chore(deps): update quay.io/jumpstarter-dev/jumpstarter-operator docker tag to v0.9.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
quay.io/jumpstarter-dev/jumpstarter-operator	Kustomization	minor	0.8.1-rc.1 → 0.9.0-rc.1

---

Release Notes

jumpstarter-dev/jumpstarter (quay.io/jumpstarter-dev/jumpstarter-operator)

v0.9.0

Compare Source

What's New

Installation & Deployment

• Operator-only deployment: Helm charts have been fully removed and operator-based installation is now the sole supported path for Jumpstarter services.
• Configurable installer paths: INSTALL_DIR and VENV_DIR can now be set via environment variables for greater flexibility.
• MicroShift bootc image: A new container image for MicroShift-based deployments is now available.

Lifecycle & Admin Management

• Lifecycle hooks (Admin): Added support for beforeLease and afterLease hooks to enable automated device initialization, firmware flashing, and hardware cleanup. Jumpstarter hooks support custom interpreters (e.g., Python, shell), real-time log streaming, and configurable failure handling (warn, endLease, exit).
• Lease tags: Leases now support user-defined metadata tags, making it easier to organize and filter leases in multi-team environments.
• Access policy descriptions: Access policy rules now support a description field for documentation purposes.
• Exporter enabled/disabled (JEP-0014 Phase 1): A new spec.enabled boolean field on the Exporter CRD allows administrators to mark exporters as disabled without deleting them. Disabled exporters are excluded from lease scheduling by default; the --allow-disabled CLI flag (or spec.allowDisabled on Lease) permits investigation of disabled exporters when needed.
• Deprecated label warnings: Operators can now configure deprecatedLabels in the Jumpstarter config to mark label keys as deprecated. When clients use deprecated labels in lease or exporter queries, they receive warning messages with the configured migration guidance.

Drivers & Capabilities

• MCP Server: with jmp mcp serve you can integrate your existing AI agents in jumpstarter, enabling leasing, connecting, and using any existing drivers configured on your devices.

This release introduces 9 new driver packages and significant updates across the existing driver ecosystem:

• Android ADB & Emulator drivers (jumpstarter-driver-android): Enables Android device testing through ADB tunneling and emulator lifecycle management. The ADB driver provides seamless tunneling of ADB connections to remote devices, while the emulator driver handles full emulator lifecycle (start, stop, snapshot) with integrated ADB tunneling for CI/CD workflows.

• DUT Network Isolation driver (jumpstarter-driver-dut-network): Provides full network isolation of devices under test. Creates an isolated bridge network with DHCP and DNS services via dnsmasq, IP aliasing for address management, a local NTP responder, egress and ingress traffic filtering rules, and live tcpdump streaming for packet capture and debugging.

• mitmproxy driver (jumpstarter-driver-mitmproxy): Adds HTTP and HTTPS interception capabilities for testing. Supports backend mocking to simulate API responses, traffic recording for replay and analysis, and passthrough mode for selective interception. Useful for testing network-dependent applications without relying on live services.

• NOYITO Relay driver (jumpstarter-driver-noyito-relay): Power control driver for NOYITO USB relay boards. Provides a simple and affordable way to control device power using commodity USB relay hardware, implementing the standard Jumpstarter power interface for on/off/cycle operations.

• OBD-II driver (jumpstarter-driver-obd): Vehicle diagnostics driver using the OBD-II protocol via ELM327 adapters. Allows reading diagnostic trouble codes, live sensor data, and vehicle information for automotive testing and validation workflows.

• Renode driver (jumpstarter-driver-renode): Integration with the Renode embedded systems emulator. Enables simulation of microcontroller targets for testing firmware without physical hardware, supporting serial communication, power control, and machine management within Jumpstarter exporters.

• SOME/IP driver (jumpstarter-driver-someip): Wraps the opensomeip Python binding to provide SOME/IP (Scalable service-Oriented MiddlewarE over IP) protocol operations. Supports both Service Discovery-based and static remote endpoint configurations for automotive middleware testing.

• SSH Mount driver (jumpstarter-driver-ssh-mount): Enables remote filesystem mounting over SSH using SSHFS. Allows mounting directories from devices under test or from test infrastructure, simplifying file transfer and log collection during testing.

