Η΄The ship's log

What's new in Tiphys

Release notes, new capabilities, and notable fixes.

v0.7.0

  • Use your own model from any provider. Besides Amazon Bedrock, llm.provider now takes anthropic (an API key), vertex (Claude on Google Vertex AI, keyless through workload identity) and azure (AI Foundry or Azure OpenAI, keyless or a key). The chart sets up the keyless paths and refuses to install without what a provider needs.
  • Each investigation has a time limit, llm.investigationMinutes (10 minutes by default; 0 for no limit). Tiphys wraps up at 80%, and at the limit it says what it checked and asks before going on.
  • Leaner model calls: a stable prompt prefix and rolling cache reads mean later turns in a conversation cost about a third of what they did. Background work runs on the fast tier and calls no model when nothing it reads has changed.
  • Tiphys describes itself as the SRE on every team: it finds why a service broke and proposes the fix, and isn't tied to one orchestrator or cloud.
  • The configuration reference lists only values the chart reads. It had listed agent.model.* and other keys the chart ignores.

v0.6.0

  • Tiphys reads what Argo CD and Flux deploy (repository, path, sync and health), and the cluster's storage classes, CSI drivers, CRDs and nodes. It never reads Secrets.
  • Chart installs check storage first, explain a wait that failed, and offer to clean up what a failed install left behind.
  • Tool results read like a CLI: tables that fit, collapsed reads, and short replies. Times show in your own time zone.
  • Costs are estimated from list prices by default. Cost Explorer, which AWS bills per request, runs only when you turn it on.
  • Platform changes (cluster add-ons, IAM, Terraform) go to your platform team as a summary instead of being applied or generated by Tiphys.
  • Approvals decide and run once: no lost updates, and no approval left waiting after its change ran.
  • Tiphys says what it couldn't read instead of treating it as absent, and reads security group rules in full.
  • New guide: try Tiphys on a local cluster.

v0.5.5

  • Licenses now come from Intelligant AI. On-Prem installs verify them offline, and a license's limits decide what Core Plus and Cloud can do: a limit that isn't there denies, and -1 is unlimited.
  • Every install stays free: a license changes nothing a free install can do today.
  • In a license's grace period, a banner and the logs name the date it ends. After that, only what the license covered stops; your data stays readable, and /api/status says why.
  • Tiphys no longer issues its own licenses. Licenses it issued before keep working until they expire.
  • Changes are checked against the license before they're staged, so one the license doesn't cover is refused up front instead of failing later.
  • A refused license leaves the install running read-only (Core) and logs why. The docs had said it stopped the pod from starting.

v0.5.4

  • Opt-in Intelligant AI control plane (controlPlane.enabled, off by default). When on, Tiphys polls Intelligant AI's public status with a bare GET that sends nothing about your cluster.
  • While writes are paused or Tiphys is under maintenance, every write tool is blocked, approvals stay pending instead of applying, and the UI shows a banner.
  • It fails open: Tiphys keeps the last answer, and with no answer, writes stay allowed. With it off, nothing leaves the cluster and nothing changes.

v0.5.3

  • The last old product names are gone from the chart, images, and scripts. Upgrades carry everything over with helm upgrade.
  • State lives under /var/lib/tiphys; the chart mounts the same volume at the new path, so the database and the initial admin password come with it. Read the first-run password with kubectl -n tiphys exec tiphys-0 -c backend -- cat /var/lib/tiphys/initial-admin-password.
  • Mounted secrets move to /etc/tiphys/....
  • The CSRF header is X-Tiphys-Csrf. The previous header is still accepted, so open tabs and existing scripts keep working.
  • Scaffolded resources carry app.kubernetes.io/managed-by: tiphys.
  • The reference Terraform module tags the agent role with Application = tiphys and managed-by = Terraform (your own tags still win), and renames its inline policies to <cluster>-tiphys-*; the next apply replaces them in place.
  • Browser preferences (last conversation, collapsed sidebar) reset once after the upgrade.

v0.5.2

  • Tiphys is published by Intelligant AI. The license, container images, and Helm chart name Intelligant AI throughout.
  • Report security issues to security@intelligant.ai.
  • Terraform IAM tags move from cloudology.cloud/* to intelligant.ai/*. Your next terraform apply updates them in place; nothing is replaced.
  • Licenses must be issued by Intelligant AI (iss: intelligant-ai). No valid license used the old issuer, so existing licenses keep working.