIScheme constant and Ensure/TrimScheme helpers by @njhensley
• *(cli)* Add aicr diff for configuration drift detection by @sanjeevrg89
• *(config)* Aicr validate --config support by @njhensley
• *(validator)* Apply hybrid resource pattern to ValidatorCatalog by @xdu31
• *(recipe)* Extract Validation as standalone type with hybrid resource pattern by @xdu31
• Os-talos mixin + bundler preManifestFiles support by @ayuskauskas
• *(flux)* Add bundle flux option by @haarchri
• *(evidence)* Emit Recipe Evidence v1 bundle from aicr validate by @njhensley
• *(evidence)* Aicr evidence verify (directory input) by @njhensley
• *(evidence)* Aicr evidence verify (signed OCI bundles) by @njhensley
• *(recipes)* Add deployment validation to GB200/EKS recipes by @njhensley
• *(bundler)* Add helmfile deployer by @lockwobr
• *(recipes)* Add Slinky slurm-operator as platform-slurm by @faganihajizada

Bug Fixes

• *(validator)* Accept pre-release tags as release versions by @mchmarny
• *(bundler)* Synthesize GKE ResourceQuota for critical-priority pods by @mchmarny
• *(bundler)* Split helmfile bundle into CRD + main sub-helmfiles by @mchmarny
• *(bundler)* Wire PreManifestFiles through flux deployer with terminal-aware dependsOn by @yuanchen8911
• *(bundler)* Carry localformat createNamespace into helmfile.yaml by @yuanchen8911
• *(ci)* Harden Fern docs CI and configure custom domain by @pdmack
• *(docs)* Replace bare angle-bracket URL…