• ST-LINK MSD driver (jumpstarter-driver-stlink-msd): Firmware flashing driver for STM32 boards via the ST-LINK mass storage device interface. Provides a simple drag-and-drop style flashing mechanism for STM32 microcontrollers without requiring additional tooling.

• OCI credential model: A new OciCredentials model and hardened credential resolution make flashing from private registries more reliable.

Developer Experience & CLI

• Lease expiration display: The CLI now shows "expires at" and "remaining" columns in lease listings.
• Exporter context env vars: jmp shell now exposes JMP_EXPORTER, JMP_LEASE, and JMP_EXPORTER_LABELS environment variables for scripting convenience.
• Default exporter config path: Exporter configs now default to ~/.config/jumpstarter, reducing boilerplate.
• Consolidated --insecure flag: Multiple TLS flags have been replaced with a single --insecure option for simpler configuration.
• Hidden labels: Labels configured as hidden are excluded from jmp get exporters output by default. Pass --show-hidden-labels to reveal them. Useful for keeping operational metadata out of the default label display.
• --insecure-tls in config creation: The jmp admin create-client-config and jmp admin create-exporter-config commands now accept --insecure-tls to embed the TLS skip setting directly into the generated config file.

Security & Authentication

• Token rotation: Internal token rotation for long-running clients ensures sessions remain authenticated across token lifetimes without manual intervention.
• Secret/ConfigMap references for JWT CA certificates: The operator can now reference Kubernetes Secrets and ConfigMaps for JWT CA certificates, removing the need to inline certificate data.

Stability & Observability

• gRPC health checking: The controller now exposes the standard gRPC Health protocol, making it straightforward to configure readiness and liveness probes.
• Exporter rapid failure detection: Containerized exporters now detect crash loops and auto-exit, allowing the container runtime to handle restarts cleanly.
• Retry transient gRPC failures in status reports: Exporter status reporting and lease release now use exponential backoff with per-RPC deadlines to recover from controller outages instead of becoming permanently stuck.
• Unblock post-shell status probe: The client no longer hangs on the status probe after jmp shell when the connection to the controller is lost.
• Authentication error logging: Controller and router services now log authentication failures with peer address details, making it easier to diagnose access issues.

Project & Process

• JEP process: Jumpstarter Enhancement Proposals (JEPs) have been formalized with docs, process, and initial proposals.
• Renovate migration: Dependabot has been replaced with Renovate for better cross-ecosystem dependency grouping.
• Testing and CI: E2E tests have been converted from Bats to Go + Ginkgo with parallel builds, log collection on failure, and reusable composite actions. Quality gates for coverage, type checking, and merge-queue-only full matrix runs have been added.

Driver Updates

The table below summarizes driver-level changes in v0.9.0.
Status = New driver indicates the package was added during the 0.9 release cycle.

Driver	Status	Notable updates
android	New	ADB and emulator power drivers
dut-network	New	Full DUT network isolation: DHCP, DNS, NTP, tcpdump, traffic filtering
mitmproxy	New	HTTP(S) interception and backend mocking driver
noyito-relay	New	NOYITO USB Relay power driver
obd	New	OBD-II vehicle diagnostics driver
renode	New	Renode embedded target emulator driver
someip	New	SOME/IP driver wrapping opensomeip Python binding with static remote endpoint support
ssh-mount	New	Remote filesystem mounting via SSH
st-link	New	ST-LINK mass storage flasher for STM32 boards
ble	Updated	Added tests
dutlink	Updated	Fixed swapped voltage/current in power readings; removed implicit power off from reset() and close()
esp32	Updated	Release serial port before flash to prevent port-locked errors
flashers	Updated	Default CA injection into flash commands, improved RideSX error messages, updated fls to 0.3.0, added fastboot erase support
gpio	Updated	Added read method required by PowerInterface
http-power	Updated	Parse power measurements and add power read CLI command
iscsi	Updated	Block device allowlist confinement
network	Updated	HttpServer.close() properly releases port on cleanup; force-close socket on HTTP thread cleanup to prevent address-in-use errors after interrupted flashing
opendal	Updated	Removed opendal dependency from QEMU driver, fixed local path upload
pyserial	Updated	PTY drain improvements to prevent output loss on macOS
qemu	Updated	Added OCI flashing support, construct image URL after HTTP server starts
sdwire	Updated	Support unprogrammed FT200X EEPROM + macOS storage/mux fixes
shell	Updated	Keep shell usable after token refreshes, block dangerous environment variables
someip	Updated	Use opensomeip PyPI release, defer OsipClient creation, fail fast when unavailable

Operator / Controller Changes

• Restricted operator ClusterRole RBAC permissions on roles/rolebindings
• Restart controller pods when configmap changes
• Set default resource requests/limits for controller and router pods
• Add Secret/ConfigMap references for JWT CA certificates
• Fix Containerfile build with rootless Podman
• Prevent lease assignment to non-ready exporters
• Serialize Dial/Listen queue handoff to prevent router token loss
• Retry Dial and StatusMonitor poll on transient UNAVAILABLE
• Server-side Dial retry with exponential backoff for transient Available status
• gRPC keepalive configuration fields wired into server options
• Authorization always derives resource names from OIDC username
• Fix exporter state machine: stuck exporters on lease-end during hooks
• Guard beforeLease hook from setting LEASE_READY after lease expiry
• Release lease when beforeLease hook fails with onFailure=endLease
• Deduplicate NotIn values in ParseLabelSelector
• Fix flaky test for competing scheduled leases
• Add description field to access policy rules
• Update Go dependencies for CVE fixes
• Add enabled field to Exporter CRD and allowDisabled to Lease CRD (JEP-0014 Phase 1)
• Add hiddenLabels and deprecatedLabels config sections with filtering in client service
• Retry transient gRPC failures in exporter status reports with exponential backoff
• Add authentication error logging with peer address in controller and router
• Raise MissingDriverError for driver allow-list mismatches
• Unblock post-shell status probe when connection is lost

Installation

Install via the Jumpstarter Operator:

kubectl apply -f https://github.com/jumpstarter-dev/jumpstarter/releases/download/v0.9.0/operator-installer.yaml

Documentation

• Install with Operator
• Service installation overview
• All driver documentation

Contributors

We would like to thank all our contributors, with a special shout-out to new contributors in this release:

Commits	Name	GitHub
53	Paul Wallrabe	@​raballew
7	Vinicius Zein	@​vtz
4	Marek Mahut	@​mmahut
1	Alexandre Bailon	@​anobli
1	Pierre-Yves Chibon	@​pypingou

Full Changelog

v0.8.1..v0.9.0-rc.1

• docs: align production service guide with operator TLS and gRPC behavior (#​388) (b21e5912)
• Microshift bootc image (#​314) (505e3dd2)
• fix: reject deletion of already-released leases (#​401) (0fe8ed70)
• fix: validate name argument in admin create/delete commands (#​398) (a08cb9fa)
• fix: clean up listenQueues entry on listener disconnect (#​397) (4a10a94b)
• fix: reset retry counter after receiving data in exporter reconnect (#​396) (933f5337)
• Android ADB and Emulator Power Drivers (#​403) (fba1b25d)
• fix: wire keepalive configuration fields into gRPC server options (#​399) (647aff95)
• fix(authorization): always derive resource names from OIDC username (#​404) (c043a331)
• Fix exporter state machine: stuck exporters on lease-end during hooks (#​349) (d6cad897)
• shell: keep shell usable after token refreshes (6d062ec7)
• NOYITO USB Relay Power Driver (#​268) (b39a904b)
• e2e: dump debug logs on test failure (#​420) (e3fb3826)
• ci(e2e): run operator e2e on main push, drop helm matrix (0d055197)
• Add mitmproxy driver for HTTP(S) interception and backend mocking (#​254) (f8c71162)
• feat: show expires at and remaining columns in lease listing (#​32) (c2bbf3f6)
• fix(e2e): set COLUMNS=200 to prevent Rich table header wrapping (6e75343d)
• fix: address review feedback for lease expiration display (99dd5021)
• Revert "fix: address review feedback for lease expiration display" (558584e1)
• fix: use timedelta .days and .seconds fields for remaining time formatting (402785b7)
• docs: add note about ingress-nginx SSL passthrough requirement (b9907977)
• fix: prevent lease assignment to non-ready exporters (#​426) (c562cf2d)
• test(e2e): use -o name and wc -l for pagination count checks (#​419) (9fdd1ad3)
• Restrict operator ClusterRole RBAC permissions on roles/rolebindings (042ef521)
• feat: consolidate TLS flags into single --insecure option (#​333) (b37e463c)
• fix(shell): block dangerous environment variables in shell driver (331f665e)
• fix(operator): restart controller pods when configmap changes (e1b64f9d)
• fix(hooks): emit WARNING log inside context_log_source for client visibility (76755c62)
• docs: add kubeconfig mount to container run examples (#​437) (75b75373)
• fix(deps): update Go dependencies to resolve known CVEs (#​447) (3d5ffa7e)
• Convert bats E2E tests to Go + Ginkgo (#​439) (e044198a)
• Fix swapped voltage/current in dutlink power readings (88966719)
• Add server-side Dial retry for transient Available status (2264a0d2)
• Use exponential backoff for Dial retry instead of fixed interval (f400b218)
• Add tests for BLE driver (#​536) (88b9c4fa)
• Fix nginx ingress for e2e tests in kind clusters (b4bd9806)
• ci: parallelize e2e container image and wheel builds (d7a65e02)
• Increase Dial retry timeout from 10s to 30s to fix E2E flake (f473ede1)
• improve error message in ridesx flashing (#​543) (46de464c)
• feat: add SOME/IP driver wrapping opensomeip Python binding (#​391) (31d9cf3a)
• Add Renode emulator driver for embedded target simulation (#​533) (e8e97319)
• docs/ci: Renode driver listing and conditional macOS Renode install (#​557) (7d06f2e7)
• fix(renode): address review follow-ups from PR #​533 (#​558) (4ba92e88)
• ci: add quality gates for coverage and type checking (#​427) (fcbbfbfa)
• fix: resolve ty type diagnostics and add CI quality gates (#​568) (a64be234)
• Fix exporter deadlock when lease ends before before_lease_hook is set (#​569) (aaf98be5)
• Update install.sh default source from release-0.7 to release-0.8 (1c0a3d92)
• fix: drain remaining PTY data after reader stop on macOS (#​561) (74794de3)
• fix(someip): defer OsipClient creation to first use (#​595) (f92ac89f)
• fix: skip afterLease flow when lease has already expired (#​603) (bdb69e9d)
• Fix: log UNIMPLEMENTED gRPC errors from ReportStatus as warning (#​620) (4a61fe5b)
• feat(someip): support static remote endpoint (no Service Discovery) (#​621) (d3a4a968)
• jumpstarter-driver-gpio: Add read method required by PowerInterface (f0ba0c1d)
• fix(someip): use opensomeip PyPI release instead of git URL (d6ffbf38)
• fix: lease transfer error (82559668)
• Add Jumpstarter Enhancement Proposal (JEP) process and docs (#​423) (49576004)
• fix: replace httpbin.org with local server in mitmproxy passthrough test (7a174e78)
• feat: add ST-LINK mass storage flasher driver for STM32 boards (96aa730b)
• fix: address PR review feedback (b19d6327)
• qemu: add OCI flashing to qemu driver (#​555) (9a812c15)
• feat: add tags field to lease, to allow user set metadata (#​622) (947d4b99)
• feat: add DUT network isolation driver (#​642) (82e91875)
• oci: support existing OCI credentials (abd5d919)
• fix: address PR #​642 review follow-ups for dut-network driver (#​653) (e6a75404)
• fix: guard beforeLease hook from setting LEASE_READY after lease expiry (#​655) (7159a21a)
• JEP-0013: Metrics, Tracing, and Log Observability (fab3f062)
• JEP-0011 proposal (509db8d0)
• fix(iscsi): block device allowlist confinement (#​432) (6a510dab)
• fix(container): add procps-ng for sysctl in dut-network driver (7864f393)
• fix(dut-network): make add_ip_alias idempotent to prevent loop/crash (75ef6843)
• feat(dut-network): rename static_leases to addresses, allow MAC-less entries (38a6f72a)
• docs(dut-network): update README for addresses field and add-address/remove-address commands (e8362558)
• fix(e2e): update DUT network e2e tests for addresses/add-address rename (00bf16fc)
• feat(dut-network): add local NTP responder support (#​667) (8e3ccb74)
• fix: release serial port before ESP32 flash to prevent port-locked errors (#​659) (a258f02b)
• feat(dut-network): allow DNS hostnames in public_ip field (#​672) (26094726)
• dut-network: add tcpdump streaming support (#​674) (abfaebab)
• dut-network: enable dhcp-sequential-ip in dnsmasq by default (288da40c)
• fix: preserve percent-encoding in presigned URLs to prevent signature invalidation (#​662) (72e0ed8a)
• fix: remove Helm charts and standardize on operator-based deployment (#​448) (1d056d3d)
• chore: remove obsolete migration script and leftover poetry.lock (#​683) (ea9a9f49)
• chore: enable ruff ERA rule to catch commented-out code (#​684) (0c3d504d)
• fix: detect original_url before operator guard to fix encoding with explicit operators (a0dbedbc)
• fix: clean up dut-network state directory on driver close/reset (954095f3)
• feat(dut-network): add egress and ingress traffic filtering (#​686) (04891f62)
• fix: detect exporter rapid failure loop and exit for container restart (e7371292)
• fix: replace nonlocal with mutable container to satisfy ty type-checker (63425f95)
• refactor: move rapid failure config from env vars to exporter config (c22dfe8a)
• feat: add internal token rotation for clients (eedff884)
• e2e: add token rotation tests (28e4a599)
• docs: consolidate and improve documentation across the repository (#​693) (7a765052)
• fix: fix ridesx local path upload (12a99ae7)
• fix: small fixes batch (#​516, #​525, #​652, #​517) (#​681) (4e27c7ea)
• feat(docs): self-host asciinema player to remove branding (#​705) (ae354e5e)
• docs: add gRPC protocol reference and consistent field descriptions (#​703) (6b284332)
• docs: align README and docs landing page with org profile (#​706) (16527330)
• docs: fix README link titles and CRDs ToC in multiversion build (#​702) (a01296b8)
• fix: preserve URL query parameters in storage flash for signed URLs (#​435) (5c87e0c1)
• fix: remove unreliable energenie.com link to prevent flaky CI (#​707) (92e98f4f)
• ci: skip e2e and python tests for docs-only changes (#​708) (7c67bd0c)
• Add jumpstarter-driver-ssh-mount package for remote filesystem mounting (#​434) (33ad352f)
• oci: add OciCredentials model and harden credential resolution (#​709) (fbf73a69)
• fix: serialize Dial/Listen queue handoff to prevent router token loss (#​573) (e914a829)
• fix: set default resource requests/limits for controller and router pods (#​714) (616a4014)
• fix(someip): fail fast when opensomeip native extension is unavailable (#​629) (d706fa73)
• Update opensomeip dependency to 0.1.5 (#​716) (9c3e7e05)
• fix: retry Dial and StatusMonitor poll on transient UNAVAILABLE (#​606) (ad6f91b7)
• feat: default exporter configs to ~/.config/jumpstarter (#​712) (c07c4707)
• ci: make linkcheck job non-blocking for PRs (#​729) (54e3385c)
• ci: extract e2e artifact loading into a reusable composite action (fa2f5763)
• Remove opendal dependency from QEMU driver (#​535) (e654084d)
• fix: guard DurationParamType against OverflowError on large values (#​722) (c1413322)
• fix: use select() in PTY drain loop to prevent output loss on macOS (#​733) (#​734) (99c3cfed)
• ci: collect controller and router logs from e2e runs (#​730) (e798cd04)
• fix: include exporter/client name and namespace in auth error messages (#​726) (9b574664)
• fix: raise TypeError in V1Alpha1Lease.from_dict for non-dict spec (#​723) (3ed3c3f0)
• fix: deduplicate NotIn values in ParseLabelSelector (#​741) (00bf61a9)
• Replace Dependabot with Renovate for cross-ecosystem dependency grouping (#​745) (04b5b7b4)
• fix: pin uv container image and fix docs substitutions (#​749) (536ef4ac)
• fix: HttpServer.close() properly releases port on cleanup (#​740) (8f79b678)
• feat: expose gRPC health checking protocol on the controller (#​747) (4e22dfff)
• feat: make INSTALL_DIR and VENV_DIR configurable via environment variables (#​771) (e60a3d7b)
• fix: consolidate Renovate Go groups and restrict Fedora to stable (#​773) (eec0278c)
• fix: restrict Fedora to stable and create go-toolchain group (#​777) (1cebbd0e)
• fix: remove stale e2e section from README (#​752) (c88b979f)
• fix: use {doc} role for symlinked doc references for Sphinx 8.2 (#​778) (a1477390)
• fix: skip uninstalled child drivers in composite CLI (#​785) (24473f34)
• feat: add jumpstarter-driver-obd for OBD-II vehicle diagnostics (#​789) (ffd9cc1d)
• fix: drop container image digest pinning, unify uv version, bump Fedora to 44 (#​781) (590da7b4)
• fix: construct image URL after HTTP server starts (#​797) (8597d199)
• feat: add description field to access policy rules (#​803) (2d748d07)
• Add exporter context env vars to jmp shell and env_with_metadata() helper (d074b997)
• ci: move linkcheck to weekly scheduled workflow (#​813) (e7bc41c9)
• flashers: add default CA to be inject into flashing command (#​742) (a235026f)
• feat: driver/sdwire: support unprogrammed FT200X EEPROM + macOS storage/mux fixes (#​748) (c6b0748f)
• CI: per-package test logs, parallel runs, and uboot OOM fix (#​815) (861e6819)
• feat: add Secret/ConfigMap references for JWT CA certificates (#​772) (16511650)
• fix(container): pin UV binary to build platform in cross-compilation stages (#​819) (96a6c7b8)
• docs(jep-0014): simplified virtual exporter design (#​744) (a3bcb14c)
• fix(ci): use merge commit ref in backport workflow for fork PRs (#​820) (51971c26)
• fix(controller): fix Containerfile build with rootless Podman (#​822) (c7c0ec96)
• fix(ble): fix race condition in test_ble_driver_connect_stream (#​825) (85542630)
• fix(hooks): release lease when beforeLease hook fails with onFailure=endLease (#​823) (4a5d98ea)
• fix: retry PTY drain on empty select() to prevent data loss on macOS (#​826) (86c308e0)
• ci: reduce PR test matrix, run full matrix in merge queue (#​830) (b38ff9ac)
• fix: use shared uv cache for package tests (#​832) (8cc61e1e)
• ci: stop re-running validation workflows on push to main (#​834) (f9d6f934)
• update fls to 0.3.0 (#​838) (c29eece3)
• use 0.3.0 default for CLI (#​839) (a899a449)
• feat: parse power measurements in http-power and add a power read CLI command (#​790) (96710823)
• test: mark PTY-dependent hooks tests as xfail on macOS (#​821) (#​836) (70a5e3e1)
• fix: retry connection when exporter is temporarily unavailable (#​829) (26aee227)
• chore: bump operator version to 0.9.0-rc.1 (78777b5a)
• fix: allow skipping interactive confirmation in contribute script (28bc684b)

Changes from v0.9.0-rc.1 to v0.9.0

• ride4: add support for fastboot erase (#​858)
• docs: improve standalone bootc installation documentation (#​861)
• fix(dutlink): remove implicit power off from reset() and close() (#​879)
• fix: force close the socket when cleaning up http thread (#​891)
• feat: strip hidden labels from exporter display output (#​901)
• feat: add enabled field to Exporter CRD and allowDisabled to Lease (JEP-0014 Phase 1) (#​969)
• fix: retry transient gRPC failures in status reports (#​970)
• feat: warn users when selector or exporter labels are deprecated (#​971)
• fix: unblock post-shell status probe when connection is lost (#​982)
• feat: add --insecure-tls flags to config creation CLI (#​983)
• fix: raise MissingDriverError for driver allow-list mismatches (#​984)
• fix: add logging to authentication errors in controller and router (#​985)

---

Configuration

📅 Schedule: (in timezone Etc/UTC)

• Branch creation
  • "before 5am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.